Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0e55d0-fafd-49c2-9c08-12c058bfacc1/1/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.mft
File: SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.mft (raw, json)
Hash identifier: rfbSiQayHDp6kRsK80vY2fd1liTofZkoRzAOSfyiu74=
Subject key identifier: B9:D1:32:C0:0C:9D:69:D8:4E:6F:0D:1C:B1:20:67:12:29:20:0A:63
Authority key identifier: 4A:45:47:2B:55:0B:34:FD:B0:1A:DC:D5:10:A9:DC:D8:21:C9:D9:91
Certificate issuer: /CN=4a45472b550b34fdb01adcd510a9dcd821c9d991
Certificate serial: 0197B6A0D32C144FD09ED0CEADBA2A36C69D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0e55d0-fafd-49c2-9c08-12c058bfacc1/1/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.mft
Manifest number: 04D1
Signing time: Sat 28 Jun 2025 13:01:22 +0000
Manifest this update: Sat 28 Jun 2025 13:01:22 +0000
Manifest next update: Sun 29 Jun 2025 13:01:22 +0000
Files and hashes: 1: SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.crl (hash: jIDKs5Hckmx/0f/MeckZ5ZFS6rG+H4MLpAhU8porp5w=)
2: U-j6AH3Jk894ib2lGr8hU_3DRF8.roa (hash: w5lxC2CItXuabeADCVx84G8ZOzDwpOBIylCCN5VOoy4=)
3: oxulDl5efUsnH_zB2CKuyCzWnYc.roa (hash: SkrSgjDKSdwo4WofC+cl8qo1zYQp5rl0nDLt9YudYRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/0e55d0-fafd-49c2-9c08-12c058bfacc1/1/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/0e55d0-fafd-49c2-9c08-12c058bfacc1/1/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:d3:2c:14:4f:d0:9e:d0:ce:ad:ba:2a:36:c6:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a45472b550b34fdb01adcd510a9dcd821c9d991
Validity
Not Before: Jun 28 13:01:22 2025 GMT
Not After : Jun 29 13:01:22 2025 GMT
Subject: CN=b9d132c00c9d69d84e6f0d1cb120671229200a63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:46:0c:37:17:18:36:e9:e7:a0:4d:20:13:29:
b4:c0:89:e7:19:61:fa:69:d5:17:c1:59:19:6e:7b:
9c:42:28:b3:4e:88:df:fa:fc:35:d9:fc:7f:5d:19:
4a:c0:16:f2:c3:05:ad:64:2b:80:9b:1c:81:ca:97:
bc:01:06:14:e6:e8:e9:cc:38:40:51:de:77:b6:6d:
a6:1d:df:49:fd:ec:2c:9e:cc:b7:d3:f9:90:6f:9a:
69:97:e2:38:3b:a2:91:18:dd:2f:12:51:9c:f9:bb:
e1:ef:72:b0:2d:2a:59:49:f8:ea:72:a7:ee:a8:00:
9d:63:ea:a7:c4:93:58:ac:02:10:cf:2b:85:97:4a:
be:08:68:6c:56:25:bc:5b:78:f3:e8:11:b0:ca:fc:
50:2f:59:f3:87:72:2c:5b:ae:7f:d7:13:49:fa:98:
38:57:99:71:54:79:46:48:36:34:15:b2:0e:b3:8c:
c4:f0:c8:bf:df:42:83:73:38:40:7a:ba:0c:be:af:
96:cc:6e:90:20:96:a7:71:02:01:d5:a3:c6:77:29:
4f:d3:8c:02:b1:8b:a8:71:d1:c3:d2:85:6a:aa:ae:
4e:2d:1d:d4:81:a1:f5:f3:25:4e:be:ee:06:da:25:
98:87:ad:d7:b6:dc:01:23:b8:3f:f8:ff:c2:31:85:
95:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:D1:32:C0:0C:9D:69:D8:4E:6F:0D:1C:B1:20:67:12:29:20:0A:63
X509v3 Authority Key Identifier:
keyid:4A:45:47:2B:55:0B:34:FD:B0:1A:DC:D5:10:A9:DC:D8:21:C9:D9:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0e55d0-fafd-49c2-9c08-12c058bfacc1/1/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0e55d0-fafd-49c2-9c08-12c058bfacc1/1/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:9d:d2:49:62:87:6b:4d:d3:bb:b7:46:52:87:e1:fc:2e:f5:
b7:29:d3:9f:2e:c3:62:5d:1a:24:0a:0c:26:76:85:19:08:81:
da:6b:2a:ab:9c:4e:01:50:6d:68:60:62:14:d5:ad:8e:10:b1:
20:2e:28:8f:fe:a4:db:b7:d4:cb:52:b4:89:5b:91:35:7e:4c:
a9:71:a5:e7:66:70:48:33:c6:5b:73:29:b3:9d:0e:b6:77:36:
e8:1d:83:af:c6:d1:38:7f:ce:40:12:1c:e8:91:2c:0b:4f:74:
a6:44:c2:26:50:aa:4c:c2:5b:80:9d:ce:5f:6b:e5:47:71:ef:
99:54:87:54:b2:f8:c2:57:ce:a2:10:ac:15:7c:c2:6b:ba:bb:
fd:ab:13:d6:dc:20:25:7d:f8:33:3d:4e:3b:82:b8:fe:01:25:
e3:21:bb:ba:1e:1d:00:52:e1:e8:ab:26:82:76:08:e0:a1:05:
64:44:fd:0f:73:40:6c:ed:cd:9c:0b:22:ff:b4:fe:77:cc:c0:
c2:99:84:78:0f:2c:35:66:28:9b:f2:b7:cd:ce:bc:ac:0d:37:
67:c9:08:3f:7c:c1:a9:54:21:01:3d:84:58:73:52:c3:67:0c:
1d:c2:37:9d:95:06:ef:90:26:b7:44:ca:94:95:9b:ad:88:a3:
b3:a4:8a:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:48:17 2025 by rpki-client