Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/9ea08a-1a99-4ee3-a3c4-8426aa1a6d2f/1/Skati1EM9VlIXjYRVVuLQ571M7s.mft
File: Skati1EM9VlIXjYRVVuLQ571M7s.mft (raw, json)
Hash identifier: vjftnHUTwtFVuZzoAWmp5y2ItvKrX1f5toAq+eB57Dg=
Subject key identifier: CE:90:45:A2:C8:08:C4:F4:16:EA:6B:87:92:61:90:C6:F5:9A:AF:1F
Authority key identifier: 4A:46:AD:8B:51:0C:F5:59:48:5E:36:11:55:5B:8B:43:9E:F5:33:BB
Certificate issuer: /CN=4a46ad8b510cf559485e3611555b8b439ef533bb
Certificate serial: 0194C35087F88A6A9918DACE15B2A1FAE047
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skati1EM9VlIXjYRVVuLQ571M7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/9ea08a-1a99-4ee3-a3c4-8426aa1a6d2f/1/Skati1EM9VlIXjYRVVuLQ571M7s.mft
Manifest number: 0412
Signing time: Sat 01 Feb 2025 21:00:22 +0000
Manifest this update: Sat 01 Feb 2025 21:00:22 +0000
Manifest next update: Sun 02 Feb 2025 21:00:22 +0000
Files and hashes: 1: Ca4xXUzbyhsUcBXoNBEFebjIPUc.roa (hash: ps+2L73QvXysU+0eZnonSgGSTE/hA5gLFzFQVCRF5nk=)
2: Skati1EM9VlIXjYRVVuLQ571M7s.crl (hash: fyYqbzS6QRJ+VX6RGDGS5sJtNyRcljT06wkSPHJUou8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/9ea08a-1a99-4ee3-a3c4-8426aa1a6d2f/1/Skati1EM9VlIXjYRVVuLQ571M7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/9ea08a-1a99-4ee3-a3c4-8426aa1a6d2f/1/Skati1EM9VlIXjYRVVuLQ571M7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/Skati1EM9VlIXjYRVVuLQ571M7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:50:87:f8:8a:6a:99:18:da:ce:15:b2:a1:fa:e0:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a46ad8b510cf559485e3611555b8b439ef533bb
Validity
Not Before: Feb 1 21:00:22 2025 GMT
Not After : Feb 2 21:00:22 2025 GMT
Subject: CN=ce9045a2c808c4f416ea6b87926190c6f59aaf1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b2:1d:b0:91:4f:9b:e9:5b:47:8c:2d:31:89:
db:8d:4c:11:6c:6e:7c:14:c9:6d:6a:21:9c:f0:0f:
e3:c7:f2:1c:bc:ec:fc:1d:70:0c:f9:62:af:88:7b:
49:75:fc:9a:13:e0:ed:04:63:44:60:57:6f:0c:23:
7b:47:a3:a7:f6:2a:48:da:8d:21:e5:f2:5a:50:87:
85:90:49:e0:ad:ef:d6:fe:83:48:79:ca:0c:f7:db:
a7:54:ce:89:60:99:d2:f4:04:19:f2:9b:71:2b:69:
f5:59:e3:b2:0d:12:6c:0c:50:60:69:d2:78:09:94:
79:59:4b:cf:ef:1a:bf:80:fb:ea:8a:7a:d2:55:1d:
4c:a8:c8:24:ed:fe:e5:ca:17:56:9a:28:21:b2:f4:
f4:55:72:ac:a6:d6:dd:13:34:39:05:62:8c:18:3a:
6e:0c:67:85:dd:9a:68:5f:1b:1d:35:2e:a0:8b:23:
4c:b7:c5:57:a4:9a:77:62:3e:cc:f7:b4:a2:61:23:
15:7b:8d:a7:19:76:3e:c9:a5:fc:a8:cb:6a:2c:11:
0c:d4:6c:cd:3a:52:78:74:25:04:89:a3:88:2e:c5:
8d:2c:05:a9:ee:0b:61:1b:92:fd:12:9c:e4:11:91:
bb:d9:41:c6:ac:f0:2e:1c:b2:59:a5:97:07:92:8f:
db:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:90:45:A2:C8:08:C4:F4:16:EA:6B:87:92:61:90:C6:F5:9A:AF:1F
X509v3 Authority Key Identifier:
keyid:4A:46:AD:8B:51:0C:F5:59:48:5E:36:11:55:5B:8B:43:9E:F5:33:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skati1EM9VlIXjYRVVuLQ571M7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/9ea08a-1a99-4ee3-a3c4-8426aa1a6d2f/1/Skati1EM9VlIXjYRVVuLQ571M7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/9ea08a-1a99-4ee3-a3c4-8426aa1a6d2f/1/Skati1EM9VlIXjYRVVuLQ571M7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:d8:a1:14:5a:98:f7:b6:99:df:1f:0b:6c:cf:dc:e1:8c:8b:
72:b2:c7:c2:81:8e:33:ca:1b:29:3e:e8:2b:f0:98:19:87:b5:
ca:a4:9e:36:a4:59:d1:8e:60:84:2f:8e:10:c7:63:b4:a3:96:
0f:0c:92:77:43:44:79:6e:3f:1c:21:d3:db:64:eb:86:cf:f4:
da:30:2e:0a:5a:00:bb:af:ea:4a:ec:b8:5b:4e:b4:8d:9a:71:
fd:f0:9b:a7:d5:cb:0f:c6:01:ab:d3:a9:42:8a:ae:86:5f:5f:
bb:06:05:62:52:c0:d6:4f:cc:69:30:26:5c:b3:59:03:53:b7:
86:c1:fb:5e:70:f4:ce:29:4b:99:1d:61:af:02:c3:8e:d8:3f:
e5:37:eb:1e:67:c8:27:aa:40:ad:6d:80:a2:ff:e3:37:e0:2f:
dd:9a:b9:be:1e:6e:5a:33:71:c6:ed:d6:ec:0c:1b:d5:b5:98:
98:ad:26:73:19:95:81:ea:b0:19:39:d1:7f:08:b0:5a:ed:4e:
0a:c6:87:ac:57:57:ba:92:44:7f:30:a1:52:cb:04:70:4e:02:
77:c6:e4:2c:c2:c7:32:9d:eb:dd:90:d1:db:7d:d7:b6:13:7f:
6d:12:62:97:9f:71:71:e5:84:15:7e:f0:59:77:79:d6:40:4c:
fa:0d:f2:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:53:06 2025 by rpki-client