Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/41c79d-592b-44ad-8693-f2e058957bc9/1/SK-hF0sO7qKOcDHwF6k-vl3kKOQ.mft
File: SK-hF0sO7qKOcDHwF6k-vl3kKOQ.mft (raw, json)
Hash identifier: H7GXJyadzdtbD6iSq3CbHtMyBU1URfguSUAWeSS3Kjk=
Subject key identifier: 0D:D6:B6:7F:F8:D5:67:DB:6C:59:C8:6F:7C:EE:D8:F3:51:16:E4:86
Authority key identifier: 48:AF:A1:17:4B:0E:EE:A2:8E:70:31:F0:17:A9:3E:BE:5D:E4:28:E4
Certificate issuer: /CN=48afa1174b0eeea28e7031f017a93ebe5de428e4
Certificate serial: 0198499C595CAF0ADD438F05DDB0EDDD4280
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SK-hF0sO7qKOcDHwF6k-vl3kKOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/41c79d-592b-44ad-8693-f2e058957bc9/1/SK-hF0sO7qKOcDHwF6k-vl3kKOQ.mft
Manifest number: 1600
Signing time: Sun 27 Jul 2025 02:00:39 +0000
Manifest this update: Sun 27 Jul 2025 02:00:39 +0000
Manifest next update: Mon 28 Jul 2025 02:00:39 +0000
Files and hashes: 1: SK-hF0sO7qKOcDHwF6k-vl3kKOQ.crl (hash: L6yZN+p4Bp6exkaJ56GuAYcBdfNEjQD+cGj+e+nRMEE=)
2: fxES6V-YcHLIYfWbK1XCrf--99E.roa (hash: /7Za8qsVUiet1d+zZvUbv7RF8k01UQmlJjxyUgXzNdY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/41c79d-592b-44ad-8693-f2e058957bc9/1/SK-hF0sO7qKOcDHwF6k-vl3kKOQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/41c79d-592b-44ad-8693-f2e058957bc9/1/SK-hF0sO7qKOcDHwF6k-vl3kKOQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/SK-hF0sO7qKOcDHwF6k-vl3kKOQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:9c:59:5c:af:0a:dd:43:8f:05:dd:b0:ed:dd:42:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48afa1174b0eeea28e7031f017a93ebe5de428e4
Validity
Not Before: Jul 27 02:00:39 2025 GMT
Not After : Jul 28 02:00:39 2025 GMT
Subject: CN=0dd6b67ff8d567db6c59c86f7ceed8f35116e486
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:e8:a8:16:7b:44:33:b4:e8:2b:56:6a:43:e9:
f7:b1:bf:d7:0e:e7:75:90:e0:bb:b9:4d:04:6f:4e:
1a:c2:c5:05:b3:31:70:22:9b:64:b2:e6:fe:b4:fd:
e1:24:77:69:4f:68:5d:63:39:41:e5:10:6b:29:fd:
7b:01:57:06:70:85:2f:76:52:29:91:88:79:4a:6b:
dc:d8:1e:c4:84:bf:7c:1a:50:1e:f3:c5:64:84:76:
31:1c:d7:2c:c2:72:6d:92:30:7f:8c:65:f0:9c:18:
f5:5f:af:2d:36:19:84:f4:84:6e:d9:22:e8:e5:4b:
93:67:25:1e:47:8c:aa:6c:5b:0a:69:07:1f:e9:b9:
2b:f8:06:d8:49:a1:dc:33:ab:d2:2c:81:e3:09:7d:
d3:8b:29:5f:4f:d2:86:96:90:de:eb:f8:30:66:c7:
ed:9a:38:09:56:86:5d:ea:a5:e7:4d:a5:b1:d2:dc:
04:9f:09:86:99:16:78:f1:90:71:81:02:54:b0:d4:
0d:c8:9b:21:ea:f2:a3:d0:36:b7:dd:18:7a:ab:98:
86:65:f3:bd:26:ba:dd:49:28:0f:1c:07:df:9b:8b:
82:34:80:78:b0:66:40:e5:de:05:5c:75:5b:28:c4:
2d:bb:07:fc:cf:25:3e:02:b5:83:2e:0e:2c:2b:1d:
03:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:D6:B6:7F:F8:D5:67:DB:6C:59:C8:6F:7C:EE:D8:F3:51:16:E4:86
X509v3 Authority Key Identifier:
keyid:48:AF:A1:17:4B:0E:EE:A2:8E:70:31:F0:17:A9:3E:BE:5D:E4:28:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SK-hF0sO7qKOcDHwF6k-vl3kKOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/41c79d-592b-44ad-8693-f2e058957bc9/1/SK-hF0sO7qKOcDHwF6k-vl3kKOQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/41c79d-592b-44ad-8693-f2e058957bc9/1/SK-hF0sO7qKOcDHwF6k-vl3kKOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:ca:2f:de:fa:84:6f:58:9b:30:6c:c6:91:ef:2e:08:78:ae:
08:bd:7c:4a:12:05:ad:9f:51:98:5d:b0:4d:b6:db:c8:10:48:
83:ad:cc:be:11:b8:47:19:6c:1a:2c:7b:31:31:fc:74:e1:53:
db:4e:ed:93:f2:71:2e:00:e0:83:bf:55:1e:67:14:29:88:d1:
bc:93:16:a9:d1:75:c8:b0:1d:0f:4f:a2:31:fc:42:fc:ab:dd:
dd:ab:c4:c9:01:87:1e:3a:72:2d:a2:5c:54:cd:fc:21:0a:f2:
c8:f2:7a:2d:c9:6e:11:e9:3a:ce:12:c7:c7:95:2b:be:51:fc:
c3:ed:42:3c:cf:2c:82:50:78:5e:22:5e:2b:f9:9b:9c:b4:2a:
b4:b5:f3:59:bf:96:9e:d9:84:06:27:e0:96:a2:0b:35:12:d1:
ab:86:c2:d0:9f:a8:6f:26:9c:ee:81:e0:bd:da:4e:85:29:87:
7d:85:03:ab:ff:3d:ee:35:65:b6:47:7a:23:d7:ca:5d:53:69:
32:de:d3:73:ea:6c:19:bb:0c:f3:24:8c:da:95:dc:ab:18:53:
43:9e:da:59:b7:63:23:40:b6:2b:b0:0e:b2:a4:43:20:88:9c:
6c:69:3d:95:c0:6f:79:09:19:7f:3e:0b:88:8d:21:cd:f0:b5:
2f:50:99:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:01:36 2025 by rpki-client