Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/167903-f426-4bf0-9233-a9ac66be48f7/1/SkrQOg9ZK7nJfDBSppASXYRkFaQ.mft
File: SkrQOg9ZK7nJfDBSppASXYRkFaQ.mft (raw, json)
Hash identifier: NTVFz6xGE8yPGyZxBOGDgklrYeX4S8pHnv/sNOrbAtM=
Subject key identifier: EE:75:E0:97:5C:D0:D4:68:53:9B:E2:C2:F7:58:04:C6:66:4F:71:CA
Authority key identifier: 4A:4A:D0:3A:0F:59:2B:B9:C9:7C:30:52:A6:90:12:5D:84:64:15:A4
Certificate issuer: /CN=4a4ad03a0f592bb9c97c3052a690125d846415a4
Certificate serial: 01965838DBB0A9783C4C52566D1246BA50E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SkrQOg9ZK7nJfDBSppASXYRkFaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/167903-f426-4bf0-9233-a9ac66be48f7/1/SkrQOg9ZK7nJfDBSppASXYRkFaQ.mft
Manifest number: 1502
Signing time: Mon 21 Apr 2025 12:00:43 +0000
Manifest this update: Mon 21 Apr 2025 12:00:43 +0000
Manifest next update: Tue 22 Apr 2025 12:00:43 +0000
Files and hashes: 1: FMBsd665mkW877Lm7mjOcBolr5g.roa (hash: 3614fl/uw1OiBqiLqW5MtPTJk1bhJcyOd8R/vQp2zPM=)
2: SkrQOg9ZK7nJfDBSppASXYRkFaQ.crl (hash: Z8QgYZyhqZyzJEgFnDKWxoBfNs4nfBHh/tQUChpGPN0=)
3: l-ehjkba5MFL6bTBmw0p0je8kv0.roa (hash: SBj+lER6GA3nSUubC1AdXeW27xw7XEGQlpuymCAxj5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/167903-f426-4bf0-9233-a9ac66be48f7/1/SkrQOg9ZK7nJfDBSppASXYRkFaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/167903-f426-4bf0-9233-a9ac66be48f7/1/SkrQOg9ZK7nJfDBSppASXYRkFaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/SkrQOg9ZK7nJfDBSppASXYRkFaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 12:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:38:db:b0:a9:78:3c:4c:52:56:6d:12:46:ba:50:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a4ad03a0f592bb9c97c3052a690125d846415a4
Validity
Not Before: Apr 21 12:00:43 2025 GMT
Not After : Apr 22 12:00:43 2025 GMT
Subject: CN=ee75e0975cd0d468539be2c2f75804c6664f71ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2b:14:a2:19:7f:65:43:6d:68:0a:7e:af:23:
a9:42:28:1d:ee:7e:79:ff:a6:8c:3c:06:d5:aa:33:
87:df:25:55:59:5c:e6:03:fb:77:16:3a:d1:1a:d7:
dc:88:06:9f:14:fd:df:9c:2e:de:1c:6a:93:42:10:
fa:c0:15:8c:dc:7f:9c:f7:8e:93:4a:d0:e3:bb:56:
e1:35:83:e7:5c:d1:9c:d2:8a:97:49:a0:c4:f4:7b:
ae:bc:f8:30:3d:c5:d3:67:40:59:b0:f5:1e:b5:07:
e0:75:2d:6c:3c:97:1f:8e:53:57:b3:af:fc:9f:68:
f5:93:f2:2d:9a:95:75:17:98:3e:62:cf:ea:12:01:
1f:95:d2:4e:15:69:2e:64:24:df:1b:e6:51:e7:83:
f9:45:9f:e6:55:48:af:cd:e6:d1:44:d5:f8:84:52:
8b:92:7b:17:59:e0:9a:16:25:59:46:d2:ef:1d:f8:
78:b9:b8:3a:34:66:ac:67:c3:83:47:7e:6d:dd:a1:
a9:6f:87:ce:c4:65:c4:08:56:3c:63:62:5b:ca:0f:
b4:38:85:a3:7e:bf:8c:37:8a:2d:5e:31:1a:c1:5f:
30:2d:a4:2c:93:3a:27:5b:ae:03:fe:cd:e4:b7:78:
b4:32:12:0d:ba:a9:bd:3c:4d:d8:ca:ac:a4:f2:2a:
9e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:75:E0:97:5C:D0:D4:68:53:9B:E2:C2:F7:58:04:C6:66:4F:71:CA
X509v3 Authority Key Identifier:
keyid:4A:4A:D0:3A:0F:59:2B:B9:C9:7C:30:52:A6:90:12:5D:84:64:15:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SkrQOg9ZK7nJfDBSppASXYRkFaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/167903-f426-4bf0-9233-a9ac66be48f7/1/SkrQOg9ZK7nJfDBSppASXYRkFaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/167903-f426-4bf0-9233-a9ac66be48f7/1/SkrQOg9ZK7nJfDBSppASXYRkFaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:04:71:4a:3b:76:0a:4f:aa:e1:4f:85:d3:c5:3f:b3:51:d4:
bb:8c:db:bb:3c:31:08:16:85:84:17:57:dc:5e:ab:27:b7:f5:
ca:b5:aa:15:73:7f:a5:5c:d6:7e:91:c6:5e:94:27:b9:44:06:
e8:1c:f3:7a:a8:db:23:13:03:24:0a:4a:66:10:69:79:fa:91:
fd:de:4f:57:ae:de:5c:05:44:8a:5a:16:9d:b7:7a:db:87:f7:
4c:93:2f:20:2e:f7:47:58:72:93:fd:f9:ba:60:15:a6:ca:79:
d2:3d:8c:83:03:a2:4c:4c:45:ec:22:65:46:94:f0:4e:43:3a:
8d:49:ca:7b:03:47:3c:73:1a:e2:b4:53:50:e9:6b:63:1a:b1:
5a:21:06:e8:39:66:f4:29:16:f8:a6:55:c5:d0:78:49:ef:00:
cc:eb:04:04:bd:23:3b:21:8b:15:a4:49:77:6a:33:3c:76:e2:
07:25:94:f6:a5:bb:dc:e5:d1:df:eb:47:4d:41:61:80:0b:9c:
ee:5e:bd:e1:2d:41:f7:72:da:91:6d:af:1e:8c:f1:6c:aa:40:
fa:69:83:a7:33:a1:c6:15:da:f8:bb:bf:dd:3e:2e:6c:3d:3f:
72:51:da:d2:f5:8c:d2:0e:f7:d5:22:d5:63:cf:1f:7f:6e:57:
6e:1b:32:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 22:21:57 2025 by rpki-client