Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/fa5519-0e35-44cf-9d4f-2aea75c2df78/1/SktRP35EbgzW3P5Wgpu8n-SY0-g.mft
File: SktRP35EbgzW3P5Wgpu8n-SY0-g.mft (raw, json)
Hash identifier: e7OAk1OgLh2ScDF0Y16DhFaj/XlML2Jn/O/X+fBImiY=
Subject key identifier: 8C:3C:F5:7A:AB:24:BB:10:CC:BC:D1:61:CA:90:1F:FE:1A:DC:48:09
Authority key identifier: 4A:4B:51:3F:7E:44:6E:0C:D6:DC:FE:56:82:9B:BC:9F:E4:98:D3:E8
Certificate issuer: /CN=4a4b513f7e446e0cd6dcfe56829bbc9fe498d3e8
Certificate serial: 0197B6A1C883F2C3141DDA7C6DE6C7CC91BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SktRP35EbgzW3P5Wgpu8n-SY0-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/fa5519-0e35-44cf-9d4f-2aea75c2df78/1/SktRP35EbgzW3P5Wgpu8n-SY0-g.mft
Manifest number: 1532
Signing time: Sat 28 Jun 2025 13:02:25 +0000
Manifest this update: Sat 28 Jun 2025 13:02:25 +0000
Manifest next update: Sun 29 Jun 2025 13:02:25 +0000
Files and hashes: 1: HHCE3_k42ANiRenbW8_HYWzMUCQ.roa (hash: +PRlcFsqioXeS3bFma85/Up104JVGK2pFTDzqwQatjg=)
2: SktRP35EbgzW3P5Wgpu8n-SY0-g.crl (hash: CleO1HaQC46XNp7vtkFnjMNYEgulnKq1dkL7dEGaTOY=)
3: YwES8R9xRhrFpLG3cV7yoeKQ6tE.roa (hash: fX/IIRdgZ8uMVTDgkZp0nm1MBfHNGan3NvLFwQRulBs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/fa5519-0e35-44cf-9d4f-2aea75c2df78/1/SktRP35EbgzW3P5Wgpu8n-SY0-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/fa5519-0e35-44cf-9d4f-2aea75c2df78/1/SktRP35EbgzW3P5Wgpu8n-SY0-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/SktRP35EbgzW3P5Wgpu8n-SY0-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:c8:83:f2:c3:14:1d:da:7c:6d:e6:c7:cc:91:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a4b513f7e446e0cd6dcfe56829bbc9fe498d3e8
Validity
Not Before: Jun 28 13:02:25 2025 GMT
Not After : Jun 29 13:02:25 2025 GMT
Subject: CN=8c3cf57aab24bb10ccbcd161ca901ffe1adc4809
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:8a:04:5d:5d:46:84:23:90:6d:a1:d2:d5:d6:
3a:cb:69:ef:50:59:1d:42:15:60:05:9a:67:cf:b9:
a6:16:31:73:2c:8c:ba:6a:fa:43:0e:06:9c:07:ab:
29:8d:33:1b:1b:b5:87:4e:a3:f8:c4:d0:e9:97:77:
ab:65:7c:b6:2b:c0:17:fe:85:0c:b0:fc:a6:df:d3:
d4:6a:b4:b6:20:8e:5e:46:3d:7c:f6:3c:84:99:5c:
35:c3:b6:4c:79:27:b9:04:81:53:ea:62:68:6a:16:
16:38:d9:f1:f4:b4:c4:fd:58:47:eb:d3:b5:eb:ea:
35:d9:1a:91:04:23:72:cb:85:96:10:c8:32:fe:ac:
00:f3:4a:de:21:33:31:73:bc:61:61:2f:89:3a:f1:
a6:09:61:67:7d:5c:3f:de:6d:e3:68:0b:bd:db:47:
8a:24:3b:15:94:79:28:b6:be:99:18:41:86:9b:d6:
70:c0:57:d2:d3:cc:1d:d5:43:55:c8:ce:0f:28:76:
73:64:3e:b3:25:39:0f:4c:4c:af:b1:84:d2:38:af:
09:78:5e:3f:c8:65:71:fa:2d:cc:c3:9b:ad:07:a0:
d5:0e:bc:57:4f:46:84:3d:75:dc:ca:3c:bd:ad:47:
dc:37:1e:15:f2:f5:ff:f8:71:38:57:e0:60:5a:65:
8d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:3C:F5:7A:AB:24:BB:10:CC:BC:D1:61:CA:90:1F:FE:1A:DC:48:09
X509v3 Authority Key Identifier:
keyid:4A:4B:51:3F:7E:44:6E:0C:D6:DC:FE:56:82:9B:BC:9F:E4:98:D3:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SktRP35EbgzW3P5Wgpu8n-SY0-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fa5519-0e35-44cf-9d4f-2aea75c2df78/1/SktRP35EbgzW3P5Wgpu8n-SY0-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fa5519-0e35-44cf-9d4f-2aea75c2df78/1/SktRP35EbgzW3P5Wgpu8n-SY0-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:73:3a:68:57:d1:3b:8a:02:d9:e0:b8:a0:a4:da:e3:b3:24:
41:2e:b3:2d:10:b6:38:92:a3:1c:3e:88:fa:17:fd:c5:85:31:
b0:f1:a0:91:17:95:97:39:bf:b6:bf:40:aa:ae:3f:55:6e:c5:
51:61:a1:80:80:cd:b9:3d:84:e8:0c:2a:c4:cb:39:47:7d:15:
d6:35:9a:f3:de:65:9e:ca:e7:42:32:75:e6:f6:57:de:86:51:
0e:a2:95:40:d2:ad:35:ad:16:a2:7b:cd:99:6e:ec:79:20:18:
77:67:57:af:0e:b1:a8:24:ad:c3:e6:a9:fe:da:16:d4:37:ab:
7a:d7:5f:d3:e0:cf:25:d8:a6:a6:88:02:21:ce:9d:d3:85:3b:
78:02:de:7e:5e:38:f2:65:dc:ba:08:33:67:77:16:35:6e:ee:
f8:ff:4f:8d:fe:4e:f4:57:bb:ae:e7:2f:65:a6:ee:45:d5:b4:
cb:47:40:cc:4f:25:37:f6:ed:da:a8:79:3f:4e:1d:95:0d:b4:
de:39:8e:63:97:8d:87:c4:92:25:40:10:bb:e4:48:40:d8:00:
04:d3:ee:20:2e:62:9d:a6:89:22:e7:60:90:59:14:f3:43:cc:
b2:7e:25:4d:8f:e7:55:9f:8e:93:42:9d:f9:be:6c:3c:5b:66:
bc:f6:93:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:31:38 2025 by rpki-client