Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/9ea08a-1a99-4ee3-a3c4-8426aa1a6d2f/1/Skati1EM9VlIXjYRVVuLQ571M7s.mft
File: Skati1EM9VlIXjYRVVuLQ571M7s.mft (raw, json)
Hash identifier: GZGJq51Oxkrl4rTna7YwJy7eZa/E9Kg+r/c+oEc9cKE=
Subject key identifier: 41:D3:93:5A:76:E7:59:5F:3D:0D:E0:34:04:0F:6B:03:A1:B8:52:05
Authority key identifier: 4A:46:AD:8B:51:0C:F5:59:48:5E:36:11:55:5B:8B:43:9E:F5:33:BB
Certificate issuer: /CN=4a46ad8b510cf559485e3611555b8b439ef533bb
Certificate serial: 019656B86FEDC4BED895EDB7A5885BBD9967
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skati1EM9VlIXjYRVVuLQ571M7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/9ea08a-1a99-4ee3-a3c4-8426aa1a6d2f/1/Skati1EM9VlIXjYRVVuLQ571M7s.mft
Manifest number: 04E3
Signing time: Mon 21 Apr 2025 05:00:49 +0000
Manifest this update: Mon 21 Apr 2025 05:00:49 +0000
Manifest next update: Tue 22 Apr 2025 05:00:49 +0000
Files and hashes: 1: Skati1EM9VlIXjYRVVuLQ571M7s.crl (hash: hDjh1q2BERVrSTudBOXWVt5oxVNv7bPzIlg74eLEaxY=)
2: YWHB5SFom3PZ1H1nBp8hYONydPQ.roa (hash: vl5j8Bemgq1rdDQ2l7TbBx5NbkCDljfvRSq6QiMNiQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/9ea08a-1a99-4ee3-a3c4-8426aa1a6d2f/1/Skati1EM9VlIXjYRVVuLQ571M7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/9ea08a-1a99-4ee3-a3c4-8426aa1a6d2f/1/Skati1EM9VlIXjYRVVuLQ571M7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/Skati1EM9VlIXjYRVVuLQ571M7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:b8:6f:ed:c4:be:d8:95:ed:b7:a5:88:5b:bd:99:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a46ad8b510cf559485e3611555b8b439ef533bb
Validity
Not Before: Apr 21 05:00:49 2025 GMT
Not After : Apr 22 05:00:49 2025 GMT
Subject: CN=41d3935a76e7595f3d0de034040f6b03a1b85205
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4c:8d:f4:61:a7:35:b2:db:c0:bb:d7:67:71:
b5:c1:e8:d5:53:8d:fc:ea:36:9d:8c:76:2b:3d:2b:
91:9d:18:59:6f:0b:8d:0d:48:20:ce:8b:7b:2d:0c:
c7:05:3f:5b:8e:65:4a:64:b1:f1:27:78:9f:36:a9:
24:30:e9:27:f6:d8:ae:32:69:6c:63:fa:69:e6:92:
b0:c0:e8:4c:bc:2c:7e:bb:47:8e:c9:00:b1:69:5e:
3b:db:99:d0:f6:d1:1b:4d:42:81:8c:44:a0:66:cc:
75:97:68:ad:f9:e6:ba:9e:ee:c9:80:d6:2f:e2:9f:
15:b5:5d:43:70:9c:cf:bd:94:bf:2d:ae:74:7c:5b:
73:e0:b6:8c:e0:6c:6b:46:82:19:c0:93:a3:91:4b:
2e:96:c6:bc:6b:ff:39:eb:8c:a2:7f:14:fb:01:8a:
38:23:5d:e8:cc:cb:48:ce:aa:c1:4e:eb:dc:9a:85:
57:dd:66:5d:82:65:dc:05:60:58:5e:3b:18:18:e5:
91:95:ce:e8:55:aa:32:b2:0e:b7:d6:aa:33:6f:7f:
1c:71:d3:22:b7:87:81:6f:f4:50:fb:da:65:a7:1f:
4d:07:18:4f:6a:89:da:c1:6f:cf:43:7d:05:ac:e2:
89:b5:d4:b9:a1:b3:2b:f1:06:2f:da:65:bd:b2:c6:
4a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:D3:93:5A:76:E7:59:5F:3D:0D:E0:34:04:0F:6B:03:A1:B8:52:05
X509v3 Authority Key Identifier:
keyid:4A:46:AD:8B:51:0C:F5:59:48:5E:36:11:55:5B:8B:43:9E:F5:33:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skati1EM9VlIXjYRVVuLQ571M7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/9ea08a-1a99-4ee3-a3c4-8426aa1a6d2f/1/Skati1EM9VlIXjYRVVuLQ571M7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/9ea08a-1a99-4ee3-a3c4-8426aa1a6d2f/1/Skati1EM9VlIXjYRVVuLQ571M7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:5e:7e:5a:78:db:92:0b:7a:24:15:99:a0:c1:ed:3e:92:82:
93:cc:f5:7b:81:23:5b:71:9b:a3:5c:3e:e2:e3:9b:d9:d4:88:
00:9b:12:6c:4b:65:ab:22:d5:a6:e0:a4:bf:81:cb:53:4c:1b:
d9:4e:a7:d8:9a:6a:e6:bb:47:5c:32:7d:aa:e2:e0:a5:e8:35:
1f:02:8d:4e:c8:23:73:53:e8:d2:9a:bb:c6:58:40:ba:8c:af:
64:97:1d:c1:92:a8:41:2b:49:43:c1:c9:74:85:5b:eb:09:f7:
13:1b:38:80:75:2c:3a:61:a7:ad:55:18:6c:41:ca:48:67:36:
ff:4d:ce:b4:c2:e6:f9:64:08:8e:b9:47:f3:a2:f3:78:d9:b3:
cc:7c:58:cd:52:ff:19:76:be:66:f0:62:4f:0c:86:a6:8a:d8:
87:9f:73:da:5e:48:a7:5d:54:e5:1b:55:f7:67:18:cb:1c:85:
3d:dc:34:b7:9d:01:dd:c7:30:c2:85:b4:9f:6a:b9:98:aa:81:
92:93:e8:89:41:25:2c:89:af:bb:df:6c:ec:44:13:b1:42:fa:
b1:24:63:c5:77:8b:6d:e0:5e:2d:cb:85:50:3d:8e:72:a0:12:
12:b6:90:44:88:7d:cd:cc:1a:59:e8:69:68:d9:3f:42:95:6e:
a2:3c:59:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:37:37 2025 by rpki-client