Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/918ac3-49a5-4a32-bd72-723baa8e688a/1/SKyAa1vKTH2RbVA9XHk8jfRO5tM.mft
File: SKyAa1vKTH2RbVA9XHk8jfRO5tM.mft (raw, json)
Hash identifier: EeRjmORuufsCcD5elbzICrvfDA+fuJ4TyWq9JqUVX/A=
Subject key identifier: 91:DC:37:E8:E4:0D:3B:EF:AF:A8:E3:FA:45:C9:04:8D:EE:B1:BA:D2
Authority key identifier: 48:AC:80:6B:5B:CA:4C:7D:91:6D:50:3D:5C:79:3C:8D:F4:4E:E6:D3
Certificate issuer: /CN=48ac806b5bca4c7d916d503d5c793c8df44ee6d3
Certificate serial: 01974DB2A95D48721426E7BB73C14DB1344A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SKyAa1vKTH2RbVA9XHk8jfRO5tM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/918ac3-49a5-4a32-bd72-723baa8e688a/1/SKyAa1vKTH2RbVA9XHk8jfRO5tM.mft
Manifest number: 048D
Signing time: Sun 08 Jun 2025 04:00:43 +0000
Manifest this update: Sun 08 Jun 2025 04:00:43 +0000
Manifest next update: Mon 09 Jun 2025 04:00:43 +0000
Files and hashes: 1: SKyAa1vKTH2RbVA9XHk8jfRO5tM.crl (hash: n3E4XHr3NDo8fgYp46v1ee6WaxOKRJI+Qj+4SAToWUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/918ac3-49a5-4a32-bd72-723baa8e688a/1/SKyAa1vKTH2RbVA9XHk8jfRO5tM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/918ac3-49a5-4a32-bd72-723baa8e688a/1/SKyAa1vKTH2RbVA9XHk8jfRO5tM.mft
rsync://rpki.ripe.net/repository/DEFAULT/SKyAa1vKTH2RbVA9XHk8jfRO5tM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:b2:a9:5d:48:72:14:26:e7:bb:73:c1:4d:b1:34:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48ac806b5bca4c7d916d503d5c793c8df44ee6d3
Validity
Not Before: Jun 8 04:00:43 2025 GMT
Not After : Jun 9 04:00:43 2025 GMT
Subject: CN=91dc37e8e40d3befafa8e3fa45c9048deeb1bad2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:84:37:c9:1f:a4:06:a4:28:13:cd:71:5d:22:
cf:11:a2:f8:65:77:59:8f:06:6e:a5:9f:db:da:43:
1d:2d:32:a5:87:42:9c:d7:46:bc:68:62:f3:f4:54:
4e:b6:fd:25:4c:51:29:ce:e0:34:b9:84:2b:3c:f3:
50:e6:a2:e7:5f:2d:ce:14:8f:ea:e7:d1:e5:19:40:
04:c3:5e:03:49:9f:6f:b0:62:80:77:88:85:ab:b8:
03:09:bb:c5:3b:e2:34:64:8c:a1:94:16:21:a1:b5:
e8:e7:6d:68:7a:ec:9a:1f:fa:ab:e8:be:c2:c9:4a:
e1:1e:c1:37:30:6d:3c:85:3c:ea:61:9a:80:dc:f9:
d3:6a:f7:87:40:66:30:2f:b5:5a:b0:11:18:25:d7:
d6:70:82:c9:27:ad:32:6d:03:83:5b:a3:da:59:44:
ae:a8:1d:cc:09:1d:ca:7d:34:71:53:cb:ad:59:25:
fe:b9:e4:fc:3b:49:e9:c6:a8:d4:8a:2c:ac:7e:8a:
43:0e:ba:2c:3f:04:ff:ac:fe:b6:33:56:c4:99:c5:
1a:68:23:a3:f9:0b:b7:67:e3:f2:a4:10:7b:00:71:
26:d7:b1:93:3d:ce:ac:f1:d9:cc:80:f0:66:12:da:
81:7d:93:7f:ba:7c:83:a1:55:55:f4:f4:20:aa:67:
f6:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:DC:37:E8:E4:0D:3B:EF:AF:A8:E3:FA:45:C9:04:8D:EE:B1:BA:D2
X509v3 Authority Key Identifier:
