Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/167903-f426-4bf0-9233-a9ac66be48f7/1/SkrQOg9ZK7nJfDBSppASXYRkFaQ.mft
File: SkrQOg9ZK7nJfDBSppASXYRkFaQ.mft (raw, json)
Hash identifier: ITbd7o4XcVAo7BrplmbNnHWOIGeW0+QaMj1ysT7JTVA=
Subject key identifier: 8B:0F:71:DD:C3:9D:58:1C:4A:91:5D:51:B3:E6:CB:C9:C0:DC:CF:1E
Authority key identifier: 4A:4A:D0:3A:0F:59:2B:B9:C9:7C:30:52:A6:90:12:5D:84:64:15:A4
Certificate issuer: /CN=4a4ad03a0f592bb9c97c3052a690125d846415a4
Certificate serial: 0197B6A1A603B2E967255BE151C2F558FBE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SkrQOg9ZK7nJfDBSppASXYRkFaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/167903-f426-4bf0-9233-a9ac66be48f7/1/SkrQOg9ZK7nJfDBSppASXYRkFaQ.mft
Manifest number: 15BA
Signing time: Sat 28 Jun 2025 13:02:16 +0000
Manifest this update: Sat 28 Jun 2025 13:02:16 +0000
Manifest next update: Sun 29 Jun 2025 13:02:16 +0000
Files and hashes: 1: 1-XNkV-CHFeLSAB8v7LjTlroe6Iw.roa (hash: GluiNGZxsHxMI1guABtXYth8XDdUuWytJuXVUN1uHow=)
2: SkrQOg9ZK7nJfDBSppASXYRkFaQ.crl (hash: mX6M3sRMWQlH5DRAJ/b2EZeRsN6FGs9sjDEX2qgwGt4=)
3: l-ehjkba5MFL6bTBmw0p0je8kv0.roa (hash: SBj+lER6GA3nSUubC1AdXeW27xw7XEGQlpuymCAxj5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/167903-f426-4bf0-9233-a9ac66be48f7/1/SkrQOg9ZK7nJfDBSppASXYRkFaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/167903-f426-4bf0-9233-a9ac66be48f7/1/SkrQOg9ZK7nJfDBSppASXYRkFaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/SkrQOg9ZK7nJfDBSppASXYRkFaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:a6:03:b2:e9:67:25:5b:e1:51:c2:f5:58:fb:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a4ad03a0f592bb9c97c3052a690125d846415a4
Validity
Not Before: Jun 28 13:02:16 2025 GMT
Not After : Jun 29 13:02:16 2025 GMT
Subject: CN=8b0f71ddc39d581c4a915d51b3e6cbc9c0dccf1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f6:29:68:7a:2c:19:be:29:42:6d:23:fe:cf:
5e:d3:dc:db:0d:b0:42:8f:6f:19:25:2d:b9:29:d2:
3a:07:39:6f:b9:30:2c:56:1d:94:04:db:61:2b:4f:
00:e3:6f:98:8e:eb:3c:5f:46:55:33:6c:66:79:27:
5f:d5:5d:7e:b4:29:84:4c:ec:6d:34:97:ec:f0:eb:
4b:03:73:b5:82:8d:5d:0f:c6:56:be:c0:87:63:56:
45:ca:f3:ee:1a:0b:24:ea:9c:1a:ea:5e:4a:20:34:
77:e9:6e:09:14:3d:d6:29:0f:80:a3:88:b1:91:58:
4b:73:48:1c:16:0c:08:c8:d0:4a:1e:d6:22:44:44:
30:08:70:66:21:da:7e:51:8c:59:99:e8:bd:db:09:
1e:e0:ca:e8:21:5a:e2:ae:a4:2a:ba:3e:00:86:e4:
21:ce:5e:3c:c8:08:16:ff:af:49:eb:42:43:12:4a:
f2:6b:a4:b5:87:de:3c:f5:a3:ed:5e:ff:f9:b8:e3:
f5:e8:e9:9d:6d:46:bb:82:dc:16:0e:a3:a8:08:58:
9b:b3:3c:6e:7f:a2:66:56:b9:ea:ed:7d:7a:ef:f8:
14:cd:91:97:e4:5b:c1:d3:9e:96:70:c8:d7:56:a7:
a8:39:69:d2:f4:a4:51:89:5d:4d:7b:0b:bc:ec:b3:
20:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:0F:71:DD:C3:9D:58:1C:4A:91:5D:51:B3:E6:CB:C9:C0:DC:CF:1E
X509v3 Authority Key Identifier:
