Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/5731da-6665-4161-80c1-5e79b4435e2c/1/SkCVVRBQQFeMspYHAHT0UQclLus.mft
File: SkCVVRBQQFeMspYHAHT0UQclLus.mft (raw, json)
Hash identifier: T9eVM9jz0wu/5xIR95Yj7sy4fgmWTaa0BPRnht1wfew=
Subject key identifier: EE:23:B0:3F:15:62:59:9A:90:94:D3:69:24:58:AC:3C:DD:75:C9:DF
Authority key identifier: 4A:40:95:55:10:50:40:57:8C:B2:96:07:00:74:F4:51:07:25:2E:EB
Certificate issuer: /CN=4a409555105040578cb296070074f45107252eeb
Certificate serial: 01969FE460948B4F94617E36FC784E686CE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SkCVVRBQQFeMspYHAHT0UQclLus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/5731da-6665-4161-80c1-5e79b4435e2c/1/SkCVVRBQQFeMspYHAHT0UQclLus.mft
Manifest number: 0DD7
Signing time: Mon 05 May 2025 10:01:06 +0000
Manifest this update: Mon 05 May 2025 10:01:06 +0000
Manifest next update: Tue 06 May 2025 10:01:06 +0000
Files and hashes: 1: RZvG8tfD1IhES3sTSq4PUTIau5M.roa (hash: 156XMiSx9vA1oBj0STlN0OZ/clFU7kVwEnhKeXGoaaM=)
2: SkCVVRBQQFeMspYHAHT0UQclLus.crl (hash: IJAtW29yGwVRG3ZQOTCWKeZJPWWVRCCfgIEzr770Wrg=)
3: n34nAFTJk7pyD4Fldmcf5TLggoo.roa (hash: a/rNjgL4eu7nYmXqkssaZat+cUqAsRT2cGSOePDkoao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/5731da-6665-4161-80c1-5e79b4435e2c/1/SkCVVRBQQFeMspYHAHT0UQclLus.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/5731da-6665-4161-80c1-5e79b4435e2c/1/SkCVVRBQQFeMspYHAHT0UQclLus.mft
rsync://rpki.ripe.net/repository/DEFAULT/SkCVVRBQQFeMspYHAHT0UQclLus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:e4:60:94:8b:4f:94:61:7e:36:fc:78:4e:68:6c:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a409555105040578cb296070074f45107252eeb
Validity
Not Before: May 5 10:01:06 2025 GMT
Not After : May 6 10:01:06 2025 GMT
Subject: CN=ee23b03f1562599a9094d3692458ac3cdd75c9df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f3:c6:b2:91:f5:f4:a9:52:5e:2a:a8:6d:9c:
84:74:c4:8c:16:49:99:61:18:e9:35:16:16:fd:a7:
b1:60:80:5f:de:96:ed:11:2f:98:23:8b:97:68:c6:
bd:16:3a:ca:cd:0e:62:51:cb:04:e7:9d:a6:55:7d:
ab:e7:6e:3f:a9:d5:3c:6b:13:5b:03:45:d8:66:9a:
f0:6e:b4:d2:ef:8a:76:81:9b:df:1e:ca:76:52:fd:
92:73:b3:01:31:06:27:2a:f6:36:c4:c7:0c:64:c9:
4b:f5:68:8f:1f:df:78:21:ad:0a:f4:94:9b:57:18:
95:22:a9:f1:fa:29:91:68:c1:2e:f4:ae:37:25:4a:
48:04:7f:aa:2e:5a:0c:cd:9a:72:5e:2e:f2:b7:72:
97:43:39:28:9f:1b:9a:83:4c:48:b6:20:a5:8e:14:
3f:15:9e:02:94:f9:c3:78:e3:10:35:b5:da:05:3b:
06:57:b0:79:8f:50:91:33:d2:de:39:30:b8:a0:a9:
f6:21:25:94:4b:1e:89:66:aa:f5:9c:d5:32:bc:17:
55:ac:e4:13:99:3f:f0:48:90:21:22:38:d2:8f:5d:
9b:5e:e0:a5:bf:f3:75:9f:0b:a9:27:63:0c:f7:03:
ab:ac:e8:83:12:e8:99:25:a8:a7:eb:32:5c:55:39:
e6:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:23:B0:3F:15:62:59:9A:90:94:D3:69:24:58:AC:3C:DD:75:C9:DF
X509v3 Authority Key Identifier:
keyid:4A:40:95:55:10:50:40:57:8C:B2:96:07:00:74:F4:51:07:25:2E:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SkCVVRBQQFeMspYHAHT0UQclLus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/5731da-6665-4161-80c1-5e79b4435e2c/1/SkCVVRBQQFeMspYHAHT0UQclLus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/5731da-6665-4161-80c1-5e79b4435e2c/1/SkCVVRBQQFeMspYHAHT0UQclLus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:ad:54:48:bd:1f:44:5a:f3:4f:0f:a3:64:1f:1a:00:74:44:
4c:b7:fa:64:3f:de:17:e9:48:0e:2e:6a:96:c2:74:89:39:0e:
c4:90:e0:94:8a:df:91:d9:c4:02:7d:aa:cb:96:99:14:d2:45:
74:9f:dc:7b:84:24:54:57:7b:89:4e:08:30:0b:0c:ed:fd:d9:
eb:79:b2:b4:0e:9d:f0:2a:f2:f1:21:89:46:bf:ab:3b:4b:de:
46:11:c0:dc:2f:01:36:b5:7a:6b:66:56:93:f5:2d:48:4a:6a:
aa:69:64:53:44:ba:23:70:1c:c8:2a:75:73:57:a7:0b:68:d3:
1b:b5:00:c8:3c:d0:5d:17:a4:80:e4:0a:87:be:80:79:d2:29:
e5:d3:3a:66:c6:a1:26:e4:80:3a:35:09:a8:c5:ec:2b:56:77:
61:94:8d:33:77:df:b4:87:38:7b:e9:47:51:92:6f:a4:a5:d6:
5b:a5:21:73:f9:4f:dd:55:e1:7a:f3:02:66:fe:8c:9e:cc:92:
0f:d4:67:4b:ec:20:d8:3f:e9:3b:c1:46:45:cb:fb:a0:bc:58:
2e:56:e0:fc:26:6d:4e:9a:32:7b:7a:72:bf:76:2d:fa:07:6b:
40:e4:79:aa:14:14:ab:61:ff:93:b6:20:38:19:70:2a:fc:b2:
ed:e1:43:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 14:26:16 2025 by rpki-client