Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/75785f-0e82-4d46-8456-759ac50414de/1/SksX0DK5-19-W8n9Jo37gO3u0h0.mft
File: SksX0DK5-19-W8n9Jo37gO3u0h0.mft (raw, json)
Hash identifier: DzNAFxkhTopc3NIBMG7jLzlaadZWUl3vD4dWf4WFe1E=
Subject key identifier: 96:CA:D0:8B:F3:F5:F6:CD:31:F1:88:68:96:A9:CD:96:B2:31:4D:C8
Authority key identifier: 4A:4B:17:D0:32:B9:FB:5F:7E:5B:C9:FD:26:8D:FB:80:ED:EE:D2:1D
Certificate issuer: /CN=4a4b17d032b9fb5f7e5bc9fd268dfb80edeed21d
Certificate serial: 019761DE667A5459E673CB7D7042A3E13CF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SksX0DK5-19-W8n9Jo37gO3u0h0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/75785f-0e82-4d46-8456-759ac50414de/1/SksX0DK5-19-W8n9Jo37gO3u0h0.mft
Manifest number: 14A6
Signing time: Thu 12 Jun 2025 02:00:54 +0000
Manifest this update: Thu 12 Jun 2025 02:00:54 +0000
Manifest next update: Fri 13 Jun 2025 02:00:54 +0000
Files and hashes: 1: SksX0DK5-19-W8n9Jo37gO3u0h0.crl (hash: Ccqr2O9HZ0FD1QsGGpDK0ww8KBwfClcedobQzSnQ7wY=)
2: rOZzXqhZDodX-Oc13GcxPruRbSM.roa (hash: YeJHzy/9tbn5hMpXLH6O6XO6xL28nuOSs+m8iNhWA4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/75785f-0e82-4d46-8456-759ac50414de/1/SksX0DK5-19-W8n9Jo37gO3u0h0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/75785f-0e82-4d46-8456-759ac50414de/1/SksX0DK5-19-W8n9Jo37gO3u0h0.mft
rsync://rpki.ripe.net/repository/DEFAULT/SksX0DK5-19-W8n9Jo37gO3u0h0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 21:26:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:61:de:66:7a:54:59:e6:73:cb:7d:70:42:a3:e1:3c:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a4b17d032b9fb5f7e5bc9fd268dfb80edeed21d
Validity
Not Before: Jun 12 02:00:54 2025 GMT
Not After : Jun 13 02:00:54 2025 GMT
Subject: CN=96cad08bf3f5f6cd31f1886896a9cd96b2314dc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:33:20:e3:f5:0b:21:ba:70:a1:b2:be:87:24:
97:e1:12:f0:3c:4e:42:83:d0:aa:b6:c4:f9:a1:58:
86:aa:ef:89:b3:89:dc:75:86:95:20:6c:20:19:f6:
85:47:0f:45:64:5e:11:b5:e0:80:f7:b0:98:42:52:
38:42:83:17:93:89:06:78:dd:8e:cd:be:bb:07:bd:
6a:e3:9d:e5:b0:93:c6:8c:32:fb:1b:36:a4:9f:f1:
75:4f:6f:80:41:6e:40:da:4e:ab:a0:bb:c8:ad:5e:
dc:ec:33:ee:3d:9b:c9:95:dd:ca:c9:43:0d:d4:df:
1c:05:d5:b2:93:8e:9d:9f:e4:92:7a:d4:b7:e6:7a:
e5:62:5b:17:9b:c5:00:64:05:e6:bf:7b:53:b1:3a:
a2:2d:de:60:0e:7a:5e:c3:3e:cc:5b:1f:5e:10:03:
a6:b7:96:1e:2c:2d:6e:23:79:81:ef:5c:41:81:bf:
46:b8:e0:4d:65:2f:29:62:44:6f:7f:98:57:a1:59:
12:ef:bb:80:bc:1b:6d:af:dd:c6:82:80:35:4d:39:
60:fc:37:a3:44:9a:ad:47:eb:11:50:a7:b8:dc:28:
64:f3:fe:fb:e7:51:27:9b:8a:c9:60:ee:7b:b2:d2:
db:36:64:af:cf:13:ad:6c:08:e2:11:fa:b5:d8:04:
fe:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:CA:D0:8B:F3:F5:F6:CD:31:F1:88:68:96:A9:CD:96:B2:31:4D:C8
X509v3 Authority Key Identifier:
keyid:4A:4B:17:D0:32:B9:FB:5F:7E:5B:C9:FD:26:8D:FB:80:ED:EE:D2:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SksX0DK5-19-W8n9Jo37gO3u0h0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/75785f-0e82-4d46-8456-759ac50414de/1/SksX0DK5-19-W8n9Jo37gO3u0h0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/75785f-0e82-4d46-8456-759ac50414de/1/SksX0DK5-19-W8n9Jo37gO3u0h0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:b3:84:57:c3:34:6f:5d:17:54:9d:a9:21:67:b9:23:95:73:
63:9c:19:4b:45:60:83:87:27:60:ac:8d:72:71:88:34:99:d2:
31:39:84:c2:94:f5:d5:ca:5d:72:9a:c1:6e:45:06:93:39:3e:
62:46:18:6a:f0:66:69:2c:89:fa:8f:35:8d:1a:95:05:a5:6a:
b5:19:31:12:31:e9:d1:9b:4d:e9:4b:7c:0c:3e:e1:86:43:47:
83:eb:6d:95:a1:e1:37:5b:29:4a:10:3e:a5:74:82:b0:c9:21:
ae:87:2f:f5:01:55:ab:d5:99:9d:32:97:ed:24:7c:99:24:e2:
db:cf:83:14:93:1c:79:6c:40:b8:46:39:dd:be:60:a2:81:61:
9b:28:c1:6b:3f:69:96:fc:ba:3e:cd:f1:6c:19:20:86:1d:b7:
2f:f4:90:a5:84:47:f9:b1:73:ef:83:2a:e0:7d:6a:dc:24:96:
a4:e7:67:48:5a:bc:a2:62:ff:ad:1c:47:48:98:a4:24:99:40:
10:35:23:09:03:69:0e:fe:04:14:19:b1:27:2a:fa:09:7d:0c:
a1:d1:b0:51:f1:ea:66:b0:f0:44:b7:93:51:ea:e5:78:37:8a:
bd:f3:b3:93:43:1c:b6:08:b1:39:4b:27:f5:85:ca:d4:6c:42:
59:fb:48:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 04:49:22 2025 by rpki-client