keyid:4A:4A:D0:3A:0F:59:2B:B9:C9:7C:30:52:A6:90:12:5D:84:64:15:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SkrQOg9ZK7nJfDBSppASXYRkFaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/167903-f426-4bf0-9233-a9ac66be48f7/1/SkrQOg9ZK7nJfDBSppASXYRkFaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/167903-f426-4bf0-9233-a9ac66be48f7/1/SkrQOg9ZK7nJfDBSppASXYRkFaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:e0:3b:b0:77:25:70:e0:48:d4:ad:a0:6c:af:d5:b0:7e:f6:
2d:e8:11:c1:a4:86:33:7f:a0:70:f0:59:e3:38:6c:4e:a0:93:
ff:0b:2d:4b:61:2f:55:4b:39:a6:38:03:35:56:01:f2:b6:f6:
ed:84:4f:2e:90:04:20:a6:57:bb:b5:6c:8c:47:d2:f8:4c:58:
ef:c3:45:1c:f5:af:0d:52:1f:db:0c:06:7e:4d:72:4c:1f:6c:
1f:b4:18:36:58:ed:90:2f:86:75:16:b2:52:bf:8e:b7:3c:5e:
fc:9d:f0:86:e3:e6:86:46:6e:37:5c:cb:d0:3f:18:ad:9e:b5:
4e:fd:e8:ff:e9:4b:8c:58:23:72:a9:cf:d8:07:35:f9:ad:aa:
14:b5:ba:a3:af:81:ef:82:05:e3:48:9f:a6:aa:a5:e8:01:75:
be:03:9e:7d:13:39:a1:6b:6e:46:bd:b8:6c:3e:35:97:d9:98:
81:66:37:b6:21:5e:b7:de:54:e9:eb:b9:f3:70:cf:a9:e2:f7:
08:4b:7f:da:62:63:3d:32:3b:52:95:31:74:27:a8:d4:14:40:
fb:d2:b4:55:93:7f:69:9e:9a:bf:a7:03:a9:d3:06:e8:f2:83:
aa:eb:ac:35:5d:f7:cd:7c:8f:c4:79:fb:a6:29:7a:cd:cf:21:
e7:cb:51:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oaYDsulnJVvhUcL1WPvjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhNGFkMDNhMGY1OTJiYjljOTdjMzA1MmE2OTAxMjVkODQ2
NDE1YTQwHhcNMjUwNjI4MTMwMjE2WhcNMjUwNjI5MTMwMjE2WjAzMTEwLwYDVQQD
Eyg4YjBmNzFkZGMzOWQ1ODFjNGE5MTVkNTFiM2U2Y2JjOWMwZGNjZjFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPYpaHosGb4pQm0j/s9e09zbDbBC
j28ZJS25KdI6BzlvuTAsVh2UBNthK08A42+Yjus8X0ZVM2xmeSdf1V1+tCmETOxt
NJfs8OtLA3O1go1dD8ZWvsCHY1ZFyvPuGgsk6pwa6l5KIDR36W4JFD3WKQ+Ao4ix
kVhLc0gcFgwIyNBKHtYiREQwCHBmIdp+UYxZmei92wke4MroIVrirqQquj4AhuQh
zl48yAgW/69J60JDEkrya6S1h9489aPtXv/5uOP16OmdbUa7gtwWDqOoCFibszxu
f6JmVrnq7X167/gUzZGX5FvB056WcMjXVqeoOWnS9KRRiV1Newu87LMgZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIsPcd3DnVgcSpFdUbPmy8nA3M8eMB8GA1UdIwQY
MBaAFEpK0DoPWSu5yXwwUqaQEl2EZBWkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2tyUU9nOVpLN25KZkRCU3BwQVNYWVJrRmFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC8xNjc5MDMtZjQyNi00YmYwLTkyMzMt
YTlhYzY2YmU0OGY3LzEvU2tyUU9nOVpLN25KZkRCU3BwQVNYWVJrRmFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC8xNjc5MDMtZjQyNi00YmYwLTkyMzMtYTlhYzY2YmU0OGY3
LzEvU2tyUU9nOVpLN25KZkRCU3BwQVNYWVJrRmFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA+A7sHcl
cOBI1K2gbK/VsH72LegRwaSGM3+gcPBZ4zhsTqCT/wstS2EvVUs5pjgDNVYB8rb2
7YRPLpAEIKZXu7VsjEfS+ExY78NFHPWvDVIf2wwGfk1yTB9sH7QYNljtkC+GdRay
Ur+Otzxe/J3whuPmhkZuN1zL0D8YrZ61Tv3o/+lLjFgjcqnP2Ac1+a2qFLW6o6+B
74IF40ifpqql6AF1vgOefRM5oWtuRr24bD41l9mYgWY3tiFet95U6eu583DPqeL3
CEt/2mJjPTI7UpUxdCeo1BRA+9K0VZN/aZ6av6cDqdMG6PKDquusNV33zXyPxHn7
pil6zc8h58tR7Q==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:32:39 2025 by rpki-client