
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/75785f-0e82-4d46-8456-759ac50414de/1/SksX0DK5-19-W8n9Jo37gO3u0h0.mft
File: SksX0DK5-19-W8n9Jo37gO3u0h0.mft (raw, json)
Hash identifier: jm82l6gzMN6ZPnNkLnk1d+c0HfSE8XbAYF863/v32uE=
Subject key identifier: 7C:BD:3A:B7:8B:6C:E8:6D:F7:EC:1D:03:CA:93:A2:50:08:7A:BE:50
Authority key identifier: 4A:4B:17:D0:32:B9:FB:5F:7E:5B:C9:FD:26:8D:FB:80:ED:EE:D2:1D
Certificate issuer: /CN=4a4b17d032b9fb5f7e5bc9fd268dfb80edeed21d
Certificate serial: 019767A94902D03086D2349214EB1538351F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SksX0DK5-19-W8n9Jo37gO3u0h0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/75785f-0e82-4d46-8456-759ac50414de/1/SksX0DK5-19-W8n9Jo37gO3u0h0.mft
Manifest number: 14A9
Signing time: Fri 13 Jun 2025 05:00:36 +0000
Manifest this update: Fri 13 Jun 2025 05:00:36 +0000
Manifest next update: Sat 14 Jun 2025 05:00:36 +0000
Files and hashes: 1: SksX0DK5-19-W8n9Jo37gO3u0h0.crl (hash: sncekfnLRgVEcqA7dcFCQ6+b0VyBiY+W0pFf2HYgLp4=)
2: rOZzXqhZDodX-Oc13GcxPruRbSM.roa (hash: YeJHzy/9tbn5hMpXLH6O6XO6xL28nuOSs+m8iNhWA4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/75785f-0e82-4d46-8456-759ac50414de/1/SksX0DK5-19-W8n9Jo37gO3u0h0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/75785f-0e82-4d46-8456-759ac50414de/1/SksX0DK5-19-W8n9Jo37gO3u0h0.mft
rsync://rpki.ripe.net/repository/DEFAULT/SksX0DK5-19-W8n9Jo37gO3u0h0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 05:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:67:a9:49:02:d0:30:86:d2:34:92:14:eb:15:38:35:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a4b17d032b9fb5f7e5bc9fd268dfb80edeed21d
Validity
Not Before: Jun 13 05:00:36 2025 GMT
Not After : Jun 14 05:00:36 2025 GMT
Subject: CN=7cbd3ab78b6ce86df7ec1d03ca93a250087abe50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:9c:62:6c:bf:fd:a2:c3:ce:69:c0:cb:0b:93:
b0:2d:6c:ee:db:a5:03:31:c7:2b:98:ae:99:c5:2d:
46:9f:af:a9:fe:bc:06:47:c1:5d:cd:a2:5e:5b:c6:
ff:ff:ba:d3:b8:f1:ec:e8:a3:7c:9d:0a:45:8f:ef:
df:4f:cf:a8:4a:c0:4f:cb:b2:ff:dc:13:e6:0e:0d:
43:a4:ac:41:7c:e0:40:5c:b8:d8:9d:65:a1:c9:f8:
17:be:cf:3e:eb:85:c3:57:ea:e9:aa:bb:9d:0a:90:
ca:61:a7:11:ef:15:b3:5d:a3:72:5e:04:ea:86:91:
bb:7f:fb:33:67:ad:63:95:5a:97:44:4b:84:4e:3c:
9d:9a:95:58:12:6e:42:0b:15:39:f1:52:23:e8:89:
60:71:7a:dc:94:c9:5c:d0:af:67:82:54:68:6b:8e:
ba:bf:29:74:a5:7b:79:29:e6:5d:34:e4:ec:f2:a0:
92:e6:c0:02:05:24:6b:ba:00:c9:3d:37:35:51:74:
8f:d0:bd:3c:e6:ef:31:e7:09:b5:0e:c5:87:dc:99:
b4:aa:49:ba:f5:38:77:46:10:19:16:40:d9:3a:ec:
0c:b5:53:cb:4b:d5:0d:74:de:0f:96:a1:e2:0b:f6:
b1:4c:e7:3e:f6:f2:d0:6b:ab:4e:b8:10:0d:2a:bf:
00:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:BD:3A:B7:8B:6C:E8:6D:F7:EC:1D:03:CA:93:A2:50:08:7A:BE:50
X509v3 Authority Key Identifier:
keyid:4A:4B:17:D0:32:B9:FB:5F:7E:5B:C9:FD:26:8D:FB:80:ED:EE:D2:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SksX0DK5-19-W8n9Jo37gO3u0h0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/75785f-0e82-4d46-8456-759ac50414de/1/SksX0DK5-19-W8n9Jo37gO3u0h0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/75785f-0e82-4d46-8456-759ac50414de/1/SksX0DK5-19-W8n9Jo37gO3u0h0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:dd:f0:7a:c1:10:6c:72:e3:bc:d0:ad:f7:87:c6:04:4e:ac:
b3:b0:c3:60:76:4d:5f:b5:2f:a7:43:7b:76:9f:73:4c:4e:d1:
19:e2:9d:af:3e:90:a7:56:83:31:07:fc:79:98:1c:65:a5:30:
0b:f4:7d:1c:98:23:26:21:d5:dc:f0:1d:24:e5:dc:dd:6e:64:
aa:36:66:05:17:0b:cf:d5:7c:c0:1a:d7:ad:07:db:d1:b9:b4:
72:65:fe:de:e2:5f:96:01:be:fa:b0:19:9e:13:4e:02:6f:db:
48:b2:a5:bc:1a:d7:e5:0e:62:4b:96:fb:00:4d:8e:99:80:d5:
f0:eb:27:80:71:e4:01:de:a2:1e:85:f5:c2:8c:2c:98:76:dd:
b4:66:d8:81:f7:77:be:df:f5:fa:5e:19:2e:72:76:4a:33:7e:
f1:ae:46:b9:c2:79:e1:52:08:91:0c:af:22:b3:95:83:96:4c:
26:0f:22:06:34:46:64:cc:17:d5:a8:77:c4:94:22:a9:ba:3c:
ee:a0:71:e5:83:8c:05:26:b5:5d:2a:a6:26:4b:6c:bc:7e:d0:
5f:92:9c:e5:50:ca:ac:3c:c8:af:ab:7f:fe:2c:19:2f:a5:26:
6a:2f:7c:8a:b4:0f:cf:f2:2c:58:c0:14:22:78:78:19:0c:57:
e2:9e:c7:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 13:51:33 2025 by rpki-client