Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/4906ff-9e20-4118-9aae-f6d0ff458648/1/04SkGZfu6k0F_MfNQLEhE6W7aeg.mft
File: 04SkGZfu6k0F_MfNQLEhE6W7aeg.mft (raw, json)
Hash identifier: pApddlv9fPsk/Fe3MgDJb2cjEW+JIqnFs46r4wtIp5k=
Subject key identifier: CC:8E:85:E1:6E:CD:C3:A6:1E:7E:87:15:1E:9F:B8:EE:8A:50:D4:6F
Authority key identifier: D3:84:A4:19:97:EE:EA:4D:05:FC:C7:CD:40:B1:21:13:A5:BB:69:E8
Certificate issuer: /CN=d384a41997eeea4d05fcc7cd40b12113a5bb69e8
Certificate serial: 0197B890447B458C22342D09E342BE60FC75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/04SkGZfu6k0F_MfNQLEhE6W7aeg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/4906ff-9e20-4118-9aae-f6d0ff458648/1/04SkGZfu6k0F_MfNQLEhE6W7aeg.mft
Manifest number: 09C2
Signing time: Sat 28 Jun 2025 22:02:31 +0000
Manifest this update: Sat 28 Jun 2025 22:02:31 +0000
Manifest next update: Sun 29 Jun 2025 22:02:31 +0000
Files and hashes: 1: 04SkGZfu6k0F_MfNQLEhE6W7aeg.crl (hash: /1+nCkIUB30AnCVQf8bX5tKmt7FNbq9Q+BRbSAIYCvs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/4906ff-9e20-4118-9aae-f6d0ff458648/1/04SkGZfu6k0F_MfNQLEhE6W7aeg.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/4906ff-9e20-4118-9aae-f6d0ff458648/1/04SkGZfu6k0F_MfNQLEhE6W7aeg.mft
rsync://rpki.ripe.net/repository/DEFAULT/04SkGZfu6k0F_MfNQLEhE6W7aeg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:90:44:7b:45:8c:22:34:2d:09:e3:42:be:60:fc:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d384a41997eeea4d05fcc7cd40b12113a5bb69e8
Validity
Not Before: Jun 28 22:02:31 2025 GMT
Not After : Jun 29 22:02:31 2025 GMT
Subject: CN=cc8e85e16ecdc3a61e7e87151e9fb8ee8a50d46f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:cf:af:60:64:4e:3c:a6:91:e5:97:68:a1:ab:
93:91:f0:8a:4c:49:6b:d4:b9:b0:df:70:49:97:90:
ac:84:01:6d:9d:01:0c:c3:19:ec:2c:b6:a7:ca:1a:
cb:3e:a9:42:29:38:2c:d1:7b:5c:2d:55:8f:5a:6e:
6e:18:6c:53:17:07:8e:e8:c9:93:ed:c8:5e:29:a6:
64:69:02:6f:99:f4:a0:e8:01:0c:24:99:ae:69:10:
d8:92:f9:d3:2f:73:51:8e:e3:45:9d:b0:46:7a:0d:
53:84:9f:57:bd:06:29:e0:c4:ea:50:df:5e:ee:ab:
9d:e0:83:8d:fc:de:72:fb:b6:91:5c:d1:a7:1e:31:
02:3e:ae:b6:4b:15:d3:17:ef:be:2a:2e:4e:b4:e8:
0c:0b:33:31:87:a4:6c:3a:35:1d:35:bb:ad:c9:0e:
c0:3b:e2:ec:42:ba:86:93:42:cd:64:21:92:25:b9:
c5:4c:69:94:08:4f:d3:43:0b:27:43:88:8e:90:f3:
c1:03:86:9a:84:33:5a:0c:f4:58:c4:6a:67:cf:2d:
cf:f7:1e:d8:59:f1:d8:59:52:f5:b1:b9:ff:30:58:
3a:68:b2:18:a8:91:65:ce:52:80:42:f9:ed:07:91:
b3:e2:e1:6c:0e:e9:b7:28:f3:eb:d9:20:75:dd:ff:
94:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:8E:85:E1:6E:CD:C3:A6:1E:7E:87:15:1E:9F:B8:EE:8A:50:D4:6F
X509v3 Authority Key Identifier:
keyid:D3:84:A4:19:97:EE:EA:4D:05:FC:C7:CD:40:B1:21:13:A5:BB:69:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/04SkGZfu6k0F_MfNQLEhE6W7aeg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4906ff-9e20-4118-9aae-f6d0ff458648/1/04SkGZfu6k0F_MfNQLEhE6W7aeg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4906ff-9e20-4118-9aae-f6d0ff458648/1/04SkGZfu6k0F_MfNQLEhE6W7aeg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:52:a6:26:00:5c:76:57:a7:40:75:dd:73:2b:42:8f:6e:06:
90:c7:e3:eb:1c:ee:ed:e5:d7:c6:6d:a7:2c:80:25:2e:e6:2b:
0f:ae:ba:2b:b2:5c:a6:b8:e7:6b:ae:e0:dd:d7:b2:69:8f:97:
b7:20:a9:bb:f4:e2:a0:db:82:8d:cf:f8:db:f7:e5:96:7f:71:
68:e6:47:e0:0f:63:76:47:2a:30:8a:31:1d:4e:5c:cb:e7:98:
7f:87:0e:90:90:0a:54:ff:4f:71:90:ae:1e:c3:b8:4b:41:d2:
7d:e5:37:c2:12:98:93:ed:0e:07:e8:24:b9:0f:b7:d0:3b:0f:
04:90:4d:60:2a:6a:1e:63:ef:4f:6c:ca:dd:4c:2a:0b:5c:fe:
ff:1f:52:b8:e5:04:70:b1:b5:39:65:0d:38:6b:4c:95:73:c9:
d8:77:b2:63:1c:b0:7f:3d:31:2e:8f:a8:1c:6f:c9:fb:fb:66:
4a:aa:77:a7:8e:7e:40:3b:3f:81:b2:9c:24:5f:a1:f8:f9:21:
06:51:ac:56:3a:bf:7e:4a:33:a6:3d:b0:f7:d6:68:e7:27:70:
71:76:5a:6b:ac:35:07:eb:a5:89:d0:ce:2c:90:cc:fe:6b:e6:
12:38:01:35:89:47:d8:ec:be:dc:1f:1a:cf:67:6a:0a:27:24:
57:34:e5:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:29:57 2025 by rpki-client