Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/b24936-097f-41e3-b58d-d2cfd5f22e7a/1/SIkYymYYDe4Hm69FBT5M61dikr0.mft
File: SIkYymYYDe4Hm69FBT5M61dikr0.mft (raw, json)
Hash identifier: vVDRO7l68c9WzDpS580f2jyYnhOAbaZV7ooviKq7mCQ=
Subject key identifier: 0A:45:6B:A9:A7:B8:99:4E:94:E4:86:90:BE:7B:58:C5:4B:35:FE:D9
Authority key identifier: 48:89:18:CA:66:18:0D:EE:07:9B:AF:45:05:3E:4C:EB:57:62:92:BD
Certificate issuer: /CN=488918ca66180dee079baf45053e4ceb576292bd
Certificate serial: 0197B6A0E82D37BF8E2CCB299CA5AF582373
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SIkYymYYDe4Hm69FBT5M61dikr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/b24936-097f-41e3-b58d-d2cfd5f22e7a/1/SIkYymYYDe4Hm69FBT5M61dikr0.mft
Manifest number: 1545
Signing time: Sat 28 Jun 2025 13:01:27 +0000
Manifest this update: Sat 28 Jun 2025 13:01:27 +0000
Manifest next update: Sun 29 Jun 2025 13:01:27 +0000
Files and hashes: 1: SIkYymYYDe4Hm69FBT5M61dikr0.crl (hash: wZEZ6PVNtXIVQo2rINDxjgArXiz2oTm7eFcEhDhKajA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/b24936-097f-41e3-b58d-d2cfd5f22e7a/1/SIkYymYYDe4Hm69FBT5M61dikr0.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/b24936-097f-41e3-b58d-d2cfd5f22e7a/1/SIkYymYYDe4Hm69FBT5M61dikr0.mft
rsync://rpki.ripe.net/repository/DEFAULT/SIkYymYYDe4Hm69FBT5M61dikr0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:e8:2d:37:bf:8e:2c:cb:29:9c:a5:af:58:23:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=488918ca66180dee079baf45053e4ceb576292bd
Validity
Not Before: Jun 28 13:01:27 2025 GMT
Not After : Jun 29 13:01:27 2025 GMT
Subject: CN=0a456ba9a7b8994e94e48690be7b58c54b35fed9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6b:b5:56:b2:f0:d4:fb:a9:37:33:4c:03:e8:
eb:14:dc:34:8e:c4:63:a0:f2:91:c6:d2:b3:03:bb:
dc:fa:c2:cf:55:bf:93:04:d8:d4:d9:bd:42:b5:9b:
93:73:b3:48:9e:cb:06:5f:7a:fa:2e:47:5b:f3:42:
d6:7f:bd:08:7d:d8:98:ae:64:7b:d2:bc:bf:4c:42:
20:4c:92:c6:e1:03:6e:36:a2:57:67:1e:c7:c6:43:
c2:46:5b:d1:fd:6d:22:17:46:bc:aa:10:f9:98:ce:
f6:16:74:c3:98:29:43:c2:68:70:ef:d2:73:c3:ef:
d3:42:26:b1:29:fb:2c:62:52:42:35:53:0a:a3:e6:
5e:a1:63:5b:c3:f1:ba:14:8e:ab:b4:f0:9c:1c:48:
1f:29:51:c0:1e:ca:f5:30:a0:fe:6d:e1:a2:ed:72:
76:dc:e2:44:34:fb:b4:4a:63:87:c1:e6:6d:5e:cc:
1d:c8:87:99:ea:c6:b0:4c:91:6e:87:ec:55:33:62:
76:20:e4:f4:d1:1d:25:6b:b3:dc:e5:fa:27:e5:ca:
da:dc:69:6f:c3:d9:0f:36:a1:2a:59:be:45:51:12:
06:1e:2c:bc:d7:e2:d8:04:7e:86:16:56:ca:62:35:
7c:f6:84:e2:92:a6:cc:56:0d:8d:25:84:76:c0:b9:
02:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:45:6B:A9:A7:B8:99:4E:94:E4:86:90:BE:7B:58:C5:4B:35:FE:D9
X509v3 Authority Key Identifier:
keyid:48:89:18:CA:66:18:0D:EE:07:9B:AF:45:05:3E:4C:EB:57:62:92:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SIkYymYYDe4Hm69FBT5M61dikr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/b24936-097f-41e3-b58d-d2cfd5f22e7a/1/SIkYymYYDe4Hm69FBT5M61dikr0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/b24936-097f-41e3-b58d-d2cfd5f22e7a/1/SIkYymYYDe4Hm69FBT5M61dikr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:6a:1e:d0:e6:af:0c:20:58:91:c8:5b:2e:1b:b8:79:0d:80:
02:24:f9:26:8d:8d:b3:4f:e9:d3:fb:18:c3:96:72:6a:bd:4a:
0e:39:99:39:82:21:d0:5b:42:53:c1:57:c2:0a:fa:22:7c:e7:
9a:8e:1e:b4:e2:67:a9:ef:17:dd:cb:29:7e:25:87:e1:8a:c1:
cb:20:de:72:20:45:07:0d:b2:98:69:97:94:57:e0:b0:5a:af:
3f:ee:e7:e8:f0:ad:2a:5a:c0:8b:4d:fa:ee:7e:c5:89:25:a8:
8a:bf:bc:92:06:94:f9:e6:43:d7:06:c8:40:4b:67:21:94:73:
54:ce:33:af:d7:6d:53:67:ce:5e:01:91:5c:eb:68:21:12:b7:
41:08:d4:78:8c:6e:c9:49:24:70:26:da:7f:0b:bf:d3:29:8f:
90:3c:1c:de:53:71:64:e1:4d:c0:8e:dd:87:f2:c6:7f:81:2c:
01:f0:e0:48:d6:73:98:b5:40:58:6a:f0:47:36:02:75:e3:2a:
f0:b7:f0:49:75:f7:f1:2d:40:8f:a1:00:84:60:35:1a:b2:58:
71:21:8a:29:1a:80:57:2b:ed:6c:58:d2:02:03:c8:9b:74:5b:
23:fa:22:53:2a:8a:13:54:7f:1c:64:89:8b:9c:26:d0:b7:0a:
d9:fa:a9:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:19:28 2025 by rpki-client