Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/fa5519-0e35-44cf-9d4f-2aea75c2df78/1/SktRP35EbgzW3P5Wgpu8n-SY0-g.mft
File: SktRP35EbgzW3P5Wgpu8n-SY0-g.mft (raw, json)
Hash identifier: diY9MChf/DHq67J/TrUlnBbLUaxX2Ynr9J1FB0qPA1Y=
Subject key identifier: 71:35:BD:41:AB:F4:9C:02:3A:CB:CB:C4:FA:49:B3:CB:30:F7:34:02
Authority key identifier: 4A:4B:51:3F:7E:44:6E:0C:D6:DC:FE:56:82:9B:BC:9F:E4:98:D3:E8
Certificate issuer: /CN=4a4b513f7e446e0cd6dcfe56829bbc9fe498d3e8
Certificate serial: 0196B77E62136420299E8A410B24773AF712
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SktRP35EbgzW3P5Wgpu8n-SY0-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/fa5519-0e35-44cf-9d4f-2aea75c2df78/1/SktRP35EbgzW3P5Wgpu8n-SY0-g.mft
Manifest number: 14AE
Signing time: Sat 10 May 2025 00:00:35 +0000
Manifest this update: Sat 10 May 2025 00:00:35 +0000
Manifest next update: Sun 11 May 2025 00:00:35 +0000
Files and hashes: 1: HHCE3_k42ANiRenbW8_HYWzMUCQ.roa (hash: +PRlcFsqioXeS3bFma85/Up104JVGK2pFTDzqwQatjg=)
2: SktRP35EbgzW3P5Wgpu8n-SY0-g.crl (hash: ag9H5h/4Io3tsey3bqj9XbjK9FLi6I7iY6tvaayOTvQ=)
3: YwES8R9xRhrFpLG3cV7yoeKQ6tE.roa (hash: fX/IIRdgZ8uMVTDgkZp0nm1MBfHNGan3NvLFwQRulBs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/fa5519-0e35-44cf-9d4f-2aea75c2df78/1/SktRP35EbgzW3P5Wgpu8n-SY0-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/fa5519-0e35-44cf-9d4f-2aea75c2df78/1/SktRP35EbgzW3P5Wgpu8n-SY0-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/SktRP35EbgzW3P5Wgpu8n-SY0-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:7e:62:13:64:20:29:9e:8a:41:0b:24:77:3a:f7:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a4b513f7e446e0cd6dcfe56829bbc9fe498d3e8
Validity
Not Before: May 10 00:00:35 2025 GMT
Not After : May 11 00:00:35 2025 GMT
Subject: CN=7135bd41abf49c023acbcbc4fa49b3cb30f73402
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:84:84:43:0e:33:c6:3c:cd:fc:3f:78:c1:81:
1c:87:b9:f0:6d:a9:b2:42:49:b5:38:21:f0:fc:ac:
86:68:9d:90:a9:b9:cf:29:05:06:1d:e8:58:6b:c2:
26:38:fd:52:51:72:39:1c:12:09:a5:ea:2a:9b:be:
f2:cd:01:71:d5:7b:db:2d:0d:a6:2e:e5:cf:1d:9e:
d7:75:71:18:89:92:74:b3:c3:c2:01:a0:8e:fa:81:
5a:ed:da:34:4a:2a:e4:88:47:c1:6a:0a:1c:d7:d9:
16:74:bf:8a:86:ce:ef:a4:7c:5a:7a:2e:52:eb:9c:
08:48:ed:08:ae:9c:a1:f1:3e:54:37:f1:55:8c:73:
2f:a8:cc:a8:47:7b:a5:98:99:08:ed:72:11:e0:a4:
97:3a:6d:41:b3:f6:66:bc:1c:b6:2c:e1:f2:77:18:
79:f8:0f:66:5c:1c:e1:01:ce:92:c9:b0:5c:8d:92:
0f:3a:b1:ef:e1:b6:5a:c2:0a:fe:80:07:7a:93:e9:
07:c7:4e:d8:13:7c:b0:47:05:11:01:4f:bf:9e:80:
e3:12:d7:f5:97:b3:7c:36:6c:6e:13:2c:4f:22:43:
69:d8:f5:fb:b7:76:c6:68:e9:fb:cb:88:65:af:f8:
e1:e2:48:07:3e:41:bd:da:5a:f5:eb:51:6f:5e:a8:
ce:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:35:BD:41:AB:F4:9C:02:3A:CB:CB:C4:FA:49:B3:CB:30:F7:34:02
X509v3 Authority Key Identifier:
