Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/ebafee-8198-4d10-8936-f1a8881519b1/1/skdjJsizNc1GFWo9VpBcbp0NhbU.mft
File: skdjJsizNc1GFWo9VpBcbp0NhbU.mft (raw, json)
Hash identifier: by4Q+YaAaskn9m6+ssjBcjeq2r4Od2voBABzGLi1C8E=
Subject key identifier: 06:0A:83:CD:DC:9E:B8:70:01:E4:00:5E:88:86:72:10:D4:DA:1E:8C
Authority key identifier: B2:47:63:26:C8:B3:35:CD:46:15:6A:3D:56:90:5C:6E:9D:0D:85:B5
Certificate issuer: /CN=b2476326c8b335cd46156a3d56905c6e9d0d85b5
Certificate serial: 01984061C6A9C2A6669ED4A0406218758E82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/skdjJsizNc1GFWo9VpBcbp0NhbU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/ebafee-8198-4d10-8936-f1a8881519b1/1/skdjJsizNc1GFWo9VpBcbp0NhbU.mft
Manifest number: 04F6
Signing time: Fri 25 Jul 2025 07:00:06 +0000
Manifest this update: Fri 25 Jul 2025 07:00:06 +0000
Manifest next update: Sat 26 Jul 2025 07:00:06 +0000
Files and hashes: 1: skdjJsizNc1GFWo9VpBcbp0NhbU.crl (hash: dWLZuwj8F1JlYjNlFxScwMUmF0vripZPxP3iPteV0Es=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/ebafee-8198-4d10-8936-f1a8881519b1/1/skdjJsizNc1GFWo9VpBcbp0NhbU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/ebafee-8198-4d10-8936-f1a8881519b1/1/skdjJsizNc1GFWo9VpBcbp0NhbU.mft
rsync://rpki.ripe.net/repository/DEFAULT/skdjJsizNc1GFWo9VpBcbp0NhbU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 07:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:40:61:c6:a9:c2:a6:66:9e:d4:a0:40:62:18:75:8e:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2476326c8b335cd46156a3d56905c6e9d0d85b5
Validity
Not Before: Jul 25 07:00:06 2025 GMT
Not After : Jul 26 07:00:06 2025 GMT
Subject: CN=060a83cddc9eb87001e4005e88867210d4da1e8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b4:0c:88:ad:bc:12:ba:17:b8:38:19:82:2a:
93:73:95:26:0e:81:55:60:a4:39:d0:95:2b:ee:b4:
3e:1a:65:8d:9f:8e:d0:14:98:7a:b7:27:4a:5d:bb:
d4:5a:3b:cf:66:ce:27:11:13:f0:f4:e2:c7:ba:76:
11:0e:0a:1a:99:02:9b:f9:fb:71:95:4e:95:93:04:
35:2a:24:fd:96:99:1f:68:6c:0e:d2:47:50:b1:94:
ff:17:cd:e2:36:af:bc:4c:bc:ba:41:61:c4:48:4f:
90:d1:c0:dc:49:ec:f2:60:43:c1:ec:4a:20:cd:9b:
68:19:07:b5:da:eb:17:d2:f5:53:56:46:5f:30:46:
10:27:07:bf:45:10:85:2d:0c:3c:b8:d9:36:f3:1b:
ff:13:4f:75:3e:46:44:7c:5c:d1:02:43:7d:f1:5c:
67:a6:ab:9b:c5:9d:33:cc:de:02:52:ee:ff:3e:45:
13:ae:43:13:8d:ae:f5:c3:3b:37:44:ec:a7:6f:43:
11:2e:44:3f:c4:0f:88:a6:f8:41:19:e3:76:f6:65:
5c:2f:33:e1:01:55:8b:09:b1:71:88:e6:12:55:ae:
8e:04:73:e3:e9:a0:e2:ef:05:b5:6a:9b:cf:8a:ed:
57:e3:75:8e:e4:df:46:2e:59:a5:fc:da:40:fd:7f:
e5:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:0A:83:CD:DC:9E:B8:70:01:E4:00:5E:88:86:72:10:D4:DA:1E:8C
X509v3 Authority Key Identifier:
keyid:B2:47:63:26:C8:B3:35:CD:46:15:6A:3D:56:90:5C:6E:9D:0D:85:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/skdjJsizNc1GFWo9VpBcbp0NhbU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/ebafee-8198-4d10-8936-f1a8881519b1/1/skdjJsizNc1GFWo9VpBcbp0NhbU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/ebafee-8198-4d10-8936-f1a8881519b1/1/skdjJsizNc1GFWo9VpBcbp0NhbU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:9e:3a:66:0a:96:5a:a4:bc:6d:02:0c:da:53:3b:f7:28:87:
f0:ce:d4:fc:df:cb:93:62:cd:25:6d:03:88:69:32:f3:52:c8:
c4:cf:fc:29:09:a1:39:5a:35:9f:49:43:71:a8:d3:fd:9a:31:
32:e0:90:75:60:2f:1e:d5:ac:d4:bd:da:94:b2:c2:37:cf:14:
9b:7f:d6:f6:b8:a0:2a:cf:e6:56:dd:98:2a:12:42:20:87:9a:
b2:a9:54:d0:0c:ac:1d:29:cc:0b:8d:93:69:c8:fe:2e:af:04:
a3:b1:ed:77:4a:3f:cd:1c:7b:03:af:65:ba:32:a4:73:8c:03:
87:b0:ff:af:2c:a1:a8:64:77:05:c9:6a:b0:f9:0b:83:4f:30:
c1:46:88:8a:a6:91:e3:c6:d2:3a:60:4d:db:a2:88:e2:0b:0f:
ea:89:65:3c:09:73:bc:e9:c1:6b:88:d3:ee:86:98:fd:63:ed:
7e:2b:be:53:bc:cf:4b:4d:5c:86:e2:a1:36:8f:63:d2:c9:a7:
d6:93:ce:8a:54:3c:11:63:47:10:7c:d1:9f:66:f3:8f:4f:07:
9c:93:db:f0:ed:d3:26:d7:be:c3:f5:30:0d:b3:91:50:11:a7:
0d:57:73:94:ea:8c:f3:42:a2:1a:32:16:d8:b9:0a:60:d2:4f:
20:92:27:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 13:09:23 2025 by rpki-client