Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/c670e2-5401-4243-a9bb-3736d40ca07e/1/SKvTlzl8CmIzcipFkF6MZzEgx6w.mft
File: SKvTlzl8CmIzcipFkF6MZzEgx6w.mft (raw, json)
Hash identifier: HGjS7Q1Z05SqUXKUV5N52w9mS06KknFgNCGnYV5YSTg=
Subject key identifier: EB:89:F8:AB:B9:A0:FF:15:3B:5A:AA:51:FC:CD:32:AE:DF:4D:11:E1
Authority key identifier: 48:AB:D3:97:39:7C:0A:62:33:72:2A:45:90:5E:8C:67:31:20:C7:AC
Certificate issuer: /CN=48abd397397c0a6233722a45905e8c673120c7ac
Certificate serial: 0198D51621D2EE08BE3BB9E42D4625D0141E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SKvTlzl8CmIzcipFkF6MZzEgx6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/c670e2-5401-4243-a9bb-3736d40ca07e/1/SKvTlzl8CmIzcipFkF6MZzEgx6w.mft
Manifest number: 03CE
Signing time: Sat 23 Aug 2025 04:00:54 +0000
Manifest this update: Sat 23 Aug 2025 04:00:54 +0000
Manifest next update: Sun 24 Aug 2025 04:00:54 +0000
Files and hashes: 1: SKvTlzl8CmIzcipFkF6MZzEgx6w.crl (hash: ieyHj5kgLLvZGYSMX/w3mVCE60SDo+d4vwarAedpBy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/c670e2-5401-4243-a9bb-3736d40ca07e/1/SKvTlzl8CmIzcipFkF6MZzEgx6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/c670e2-5401-4243-a9bb-3736d40ca07e/1/SKvTlzl8CmIzcipFkF6MZzEgx6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/SKvTlzl8CmIzcipFkF6MZzEgx6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:16:21:d2:ee:08:be:3b:b9:e4:2d:46:25:d0:14:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48abd397397c0a6233722a45905e8c673120c7ac
Validity
Not Before: Aug 23 04:00:54 2025 GMT
Not After : Aug 24 04:00:54 2025 GMT
Subject: CN=eb89f8abb9a0ff153b5aaa51fccd32aedf4d11e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a6:fa:10:4a:a0:ff:e9:f2:6e:f7:38:00:da:
7d:f7:00:4f:1e:1e:08:b6:4f:80:de:25:44:9d:c3:
9d:12:9d:ac:56:e1:f9:35:cd:29:07:78:b3:77:0b:
03:b6:62:20:7a:a9:08:f1:80:34:a7:3c:fd:ef:93:
3c:9e:1b:43:7e:10:56:b1:b4:96:e7:3b:ec:28:d4:
72:28:83:41:fb:a5:f8:ce:8c:8b:cd:fb:8f:06:76:
2d:97:89:c1:74:15:32:b7:05:f0:ea:b0:ea:fc:07:
83:21:4c:26:be:58:49:42:08:9c:b3:b1:ac:bb:6e:
70:e4:da:b5:52:ec:ad:23:cb:0b:81:58:99:98:72:
e4:69:ca:9d:f1:30:56:d6:db:5c:fe:f8:e1:fd:1a:
f8:9c:fb:45:8d:00:ff:4e:51:ef:79:c9:fd:17:3c:
a6:4a:ed:8a:fe:01:ca:1c:cb:cb:c0:07:c2:a8:d7:
b5:db:03:12:f3:b4:9e:e2:97:19:d4:1c:4b:37:5c:
5e:76:13:a4:fd:18:5e:57:ec:c8:0b:ce:ac:76:ee:
9e:76:65:03:e7:e1:86:4d:ea:0f:de:55:61:23:44:
f6:15:11:5f:80:12:28:28:44:d2:7c:d5:91:22:fe:
61:8a:35:43:b8:fc:55:10:fa:e4:1d:0c:42:10:6f:
7c:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:89:F8:AB:B9:A0:FF:15:3B:5A:AA:51:FC:CD:32:AE:DF:4D:11:E1
X509v3 Authority Key Identifier:
keyid:48:AB:D3:97:39:7C:0A:62:33:72:2A:45:90:5E:8C:67:31:20:C7:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SKvTlzl8CmIzcipFkF6MZzEgx6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/c670e2-5401-4243-a9bb-3736d40ca07e/1/SKvTlzl8CmIzcipFkF6MZzEgx6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/c670e2-5401-4243-a9bb-3736d40ca07e/1/SKvTlzl8CmIzcipFkF6MZzEgx6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:f7:c7:0c:a5:b8:a9:d5:52:b2:46:c4:a9:a9:54:46:95:21:
c9:24:0c:9d:a7:dc:50:22:87:e2:4c:d2:26:bf:14:22:4e:9f:
8f:74:2d:a9:5d:d0:c2:26:14:09:d2:0f:21:9a:b5:ae:4d:95:
03:3f:07:fd:ce:af:54:81:34:6c:5c:9e:99:77:7b:1e:c2:fb:
da:2a:61:d7:31:79:b5:4b:e7:7e:74:20:2f:e7:ed:2d:7d:65:
73:d0:50:98:b5:88:3c:c7:ca:ad:3c:93:f0:5a:e0:42:99:0d:
2a:a9:e7:4b:c0:5e:cd:2f:b9:8e:b2:cf:ad:d4:91:3a:47:aa:
ec:a9:10:c8:e1:e3:53:c0:ad:23:64:7d:63:6e:ef:00:f7:37:
d5:1e:98:5c:d0:27:43:17:ad:87:99:b7:b7:d1:54:9f:f2:77:
ee:aa:d0:9e:ef:26:32:7e:4d:e7:44:21:7f:7d:74:41:dc:5c:
fe:00:1b:89:59:f6:f5:c8:be:e6:4d:f6:c9:1a:0d:9d:95:6b:
23:10:26:e2:79:10:3e:6d:1e:9b:bf:40:5b:c7:80:72:12:1f:
0c:6d:59:a6:f6:f6:8c:7e:11:a9:61:c9:f5:db:4f:8b:2c:6c:
9b:b4:a3:ef:8c:8f:f7:fc:32:b0:f1:1e:73:a2:b4:fb:c3:ed:
fa:57:8e:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:41:32 2025 by rpki-client