Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/2a727b-a745-4339-925a-4d00d6032afe/1/skTScYj-UmvXJjZzgZXR639gYzU.mft
File: skTScYj-UmvXJjZzgZXR639gYzU.mft (raw, json)
Hash identifier: /aek1x5JzluTZZIPLWE0ulj0jWC8YGfXPevsgojXVjg=
Subject key identifier: 91:C0:8E:6A:62:96:4A:BD:9B:CA:1A:1A:4B:5E:78:E6:AF:C7:9D:1A
Authority key identifier: B2:44:D2:71:88:FE:52:6B:D7:26:36:73:81:95:D1:EB:7F:60:63:35
Certificate issuer: /CN=b244d27188fe526bd72636738195d1eb7f606335
Certificate serial: 01974A7A6F097A9502E847628490201398B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/skTScYj-UmvXJjZzgZXR639gYzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/2a727b-a745-4339-925a-4d00d6032afe/1/skTScYj-UmvXJjZzgZXR639gYzU.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 13:00:26 +0000
Manifest this update: Sat 07 Jun 2025 13:00:26 +0000
Manifest next update: Sun 08 Jun 2025 13:00:26 +0000
Files and hashes: 1: i9ojhRN5HPqLEONrX8zwsFoi9sk.roa (hash: MIYLI6ZlVjLLI/2sB5M12T0X1D0wb0+Le0eSAFyUiKg=)
2: skTScYj-UmvXJjZzgZXR639gYzU.crl (hash: ja5V3uNQtH1+qLJnjHj7ZgteTAL26crZHCM/dHXjFcQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/2a727b-a745-4339-925a-4d00d6032afe/1/skTScYj-UmvXJjZzgZXR639gYzU.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/2a727b-a745-4339-925a-4d00d6032afe/1/skTScYj-UmvXJjZzgZXR639gYzU.mft
rsync://rpki.ripe.net/repository/DEFAULT/skTScYj-UmvXJjZzgZXR639gYzU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7a:6f:09:7a:95:02:e8:47:62:84:90:20:13:98:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b244d27188fe526bd72636738195d1eb7f606335
Validity
Not Before: Jun 7 13:00:26 2025 GMT
Not After : Jun 8 13:00:26 2025 GMT
Subject: CN=91c08e6a62964abd9bca1a1a4b5e78e6afc79d1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:92:66:d5:37:32:7a:5d:1c:c8:b5:d8:fd:b7:
5f:8e:21:17:1a:97:d0:62:f6:e3:c6:6d:dd:c6:3b:
2c:84:22:ab:8d:d4:04:e3:8f:7a:04:be:7b:81:5d:
2f:88:84:66:77:ce:f6:6c:d8:0f:0a:1a:b0:5d:b9:
c8:11:04:be:cd:2b:cb:50:c5:17:2c:49:8b:46:1f:
0a:a2:e0:3e:e9:8f:ce:2f:93:72:c9:9d:e5:92:1d:
1d:d8:82:e3:22:13:c6:75:ee:cb:e1:00:06:92:af:
2b:55:ac:0c:23:0b:90:75:b7:f6:8b:d5:2d:10:88:
17:b5:2e:9c:fe:ac:bc:1b:57:b8:36:72:0e:cb:74:
42:9e:1a:04:9e:4e:78:d6:63:64:37:45:34:e5:22:
33:19:bd:63:a0:18:6d:3e:5a:68:a8:b7:c2:f5:1b:
92:54:ab:ab:69:93:6f:bc:63:36:f6:fd:1c:bc:05:
2f:ae:8a:57:81:93:4b:39:fa:58:11:50:dc:b3:49:
a1:d1:24:b4:4a:75:69:fc:b0:3f:09:37:57:a2:27:
07:ef:67:9c:c5:eb:5d:e5:1e:73:de:f2:c2:a1:34:
5d:9d:a0:9e:bb:fd:f7:e8:51:33:1a:e9:45:67:72:
a3:fd:1f:dd:5e:c8:37:63:6b:ed:1c:8f:95:d0:5d:
99:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:C0:8E:6A:62:96:4A:BD:9B:CA:1A:1A:4B:5E:78:E6:AF:C7:9D:1A
X509v3 Authority Key Identifier:
keyid:B2:44:D2:71:88:FE:52:6B:D7:26:36:73:81:95:D1:EB:7F:60:63:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/skTScYj-UmvXJjZzgZXR639gYzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2a727b-a745-4339-925a-4d00d6032afe/1/skTScYj-UmvXJjZzgZXR639gYzU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2a727b-a745-4339-925a-4d00d6032afe/1/skTScYj-UmvXJjZzgZXR639gYzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:f4:76:ea:b8:3a:b8:95:83:e8:e3:73:ab:a6:60:fd:05:ac:
3a:1f:25:60:ab:07:41:5c:38:00:79:ad:ff:df:6d:e4:af:79:
e2:93:7c:1b:d8:f5:01:17:33:d6:21:0c:d9:95:a8:b8:db:1c:
f5:99:24:0d:6b:6e:b1:8d:c4:c9:c6:2d:a0:7d:7a:34:b4:4f:
25:c8:87:fa:bf:bf:a9:0f:f0:60:b8:5d:30:25:ea:53:eb:a2:
ec:d2:16:3f:6c:32:82:7e:56:c9:ad:4b:d9:52:a8:40:a0:fe:
01:5b:26:db:5f:33:43:34:fa:f8:1f:a5:87:06:74:a3:98:01:
32:15:0f:09:57:3f:c9:5a:6a:e5:0f:b3:1b:37:a1:78:90:31:
f9:5f:ba:aa:26:39:e9:b5:0e:ce:91:86:16:87:d9:38:f6:0d:
57:cb:50:11:32:5b:bc:d1:ce:8f:47:d7:c0:c4:e8:f3:cf:fb:
de:96:af:cb:da:f9:62:01:b8:46:e1:08:ea:e8:70:e6:41:17:
07:3a:9c:e2:b1:11:67:fb:0a:23:24:00:f5:70:cd:ec:e0:24:
1a:9c:56:e8:78:17:e3:be:eb:7e:56:4d:7f:ac:d1:99:8e:6b:
11:aa:b1:e4:ef:09:7f:a2:9d:91:b4:36:86:60:7c:df:47:58:
a5:ce:f2:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:57:05 2025 by rpki-client