Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/75785f-0e82-4d46-8456-759ac50414de/1/SksX0DK5-19-W8n9Jo37gO3u0h0.mft
File: SksX0DK5-19-W8n9Jo37gO3u0h0.mft (raw, json)
Hash identifier: XypzegTzV7HVJR8uuDpn0nfKF6XuIFl5QsEqqNS2B34=
Subject key identifier: 1B:B6:41:F8:13:D9:79:15:5C:C1:EA:DF:47:88:2B:04:7D:5C:A2:55
Authority key identifier: 4A:4B:17:D0:32:B9:FB:5F:7E:5B:C9:FD:26:8D:FB:80:ED:EE:D2:1D
Certificate issuer: /CN=4a4b17d032b9fb5f7e5bc9fd268dfb80edeed21d
Certificate serial: 0197D1E0B0E2E53F9C8BD4A87104C9AD6D35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SksX0DK5-19-W8n9Jo37gO3u0h0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/75785f-0e82-4d46-8456-759ac50414de/1/SksX0DK5-19-W8n9Jo37gO3u0h0.mft
Manifest number: 14E0
Signing time: Thu 03 Jul 2025 20:00:52 +0000
Manifest this update: Thu 03 Jul 2025 20:00:52 +0000
Manifest next update: Fri 04 Jul 2025 20:00:52 +0000
Files and hashes: 1: SksX0DK5-19-W8n9Jo37gO3u0h0.crl (hash: 1www8822xRnVWye4uPR0AWRQNWfj5XjIcSTc1EP0QCQ=)
2: rOZzXqhZDodX-Oc13GcxPruRbSM.roa (hash: YeJHzy/9tbn5hMpXLH6O6XO6xL28nuOSs+m8iNhWA4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/75785f-0e82-4d46-8456-759ac50414de/1/SksX0DK5-19-W8n9Jo37gO3u0h0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/75785f-0e82-4d46-8456-759ac50414de/1/SksX0DK5-19-W8n9Jo37gO3u0h0.mft
rsync://rpki.ripe.net/repository/DEFAULT/SksX0DK5-19-W8n9Jo37gO3u0h0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d1:e0:b0:e2:e5:3f:9c:8b:d4:a8:71:04:c9:ad:6d:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a4b17d032b9fb5f7e5bc9fd268dfb80edeed21d
Validity
Not Before: Jul 3 20:00:52 2025 GMT
Not After : Jul 4 20:00:52 2025 GMT
Subject: CN=1bb641f813d979155cc1eadf47882b047d5ca255
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f7:e5:e2:44:d4:2e:be:26:f0:e5:7e:74:9c:
ce:d9:ab:aa:01:bc:60:04:69:e3:42:c0:8c:14:ff:
42:a7:e1:78:92:b3:d4:b5:0f:26:02:7b:c1:82:c7:
7d:e3:7e:61:b3:d2:69:32:47:71:74:f4:68:f9:41:
39:b3:3c:12:d4:1b:56:40:d4:06:d8:1e:12:37:ce:
98:34:15:97:a3:22:e9:94:95:52:e9:cc:cb:10:c3:
d6:93:de:e2:e0:a6:7a:01:5e:4c:4e:cb:30:62:58:
62:6d:5f:a9:65:7f:a4:6e:ee:c0:4b:ae:e6:f7:0d:
01:d4:be:74:0b:41:e9:5a:92:d7:39:3f:e8:84:c3:
75:0c:ea:45:8c:65:29:98:42:70:88:46:e4:13:20:
f2:7a:76:b8:96:75:ae:cc:f6:c8:07:d9:c2:5f:d2:
73:c3:85:f3:4d:07:1b:13:d7:c1:da:8c:59:6f:58:
84:22:f9:e2:fd:91:ae:09:6a:43:36:31:da:3e:13:
99:d7:1d:d8:01:f3:54:81:39:85:97:68:03:63:d0:
1a:85:06:9d:f1:90:66:7f:92:14:62:83:7f:f1:57:
1d:10:cd:1b:87:87:fd:8e:61:3f:e4:5e:cf:09:04:
e9:54:73:a3:87:be:a4:fa:b9:21:1f:2d:08:bd:50:
67:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:B6:41:F8:13:D9:79:15:5C:C1:EA:DF:47:88:2B:04:7D:5C:A2:55
X509v3 Authority Key Identifier:
keyid:4A:4B:17:D0:32:B9:FB:5F:7E:5B:C9:FD:26:8D:FB:80:ED:EE:D2:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SksX0DK5-19-W8n9Jo37gO3u0h0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/75785f-0e82-4d46-8456-759ac50414de/1/SksX0DK5-19-W8n9Jo37gO3u0h0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/75785f-0e82-4d46-8456-759ac50414de/1/SksX0DK5-19-W8n9Jo37gO3u0h0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:cf:ac:81:c3:8a:af:43:c4:82:6b:89:ab:71:5f:3d:3b:28:
0d:45:2d:9d:5f:d4:f7:48:4f:00:8d:91:be:7b:6c:02:68:33:
35:9c:9a:84:b5:91:72:c9:1f:ba:65:cd:c8:f7:83:b6:b4:0e:
32:39:49:77:2e:2c:59:68:e3:40:52:4e:5f:fa:17:27:e3:4a:
40:61:0d:8b:25:23:02:db:fd:b0:25:b5:bf:ad:04:d3:04:f3:
d0:65:da:e1:b0:c7:fc:58:46:10:99:15:b0:27:9f:84:54:64:
bb:e0:f3:34:82:2d:8e:04:a4:92:ec:d6:3a:2f:a4:02:e4:20:
93:ae:4a:7d:07:23:e7:f6:77:79:3e:e0:e7:6f:7c:85:20:cb:
06:92:43:8d:77:84:a3:1f:ad:69:45:f5:f2:0b:a9:98:ff:0e:
d4:c3:02:a7:62:0a:19:a7:a8:51:96:09:9b:4f:ae:22:27:61:
b6:59:3c:20:fa:6d:71:48:bb:63:31:78:c4:5a:de:d0:45:50:
47:e7:d4:32:d1:7c:d7:b0:fa:39:0e:86:05:a5:5a:2a:62:2c:
2e:81:f3:5e:ef:11:8d:db:1b:8e:bd:ef:d1:fe:d5:a0:bd:be:
9e:a8:c1:8b:6b:0e:4a:6e:2b:8e:1b:11:0d:74:38:fc:29:93:
34:dc:1b:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 00:24:56 2025 by rpki-client