Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/918ac3-49a5-4a32-bd72-723baa8e688a/1/SKyAa1vKTH2RbVA9XHk8jfRO5tM.mft
File: SKyAa1vKTH2RbVA9XHk8jfRO5tM.mft (raw, json)
Hash identifier: pM3PCyCUulLUghb3Z1NmaKNR+9KkqLkYadMfMFCsAUU=
Subject key identifier: 0F:24:06:C6:F5:2F:F3:18:9B:E3:FA:01:3C:6B:AC:88:DD:5D:FB:0E
Authority key identifier: 48:AC:80:6B:5B:CA:4C:7D:91:6D:50:3D:5C:79:3C:8D:F4:4E:E6:D3
Certificate issuer: /CN=48ac806b5bca4c7d916d503d5c793c8df44ee6d3
Certificate serial: 01984AAE93BF818A4794EEEE6ACDC139CB5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SKyAa1vKTH2RbVA9XHk8jfRO5tM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/918ac3-49a5-4a32-bd72-723baa8e688a/1/SKyAa1vKTH2RbVA9XHk8jfRO5tM.mft
Manifest number: 0510
Signing time: Sun 27 Jul 2025 07:00:11 +0000
Manifest this update: Sun 27 Jul 2025 07:00:11 +0000
Manifest next update: Mon 28 Jul 2025 07:00:11 +0000
Files and hashes: 1: SKyAa1vKTH2RbVA9XHk8jfRO5tM.crl (hash: 7xzl8+OF+rKQ7rONj8bHr+5osu5VqvPVEhd81n/ANns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/918ac3-49a5-4a32-bd72-723baa8e688a/1/SKyAa1vKTH2RbVA9XHk8jfRO5tM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/918ac3-49a5-4a32-bd72-723baa8e688a/1/SKyAa1vKTH2RbVA9XHk8jfRO5tM.mft
rsync://rpki.ripe.net/repository/DEFAULT/SKyAa1vKTH2RbVA9XHk8jfRO5tM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:ae:93:bf:81:8a:47:94:ee:ee:6a:cd:c1:39:cb:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48ac806b5bca4c7d916d503d5c793c8df44ee6d3
Validity
Not Before: Jul 27 07:00:11 2025 GMT
Not After : Jul 28 07:00:11 2025 GMT
Subject: CN=0f2406c6f52ff3189be3fa013c6bac88dd5dfb0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:4f:41:4a:19:07:26:0e:5c:2d:76:b3:b7:6a:
57:49:1b:9e:e7:77:d1:38:73:8e:d6:1f:51:a3:6a:
30:0b:05:f6:79:76:e0:a8:9e:77:ed:74:c8:68:3c:
e1:72:5e:58:79:d6:5f:ab:08:e7:ae:68:2f:76:4f:
21:06:a3:16:24:ad:7f:ad:0b:45:b3:3c:62:0e:64:
4d:6a:d6:24:03:f0:30:7e:f6:b1:b2:a9:60:70:32:
dd:18:fe:a1:f5:1c:cd:85:bc:ca:af:8c:f1:a2:d3:
f9:96:d3:0b:56:f1:9c:3e:4e:19:4a:fe:91:ac:09:
15:60:a8:6d:f8:65:4c:19:03:3f:45:ce:c3:ef:26:
1a:16:96:da:d9:cd:af:f1:41:ec:76:52:79:82:3f:
e3:eb:29:33:8b:3e:a0:c9:98:21:96:03:8e:7a:7a:
52:67:5c:c9:57:7b:cb:7e:32:81:11:89:fb:d5:ed:
df:01:a3:e1:73:f6:a2:7a:29:10:bf:d9:d4:60:d9:
5e:ff:7c:d1:9a:ce:df:43:c3:28:b1:01:cf:97:1d:
b4:c9:34:18:b9:ed:ce:99:2d:c0:59:c8:7d:7d:1d:
da:8c:90:6b:b9:93:08:98:af:2d:20:7c:ff:d1:69:
24:fa:f6:9d:13:d5:09:7f:7d:b5:b8:36:92:1d:40:
19:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:24:06:C6:F5:2F:F3:18:9B:E3:FA:01:3C:6B:AC:88:DD:5D:FB:0E
X509v3 Authority Key Identifier:
keyid:48:AC:80:6B:5B:CA:4C:7D:91:6D:50:3D:5C:79:3C:8D:F4:4E:E6:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SKyAa1vKTH2RbVA9XHk8jfRO5tM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/918ac3-49a5-4a32-bd72-723baa8e688a/1/SKyAa1vKTH2RbVA9XHk8jfRO5tM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/918ac3-49a5-4a32-bd72-723baa8e688a/1/SKyAa1vKTH2RbVA9XHk8jfRO5tM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:0b:ab:c9:ba:d7:29:8c:94:a1:e0:d8:ef:b4:52:30:f1:29:
1b:1e:0d:d6:ab:a4:e2:42:ca:de:8d:d6:49:2d:5d:76:df:7e:
90:95:f8:0a:a0:40:b9:17:17:07:f3:a7:d7:b6:50:92:ad:b4:
b1:3b:2c:13:f8:ec:d0:2c:53:8f:63:3d:1e:85:af:98:81:e4:
7c:c3:d5:ed:3b:1a:f6:8b:8f:aa:a4:49:6c:78:e6:40:22:da:
2f:ca:db:20:3d:5c:83:f1:1b:82:64:de:5f:51:0b:2d:6f:b2:
09:6e:96:25:93:6c:03:ff:92:b2:b6:07:f1:bc:72:d6:77:2b:
f4:37:b3:90:53:aa:cd:20:92:47:18:04:7c:bb:14:85:6f:ca:
fd:0d:a1:88:31:c7:50:b8:39:c8:c4:91:b2:92:b0:62:b4:3c:
3b:be:53:46:ad:39:8c:43:08:c5:0a:33:9d:cc:92:91:b9:a5:
bb:a2:15:46:f9:ea:87:f4:0a:49:40:04:17:43:01:3c:58:ff:
99:52:47:59:d0:23:42:48:a4:2c:80:d7:a8:71:e2:25:42:c9:
15:c3:be:0c:64:30:c9:f2:6d:26:2f:4c:77:35:3b:29:04:fb:
7b:30:0e:71:36:19:2b:3e:a8:ee:cf:62:71:64:f3:bc:c4:22:
e1:b0:61:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:07:37 2025 by rpki-client