Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/167903-f426-4bf0-9233-a9ac66be48f7/1/SkrQOg9ZK7nJfDBSppASXYRkFaQ.mft
File: SkrQOg9ZK7nJfDBSppASXYRkFaQ.mft (raw, json)
Hash identifier: zD6h+1sDxzjFxquoUj1xlkhsYWowJWP9BukiGt6HblM=
Subject key identifier: 8D:B4:D5:0F:ED:21:8C:4B:58:6E:0C:F1:9A:A3:A9:32:F8:5A:58:95
Authority key identifier: 4A:4A:D0:3A:0F:59:2B:B9:C9:7C:30:52:A6:90:12:5D:84:64:15:A4
Certificate issuer: /CN=4a4ad03a0f592bb9c97c3052a690125d846415a4
Certificate serial: 01984966798E16B7578AF926A1F472F6E4BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SkrQOg9ZK7nJfDBSppASXYRkFaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/167903-f426-4bf0-9233-a9ac66be48f7/1/SkrQOg9ZK7nJfDBSppASXYRkFaQ.mft
Manifest number: 1606
Signing time: Sun 27 Jul 2025 01:01:49 +0000
Manifest this update: Sun 27 Jul 2025 01:01:49 +0000
Manifest next update: Mon 28 Jul 2025 01:01:49 +0000
Files and hashes: 1: 1-XNkV-CHFeLSAB8v7LjTlroe6Iw.roa (hash: GluiNGZxsHxMI1guABtXYth8XDdUuWytJuXVUN1uHow=)
2: SkrQOg9ZK7nJfDBSppASXYRkFaQ.crl (hash: yQrt5XpERkWVI9qUJXyakMd0HlT0ugjm5TbNKOD2KQQ=)
3: l-ehjkba5MFL6bTBmw0p0je8kv0.roa (hash: SBj+lER6GA3nSUubC1AdXeW27xw7XEGQlpuymCAxj5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/167903-f426-4bf0-9233-a9ac66be48f7/1/SkrQOg9ZK7nJfDBSppASXYRkFaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/167903-f426-4bf0-9233-a9ac66be48f7/1/SkrQOg9ZK7nJfDBSppASXYRkFaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/SkrQOg9ZK7nJfDBSppASXYRkFaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 01:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:79:8e:16:b7:57:8a:f9:26:a1:f4:72:f6:e4:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a4ad03a0f592bb9c97c3052a690125d846415a4
Validity
Not Before: Jul 27 01:01:49 2025 GMT
Not After : Jul 28 01:01:49 2025 GMT
Subject: CN=8db4d50fed218c4b586e0cf19aa3a932f85a5895
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:43:0c:cd:2c:e1:d2:75:8e:c3:64:af:af:81:
12:9a:57:5f:0d:ca:06:7a:bc:47:f4:1d:ac:f9:ac:
dc:ef:b2:cb:8b:5f:fa:52:be:6a:a7:7c:53:e2:7d:
99:75:e2:f6:44:cc:48:15:d9:82:af:69:10:ef:00:
55:39:5f:b8:cc:7d:22:08:66:4f:f9:d0:fa:9c:a4:
5f:af:6a:07:fd:c9:df:75:52:11:c3:a2:d3:da:eb:
83:44:28:b0:1c:6a:09:e5:5a:ea:a4:ca:bc:cd:c8:
e1:9e:8a:19:1e:7f:22:b5:69:b6:17:79:fa:a6:95:
f8:6f:55:44:31:88:fa:f2:d5:29:72:69:a8:e2:39:
09:ad:9b:33:fa:aa:21:e2:de:6b:fb:5d:d4:ae:61:
14:c3:8f:73:15:c7:63:d3:ca:cf:2f:d0:98:d0:92:
e2:74:03:6d:41:45:52:99:ec:b4:c7:01:b5:cb:c4:
05:fd:7d:9d:40:89:fe:bd:ce:28:89:23:9e:9c:75:
46:cf:a3:53:02:52:a8:25:15:a4:48:56:d8:06:0f:
fd:72:f1:29:86:e7:98:10:02:aa:f4:2c:a1:e0:f5:
3a:1e:6f:46:73:4f:7e:21:38:66:fc:2a:dd:2a:bf:
67:9f:50:82:e5:54:92:92:cc:7a:73:c2:7d:5d:9c:
c7:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:B4:D5:0F:ED:21:8C:4B:58:6E:0C:F1:9A:A3:A9:32:F8:5A:58:95
X509v3 Authority Key Identifier:
keyid:4A:4A:D0:3A:0F:59:2B:B9:C9:7C:30:52:A6:90:12:5D:84:64:15:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SkrQOg9ZK7nJfDBSppASXYRkFaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/167903-f426-4bf0-9233-a9ac66be48f7/1/SkrQOg9ZK7nJfDBSppASXYRkFaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/167903-f426-4bf0-9233-a9ac66be48f7/1/SkrQOg9ZK7nJfDBSppASXYRkFaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:2a:84:bf:b4:b9:01:10:08:61:51:3e:24:bc:9a:d6:c4:65:
5a:5e:d6:5a:3a:62:4e:0a:d2:1c:a5:d2:b0:25:17:f8:e3:07:
83:7c:db:e5:f7:c7:59:16:00:b5:51:4b:19:1a:2a:d1:28:36:
11:59:4f:7d:f2:20:36:7b:71:fb:2f:83:b9:8d:0d:01:20:91:
cc:c5:96:3d:ce:39:e9:ae:55:04:00:67:d2:c5:f5:32:f0:67:
e8:0a:ed:d6:58:1e:27:a3:9f:72:af:de:60:61:48:86:5e:5e:
6e:8e:5c:03:4a:73:e2:d4:48:21:5d:87:41:19:6a:2f:8a:91:
c4:39:3e:23:58:22:95:70:56:8f:ce:ab:05:e5:fc:7a:50:73:
8f:5d:40:37:5f:b4:74:8f:c9:ed:8e:6b:0d:1c:59:a5:2b:2b:
2b:5b:7c:60:02:56:59:78:9d:5b:7d:f0:5b:89:91:e1:a2:49:
20:eb:4b:3b:8a:9d:ff:51:42:13:c7:fd:2c:b2:d3:74:ca:e5:
60:9e:9a:de:c1:a9:05:ca:17:83:50:5a:99:53:ae:5a:b7:5f:
67:14:ab:0e:d1:db:27:75:d5:fb:a7:31:df:fe:c4:41:76:41:
29:1e:46:4c:c4:b2:ab:87:bf:00:b7:91:da:d4:5a:a6:04:cf:
03:ad:f7:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:23:53 2025 by rpki-client