Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/918ac3-49a5-4a32-bd72-723baa8e688a/1/SKyAa1vKTH2RbVA9XHk8jfRO5tM.mft
File: SKyAa1vKTH2RbVA9XHk8jfRO5tM.mft (raw, json)
Hash identifier: t/d+ibWiLH/hwy38I0ffG7X3bwwx8rcwtcWgyf0ZbV0=
Subject key identifier: 31:D9:CA:2F:88:9E:EE:CF:2C:02:1B:0C:FC:30:92:32:92:1F:56:F5
Authority key identifier: 48:AC:80:6B:5B:CA:4C:7D:91:6D:50:3D:5C:79:3C:8D:F4:4E:E6:D3
Certificate issuer: /CN=48ac806b5bca4c7d916d503d5c793c8df44ee6d3
Certificate serial: 01969DF6108B7474B5E9550EBD63FCD27D7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SKyAa1vKTH2RbVA9XHk8jfRO5tM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/918ac3-49a5-4a32-bd72-723baa8e688a/1/SKyAa1vKTH2RbVA9XHk8jfRO5tM.mft
Manifest number: 0432
Signing time: Mon 05 May 2025 01:01:11 +0000
Manifest this update: Mon 05 May 2025 01:01:11 +0000
Manifest next update: Tue 06 May 2025 01:01:11 +0000
Files and hashes: 1: SKyAa1vKTH2RbVA9XHk8jfRO5tM.crl (hash: 09sPw4uyc+E1qSDt1g5Gg4hm/ECywHAZdBIB5dYLxCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/918ac3-49a5-4a32-bd72-723baa8e688a/1/SKyAa1vKTH2RbVA9XHk8jfRO5tM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/918ac3-49a5-4a32-bd72-723baa8e688a/1/SKyAa1vKTH2RbVA9XHk8jfRO5tM.mft
rsync://rpki.ripe.net/repository/DEFAULT/SKyAa1vKTH2RbVA9XHk8jfRO5tM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9d:f6:10:8b:74:74:b5:e9:55:0e:bd:63:fc:d2:7d:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48ac806b5bca4c7d916d503d5c793c8df44ee6d3
Validity
Not Before: May 5 01:01:11 2025 GMT
Not After : May 6 01:01:11 2025 GMT
Subject: CN=31d9ca2f889eeecf2c021b0cfc309232921f56f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:25:77:64:3f:ec:02:d5:8d:67:41:cf:d5:ad:
bd:6b:78:20:a4:d7:e4:8b:da:15:e3:f8:8a:d1:ca:
15:5a:72:af:91:13:11:b5:9f:c6:f3:6d:b2:59:8a:
32:90:e9:9f:87:11:8e:75:26:31:5b:67:ae:32:de:
d9:37:bb:0a:73:d1:ee:a2:37:16:62:c9:95:f4:1b:
e7:9e:88:5e:9e:cb:ce:ed:b7:3c:14:c7:33:20:2c:
be:3a:2d:50:9f:b3:ee:ce:a4:88:66:0e:fc:04:0d:
14:38:d3:93:52:98:48:a7:e1:ec:09:85:8e:40:b9:
ac:6c:6c:80:0e:28:60:8b:db:17:da:1c:4e:00:ec:
ac:1d:50:4f:f8:dc:47:48:6e:98:ca:ff:a8:c8:11:
ee:a5:66:c9:26:88:ae:b0:24:b5:66:43:2d:9c:3b:
82:84:0c:27:00:20:f3:10:3d:8c:83:60:9c:13:9e:
03:60:1a:7e:4b:f1:3d:59:7e:56:f5:30:d4:18:67:
5e:30:56:b0:1d:08:7b:c8:5f:d8:bf:22:90:df:a4:
a4:7f:67:68:63:fe:4b:92:23:39:4a:b7:37:7f:36:
74:c4:ea:64:5b:c7:cd:05:75:60:6f:28:45:4a:80:
aa:90:01:fd:11:25:b2:d4:47:b5:e1:4a:33:dc:75:
46:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:D9:CA:2F:88:9E:EE:CF:2C:02:1B:0C:FC:30:92:32:92:1F:56:F5
X509v3 Authority Key Identifier:
keyid:48:AC:80:6B:5B:CA:4C:7D:91:6D:50:3D:5C:79:3C:8D:F4:4E:E6:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SKyAa1vKTH2RbVA9XHk8jfRO5tM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/918ac3-49a5-4a32-bd72-723baa8e688a/1/SKyAa1vKTH2RbVA9XHk8jfRO5tM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/918ac3-49a5-4a32-bd72-723baa8e688a/1/SKyAa1vKTH2RbVA9XHk8jfRO5tM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:6e:a5:da:9c:66:85:a7:96:3a:fe:37:67:86:dd:9c:d0:fc:
89:cb:72:e9:11:8a:c6:6c:ec:ca:08:b2:32:14:6c:ba:4e:87:
53:c3:2d:e7:dd:cb:b2:c6:8c:48:23:5a:fd:ca:a8:49:f5:2e:
e6:68:c0:71:e8:21:6e:c8:13:4d:28:b8:ed:da:fd:a8:ef:ae:
8c:34:73:d3:11:18:e5:c9:66:68:95:21:fb:f3:c6:f5:ca:7d:
3a:e7:da:69:57:bb:11:19:e6:b7:44:da:9e:2f:47:e5:6d:08:
13:a2:6b:d5:1f:0b:71:eb:bd:a2:62:0c:cc:c9:7f:ee:51:c2:
14:09:2c:9a:df:a1:f7:b3:0b:30:49:ac:c0:56:b1:b7:7e:3e:
04:67:ba:4a:36:95:86:ae:ca:df:a8:91:e3:ea:e2:9f:b7:27:
f3:c1:d6:b2:6d:1e:ba:50:85:c0:54:dc:d5:54:72:9c:02:7c:
88:70:62:46:5c:79:17:5f:3f:23:d2:9b:e9:fe:1f:f2:ab:f3:
a5:16:e6:24:be:90:de:42:b1:d5:28:dd:93:3c:b6:24:dd:a9:
ad:cd:12:c5:78:f8:a1:ec:91:05:1a:e0:f2:05:c2:51:65:fe:
fb:d1:b5:f4:aa:64:cb:35:b7:ed:84:68:f0:5e:13:75:9c:06:
6a:12:8a:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 05:35:09 2025 by rpki-client