Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/a80dbf-5cb4-4e26-adaf-68fe08622614/1/sKT8KvOK9bT1hh4n_QB-YktfmwI.mft
File: sKT8KvOK9bT1hh4n_QB-YktfmwI.mft (raw, json)
Hash identifier: lomcwd7/sZ0EnqMKgQsAOHK0G7XNsOeOYiWJKb1UNU0=
Subject key identifier: E5:97:5A:0E:D1:20:B7:A0:70:44:70:8F:66:99:A2:D9:30:B6:E3:41
Authority key identifier: B0:A4:FC:2A:F3:8A:F5:B4:F5:86:1E:27:FD:00:7E:62:4B:5F:9B:02
Certificate issuer: /CN=b0a4fc2af38af5b4f5861e27fd007e624b5f9b02
Certificate serial: 01975FEFDE7411B8960661D6DA732942CF42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sKT8KvOK9bT1hh4n_QB-YktfmwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/a80dbf-5cb4-4e26-adaf-68fe08622614/1/sKT8KvOK9bT1hh4n_QB-YktfmwI.mft
Manifest number: 1458
Signing time: Wed 11 Jun 2025 17:00:44 +0000
Manifest this update: Wed 11 Jun 2025 17:00:44 +0000
Manifest next update: Thu 12 Jun 2025 17:00:44 +0000
Files and hashes: 1: EhMQv2Hd3Y0AB-EaVNPw9A1el2Y.roa (hash: bVKsgWkrvgH7jweX9NZzvJ58rjQAc648XkG11nW0Xqk=)
2: sKT8KvOK9bT1hh4n_QB-YktfmwI.crl (hash: 3maYnWimOpYhwk2QVTsPs2r70Mkew9M+g4q7qPS1BDc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/a80dbf-5cb4-4e26-adaf-68fe08622614/1/sKT8KvOK9bT1hh4n_QB-YktfmwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/a80dbf-5cb4-4e26-adaf-68fe08622614/1/sKT8KvOK9bT1hh4n_QB-YktfmwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/sKT8KvOK9bT1hh4n_QB-YktfmwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 15:40:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5f:ef:de:74:11:b8:96:06:61:d6:da:73:29:42:cf:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0a4fc2af38af5b4f5861e27fd007e624b5f9b02
Validity
Not Before: Jun 11 17:00:44 2025 GMT
Not After : Jun 12 17:00:44 2025 GMT
Subject: CN=e5975a0ed120b7a07044708f6699a2d930b6e341
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:79:c9:fb:bd:e4:17:ac:40:92:c5:c7:85:99:
c4:9a:18:7a:4d:94:49:91:21:7a:45:71:23:5e:ea:
32:1c:91:78:9c:43:4f:12:d3:8b:b3:78:f5:b4:fd:
40:88:ba:fb:00:0f:00:18:56:86:c2:6f:52:91:3f:
f4:bd:27:7d:7e:f4:63:53:2c:90:02:6a:55:f2:03:
53:ee:4b:a9:6b:66:3a:3d:78:50:05:b0:f3:21:58:
c6:4d:ff:f8:13:8e:ed:52:3b:f0:29:24:2d:62:a1:
b2:72:53:b6:14:a9:2b:26:f8:c2:eb:26:07:c0:e8:
10:50:e5:60:d8:b0:38:2b:80:7f:4e:b6:fd:4c:49:
53:79:97:00:a5:17:8d:cf:01:4a:87:8d:64:9d:56:
34:d5:ef:80:70:7e:d4:9c:69:37:26:f1:4c:d0:87:
6f:e1:bd:44:7b:af:2d:62:f3:35:b1:3b:65:78:0b:
8f:6a:f3:0e:a2:d2:b8:d8:f6:78:c3:2d:cf:38:06:
0a:36:91:f1:4f:bd:ec:74:fd:bc:62:79:3e:42:d1:
5a:36:1a:11:92:e6:3e:d1:8b:e2:42:84:98:6a:a7:
f5:24:98:f1:d6:2c:fb:a5:15:01:9d:59:89:39:a6:
1c:5d:dd:a7:57:bc:35:94:f6:7b:e6:09:9d:d3:76:
f4:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:97:5A:0E:D1:20:B7:A0:70:44:70:8F:66:99:A2:D9:30:B6:E3:41
X509v3 Authority Key Identifier:
keyid:B0:A4:FC:2A:F3:8A:F5:B4:F5:86:1E:27:FD:00:7E:62:4B:5F:9B:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sKT8KvOK9bT1hh4n_QB-YktfmwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a80dbf-5cb4-4e26-adaf-68fe08622614/1/sKT8KvOK9bT1hh4n_QB-YktfmwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a80dbf-5cb4-4e26-adaf-68fe08622614/1/sKT8KvOK9bT1hh4n_QB-YktfmwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:d0:b4:4c:89:f7:fe:36:f4:c0:09:aa:6b:3b:18:e0:0e:3c:
41:74:86:64:b1:db:0d:da:3a:00:ef:56:60:c5:85:87:52:60:
60:e0:65:53:75:4b:70:62:45:18:6a:35:16:74:fb:39:3b:6c:
a1:9a:96:dd:78:fa:22:aa:b3:70:0b:b8:68:b4:5d:ce:1e:91:
37:5b:90:fd:f8:d2:6f:b3:a0:15:24:49:88:11:9d:8d:5e:1b:
29:38:70:bc:71:d8:60:77:75:1e:f6:2b:09:21:c6:04:1d:c6:
9d:85:0f:42:9d:e2:98:72:49:bf:8d:b2:47:fe:c8:54:84:f0:
c2:02:be:6d:de:f1:ef:5f:07:61:36:d5:1a:09:8e:04:01:02:
80:f2:8f:6b:81:d4:bc:31:86:d9:f2:1e:7e:6b:c7:cd:f2:0f:
b8:0b:1d:f3:34:d0:1c:db:db:d1:2d:dc:75:b4:3a:c6:17:7c:
d3:44:98:ca:ef:41:6a:4e:e4:f7:a4:06:5d:32:9a:23:95:fc:
b2:d3:de:fc:2d:c5:f8:51:2b:61:b8:24:f8:22:b1:75:b1:86:
34:c1:b2:88:b2:c4:f2:92:de:55:37:6b:a2:56:63:88:c1:2f:
3b:76:bc:ff:92:f4:e2:d6:8a:5a:3c:9d:54:e8:44:21:74:c0:
3b:64:9c:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 21:11:35 2025 by rpki-client