Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/685b5a-fa27-41ec-adf9-9df2f79bef10/1/skmuabOnLsLm6a25kJDYEqHSmVE.mft
File: skmuabOnLsLm6a25kJDYEqHSmVE.mft (raw, json)
Hash identifier: 84OVzFOEPiKZ8I6a1vJEO+IXXpEqVbKIKmQJ2ZskkXY=
Subject key identifier: CB:C5:3D:E6:3A:A2:E9:C1:A5:5C:D3:85:D3:61:F9:1D:50:0D:96:E0
Authority key identifier: B2:49:AE:69:B3:A7:2E:C2:E6:E9:AD:B9:90:90:D8:12:A1:D2:99:51
Certificate issuer: /CN=b249ae69b3a72ec2e6e9adb99090d812a1d29951
Certificate serial: 0196B258C0C3B3A671FF16170D522991D614
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/skmuabOnLsLm6a25kJDYEqHSmVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/685b5a-fa27-41ec-adf9-9df2f79bef10/1/skmuabOnLsLm6a25kJDYEqHSmVE.mft
Manifest number: 152F
Signing time: Fri 09 May 2025 00:01:22 +0000
Manifest this update: Fri 09 May 2025 00:01:22 +0000
Manifest next update: Sat 10 May 2025 00:01:22 +0000
Files and hashes: 1: omiVo8lJOxBO3d2eFDOX09spiwY.roa (hash: 3VKQ20p2zglj9J79jWC9kZRYgl/DejI2kMckcoXVkGA=)
2: skmuabOnLsLm6a25kJDYEqHSmVE.crl (hash: qQaAinvrknqNIm+7tYOSmknrZnXIKj1DKuTYk4AtWHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/685b5a-fa27-41ec-adf9-9df2f79bef10/1/skmuabOnLsLm6a25kJDYEqHSmVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/685b5a-fa27-41ec-adf9-9df2f79bef10/1/skmuabOnLsLm6a25kJDYEqHSmVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/skmuabOnLsLm6a25kJDYEqHSmVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b2:58:c0:c3:b3:a6:71:ff:16:17:0d:52:29:91:d6:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b249ae69b3a72ec2e6e9adb99090d812a1d29951
Validity
Not Before: May 9 00:01:22 2025 GMT
Not After : May 10 00:01:22 2025 GMT
Subject: CN=cbc53de63aa2e9c1a55cd385d361f91d500d96e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ff:ad:3b:6e:d7:d5:7c:e7:8e:8c:98:83:64:
dd:31:e1:14:0a:3f:94:f2:70:49:42:d4:d9:21:ac:
7f:c8:cc:a3:c5:07:de:78:b4:06:9f:20:29:c3:73:
d4:6d:dd:b9:f1:68:73:fe:44:ec:72:4e:71:83:e0:
de:a8:46:d3:8b:6b:3a:a3:31:c3:47:bb:8b:95:62:
16:03:f2:d3:db:83:92:2e:be:6f:80:99:a2:19:32:
40:21:45:d0:8b:de:13:36:fb:13:2d:ce:f6:46:b7:
52:40:21:29:73:0d:6c:b4:f9:92:bd:06:fe:bc:fc:
a9:30:f7:c7:20:75:2f:ad:79:35:74:39:eb:08:39:
4d:55:9d:41:04:a1:8a:ef:b9:b0:cd:50:c6:4c:97:
90:f9:2e:99:42:78:3f:83:dc:65:92:ab:d4:30:41:
c8:09:1c:4c:95:fa:c9:8c:58:7c:47:d5:6a:c1:4e:
90:11:42:65:4b:db:64:b5:41:26:43:a7:5f:ce:e4:
9d:b2:10:87:e4:4c:f3:b6:b6:6f:64:9e:21:88:3d:
e9:ff:5d:f1:e8:df:27:95:7c:ca:30:cc:a9:46:20:
ba:a4:04:52:0b:3d:64:a9:1f:56:11:b7:43:6e:36:
85:d0:07:0d:9d:76:9e:37:d4:8e:47:b4:3d:62:37:
d6:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:C5:3D:E6:3A:A2:E9:C1:A5:5C:D3:85:D3:61:F9:1D:50:0D:96:E0
X509v3 Authority Key Identifier:
keyid:B2:49:AE:69:B3:A7:2E:C2:E6:E9:AD:B9:90:90:D8:12:A1:D2:99:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/skmuabOnLsLm6a25kJDYEqHSmVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/685b5a-fa27-41ec-adf9-9df2f79bef10/1/skmuabOnLsLm6a25kJDYEqHSmVE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/685b5a-fa27-41ec-adf9-9df2f79bef10/1/skmuabOnLsLm6a25kJDYEqHSmVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:31:c8:72:e3:05:c9:bd:69:75:74:0a:db:53:8c:8b:10:ac:
28:46:9a:fe:a8:63:ce:30:f8:f4:5c:a5:69:45:8b:d8:c8:a4:
bc:9d:00:96:7a:70:10:2c:34:92:91:e1:10:53:8f:ff:9b:93:
3c:af:d8:a6:3b:40:61:c9:53:a4:5e:39:84:fa:1a:06:18:a4:
1f:32:8e:e4:e4:da:bc:64:f9:f9:ab:66:6d:d9:ed:53:cb:10:
0b:ab:ef:c2:22:d1:63:80:33:84:d1:dc:c4:39:56:0d:a8:bc:
af:94:f0:72:98:b3:04:d0:01:4d:a8:d0:b4:ab:3c:b6:ee:c0:
af:7f:f4:e2:e8:c7:ea:28:c6:cd:28:0e:7d:a2:d7:d7:78:e9:
12:84:83:2b:24:4b:33:8c:b1:84:43:88:86:a5:4a:0c:33:f9:
3c:ee:be:f2:b5:e7:66:e6:69:7d:fb:7a:ed:57:75:d6:12:a7:
e1:20:5f:8c:76:d2:a2:a4:22:93:e6:ca:a7:65:52:11:48:7d:
be:0e:63:41:b7:fa:e1:c4:0d:57:e4:0c:bb:60:8b:0f:db:f1:
b3:2f:5e:67:fb:b6:07:d4:eb:6d:17:ee:db:b9:0e:a3:27:30:
3a:11:72:9f:b6:be:3c:c1:fd:f1:76:24:ea:72:a6:6b:2b:05:
61:dd:6f:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 08:26:23 2025 by rpki-client