Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/fa5519-0e35-44cf-9d4f-2aea75c2df78/1/SktRP35EbgzW3P5Wgpu8n-SY0-g.mft
File: SktRP35EbgzW3P5Wgpu8n-SY0-g.mft (raw, json)
Hash identifier: +AUsvfQHshBYx+0RY7LvOnQDznqm20hkqqnBYzLpPVc=
Subject key identifier: 65:4E:84:E3:D2:BE:F1:F1:05:18:4C:A5:6B:22:A6:DC:19:6E:45:66
Authority key identifier: 4A:4B:51:3F:7E:44:6E:0C:D6:DC:FE:56:82:9B:BC:9F:E4:98:D3:E8
Certificate issuer: /CN=4a4b513f7e446e0cd6dcfe56829bbc9fe498d3e8
Certificate serial: 019849666AC938A6EF3318C788E1A8E56CCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SktRP35EbgzW3P5Wgpu8n-SY0-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/fa5519-0e35-44cf-9d4f-2aea75c2df78/1/SktRP35EbgzW3P5Wgpu8n-SY0-g.mft
Manifest number: 157E
Signing time: Sun 27 Jul 2025 01:01:45 +0000
Manifest this update: Sun 27 Jul 2025 01:01:45 +0000
Manifest next update: Mon 28 Jul 2025 01:01:45 +0000
Files and hashes: 1: HHCE3_k42ANiRenbW8_HYWzMUCQ.roa (hash: +PRlcFsqioXeS3bFma85/Up104JVGK2pFTDzqwQatjg=)
2: SktRP35EbgzW3P5Wgpu8n-SY0-g.crl (hash: +STXdi7ox1TP9eq/9/vJQSyTHNzoXj876eclSm9S//g=)
3: YwES8R9xRhrFpLG3cV7yoeKQ6tE.roa (hash: fX/IIRdgZ8uMVTDgkZp0nm1MBfHNGan3NvLFwQRulBs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/fa5519-0e35-44cf-9d4f-2aea75c2df78/1/SktRP35EbgzW3P5Wgpu8n-SY0-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/fa5519-0e35-44cf-9d4f-2aea75c2df78/1/SktRP35EbgzW3P5Wgpu8n-SY0-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/SktRP35EbgzW3P5Wgpu8n-SY0-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:6a:c9:38:a6:ef:33:18:c7:88:e1:a8:e5:6c:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a4b513f7e446e0cd6dcfe56829bbc9fe498d3e8
Validity
Not Before: Jul 27 01:01:45 2025 GMT
Not After : Jul 28 01:01:45 2025 GMT
Subject: CN=654e84e3d2bef1f105184ca56b22a6dc196e4566
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:f3:d2:46:45:55:82:79:c1:58:4a:26:8d:59:
8f:16:6e:b3:53:bd:1d:08:f2:26:88:bb:b4:9c:26:
db:2c:41:64:a3:a0:06:6a:94:0a:e7:b1:a2:84:ac:
85:38:f5:ff:fa:79:18:04:91:d8:79:07:45:5d:e0:
0f:15:cf:52:31:55:93:30:c0:b0:05:c0:cd:3b:0f:
00:f5:bd:90:df:b0:a2:23:16:c9:1e:7b:c3:c0:63:
b9:b8:0f:a2:23:78:8b:3e:bf:1c:bf:ad:0a:ab:de:
02:6c:f9:6a:50:89:38:23:01:31:77:76:a6:ac:3b:
48:59:1a:8b:a7:a0:0c:d5:14:07:58:95:6e:2d:56:
89:e5:1f:cd:5a:18:eb:75:26:b8:48:78:8f:ae:19:
e0:fc:e5:72:7b:11:e6:4f:b5:f0:4a:9b:0e:ab:3b:
fc:c1:bb:7d:04:aa:33:08:82:a5:06:1d:a1:df:92:
12:f4:13:4a:76:48:85:b5:1e:37:c8:24:ce:a6:a0:
d2:59:6f:c5:48:44:50:60:d7:4f:1e:9d:23:38:3e:
36:36:8c:e8:5e:6c:8f:9c:24:b8:bc:5a:91:d7:9f:
2a:07:e2:41:2f:0e:4b:f3:73:f8:8b:e0:ff:03:55:
ca:87:b8:e5:36:ea:98:c7:58:65:28:4b:1e:35:ee:
40:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:4E:84:E3:D2:BE:F1:F1:05:18:4C:A5:6B:22:A6:DC:19:6E:45:66
X509v3 Authority Key Identifier:
keyid:4A:4B:51:3F:7E:44:6E:0C:D6:DC:FE:56:82:9B:BC:9F:E4:98:D3:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SktRP35EbgzW3P5Wgpu8n-SY0-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fa5519-0e35-44cf-9d4f-2aea75c2df78/1/SktRP35EbgzW3P5Wgpu8n-SY0-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fa5519-0e35-44cf-9d4f-2aea75c2df78/1/SktRP35EbgzW3P5Wgpu8n-SY0-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:b0:d7:b7:a8:74:6d:44:54:71:bb:64:99:d3:2f:ae:18:c9:
63:40:f1:68:62:be:c9:45:30:9e:ef:c2:d3:cf:0d:ab:a0:68:
b4:21:3a:89:15:58:0f:a3:e9:ee:e3:55:bd:4d:a5:a5:43:a9:
5c:04:71:fb:c1:49:c4:49:41:d7:3f:60:27:d4:4d:dd:2f:8e:
a7:d4:4d:45:77:f1:da:73:0a:46:37:a0:fa:4e:0c:23:22:09:
2f:eb:00:ef:19:9c:39:e0:e6:8d:0c:b0:e2:75:b3:f7:ea:f3:
88:df:5a:52:94:8b:46:12:b9:e8:8e:cd:21:e2:0e:30:7a:45:
3e:1b:a4:b2:04:f5:13:2e:14:82:58:08:78:fd:d4:4a:12:c5:
9e:39:b5:62:96:51:8e:de:f6:a6:90:22:a3:4c:dc:38:a6:f5:
f4:3c:b1:36:aa:4b:37:57:ec:4d:25:96:dc:b2:b7:93:11:17:
3a:68:ab:54:d8:45:a3:d3:4a:f4:ec:77:4e:b0:63:04:54:08:
be:4d:a9:56:47:f8:7c:af:48:a6:60:d3:13:26:07:b1:76:fb:
e7:19:28:59:a8:db:82:87:c3:33:19:1f:ff:45:43:90:d2:1b:
19:16:50:6b:8d:cc:a9:7e:32:50:b7:a4:fd:27:44:95:49:d1:
1e:76:3c:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:41:43 2025 by rpki-client