Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/918ac3-49a5-4a32-bd72-723baa8e688a/1/SKyAa1vKTH2RbVA9XHk8jfRO5tM.mft
File: SKyAa1vKTH2RbVA9XHk8jfRO5tM.mft (raw, json)
Hash identifier: lshdNu4UNC5wl1Ae33ksfYRhl7hCH9pQTzloRbsF6Vg=
Subject key identifier: D6:54:36:31:04:DB:28:CB:74:68:B1:10:82:4E:85:9C:2B:CF:EB:CF
Authority key identifier: 48:AC:80:6B:5B:CA:4C:7D:91:6D:50:3D:5C:79:3C:8D:F4:4E:E6:D3
Certificate issuer: /CN=48ac806b5bca4c7d916d503d5c793c8df44ee6d3
Certificate serial: 0198D5BB96AE90DE2D7938E6170A5A1329ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SKyAa1vKTH2RbVA9XHk8jfRO5tM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/918ac3-49a5-4a32-bd72-723baa8e688a/1/SKyAa1vKTH2RbVA9XHk8jfRO5tM.mft
Manifest number: 0558
Signing time: Sat 23 Aug 2025 07:01:37 +0000
Manifest this update: Sat 23 Aug 2025 07:01:37 +0000
Manifest next update: Sun 24 Aug 2025 07:01:37 +0000
Files and hashes: 1: SKyAa1vKTH2RbVA9XHk8jfRO5tM.crl (hash: XbJlnRa/nuLsskNakA9J2CG5zNKGSL8Z/4Tv2JbSX6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/918ac3-49a5-4a32-bd72-723baa8e688a/1/SKyAa1vKTH2RbVA9XHk8jfRO5tM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/918ac3-49a5-4a32-bd72-723baa8e688a/1/SKyAa1vKTH2RbVA9XHk8jfRO5tM.mft
rsync://rpki.ripe.net/repository/DEFAULT/SKyAa1vKTH2RbVA9XHk8jfRO5tM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:96:ae:90:de:2d:79:38:e6:17:0a:5a:13:29:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48ac806b5bca4c7d916d503d5c793c8df44ee6d3
Validity
Not Before: Aug 23 07:01:37 2025 GMT
Not After : Aug 24 07:01:37 2025 GMT
Subject: CN=d654363104db28cb7468b110824e859c2bcfebcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:ff:df:7d:9d:1d:49:74:d0:22:8d:4c:00:31:
fb:7b:45:e7:89:5a:d3:34:74:12:55:aa:8a:02:09:
96:e1:63:63:53:44:bb:2d:70:62:07:32:8b:2f:4b:
8a:da:4b:f1:17:59:00:18:3e:1f:04:d3:7c:da:50:
32:35:23:0d:50:7d:f9:28:51:c9:5c:ae:89:0f:21:
dd:30:b4:82:52:09:4b:79:aa:f3:07:7c:8c:f5:c2:
ad:45:08:17:a2:c2:2f:42:f1:e5:b6:95:84:24:91:
3a:1e:50:08:81:4f:70:b1:36:6f:e6:d5:c3:45:9c:
63:97:b8:f5:45:84:96:9b:89:8d:ea:96:f9:d7:7d:
4b:e9:af:36:ca:02:23:61:e6:df:1a:73:b8:b4:cc:
b5:8a:d8:0f:17:73:b8:a5:b4:e8:5b:9f:47:e1:86:
16:9b:20:fb:15:9c:22:7c:7f:e5:e2:35:8a:b0:1c:
fe:b1:7a:ea:95:0c:3c:fb:6b:e2:e8:3a:f0:b4:f0:
3a:ee:54:88:a5:d2:2b:9c:a7:e4:4c:8e:26:36:23:
2a:78:49:60:71:c8:37:f6:7a:df:9d:a1:8d:d3:0a:
53:cd:06:3d:45:26:13:42:66:2b:80:69:2d:b3:bc:
48:6d:04:31:b0:a8:dd:66:55:56:dd:7a:3d:25:b1:
c7:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:54:36:31:04:DB:28:CB:74:68:B1:10:82:4E:85:9C:2B:CF:EB:CF
X509v3 Authority Key Identifier:
keyid:48:AC:80:6B:5B:CA:4C:7D:91:6D:50:3D:5C:79:3C:8D:F4:4E:E6:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SKyAa1vKTH2RbVA9XHk8jfRO5tM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/918ac3-49a5-4a32-bd72-723baa8e688a/1/SKyAa1vKTH2RbVA9XHk8jfRO5tM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/918ac3-49a5-4a32-bd72-723baa8e688a/1/SKyAa1vKTH2RbVA9XHk8jfRO5tM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:2f:ca:2f:73:f1:0f:d7:31:09:23:6f:c5:9e:30:08:84:b2:
dd:b8:17:3c:97:eb:77:76:20:a9:d7:19:d0:23:7f:80:3b:0a:
90:66:fa:13:85:41:1d:fb:79:83:34:fc:f6:ba:4b:50:02:87:
63:b3:59:64:a0:3b:da:c7:a6:a9:e7:37:e4:a8:95:88:8d:42:
50:64:d2:a3:49:7e:76:67:37:4e:1e:c7:6f:3c:c8:5e:69:31:
7e:6c:70:82:9f:6f:51:bf:4b:dd:2e:8b:e3:dc:cd:d5:56:37:
73:91:36:c9:21:1e:16:e1:86:44:80:a2:e7:3e:a8:4d:fe:6b:
c8:0d:b2:81:66:b5:e2:79:86:26:5d:1d:92:c9:c2:05:33:82:
4f:df:e8:1d:9a:95:3c:60:5e:7c:22:82:4c:47:d2:b0:93:df:
39:41:d9:4d:06:82:c3:02:ce:26:39:0f:25:f2:72:7a:21:39:
62:45:1a:03:2b:98:c5:26:67:c7:c0:9a:42:94:d5:81:d4:b7:
e3:a3:81:97:f8:8c:01:10:46:91:fb:94:df:f5:d3:86:cb:01:
f9:be:12:68:40:62:0f:3a:92:31:c6:62:b9:a6:19:26:61:ca:
e9:b2:92:53:0b:1d:8a:62:7b:f2:2a:65:bf:33:70:6d:e2:1f:
6c:c2:af:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:49:36 2025 by rpki-client