Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/bd2d39-15e6-4640-ad08-d7b64b7cc583/1/sk1YjfILMtuXh9d4ZDlM16ZtQDA.mft
File: sk1YjfILMtuXh9d4ZDlM16ZtQDA.mft (raw, json)
Hash identifier: 3CTZtoinEgKYTSomA26J+kNYwwuh+HsFFTs9aMGN5es=
Subject key identifier: DE:FE:56:4F:38:CF:82:66:4E:3E:E2:26:DE:91:E9:10:44:36:79:F0
Authority key identifier: B2:4D:58:8D:F2:0B:32:DB:97:87:D7:78:64:39:4C:D7:A6:6D:40:30
Certificate issuer: /CN=b24d588df20b32db9787d77864394cd7a66d4030
Certificate serial: 0197BA0F4381B9C6EBB2338C815EA28E3AAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sk1YjfILMtuXh9d4ZDlM16ZtQDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/bd2d39-15e6-4640-ad08-d7b64b7cc583/1/sk1YjfILMtuXh9d4ZDlM16ZtQDA.mft
Manifest number: 149B
Signing time: Sun 29 Jun 2025 05:00:51 +0000
Manifest this update: Sun 29 Jun 2025 05:00:51 +0000
Manifest next update: Mon 30 Jun 2025 05:00:51 +0000
Files and hashes: 1: YAynT2rFqTF7GPjWR_vJKmQMToY.roa (hash: Nj9HjgClC5YboiO8+CeqUE2/z4iqwPpiEtBTjxVCiAo=)
2: sk1YjfILMtuXh9d4ZDlM16ZtQDA.crl (hash: RwGmOOvmnCFq257Ezp6fJodeTUctGhyAs0wHOnPhbOk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/bd2d39-15e6-4640-ad08-d7b64b7cc583/1/sk1YjfILMtuXh9d4ZDlM16ZtQDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/bd2d39-15e6-4640-ad08-d7b64b7cc583/1/sk1YjfILMtuXh9d4ZDlM16ZtQDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/sk1YjfILMtuXh9d4ZDlM16ZtQDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:0f:43:81:b9:c6:eb:b2:33:8c:81:5e:a2:8e:3a:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b24d588df20b32db9787d77864394cd7a66d4030
Validity
Not Before: Jun 29 05:00:51 2025 GMT
Not After : Jun 30 05:00:51 2025 GMT
Subject: CN=defe564f38cf82664e3ee226de91e910443679f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:bb:8a:91:b0:7d:ad:1d:af:38:fd:fc:23:6c:
3f:f0:f7:fe:07:cb:a9:36:7c:b9:cf:0f:41:9b:63:
41:5a:0f:e8:a4:3c:f8:f6:2f:73:f4:ac:03:cf:38:
95:79:a8:04:61:91:71:0d:20:b8:3d:30:7e:12:45:
b8:9e:e1:9c:d1:94:22:b5:d7:31:35:41:80:05:6e:
8e:7a:ab:f3:34:70:bb:fb:9d:7c:0f:52:fb:61:1d:
26:7a:7c:9a:52:b8:c1:1a:b3:69:63:d5:3b:7c:83:
87:93:83:05:12:e5:f8:23:65:b2:a0:b9:df:9f:4a:
2a:14:97:e8:2d:cf:72:cb:44:b2:09:b5:0a:b2:78:
ae:53:7e:8b:c7:0a:61:4b:7e:ef:1f:0d:42:05:ca:
a8:7b:da:cd:49:ca:a4:7b:21:a2:4b:88:cd:75:cf:
da:70:b6:0f:11:dd:28:c6:98:62:7b:5c:14:c4:a6:
3a:61:e2:4b:28:0e:35:60:50:a2:0b:e9:59:97:25:
50:aa:4d:30:f7:8c:61:18:3b:4f:d1:e5:87:ba:b9:
05:4a:e2:68:b6:27:14:91:17:b0:73:ed:73:83:ab:
94:2c:af:31:87:db:46:99:6d:09:96:9c:84:c2:4b:
ff:87:ca:a5:33:a9:bc:c2:ca:df:bd:d1:d0:55:10:
a6:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:FE:56:4F:38:CF:82:66:4E:3E:E2:26:DE:91:E9:10:44:36:79:F0
X509v3 Authority Key Identifier:
keyid:B2:4D:58:8D:F2:0B:32:DB:97:87:D7:78:64:39:4C:D7:A6:6D:40:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sk1YjfILMtuXh9d4ZDlM16ZtQDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bd2d39-15e6-4640-ad08-d7b64b7cc583/1/sk1YjfILMtuXh9d4ZDlM16ZtQDA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bd2d39-15e6-4640-ad08-d7b64b7cc583/1/sk1YjfILMtuXh9d4ZDlM16ZtQDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:68:c3:da:f2:1d:ba:0e:67:84:62:31:c7:a9:7a:a2:bd:e7:
6a:c6:bb:80:93:99:e6:e1:92:4a:ce:92:d6:b5:68:88:5e:7a:
8c:78:68:fb:cc:08:ba:9d:7e:b6:5a:c6:1f:90:ac:0f:05:8c:
8e:66:36:4e:ef:10:a7:b8:72:0b:42:fb:e5:11:63:43:b0:ca:
82:ff:d6:48:2f:ab:f2:70:3e:e6:e9:d5:49:1c:cb:02:88:a4:
1d:14:15:a9:b0:2d:a9:a1:7f:21:3d:7f:75:04:cc:13:10:1e:
80:fd:90:6c:5a:3d:bf:8d:1c:8f:24:c7:13:ac:12:a9:02:2e:
8f:07:31:7d:87:e0:bf:e2:d3:7b:3a:2b:31:f7:5c:d8:30:a1:
31:34:0d:df:bd:cf:cc:97:22:38:5d:cb:5c:1e:71:2e:ea:cd:
30:2f:30:ff:cb:21:b4:d2:2c:92:2d:20:f3:71:d3:0b:67:68:
c8:5f:67:01:b3:e7:bc:8c:b3:fb:a6:fe:14:f6:90:39:25:d0:
95:9e:23:0a:81:2e:d1:62:c3:69:fb:45:9f:f0:a4:8b:a5:9b:
90:d3:7d:0f:d6:e2:e4:e1:af:a7:2b:23:ae:e5:43:fe:e6:9e:
1a:89:93:e5:8d:05:ad:f1:d7:45:e4:50:a9:aa:55:e7:6d:cb:
6d:5f:1a:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 09:17:35 2025 by rpki-client