Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/918ac3-49a5-4a32-bd72-723baa8e688a/1/SKyAa1vKTH2RbVA9XHk8jfRO5tM.mft
File: SKyAa1vKTH2RbVA9XHk8jfRO5tM.mft (raw, json)
Hash identifier: wioRMQkxcopc5lSGDN5inDIa8xkRiJX6+5OcNDnTXCk=
Subject key identifier: E3:60:D4:BC:C0:66:75:4B:65:34:02:D5:39:0F:2D:CB:2D:D3:28:0B
Authority key identifier: 48:AC:80:6B:5B:CA:4C:7D:91:6D:50:3D:5C:79:3C:8D:F4:4E:E6:D3
Certificate issuer: /CN=48ac806b5bca4c7d916d503d5c793c8df44ee6d3
Certificate serial: 01964CD972CCA9AB2C4845E464540693D3AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SKyAa1vKTH2RbVA9XHk8jfRO5tM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/918ac3-49a5-4a32-bd72-723baa8e688a/1/SKyAa1vKTH2RbVA9XHk8jfRO5tM.mft
Manifest number: 0408
Signing time: Sat 19 Apr 2025 07:00:41 +0000
Manifest this update: Sat 19 Apr 2025 07:00:41 +0000
Manifest next update: Sun 20 Apr 2025 07:00:41 +0000
Files and hashes: 1: SKyAa1vKTH2RbVA9XHk8jfRO5tM.crl (hash: TTp5ev6SN7BciHJLrtTI1ndZ1doZyQF+/nFPLNoIfdM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/918ac3-49a5-4a32-bd72-723baa8e688a/1/SKyAa1vKTH2RbVA9XHk8jfRO5tM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/918ac3-49a5-4a32-bd72-723baa8e688a/1/SKyAa1vKTH2RbVA9XHk8jfRO5tM.mft
rsync://rpki.ripe.net/repository/DEFAULT/SKyAa1vKTH2RbVA9XHk8jfRO5tM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:d9:72:cc:a9:ab:2c:48:45:e4:64:54:06:93:d3:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48ac806b5bca4c7d916d503d5c793c8df44ee6d3
Validity
Not Before: Apr 19 07:00:41 2025 GMT
Not After : Apr 20 07:00:41 2025 GMT
Subject: CN=e360d4bcc066754b653402d5390f2dcb2dd3280b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e9:14:79:52:a1:9b:a1:ed:b9:68:f0:0d:89:
35:48:61:fb:64:8f:b5:42:33:50:71:77:a9:ba:b4:
63:bf:e1:ea:99:53:7e:07:88:6e:dc:a2:ad:d4:70:
44:7b:7c:fc:b0:75:ba:a5:86:99:e1:c7:cd:e7:58:
31:2f:d0:34:5f:44:21:ec:a3:98:34:e3:2a:91:3f:
53:8e:40:af:bd:29:74:ef:4b:ad:af:f7:46:3b:b7:
0a:c9:61:15:b9:5a:d2:14:b3:6b:62:10:88:61:5d:
f4:70:61:29:80:2f:41:0b:47:79:e5:71:27:22:54:
b1:3b:67:0e:24:55:42:cc:ef:07:16:54:11:6d:12:
44:39:4e:ef:47:6c:d8:43:54:76:22:fa:28:c6:69:
7e:11:09:c1:67:0d:9b:f7:73:a8:71:b3:09:21:77:
be:c7:af:23:02:9b:36:8d:65:90:a6:91:24:99:3a:
57:6b:de:98:cb:8e:7e:af:c8:08:97:73:cf:b4:10:
a5:4d:ac:5c:25:6a:24:65:ef:0a:11:c7:29:31:e7:
71:12:25:df:24:f9:5f:54:1c:f1:c3:a4:12:3e:2f:
9f:fb:ee:f9:ca:31:fb:90:88:e4:3d:dc:da:75:8d:
68:80:fc:92:2a:3c:c9:26:3c:67:4a:94:15:b4:1b:
b9:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:60:D4:BC:C0:66:75:4B:65:34:02:D5:39:0F:2D:CB:2D:D3:28:0B
X509v3 Authority Key Identifier:
keyid:48:AC:80:6B:5B:CA:4C:7D:91:6D:50:3D:5C:79:3C:8D:F4:4E:E6:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SKyAa1vKTH2RbVA9XHk8jfRO5tM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/918ac3-49a5-4a32-bd72-723baa8e688a/1/SKyAa1vKTH2RbVA9XHk8jfRO5tM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/918ac3-49a5-4a32-bd72-723baa8e688a/1/SKyAa1vKTH2RbVA9XHk8jfRO5tM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:f4:da:e7:db:51:ce:f5:80:67:77:4b:9c:04:71:74:0f:ca:
82:a4:14:68:f7:cb:93:07:bc:5c:9b:15:2d:b1:ac:2f:e6:80:
85:8f:fa:7c:29:1b:c1:62:51:5d:f3:32:1b:c7:ce:97:67:ef:
b8:f1:d5:83:79:1f:80:5a:bc:b8:a1:ad:1c:5f:01:9f:7d:ad:
18:09:5b:3c:7a:8d:6c:65:0b:b9:2e:60:22:06:ef:76:a3:6c:
84:6a:ce:28:cb:63:40:df:a0:bb:45:f7:8a:e1:38:c5:54:71:
7a:f7:d0:32:d0:3a:98:29:9c:e9:9f:64:71:b0:7b:7f:99:ab:
b1:a5:f7:a6:96:92:ec:1b:ac:32:b7:66:9d:8c:9c:8a:f0:83:
bd:ac:b1:88:8e:c1:e0:9a:38:32:5c:a1:2c:b0:62:d6:a7:88:
38:7d:6f:d6:cf:62:1c:62:47:8f:51:bc:a7:ec:e1:b1:f5:34:
74:85:ae:76:3d:34:9c:3f:38:49:94:77:c5:2a:b7:49:1c:f2:
94:85:f8:9d:37:01:fe:5a:3f:5d:35:3e:7b:6d:71:7d:8c:28:
ec:66:f5:9d:98:72:d0:55:14:84:48:6e:32:2a:ca:bc:f1:8d:
18:74:e1:dc:2f:84:ba:95:b1:9a:f7:fc:53:b5:3e:88:29:83:
40:d0:b0:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:28:31 2025 by rpki-client