Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/30879c-9766-4a05-adbf-9ac81ef4592c/1/Sk4s8ALUX_mt4quGQ62_4IPKEtA.mft
File: Sk4s8ALUX_mt4quGQ62_4IPKEtA.mft (raw, json)
Hash identifier: ngLz26TRwlzCfPgciWHkbMab9by732WPgEamtEPzBDA=
Subject key identifier: D8:05:42:72:B8:A6:3D:A6:15:B2:E4:EA:FE:E5:FA:66:E1:3A:6C:5D
Authority key identifier: 4A:4E:2C:F0:02:D4:5F:F9:AD:E2:AB:86:43:AD:BF:E0:83:CA:12:D0
Certificate issuer: /CN=4a4e2cf002d45ff9ade2ab8643adbfe083ca12d0
Certificate serial: 0197B5C519B360B29E043AEF6C080DA9EA27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sk4s8ALUX_mt4quGQ62_4IPKEtA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/30879c-9766-4a05-adbf-9ac81ef4592c/1/Sk4s8ALUX_mt4quGQ62_4IPKEtA.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 09:01:22 +0000
Manifest this update: Sat 28 Jun 2025 09:01:22 +0000
Manifest next update: Sun 29 Jun 2025 09:01:22 +0000
Files and hashes: 1: E_IIvSbgDnePwa4szd7VMD6gnys.roa (hash: XolhJaC158fPYvnn4RwApw3vI0d4xDumHbsdRnhLiB8=)
2: Sk4s8ALUX_mt4quGQ62_4IPKEtA.crl (hash: m1e9CLQ/3mEnCHTz0IIkH27fhsXWiPtbsE3kkSPp72c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/30879c-9766-4a05-adbf-9ac81ef4592c/1/Sk4s8ALUX_mt4quGQ62_4IPKEtA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/30879c-9766-4a05-adbf-9ac81ef4592c/1/Sk4s8ALUX_mt4quGQ62_4IPKEtA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sk4s8ALUX_mt4quGQ62_4IPKEtA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 09:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:c5:19:b3:60:b2:9e:04:3a:ef:6c:08:0d:a9:ea:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a4e2cf002d45ff9ade2ab8643adbfe083ca12d0
Validity
Not Before: Jun 28 09:01:22 2025 GMT
Not After : Jun 29 09:01:22 2025 GMT
Subject: CN=d8054272b8a63da615b2e4eafee5fa66e13a6c5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:8e:7c:03:0d:1b:31:a5:0a:5c:53:96:ad:f9:
b0:ae:86:02:fa:7a:14:b1:9c:7c:59:78:57:1e:87:
47:99:48:27:6b:e9:52:c9:99:82:f0:f1:8b:32:a7:
f7:70:4b:fb:ca:3a:63:d9:0f:86:6b:52:2c:39:2d:
5a:e6:19:a9:9c:c4:59:e5:be:5a:0c:9f:bc:22:32:
f6:4f:e2:fd:24:a1:89:c9:a1:d7:3d:8b:b3:d6:b0:
cd:27:4d:e2:87:b0:9c:d5:fe:16:29:d6:8a:32:91:
81:99:7d:35:76:de:f1:9c:bd:30:40:22:31:af:33:
6f:43:bb:de:e5:a8:84:9a:b4:ec:3a:2e:cc:d8:ff:
1e:5c:57:f0:da:c9:cd:43:da:bb:2a:e4:f2:ea:c3:
21:78:83:6e:14:1d:16:3d:77:dd:59:8d:9a:e8:a9:
92:a9:55:fb:78:4a:af:2d:22:b2:36:96:20:1a:ad:
23:32:48:25:aa:f3:8d:a0:87:8c:bb:e7:06:f5:85:
a1:78:be:a7:80:8b:f0:95:22:4f:8a:0f:3d:ee:ef:
7d:f6:83:26:42:b1:f5:56:eb:10:54:7d:94:5f:10:
dd:e5:07:cc:3c:60:f0:6b:ea:b5:d7:41:8d:cd:49:
b4:d6:cb:7b:4e:e3:da:d1:aa:49:9b:ab:7a:54:05:
7c:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:05:42:72:B8:A6:3D:A6:15:B2:E4:EA:FE:E5:FA:66:E1:3A:6C:5D
X509v3 Authority Key Identifier:
keyid:4A:4E:2C:F0:02:D4:5F:F9:AD:E2:AB:86:43:AD:BF:E0:83:CA:12:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sk4s8ALUX_mt4quGQ62_4IPKEtA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/30879c-9766-4a05-adbf-9ac81ef4592c/1/Sk4s8ALUX_mt4quGQ62_4IPKEtA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/30879c-9766-4a05-adbf-9ac81ef4592c/1/Sk4s8ALUX_mt4quGQ62_4IPKEtA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:b0:fd:3e:ed:46:63:f8:7e:7f:e5:6b:de:33:f4:0f:94:9f:
3e:a9:e0:d4:96:6e:3c:2e:96:ea:69:05:d9:72:07:9a:4b:21:
48:d6:30:5c:99:b8:cb:31:34:45:63:40:04:46:28:67:ee:e9:
c4:66:e9:59:37:2f:cb:79:1d:25:1b:d0:f7:fb:8c:50:db:d6:
33:8e:88:74:ca:ce:15:06:6f:fe:ad:e3:7c:d0:07:37:18:04:
20:ff:13:44:80:c4:05:3a:35:2c:8e:97:49:86:e3:83:57:8f:
4e:2f:1f:43:05:8a:f7:58:80:92:f0:08:3a:cc:ff:81:09:4b:
31:b1:fa:c8:49:b8:53:f5:0c:50:8b:c7:23:2d:7e:f1:df:92:
f0:48:50:02:71:5a:dc:9d:87:56:62:33:1c:6d:ca:ed:ae:c9:
25:47:3b:47:76:27:df:35:34:1c:3f:fc:68:32:b1:e6:c3:a6:
ee:76:2d:ed:b6:d2:7f:c8:bd:4a:ac:69:ae:33:71:ce:f7:6b:
c1:02:6a:f2:dc:73:25:65:2d:ec:96:5b:df:37:92:cf:f4:44:
e3:36:26:6a:38:28:b0:77:d0:88:41:55:51:cc:52:39:cd:3e:
48:94:d3:5a:86:3f:f2:a1:7e:65:0c:e5:52:4f:fd:21:a3:f4:
bb:74:2f:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:23:25 2025 by rpki-client