Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/33444c-0529-4fa9-b712-1abadd1b12d6/1/SKLoEfALrhakR0I_EeJCFxQs_3w.mft
File: SKLoEfALrhakR0I_EeJCFxQs_3w.mft (raw, json)
Hash identifier: Tr9y/CPsSvVV/nwkJNx1YMZ3M120Y1HfS1rzxVLgXpo=
Subject key identifier: 87:44:A6:D7:9A:E2:CC:27:E4:DF:17:6C:0A:A2:90:98:B3:A3:2F:E3
Authority key identifier: 48:A2:E8:11:F0:0B:AE:16:A4:47:42:3F:11:E2:42:17:14:2C:FF:7C
Certificate issuer: /CN=48a2e811f00bae16a447423f11e24217142cff7c
Certificate serial: 0197B70E6A8410C53446B839CFD0278F7EFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SKLoEfALrhakR0I_EeJCFxQs_3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/33444c-0529-4fa9-b712-1abadd1b12d6/1/SKLoEfALrhakR0I_EeJCFxQs_3w.mft
Manifest number: 0A
Signing time: Sat 28 Jun 2025 15:01:04 +0000
Manifest this update: Sat 28 Jun 2025 15:01:04 +0000
Manifest next update: Sun 29 Jun 2025 15:01:04 +0000
Files and hashes: 1: SKLoEfALrhakR0I_EeJCFxQs_3w.crl (hash: F1q8qFoGSYg3lH5LdmhDINBqZBNLQ+rLbVpngtuY1Bk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/33444c-0529-4fa9-b712-1abadd1b12d6/1/SKLoEfALrhakR0I_EeJCFxQs_3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/33444c-0529-4fa9-b712-1abadd1b12d6/1/SKLoEfALrhakR0I_EeJCFxQs_3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/SKLoEfALrhakR0I_EeJCFxQs_3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:6a:84:10:c5:34:46:b8:39:cf:d0:27:8f:7e:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48a2e811f00bae16a447423f11e24217142cff7c
Validity
Not Before: Jun 28 15:01:04 2025 GMT
Not After : Jun 29 15:01:04 2025 GMT
Subject: CN=8744a6d79ae2cc27e4df176c0aa29098b3a32fe3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:57:60:26:bd:ac:9c:54:07:cc:84:8a:08:2a:
1f:1e:fe:e5:3d:21:57:48:d2:2d:07:ee:3f:0e:60:
5d:b0:cb:85:fe:1a:d3:dd:27:23:20:99:34:d7:96:
98:5a:af:10:a4:14:dc:45:fc:fd:8a:e4:5b:a9:9b:
0b:fd:7e:c4:09:b8:54:9d:06:4c:11:9b:36:af:fa:
db:43:25:b7:33:d1:bf:f6:b3:7f:47:73:ea:44:73:
ed:8f:d9:97:da:20:55:e8:e7:53:b0:49:09:3f:e6:
b0:99:10:cc:17:36:5d:ca:6d:01:cf:2b:98:38:8a:
06:e7:e3:f9:bd:99:1b:14:21:b7:ce:d2:12:50:6c:
28:19:43:d5:82:bb:3e:c6:86:b6:d5:df:55:b0:92:
28:bf:53:16:6a:1b:7f:41:ab:91:4c:1c:23:9d:fb:
b1:98:71:fe:1a:43:c7:95:28:b7:70:48:09:69:d6:
59:44:f4:77:0c:78:9e:0c:91:ec:9f:10:51:1a:72:
43:8f:b0:b0:d2:86:b6:df:14:1d:a3:10:83:04:f0:
b9:e8:17:d7:a4:27:29:ab:d4:0d:89:42:fa:2d:3c:
41:1d:a1:2e:c4:0b:47:cb:27:fd:fd:15:06:90:0b:
a7:8b:8a:15:50:c8:67:37:a6:df:29:4e:21:f8:b6:
ee:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:44:A6:D7:9A:E2:CC:27:E4:DF:17:6C:0A:A2:90:98:B3:A3:2F:E3
X509v3 Authority Key Identifier:
keyid:48:A2:E8:11:F0:0B:AE:16:A4:47:42:3F:11:E2:42:17:14:2C:FF:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SKLoEfALrhakR0I_EeJCFxQs_3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/33444c-0529-4fa9-b712-1abadd1b12d6/1/SKLoEfALrhakR0I_EeJCFxQs_3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/33444c-0529-4fa9-b712-1abadd1b12d6/1/SKLoEfALrhakR0I_EeJCFxQs_3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:22:fe:b0:f2:43:66:bc:74:2b:28:de:5a:43:e1:6a:c5:a2:
e2:59:aa:56:7d:c8:f8:83:14:a0:8f:24:62:18:1c:6c:a9:c9:
31:15:65:8b:3a:31:db:43:8e:a3:32:a4:b8:42:23:c7:4c:ff:
d3:64:81:62:f1:3d:16:1a:3e:d9:be:ad:23:7f:68:6b:c0:86:
f0:82:f3:8e:43:30:5e:06:ae:bc:75:16:da:39:0b:f5:ca:f4:
31:65:b6:9a:c7:a1:c4:13:73:e5:6f:be:83:25:be:17:96:aa:
95:60:26:f0:b2:b3:95:8b:57:46:05:e5:1a:20:0b:51:88:2f:
9f:52:74:f2:bc:85:e8:40:c4:7e:22:37:3b:0a:d7:e5:14:a2:
5f:d0:b1:45:dc:d8:de:4a:93:45:6f:36:c1:b6:ea:c3:1e:3a:
85:1a:6d:d2:3f:5a:00:0c:5e:23:45:2b:da:ab:ad:d7:99:e3:
cf:cc:d9:02:a9:13:d4:fe:cf:9f:aa:8b:73:53:51:60:e3:26:
63:6b:f5:f8:f0:d1:56:67:20:16:3e:37:4a:91:6d:ef:f0:64:
7e:13:2e:e9:91:af:f0:21:c4:01:24:ef:ac:18:15:b0:bf:d0:
de:dc:e5:ff:4a:ad:a7:7d:02:0c:be:1b:50:12:3c:f1:29:e6:
48:0a:6a:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:14:47 2025 by rpki-client