Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/0d006d-ab7a-41c9-97f3-995c369da672/1/skz59tA09Gdg9PWbFzneEnuK3_M.mft
File: skz59tA09Gdg9PWbFzneEnuK3_M.mft (raw, json)
Hash identifier: y3cH6jEviZqim6HS/cJA446ynpH9Fz25NYW6unSswuQ=
Subject key identifier: 37:31:E4:73:37:94:3C:D0:E9:64:76:3B:CB:FB:B0:09:FE:FD:EA:27
Authority key identifier: B2:4C:F9:F6:D0:34:F4:67:60:F4:F5:9B:17:39:DE:12:7B:8A:DF:F3
Certificate issuer: /CN=b24cf9f6d034f46760f4f59b1739de127b8adff3
Certificate serial: 0196D4AD6512F01DD76DE3C38F55C7D1766E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/skz59tA09Gdg9PWbFzneEnuK3_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/0d006d-ab7a-41c9-97f3-995c369da672/1/skz59tA09Gdg9PWbFzneEnuK3_M.mft
Manifest number: 0A24
Signing time: Thu 15 May 2025 16:00:55 +0000
Manifest this update: Thu 15 May 2025 16:00:55 +0000
Manifest next update: Fri 16 May 2025 16:00:55 +0000
Files and hashes: 1: Y5LyyYUOXTFEg08dRczspK_kl2Y.roa (hash: ttMluHxYVIHmrZ73+Be4i0HFe1udkGlrlxsl6kstfvI=)
2: skz59tA09Gdg9PWbFzneEnuK3_M.crl (hash: nAMLZbeiBfHZqDxVjHa39Xe5suhAPeN8e2kAErxNpGA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/0d006d-ab7a-41c9-97f3-995c369da672/1/skz59tA09Gdg9PWbFzneEnuK3_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/0d006d-ab7a-41c9-97f3-995c369da672/1/skz59tA09Gdg9PWbFzneEnuK3_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/skz59tA09Gdg9PWbFzneEnuK3_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 May 2025 14:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d4:ad:65:12:f0:1d:d7:6d:e3:c3:8f:55:c7:d1:76:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b24cf9f6d034f46760f4f59b1739de127b8adff3
Validity
Not Before: May 15 16:00:55 2025 GMT
Not After : May 16 16:00:55 2025 GMT
Subject: CN=3731e47337943cd0e964763bcbfbb009fefdea27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f9:8c:3c:53:0c:ba:61:bb:9b:8b:04:91:de:
6b:94:11:f0:ed:17:41:0c:ea:74:40:6d:a5:49:11:
0a:7e:0f:55:67:0c:95:80:67:8b:55:df:e9:00:00:
1f:57:51:62:2f:d5:77:ae:e8:97:00:51:ab:8f:ec:
16:f0:c6:69:f6:7e:bd:4d:d7:9d:d0:e6:1b:63:b2:
2c:7d:4e:48:f5:c8:bd:a4:fa:b7:e3:a8:26:f8:7c:
8f:fd:f1:5f:77:18:de:1b:eb:0e:88:1f:fc:03:d0:
58:a6:ac:7b:3a:a0:47:90:53:58:89:a4:31:e1:9a:
e9:fc:4a:da:45:ec:92:e0:65:68:d1:09:6c:f2:44:
39:62:1d:6e:95:50:34:5a:41:ed:76:47:86:36:d3:
2a:30:db:e5:38:73:c5:a9:b5:4c:ec:a0:0d:e0:bc:
b7:93:7a:70:e9:ea:0f:b4:bd:78:a6:d9:f7:93:57:
9c:50:dc:db:f5:38:1d:a5:2e:df:f8:64:e5:3b:fd:
cc:cc:53:c6:94:20:7e:c6:9b:d1:ee:90:85:6b:ee:
1f:28:03:c3:2b:86:9c:19:7e:08:ea:79:a9:20:cc:
1f:de:5c:40:99:5f:a1:ca:b7:d2:13:cf:f9:4d:db:
a0:bf:29:3c:b2:fb:43:7b:9d:8c:e4:1f:6f:e8:53:
1b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:31:E4:73:37:94:3C:D0:E9:64:76:3B:CB:FB:B0:09:FE:FD:EA:27
X509v3 Authority Key Identifier:
keyid:B2:4C:F9:F6:D0:34:F4:67:60:F4:F5:9B:17:39:DE:12:7B:8A:DF:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/skz59tA09Gdg9PWbFzneEnuK3_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0d006d-ab7a-41c9-97f3-995c369da672/1/skz59tA09Gdg9PWbFzneEnuK3_M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0d006d-ab7a-41c9-97f3-995c369da672/1/skz59tA09Gdg9PWbFzneEnuK3_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:02:89:53:f6:df:22:34:18:71:73:8b:b1:09:ce:25:45:2a:
f0:56:95:4a:83:a8:11:57:74:91:1b:43:28:4b:d5:d9:9a:e4:
96:ba:3e:10:c8:2f:25:91:0d:49:b2:a4:0f:7c:8f:89:1c:b6:
66:f8:96:0d:51:ca:8a:50:8b:ea:6b:92:57:2d:d2:d6:9f:24:
e7:3b:f2:f3:b4:c0:fd:fc:9e:31:4c:c5:79:94:aa:3c:ee:9c:
a4:be:aa:0b:31:a2:01:36:47:f6:b9:1d:78:66:af:51:89:28:
5e:84:c6:eb:01:d5:48:7e:09:ef:15:71:dc:1e:74:cb:52:04:
e7:9d:18:1f:f9:b9:46:00:08:a9:0b:31:df:f3:9e:da:a6:3f:
c7:ee:2c:56:cf:51:09:a0:7a:b0:b2:da:28:cd:a6:f1:d8:83:
41:7f:a9:c5:17:ef:0b:55:ce:1b:4a:18:7d:02:77:5b:74:93:
97:83:2b:81:ec:1c:54:14:ee:f9:4b:c9:90:d4:c9:80:29:19:
0c:b0:63:c6:e5:36:98:7c:75:20:8a:ed:1d:34:46:46:a2:d1:
bd:57:fb:06:72:09:4c:2d:3f:01:41:32:ba:24:e8:09:4b:be:
fc:f6:bd:c5:26:5b:5d:25:af:7b:d9:4c:07:06:21:b4:e3:5b:
82:db:da:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 23:54:50 2025 by rpki-client