Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/0d006d-ab7a-41c9-97f3-995c369da672/1/skz59tA09Gdg9PWbFzneEnuK3_M.mft
File: skz59tA09Gdg9PWbFzneEnuK3_M.mft (raw, json)
Hash identifier: 0vp2f1+ZAcwZ35SPk1gHrw55MErAkVE9mfUpbm27YqU=
Subject key identifier: 2F:95:70:1C:87:3D:4A:1D:0A:CE:F4:A7:AF:C2:35:FA:E6:DE:DE:32
Authority key identifier: B2:4C:F9:F6:D0:34:F4:67:60:F4:F5:9B:17:39:DE:12:7B:8A:DF:F3
Certificate issuer: /CN=b24cf9f6d034f46760f4f59b1739de127b8adff3
Certificate serial: 019645C4C293F48A3A21B98B5563272FC409
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/skz59tA09Gdg9PWbFzneEnuK3_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/0d006d-ab7a-41c9-97f3-995c369da672/1/skz59tA09Gdg9PWbFzneEnuK3_M.mft
Manifest number: 09DA
Signing time: Thu 17 Apr 2025 22:00:44 +0000
Manifest this update: Thu 17 Apr 2025 22:00:44 +0000
Manifest next update: Fri 18 Apr 2025 22:00:44 +0000
Files and hashes: 1: Y5LyyYUOXTFEg08dRczspK_kl2Y.roa (hash: ttMluHxYVIHmrZ73+Be4i0HFe1udkGlrlxsl6kstfvI=)
2: skz59tA09Gdg9PWbFzneEnuK3_M.crl (hash: nVBzTHxb50eQu/SbhfH2/Cpd93YJhCm5XekVu6Vzd34=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/0d006d-ab7a-41c9-97f3-995c369da672/1/skz59tA09Gdg9PWbFzneEnuK3_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/0d006d-ab7a-41c9-97f3-995c369da672/1/skz59tA09Gdg9PWbFzneEnuK3_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/skz59tA09Gdg9PWbFzneEnuK3_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 22:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:45:c4:c2:93:f4:8a:3a:21:b9:8b:55:63:27:2f:c4:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b24cf9f6d034f46760f4f59b1739de127b8adff3
Validity
Not Before: Apr 17 22:00:44 2025 GMT
Not After : Apr 18 22:00:44 2025 GMT
Subject: CN=2f95701c873d4a1d0acef4a7afc235fae6dede32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:aa:28:a1:5b:68:1d:ef:3b:52:02:8b:93:bb:
e3:0e:32:05:3f:3f:fa:53:a8:7f:9f:29:e8:8d:29:
6d:3f:7c:bb:44:a8:5c:7d:fd:ed:84:6a:fb:84:8f:
c8:37:33:d6:66:d9:a1:0e:9e:d9:f8:67:6c:82:74:
9c:c1:a9:16:b3:c0:69:48:a0:d0:7a:6a:ff:1a:14:
11:45:6d:60:e8:8a:5f:8b:f1:ac:1e:12:a8:cc:e6:
f5:f2:45:8a:86:13:58:a9:98:87:fb:67:89:f7:52:
78:33:32:13:ee:a4:2b:de:8a:5e:d4:76:b8:5f:f3:
45:5b:da:93:54:7a:c9:d8:e2:fc:54:0c:75:3f:3e:
eb:72:e6:5e:7e:e0:07:ec:0b:47:51:3e:ff:33:ce:
41:7b:29:38:4e:66:03:03:b4:ad:5d:0b:4e:70:34:
f7:ac:fe:33:b7:73:95:68:e1:0e:3f:f3:8f:18:f6:
8c:89:a0:1b:ed:54:48:87:f8:4d:c6:6d:88:74:c7:
3f:d2:f8:ae:69:0f:d1:25:61:40:d4:f6:6d:df:de:
b6:d9:49:63:b5:34:5d:28:47:d1:ec:de:f2:f9:64:
86:f2:35:b6:b1:3d:29:a7:34:e8:cb:f1:d7:23:a9:
38:90:08:e6:13:27:56:2e:8a:72:ea:a9:ea:c6:e3:
e3:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:95:70:1C:87:3D:4A:1D:0A:CE:F4:A7:AF:C2:35:FA:E6:DE:DE:32
X509v3 Authority Key Identifier:
keyid:B2:4C:F9:F6:D0:34:F4:67:60:F4:F5:9B:17:39:DE:12:7B:8A:DF:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/skz59tA09Gdg9PWbFzneEnuK3_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0d006d-ab7a-41c9-97f3-995c369da672/1/skz59tA09Gdg9PWbFzneEnuK3_M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0d006d-ab7a-41c9-97f3-995c369da672/1/skz59tA09Gdg9PWbFzneEnuK3_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:d2:31:f1:a8:56:f8:d7:9b:00:c3:0f:4a:85:a4:d8:21:12:
18:af:65:5f:b8:59:8d:08:f8:da:f4:c3:fa:36:16:f7:23:24:
32:5b:34:70:4f:be:9c:0c:74:37:d5:93:57:a9:4e:94:59:8c:
a7:c1:42:91:cd:f4:2d:d5:b9:e1:c5:5d:85:0c:32:20:6d:33:
c1:3b:25:41:34:29:84:93:c4:f7:37:3a:2d:39:39:20:84:d2:
31:c8:27:57:a8:9a:b4:c0:83:14:bb:9e:b6:e5:25:b6:ac:78:
f9:36:c7:d2:e2:cf:36:7e:a5:2d:81:28:e2:2e:e1:04:79:24:
51:4b:fb:2f:47:98:c6:ad:e4:3a:6a:70:4e:96:97:31:15:2e:
03:0f:3b:62:26:aa:12:26:21:80:c7:f8:03:21:10:6a:10:5b:
ea:a8:07:22:b1:4f:43:05:3f:b9:23:fe:ec:b6:c0:06:8d:2c:
12:04:52:69:c6:d1:f0:d8:3d:1b:7a:0d:8a:d1:c8:82:e7:13:
07:9f:54:08:3d:60:9f:99:7f:64:d4:77:e1:93:01:fd:76:85:
33:5f:7a:01:20:67:26:3f:b9:3d:c9:ca:5a:3d:6f:8f:35:41:
13:7a:24:c6:fe:e8:da:92:da:e1:ef:a6:e7:97:7d:54:5d:c5:
82:15:71:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 06:13:23 2025 by rpki-client