Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/167903-f426-4bf0-9233-a9ac66be48f7/1/SkrQOg9ZK7nJfDBSppASXYRkFaQ.mft
File: SkrQOg9ZK7nJfDBSppASXYRkFaQ.mft (raw, json)
Hash identifier: OUoSkCBxLym6g7q/k054U43xEPO5FkzSYkuUjYyVQE4=
Subject key identifier: 46:41:08:7D:23:E0:94:87:EC:12:31:70:49:D1:0F:30:EC:5B:09:1A
Authority key identifier: 4A:4A:D0:3A:0F:59:2B:B9:C9:7C:30:52:A6:90:12:5D:84:64:15:A4
Certificate issuer: /CN=4a4ad03a0f592bb9c97c3052a690125d846415a4
Certificate serial: 0198D472C28B1D70C6D0F0F72798AD59EC06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SkrQOg9ZK7nJfDBSppASXYRkFaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/167903-f426-4bf0-9233-a9ac66be48f7/1/SkrQOg9ZK7nJfDBSppASXYRkFaQ.mft
Manifest number: 164E
Signing time: Sat 23 Aug 2025 01:02:27 +0000
Manifest this update: Sat 23 Aug 2025 01:02:27 +0000
Manifest next update: Sun 24 Aug 2025 01:02:27 +0000
Files and hashes: 1: 1-XNkV-CHFeLSAB8v7LjTlroe6Iw.roa (hash: GluiNGZxsHxMI1guABtXYth8XDdUuWytJuXVUN1uHow=)
2: SkrQOg9ZK7nJfDBSppASXYRkFaQ.crl (hash: DJvV0A/qgYQKVLcd8ybnn8EeOofBeRS34PbXOZeyxw0=)
3: l-ehjkba5MFL6bTBmw0p0je8kv0.roa (hash: SBj+lER6GA3nSUubC1AdXeW27xw7XEGQlpuymCAxj5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/167903-f426-4bf0-9233-a9ac66be48f7/1/SkrQOg9ZK7nJfDBSppASXYRkFaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/167903-f426-4bf0-9233-a9ac66be48f7/1/SkrQOg9ZK7nJfDBSppASXYRkFaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/SkrQOg9ZK7nJfDBSppASXYRkFaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:c2:8b:1d:70:c6:d0:f0:f7:27:98:ad:59:ec:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a4ad03a0f592bb9c97c3052a690125d846415a4
Validity
Not Before: Aug 23 01:02:27 2025 GMT
Not After : Aug 24 01:02:27 2025 GMT
Subject: CN=4641087d23e09487ec12317049d10f30ec5b091a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:25:aa:9a:be:b0:46:7e:a2:40:72:28:03:bd:
68:fd:a9:9e:d1:ef:de:f3:7f:fc:06:80:e5:ee:cd:
ca:74:32:d7:1a:78:68:a9:42:1c:3c:6c:b2:eb:a7:
88:9e:50:3e:f0:cc:89:75:d6:d0:7a:e7:85:9e:8a:
fc:43:18:80:1d:4b:09:93:25:22:3f:fd:a5:b1:c5:
af:54:fb:70:81:ba:b8:43:39:0d:31:79:a4:f0:c1:
dc:c0:0b:39:1e:17:f3:ff:a3:39:16:c1:db:b3:4f:
55:c4:e7:f6:c0:68:85:d8:33:88:59:a2:db:d1:6b:
39:06:2a:fa:aa:79:c9:33:5a:4c:04:45:02:1d:c6:
77:37:53:0e:69:ce:10:0b:e5:f0:fc:8e:58:d9:29:
f8:61:41:2c:4f:12:f4:00:36:96:ba:91:23:b2:b4:
97:f2:47:5f:99:d4:58:8e:3c:92:9f:43:75:f7:1e:
00:1e:78:96:56:96:e1:23:48:36:02:7b:aa:60:5f:
43:15:67:9f:25:70:19:a6:1e:dc:c1:62:7d:44:ce:
e8:7f:06:57:f7:84:00:ef:a3:7c:28:c0:c0:b4:c8:
ba:18:7c:d7:50:dd:03:43:e4:11:81:be:7c:46:08:
ad:7a:df:4f:e2:94:98:60:13:9c:1e:14:59:85:31:
bd:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:41:08:7D:23:E0:94:87:EC:12:31:70:49:D1:0F:30:EC:5B:09:1A
X509v3 Authority Key Identifier:
keyid:4A:4A:D0:3A:0F:59:2B:B9:C9:7C:30:52:A6:90:12:5D:84:64:15:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SkrQOg9ZK7nJfDBSppASXYRkFaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/167903-f426-4bf0-9233-a9ac66be48f7/1/SkrQOg9ZK7nJfDBSppASXYRkFaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/167903-f426-4bf0-9233-a9ac66be48f7/1/SkrQOg9ZK7nJfDBSppASXYRkFaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:ba:da:76:1c:41:a6:07:59:8c:7a:12:78:6c:a3:b6:d4:e5:
d2:20:c0:8a:32:ee:94:e9:f0:f6:af:fc:35:90:e6:ce:9e:d6:
a3:e8:d0:9b:1a:ee:1f:39:78:bb:20:7b:3d:04:93:c1:d0:85:
1a:39:fe:07:a2:59:15:6d:2e:85:9a:4e:5a:6d:19:fe:de:24:
73:26:23:6a:2e:c0:c5:4d:f0:1f:f4:5e:ed:5d:a7:55:42:29:
38:cb:a4:26:ea:68:51:20:77:01:a6:15:2e:f2:45:1b:54:e7:
63:29:0f:2a:49:1f:8a:0c:8c:78:fb:14:45:0a:09:a6:ed:99:
83:63:8f:54:30:a7:d1:5d:ee:0b:3c:15:c5:1f:91:00:2a:da:
50:9b:44:0e:c1:93:10:ca:5b:67:f6:55:d1:bd:91:c7:97:d7:
aa:d3:da:e5:d3:49:be:9d:e3:47:65:0e:a3:3a:c4:33:a7:33:
44:76:5d:e8:f6:af:82:04:ce:83:34:fc:db:2c:de:3e:62:d9:
02:af:08:fb:39:c8:c7:2f:58:a3:d6:7d:46:74:5f:5c:42:ee:
ce:85:1f:b7:0f:cb:6a:20:c3:40:b1:fd:8e:6f:f4:6a:f4:3b:
27:3e:db:e8:e1:2d:f8:0b:e0:b0:a1:ec:ec:cc:7c:2d:89:c4:
46:b5:aa:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:52:34 2025 by rpki-client