keyid:4A:4B:51:3F:7E:44:6E:0C:D6:DC:FE:56:82:9B:BC:9F:E4:98:D3:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SktRP35EbgzW3P5Wgpu8n-SY0-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fa5519-0e35-44cf-9d4f-2aea75c2df78/1/SktRP35EbgzW3P5Wgpu8n-SY0-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fa5519-0e35-44cf-9d4f-2aea75c2df78/1/SktRP35EbgzW3P5Wgpu8n-SY0-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:12:cb:35:27:0b:de:ae:71:ba:3b:bf:79:bc:a3:e2:cd:99:
73:cd:50:3d:c8:cb:9a:76:d0:bf:bf:d0:73:e4:26:e0:84:59:
af:3d:3e:5d:84:3c:e9:b1:ad:2d:28:6a:52:a4:a8:d1:a7:04:
98:ca:85:43:3a:80:50:cf:47:42:3b:6d:10:66:12:e1:42:e4:
df:3d:5f:8b:c7:64:b7:29:f7:b6:d5:44:e5:24:94:5c:df:15:
a2:64:03:f3:1c:57:b5:33:c9:cd:66:74:b8:ab:8c:e2:d0:a9:
70:c6:ac:0a:0a:1c:4a:60:21:f7:c4:64:53:89:5f:c4:ed:ae:
7e:74:25:cc:b5:c4:04:4b:78:5e:dc:62:19:9b:bc:03:a2:ff:
e1:1a:f9:16:70:73:45:83:66:48:c5:84:1d:9a:e3:cd:61:d1:
f2:d8:b0:fd:14:8b:61:7d:0c:9b:25:42:dc:4c:9b:3c:3a:1b:
d0:d1:b6:54:d5:e1:ab:48:e0:50:d4:96:9c:5d:40:65:6e:6f:
2f:70:ec:ab:53:a6:2c:6c:bb:95:5d:ce:af:ae:52:45:52:60:
8d:c4:b1:26:bc:b1:da:d0:fe:bc:c1:f8:c2:fb:17:fe:93:49:
76:e7:66:ff:d2:b6:30:0b:23:13:a7:ad:44:8d:2b:76:cf:d0:
ea:46:27:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa3fmITZCApnopBCyR3OvcSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhNGI1MTNmN2U0NDZlMGNkNmRjZmU1NjgyOWJiYzlmZTQ5
OGQzZTgwHhcNMjUwNTEwMDAwMDM1WhcNMjUwNTExMDAwMDM1WjAzMTEwLwYDVQQD
Eyg3MTM1YmQ0MWFiZjQ5YzAyM2FjYmNiYzRmYTQ5YjNjYjMwZjczNDAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzYSEQw4zxjzN/D94wYEch7nwbamy
Qkm1OCHw/KyGaJ2QqbnPKQUGHehYa8ImOP1SUXI5HBIJpeoqm77yzQFx1XvbLQ2m
LuXPHZ7XdXEYiZJ0s8PCAaCO+oFa7do0SirkiEfBagoc19kWdL+Khs7vpHxaei5S
65wISO0Irpyh8T5UN/FVjHMvqMyoR3ulmJkI7XIR4KSXOm1Bs/ZmvBy2LOHydxh5
+A9mXBzhAc6SybBcjZIPOrHv4bZawgr+gAd6k+kHx07YE3ywRwURAU+/noDjEtf1
l7N8NmxuEyxPIkNp2PX7t3bGaOn7y4hlr/jh4kgHPkG92lr161FvXqjOUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHE1vUGr9JwCOsvLxPpJs8sw9zQCMB8GA1UdIwQY
MBaAFEpLUT9+RG4M1tz+VoKbvJ/kmNPoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2t0UlAzNUViZ3pXM1A1V2dwdThuLVNZMC1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My9mYTU1MTktMGUzNS00NGNmLTlkNGYt
MmFlYTc1YzJkZjc4LzEvU2t0UlAzNUViZ3pXM1A1V2dwdThuLVNZMC1nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My9mYTU1MTktMGUzNS00NGNmLTlkNGYtMmFlYTc1YzJkZjc4
LzEvU2t0UlAzNUViZ3pXM1A1V2dwdThuLVNZMC1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaBLLNScL
3q5xuju/ebyj4s2Zc81QPcjLmnbQv7/Qc+Qm4IRZrz0+XYQ86bGtLShqUqSo0acE
mMqFQzqAUM9HQjttEGYS4ULk3z1fi8dktyn3ttVE5SSUXN8VomQD8xxXtTPJzWZ0
uKuM4tCpcMasCgocSmAh98RkU4lfxO2ufnQlzLXEBEt4XtxiGZu8A6L/4Rr5FnBz
RYNmSMWEHZrjzWHR8tiw/RSLYX0MmyVC3EybPDob0NG2VNXhq0jgUNSWnF1AZW5v
L3Dsq1OmLGy7lV3Or65SRVJgjcSxJryx2tD+vMH4wvsX/pNJdudm/9K2MAsjE6et
RI0rds/Q6kYncg==
-----END CERTIFICATE-----
Generated at Sat May 10 04:42:02 2025 by rpki-client