Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/2a727b-a745-4339-925a-4d00d6032afe/1/skTScYj-UmvXJjZzgZXR639gYzU.mft
File: skTScYj-UmvXJjZzgZXR639gYzU.mft (raw, json)
Hash identifier: +rFvBPdS7Xht9LiTabfEstbA3CCVNsGbsLTS4hB7Z+w=
Subject key identifier: B3:BE:FC:E7:94:58:CD:2F:E7:B7:78:9D:03:25:8D:A4:98:75:14:22
Authority key identifier: B2:44:D2:71:88:FE:52:6B:D7:26:36:73:81:95:D1:EB:7F:60:63:35
Certificate issuer: /CN=b244d27188fe526bd72636738195d1eb7f606335
Certificate serial: 019643D5FF05D061619CE78E0A898D338496
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/skTScYj-UmvXJjZzgZXR639gYzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/2a727b-a745-4339-925a-4d00d6032afe/1/skTScYj-UmvXJjZzgZXR639gYzU.mft
Manifest number: 14F5
Signing time: Thu 17 Apr 2025 13:00:19 +0000
Manifest this update: Thu 17 Apr 2025 13:00:19 +0000
Manifest next update: Fri 18 Apr 2025 13:00:19 +0000
Files and hashes: 1: i9ojhRN5HPqLEONrX8zwsFoi9sk.roa (hash: MIYLI6ZlVjLLI/2sB5M12T0X1D0wb0+Le0eSAFyUiKg=)
2: skTScYj-UmvXJjZzgZXR639gYzU.crl (hash: 0MvEWs6P2jWCP0SaJM3e1XXWUGiaOeGeaazI1o6YGkE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/2a727b-a745-4339-925a-4d00d6032afe/1/skTScYj-UmvXJjZzgZXR639gYzU.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/2a727b-a745-4339-925a-4d00d6032afe/1/skTScYj-UmvXJjZzgZXR639gYzU.mft
rsync://rpki.ripe.net/repository/DEFAULT/skTScYj-UmvXJjZzgZXR639gYzU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 13:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:43:d5:ff:05:d0:61:61:9c:e7:8e:0a:89:8d:33:84:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b244d27188fe526bd72636738195d1eb7f606335
Validity
Not Before: Apr 17 13:00:19 2025 GMT
Not After : Apr 18 13:00:19 2025 GMT
Subject: CN=b3befce79458cd2fe7b7789d03258da498751422
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:1e:cf:5b:ba:3e:d1:12:45:03:b1:b1:79:f2:
8b:1a:89:ed:eb:fa:1c:3c:19:4e:24:c8:c2:a2:9b:
3e:68:17:22:cf:80:0f:c3:52:b5:62:01:44:3a:94:
4a:fb:da:bf:50:7e:ca:56:e7:52:c9:4f:47:9e:6e:
37:62:a0:4c:46:cf:77:a5:7a:4c:c7:09:4f:f0:3a:
66:a1:d5:37:a9:42:a2:f6:b4:e5:8c:c8:6d:d8:ba:
5c:7b:46:6f:1d:a8:97:5d:0a:3c:68:75:10:1f:02:
70:17:bb:b4:87:93:d2:ea:8e:e0:2b:1f:f1:44:cb:
60:14:ec:19:ef:6d:b4:c2:64:73:aa:a1:6b:be:d3:
5d:b1:b6:98:8d:f7:79:6a:7c:f6:b1:a1:18:1b:98:
04:63:b7:bd:ec:d4:c4:50:83:7d:8c:a0:30:1e:00:
03:a2:81:3d:98:3d:90:09:db:05:ff:6c:fc:d5:f7:
1f:1d:70:3a:b1:16:46:ec:4c:b0:f0:2b:73:c6:3f:
5d:c7:d4:75:4a:f5:c9:e2:92:5f:7c:5c:ba:73:d5:
1e:a1:cd:b1:11:9d:c1:9d:bd:05:65:cd:1b:80:ec:
4b:7c:cd:c3:7d:0d:36:80:8c:b9:0e:1a:f0:26:5c:
d9:4c:6a:b8:03:77:13:6e:d8:d5:e5:91:a0:04:d3:
42:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:BE:FC:E7:94:58:CD:2F:E7:B7:78:9D:03:25:8D:A4:98:75:14:22
X509v3 Authority Key Identifier:
keyid:B2:44:D2:71:88:FE:52:6B:D7:26:36:73:81:95:D1:EB:7F:60:63:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/skTScYj-UmvXJjZzgZXR639gYzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2a727b-a745-4339-925a-4d00d6032afe/1/skTScYj-UmvXJjZzgZXR639gYzU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2a727b-a745-4339-925a-4d00d6032afe/1/skTScYj-UmvXJjZzgZXR639gYzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:a9:11:46:47:a0:2a:91:36:d2:9a:c0:46:7e:6c:97:e8:7f:
44:a4:15:7f:b3:c2:12:90:49:97:7b:51:10:b1:cb:22:2b:ed:
8d:12:a7:be:bd:12:79:ef:21:a9:cf:8c:fe:be:cc:92:f3:7d:
64:8f:86:d2:83:d2:50:25:3b:65:a0:4d:be:8c:fd:14:c7:7d:
14:aa:7c:33:00:6a:63:fd:d4:cf:42:16:2f:70:8c:d8:61:03:
48:6b:bf:79:ff:3b:5f:99:44:b6:f2:b6:2a:41:78:9d:cd:ce:
a0:f1:c7:d7:84:c2:b4:24:8d:a5:48:a4:1d:5a:f9:3b:2f:d4:
7a:10:bc:a2:88:3e:11:ca:83:19:ac:3c:04:30:92:7d:60:49:
e5:1f:45:df:99:7b:7c:c1:7b:e5:3a:b4:8e:11:c9:30:2f:1d:
17:5a:93:21:6f:91:02:7c:c3:df:59:9d:ae:7d:74:54:39:4f:
1b:71:22:e8:b2:02:62:93:95:9a:8a:3c:4b:f1:5f:f2:03:c3:
b4:a8:03:86:ed:3e:02:20:fb:92:d8:5d:ad:2e:07:71:ca:c9:
04:de:82:49:8e:6c:08:41:d2:c3:2e:3d:33:ca:e3:8f:98:6f:
bd:2e:d5:7f:7a:95:93:42:a9:e5:34:70:42:78:3d:01:9d:09:
e3:e1:61:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:42:44 2025 by rpki-client