Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/5172cb-4b4b-43f1-8d27-f62766974353/1/skX7DTNtIH91Ns4pX55phiihTuQ.mft
File: skX7DTNtIH91Ns4pX55phiihTuQ.mft (raw, json)
Hash identifier: ia3cshmVfnwjBB+stkO3Vs6N4VUuKyJWR/2ZVCqNV0M=
Subject key identifier: AE:23:C2:4D:80:10:50:A5:88:32:64:14:03:65:E5:03:99:F6:15:CC
Authority key identifier: B2:45:FB:0D:33:6D:20:7F:75:36:CE:29:5F:9E:69:86:28:A1:4E:E4
Certificate issuer: /CN=b245fb0d336d207f7536ce295f9e698628a14ee4
Certificate serial: 0196CCF37F4895074677910EE5E1A9EC851E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/skX7DTNtIH91Ns4pX55phiihTuQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/5172cb-4b4b-43f1-8d27-f62766974353/1/skX7DTNtIH91Ns4pX55phiihTuQ.mft
Manifest number: 0948
Signing time: Wed 14 May 2025 04:00:32 +0000
Manifest this update: Wed 14 May 2025 04:00:32 +0000
Manifest next update: Thu 15 May 2025 04:00:32 +0000
Files and hashes: 1: skX7DTNtIH91Ns4pX55phiihTuQ.crl (hash: FXeM7CswoBjdRhJF2QJts6zJZH3j7jqOy0rK3kPSleM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/5172cb-4b4b-43f1-8d27-f62766974353/1/skX7DTNtIH91Ns4pX55phiihTuQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/5172cb-4b4b-43f1-8d27-f62766974353/1/skX7DTNtIH91Ns4pX55phiihTuQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/skX7DTNtIH91Ns4pX55phiihTuQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cc:f3:7f:48:95:07:46:77:91:0e:e5:e1:a9:ec:85:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b245fb0d336d207f7536ce295f9e698628a14ee4
Validity
Not Before: May 14 04:00:32 2025 GMT
Not After : May 15 04:00:32 2025 GMT
Subject: CN=ae23c24d801050a5883264140365e50399f615cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:71:cc:9b:aa:0f:f7:77:34:93:d9:d5:c3:3a:
24:cc:74:57:0b:db:c4:86:20:ad:8a:3d:02:51:55:
a7:e7:7b:c9:46:1d:4d:6d:b9:ba:b5:ba:d3:a1:50:
05:71:ad:0c:60:83:99:a9:a7:86:f5:e1:d6:df:72:
b2:80:5f:98:71:ba:79:91:29:1e:7a:a5:56:70:c3:
1b:30:64:dc:de:9f:1f:0b:eb:2d:f4:75:d6:c3:6f:
be:41:d3:db:4b:c4:08:cc:63:18:c6:d2:7e:a1:8e:
cf:36:cc:9b:29:0c:04:f3:a4:d2:1b:1f:bb:bc:1e:
5f:f7:db:81:98:95:0f:e4:32:a0:40:92:ba:02:01:
23:98:a5:c9:01:5d:2d:3b:83:91:cd:58:6c:c7:7b:
a9:ae:2d:da:18:ab:b0:76:2b:2c:30:cb:e7:cb:cf:
df:7f:f2:f4:f5:43:34:5a:da:e0:9c:84:07:99:65:
fb:a2:ce:28:97:68:87:2d:04:67:7d:0d:f2:da:bf:
5d:2d:bf:fa:38:9e:98:fe:fd:1c:0c:68:fd:95:78:
8b:2c:c1:2a:5a:cf:32:eb:3c:55:e0:f7:e2:43:0d:
01:a7:f2:bf:fb:e6:bb:2b:91:0e:ad:99:b6:3e:17:
2b:11:33:79:5f:4e:4f:4f:b4:df:35:56:fb:26:86:
1f:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:23:C2:4D:80:10:50:A5:88:32:64:14:03:65:E5:03:99:F6:15:CC
X509v3 Authority Key Identifier:
keyid:B2:45:FB:0D:33:6D:20:7F:75:36:CE:29:5F:9E:69:86:28:A1:4E:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/skX7DTNtIH91Ns4pX55phiihTuQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/5172cb-4b4b-43f1-8d27-f62766974353/1/skX7DTNtIH91Ns4pX55phiihTuQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/5172cb-4b4b-43f1-8d27-f62766974353/1/skX7DTNtIH91Ns4pX55phiihTuQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:1f:f6:4b:28:3f:d4:ea:65:4e:29:99:7e:29:be:1a:27:9c:
d3:ab:e0:5f:c3:29:80:c8:19:ae:52:82:20:09:5b:4b:3c:0d:
8d:ea:79:2d:aa:4f:4f:db:a4:17:d3:54:9f:9d:a6:02:77:b4:
2e:44:09:9b:da:91:b7:8d:35:39:fd:93:63:0a:d9:34:e9:ff:
27:a8:f6:d7:14:e2:14:79:c1:69:6d:93:cc:80:9f:0d:11:21:
61:9c:28:42:b8:f1:8f:c9:57:00:19:4e:82:36:77:82:71:19:
38:1d:ff:84:4d:0d:ef:02:19:f9:07:63:ec:92:16:21:36:f9:
f8:a4:83:02:62:70:28:d6:a6:0d:7e:97:03:18:47:98:08:05:
88:6c:db:48:e1:00:67:da:fa:20:fe:aa:76:8e:af:37:d2:1d:
92:13:a0:e0:80:88:2c:96:27:8f:dc:87:e0:6f:98:ca:d5:20:
21:66:68:88:bb:0a:49:51:8b:f5:b7:13:ba:c2:12:17:8e:ba:
a0:80:d2:4f:a2:b4:62:69:38:23:97:d9:c6:08:a8:c9:ba:5c:
9c:65:14:39:c8:3e:b1:1c:43:36:3f:74:f9:82:02:41:9e:c0:
46:6b:c5:cd:62:4c:20:ca:52:e0:ff:c2:de:51:e5:62:0e:2a:
51:18:1a:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 09:34:25 2025 by rpki-client