Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/6f6613-e798-47f4-b313-304a54e8c264/1/sK_tekcdesOF47k2Wk6WASoBwJU.mft
File: sK_tekcdesOF47k2Wk6WASoBwJU.mft (raw, json)
Hash identifier: cKtpBJXiWJDCf7SN2gttCLYMl1js5++sNJG7ooHIEO4=
Subject key identifier: 48:D9:9E:A0:83:6C:E4:B2:9A:64:D1:C5:73:72:5A:18:83:F8:45:4B
Authority key identifier: B0:AF:ED:7A:47:1D:7A:C3:85:E3:B9:36:5A:4E:96:01:2A:01:C0:95
Certificate issuer: /CN=b0afed7a471d7ac385e3b9365a4e96012a01c095
Certificate serial: 0197496850D782460653AAAE84E2D4049A76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sK_tekcdesOF47k2Wk6WASoBwJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/6f6613-e798-47f4-b313-304a54e8c264/1/sK_tekcdesOF47k2Wk6WASoBwJU.mft
Manifest number: 0CDD
Signing time: Sat 07 Jun 2025 08:01:02 +0000
Manifest this update: Sat 07 Jun 2025 08:01:02 +0000
Manifest next update: Sun 08 Jun 2025 08:01:02 +0000
Files and hashes: 1: C3xtGxxSgp_Plz4Lpk-Ue-Bhuno.roa (hash: so9nDoVUdg/Us7gUe7/dKOyUe77DOJSLVO4IrdFOjZ8=)
2: sK_tekcdesOF47k2Wk6WASoBwJU.crl (hash: Vpp2mwDW8oFig0EpJyRKb2RXlM3fRFKFOEFL6/eyi8M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/6f6613-e798-47f4-b313-304a54e8c264/1/sK_tekcdesOF47k2Wk6WASoBwJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/6f6613-e798-47f4-b313-304a54e8c264/1/sK_tekcdesOF47k2Wk6WASoBwJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/sK_tekcdesOF47k2Wk6WASoBwJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 08:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:68:50:d7:82:46:06:53:aa:ae:84:e2:d4:04:9a:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0afed7a471d7ac385e3b9365a4e96012a01c095
Validity
Not Before: Jun 7 08:01:02 2025 GMT
Not After : Jun 8 08:01:02 2025 GMT
Subject: CN=48d99ea0836ce4b29a64d1c573725a1883f8454b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:fb:67:28:54:45:b9:e2:25:9e:6a:0c:0e:c0:
7e:9e:51:47:e8:9a:2b:44:4b:52:ed:ca:84:aa:e6:
54:1a:f3:bd:e0:fd:f0:a4:b7:85:ad:5b:f1:95:7a:
4b:75:23:6d:db:39:b3:bd:3f:68:34:4f:80:e6:2d:
c0:ad:d1:fd:97:82:d6:0a:ef:eb:b9:e1:d5:79:9f:
f4:5f:f2:51:3a:78:9e:32:83:b9:a3:52:4c:cf:ff:
55:ad:9c:0c:18:4e:db:51:c8:73:b3:ab:11:10:40:
14:8e:80:b9:55:9e:d1:c7:d5:c7:5b:48:55:5e:ab:
a8:10:93:53:21:34:e0:f2:7d:16:5f:05:27:38:8f:
ed:f1:37:87:1d:14:8a:1b:a0:4e:4a:b1:82:94:e7:
f2:13:20:79:b6:36:f6:a8:c3:67:8d:34:12:41:f2:
d6:f9:8d:02:64:ef:00:00:04:3e:52:8d:99:f6:1a:
66:1d:02:c8:02:ea:c6:38:1b:01:6a:84:ab:63:5c:
54:ae:1b:13:59:cc:37:26:1d:b1:8c:d2:a3:e4:9a:
89:8a:34:f0:67:8f:ba:e4:af:28:5c:be:22:61:a3:
bf:82:7b:e9:79:1d:07:15:40:b6:a8:02:9d:c2:4e:
b9:e6:f4:57:71:49:db:b7:a6:49:35:c3:94:74:35:
ff:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:D9:9E:A0:83:6C:E4:B2:9A:64:D1:C5:73:72:5A:18:83:F8:45:4B
X509v3 Authority Key Identifier:
keyid:B0:AF:ED:7A:47:1D:7A:C3:85:E3:B9:36:5A:4E:96:01:2A:01:C0:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sK_tekcdesOF47k2Wk6WASoBwJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6f6613-e798-47f4-b313-304a54e8c264/1/sK_tekcdesOF47k2Wk6WASoBwJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6f6613-e798-47f4-b313-304a54e8c264/1/sK_tekcdesOF47k2Wk6WASoBwJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:13:c7:14:12:a7:3a:bc:3a:30:d7:7a:d9:0a:95:2d:05:b4:
cd:05:ba:52:8a:72:e9:06:4f:f9:f7:2b:e9:1f:a1:85:ae:da:
50:37:83:e3:36:55:63:91:04:86:bc:71:4d:09:d9:a2:0c:ca:
58:cc:01:a7:42:88:d2:bc:48:ae:fa:4b:fb:4c:c4:6a:db:2c:
d7:de:7b:7f:1e:66:70:7e:fb:68:65:5e:4d:f7:e2:b5:6d:f9:
a9:d5:d8:29:7f:60:38:d5:b9:10:79:9b:9d:91:bd:d8:06:2a:
38:3a:73:1b:75:cf:62:45:3a:c3:fe:99:2f:55:3d:85:ae:39:
37:ae:b7:cf:ea:00:45:63:72:d5:18:13:06:87:31:44:c6:e5:
38:ee:24:7d:2f:ac:fb:6b:2d:c0:54:38:7a:40:2c:35:87:67:
5a:08:46:47:a5:50:54:18:eb:a4:12:8d:17:c0:61:01:c0:9a:
fc:4f:74:6d:42:33:5b:91:17:10:78:f6:6e:70:d3:df:b5:e5:
a8:8d:de:cb:05:0f:4c:01:00:cf:b9:46:56:a2:a6:9d:db:e5:
b4:4b:92:74:27:28:10:f7:d4:ce:43:48:46:8d:6f:b0:48:92:
5b:14:3b:e9:47:c4:6a:e2:63:e5:47:34:76:53:50:81:d3:9f:
ca:e7:e9:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:44:19 2025 by rpki-client