keyid:48:AC:80:6B:5B:CA:4C:7D:91:6D:50:3D:5C:79:3C:8D:F4:4E:E6:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SKyAa1vKTH2RbVA9XHk8jfRO5tM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/918ac3-49a5-4a32-bd72-723baa8e688a/1/SKyAa1vKTH2RbVA9XHk8jfRO5tM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/918ac3-49a5-4a32-bd72-723baa8e688a/1/SKyAa1vKTH2RbVA9XHk8jfRO5tM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:62:24:95:f4:5a:82:03:37:ea:f8:d3:aa:af:6e:8b:e1:0c:
c1:0a:c0:27:9d:c3:d8:60:77:f0:c4:a7:5a:24:08:b0:f4:2d:
0b:87:3b:0c:72:7e:66:88:9b:f3:f2:bd:e1:cd:6e:4f:df:86:
a4:5f:8d:23:a6:3e:a6:54:ff:ee:bc:49:b5:94:4f:ce:a2:30:
11:e9:1b:c4:6d:42:9c:18:ad:d7:5a:3b:98:9c:31:40:7d:e4:
a2:65:81:27:89:3f:5f:be:7b:7e:b6:ba:47:17:8f:0c:6f:b1:
00:54:9b:bd:17:9d:dc:c0:6c:35:5b:d9:07:d5:67:1e:2d:b7:
2b:6d:a1:af:58:f1:0a:68:b0:3e:45:59:c7:a3:2c:df:08:69:
cf:82:c1:15:7d:8e:57:4e:62:27:5a:57:b7:72:78:91:1a:be:
e4:38:31:f7:2e:06:fa:22:5f:d4:9b:9a:8f:3d:2d:64:e4:6a:
d4:f6:bc:12:04:8c:8c:c2:14:e2:c4:3d:af:19:f2:84:8c:61:
5d:57:f5:24:4e:79:d3:4d:47:2a:d2:ed:4a:29:b4:45:02:87:
31:c9:54:4a:a0:9f:a6:11:6c:82:aa:1c:44:7c:4c:cc:79:ee:
f7:ea:8b:b2:ae:78:55:e5:d4:26:e1:e3:bd:db:71:dd:24:48:
f4:80:d9:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdNsqldSHIUJue7c8FNsTRKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4YWM4MDZiNWJjYTRjN2Q5MTZkNTAzZDVjNzkzYzhkZjQ0
ZWU2ZDMwHhcNMjUwNjA4MDQwMDQzWhcNMjUwNjA5MDQwMDQzWjAzMTEwLwYDVQQD
Eyg5MWRjMzdlOGU0MGQzYmVmYWZhOGUzZmE0NWM5MDQ4ZGVlYjFiYWQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0YQ3yR+kBqQoE81xXSLPEaL4ZXdZ
jwZupZ/b2kMdLTKlh0Kc10a8aGLz9FROtv0lTFEpzuA0uYQrPPNQ5qLnXy3OFI/q
59HlGUAEw14DSZ9vsGKAd4iFq7gDCbvFO+I0ZIyhlBYhobXo521oeuyaH/qr6L7C
yUrhHsE3MG08hTzqYZqA3PnTaveHQGYwL7VasBEYJdfWcILJJ60ybQODW6PaWUSu
qB3MCR3KfTRxU8utWSX+ueT8O0npxqjUiiysfopDDrosPwT/rP62M1bEmcUaaCOj
+Qu3Z+PypBB7AHEm17GTPc6s8dnMgPBmEtqBfZN/unyDoVVV9PQgqmf28wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJHcN+jkDTvvr6jj+kXJBI3usbrSMB8GA1UdIwQY
MBaAFEisgGtbykx9kW1QPVx5PI30TubTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0t5QWExdktUSDJSYlZBOVhIazhqZlJPNXRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi85MThhYzMtNDlhNS00YTMyLWJkNzIt
NzIzYmFhOGU2ODhhLzEvU0t5QWExdktUSDJSYlZBOVhIazhqZlJPNXRNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi85MThhYzMtNDlhNS00YTMyLWJkNzItNzIzYmFhOGU2ODhh
LzEvU0t5QWExdktUSDJSYlZBOVhIazhqZlJPNXRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACmIklfRa
ggM36vjTqq9ui+EMwQrAJ53D2GB38MSnWiQIsPQtC4c7DHJ+Zoib8/K94c1uT9+G
pF+NI6Y+plT/7rxJtZRPzqIwEekbxG1CnBit11o7mJwxQH3komWBJ4k/X757fra6
RxePDG+xAFSbvRed3MBsNVvZB9VnHi23K22hr1jxCmiwPkVZx6Ms3whpz4LBFX2O
V05iJ1pXt3J4kRq+5Dgx9y4G+iJf1Juajz0tZORq1Pa8EgSMjMIU4sQ9rxnyhIxh
XVf1JE55001HKtLtSim0RQKHMclUSqCfphFsgqocRHxMzHnu9+qLsq54VeXUJuHj
vdtx3SRI9IDZXQ==
-----END CERTIFICATE-----
Generated at Sun Jun 8 07:15:26 2025 by rpki-client