Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/918ac3-49a5-4a32-bd72-723baa8e688a/1/SKyAa1vKTH2RbVA9XHk8jfRO5tM.mft
File: SKyAa1vKTH2RbVA9XHk8jfRO5tM.mft (raw, json)
Hash identifier: E25i5H+bF4L87h7ZvDMarKj7Zl/71CnnEywrHHrLQ0k=
Subject key identifier: 17:58:36:AA:33:2B:5C:4E:87:78:9D:D7:AD:75:A4:4C:81:84:85:9C
Authority key identifier: 48:AC:80:6B:5B:CA:4C:7D:91:6D:50:3D:5C:79:3C:8D:F4:4E:E6:D3
Certificate issuer: /CN=48ac806b5bca4c7d916d503d5c793c8df44ee6d3
Certificate serial: 0197B9D943FD76D3DADE5CC739AE2EEEC828
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SKyAa1vKTH2RbVA9XHk8jfRO5tM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/918ac3-49a5-4a32-bd72-723baa8e688a/1/SKyAa1vKTH2RbVA9XHk8jfRO5tM.mft
Manifest number: 04C5
Signing time: Sun 29 Jun 2025 04:01:52 +0000
Manifest this update: Sun 29 Jun 2025 04:01:52 +0000
Manifest next update: Mon 30 Jun 2025 04:01:52 +0000
Files and hashes: 1: SKyAa1vKTH2RbVA9XHk8jfRO5tM.crl (hash: xc5kjKryAney8eLajGjSQKxYUk2gayNBcXHn/Vi60ck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/918ac3-49a5-4a32-bd72-723baa8e688a/1/SKyAa1vKTH2RbVA9XHk8jfRO5tM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/918ac3-49a5-4a32-bd72-723baa8e688a/1/SKyAa1vKTH2RbVA9XHk8jfRO5tM.mft
rsync://rpki.ripe.net/repository/DEFAULT/SKyAa1vKTH2RbVA9XHk8jfRO5tM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:d9:43:fd:76:d3:da:de:5c:c7:39:ae:2e:ee:c8:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48ac806b5bca4c7d916d503d5c793c8df44ee6d3
Validity
Not Before: Jun 29 04:01:52 2025 GMT
Not After : Jun 30 04:01:52 2025 GMT
Subject: CN=175836aa332b5c4e87789dd7ad75a44c8184859c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:32:0e:aa:c7:87:3c:08:1a:9f:9f:4e:25:99:
7f:27:04:ca:97:ec:e1:bd:f8:d7:80:a9:c6:7c:30:
a3:c8:8b:aa:d4:ef:37:06:9a:f4:e2:1c:95:8d:20:
9a:33:1e:7a:ac:0b:22:ea:48:aa:9b:bd:3c:64:51:
37:da:44:54:1d:92:3b:9f:b2:2d:40:91:ac:97:25:
2e:5c:6a:23:ed:1b:2c:19:4e:af:a9:0d:da:0a:6e:
0b:0e:e0:c4:36:9f:fd:24:06:88:0e:c1:57:12:4a:
a8:c7:22:14:19:78:ae:7a:65:d2:1d:e3:e0:11:5e:
fc:ce:c8:e7:ea:e2:c3:48:a8:d3:4c:ce:cb:c1:6e:
17:15:11:28:ac:66:d9:f4:71:94:8f:cd:f1:1a:02:
7f:90:10:40:44:c0:aa:13:e8:3f:09:ab:1e:3c:cd:
62:61:59:9f:ba:28:1e:a3:6d:9c:ad:69:ad:89:55:
03:25:03:75:5d:f3:fb:69:1e:5c:56:0a:82:76:24:
e5:3d:9c:13:45:fa:68:68:5f:59:1e:a1:1b:80:9d:
71:51:03:33:fd:19:17:11:07:60:9c:22:f4:2b:e5:
cd:d5:62:0a:35:ff:b9:50:4e:41:6c:78:1f:1d:65:
9e:dc:8b:70:11:50:fd:76:aa:5c:f7:ba:1f:49:d7:
12:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:58:36:AA:33:2B:5C:4E:87:78:9D:D7:AD:75:A4:4C:81:84:85:9C
X509v3 Authority Key Identifier:
keyid:48:AC:80:6B:5B:CA:4C:7D:91:6D:50:3D:5C:79:3C:8D:F4:4E:E6:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SKyAa1vKTH2RbVA9XHk8jfRO5tM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/918ac3-49a5-4a32-bd72-723baa8e688a/1/SKyAa1vKTH2RbVA9XHk8jfRO5tM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/918ac3-49a5-4a32-bd72-723baa8e688a/1/SKyAa1vKTH2RbVA9XHk8jfRO5tM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:b4:d5:59:54:d5:78:0c:99:b0:0a:2e:eb:3e:69:4d:f8:b0:
4e:c0:46:94:53:ad:45:1e:93:3f:73:7b:6b:77:3a:47:0b:dd:
e6:85:8d:e3:68:e4:f1:02:83:8c:57:b8:17:ca:a7:64:61:15:
1e:fa:7c:8d:28:a7:b3:c6:71:c5:fb:45:09:9a:f1:1e:76:17:
b8:51:b5:7d:c9:97:fd:94:05:89:8f:c2:43:dd:48:2d:2b:39:
6a:cb:85:55:c6:ec:c2:2f:d0:4c:b5:77:83:1c:30:05:9e:c1:
1a:bf:f0:15:92:60:ce:b8:27:ed:43:c2:d4:97:eb:1d:c4:35:
38:dc:fc:20:b3:e9:f4:95:f4:8b:99:14:4f:cf:de:d8:e0:7d:
57:f6:00:a5:66:11:44:4d:67:b6:55:35:7b:22:60:15:7f:65:
af:38:88:3f:07:fe:51:b1:dc:62:a9:44:7a:b9:ea:83:13:e1:
5f:11:61:d7:82:4b:52:dd:ba:19:67:a0:54:29:66:c2:f9:44:
f6:3c:24:3c:0b:a9:0d:13:01:a1:cc:79:ae:06:68:ee:0a:39:
ae:b4:0c:b7:df:0c:71:e4:14:9c:1d:73:8d:d4:21:37:74:f2:
73:d8:92:9b:4e:46:0c:e6:5b:63:3d:50:bc:2e:26:e7:8e:5c:
dc:75:cf:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 14:24:10 2025 by rpki-client