Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/fa5519-0e35-44cf-9d4f-2aea75c2df78/1/SktRP35EbgzW3P5Wgpu8n-SY0-g.mft
File: SktRP35EbgzW3P5Wgpu8n-SY0-g.mft (raw, json)
Hash identifier: Vwh7lzqy4grMc2r4iVkkIgBZWY8NMfQzJqXoS1vrS/Q=
Subject key identifier: 0E:1E:B3:32:59:73:54:90:B0:E0:C7:48:52:46:E4:C3:F5:20:4C:23
Authority key identifier: 4A:4B:51:3F:7E:44:6E:0C:D6:DC:FE:56:82:9B:BC:9F:E4:98:D3:E8
Certificate issuer: /CN=4a4b513f7e446e0cd6dcfe56829bbc9fe498d3e8
Certificate serial: 019655006911EE9BF9C1AE873103D338218A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SktRP35EbgzW3P5Wgpu8n-SY0-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/fa5519-0e35-44cf-9d4f-2aea75c2df78/1/SktRP35EbgzW3P5Wgpu8n-SY0-g.mft
Manifest number: 147B
Signing time: Sun 20 Apr 2025 21:00:12 +0000
Manifest this update: Sun 20 Apr 2025 21:00:12 +0000
Manifest next update: Mon 21 Apr 2025 21:00:12 +0000
Files and hashes: 1: HHCE3_k42ANiRenbW8_HYWzMUCQ.roa (hash: +PRlcFsqioXeS3bFma85/Up104JVGK2pFTDzqwQatjg=)
2: SktRP35EbgzW3P5Wgpu8n-SY0-g.crl (hash: PWLWCCAMNY58cfAVunYVbE59g+zXmj+ZyLTvZ5Hhyoo=)
3: YwES8R9xRhrFpLG3cV7yoeKQ6tE.roa (hash: fX/IIRdgZ8uMVTDgkZp0nm1MBfHNGan3NvLFwQRulBs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/fa5519-0e35-44cf-9d4f-2aea75c2df78/1/SktRP35EbgzW3P5Wgpu8n-SY0-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/fa5519-0e35-44cf-9d4f-2aea75c2df78/1/SktRP35EbgzW3P5Wgpu8n-SY0-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/SktRP35EbgzW3P5Wgpu8n-SY0-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 21:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:00:69:11:ee:9b:f9:c1:ae:87:31:03:d3:38:21:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a4b513f7e446e0cd6dcfe56829bbc9fe498d3e8
Validity
Not Before: Apr 20 21:00:12 2025 GMT
Not After : Apr 21 21:00:12 2025 GMT
Subject: CN=0e1eb33259735490b0e0c7485246e4c3f5204c23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c2:6d:c7:0e:ad:53:63:69:c8:82:04:b6:f6:
2b:50:57:b3:88:34:b4:7d:e4:09:09:de:61:c7:2f:
51:da:1b:05:c1:20:6c:db:b0:ae:be:3c:f8:33:55:
e1:46:82:f7:0e:08:ca:45:0d:11:a2:25:62:8b:8d:
ad:96:a0:ca:f7:6b:03:1f:95:c5:18:41:53:38:c2:
ff:30:1e:55:f9:73:05:0e:4a:5b:ef:a0:82:0d:68:
e8:98:70:43:6d:82:9f:5e:ea:d8:4b:19:40:6b:65:
e0:80:0d:58:15:47:25:1f:d2:ae:09:9c:c9:11:51:
40:cb:d1:42:30:08:a6:b6:71:05:f3:e5:6a:87:ba:
30:e7:c8:80:fe:1b:ae:12:ff:8d:5d:39:6a:00:8a:
6c:98:cf:29:97:dc:7d:bc:f5:18:0d:aa:c4:00:75:
f8:3f:97:e4:9b:f5:0e:d8:96:f2:08:12:2a:8a:ae:
74:03:76:2f:1b:a2:8c:ab:ed:6a:d5:6d:4e:27:0a:
f1:28:91:0c:97:f5:20:2f:6d:3d:36:49:0d:79:8b:
b0:88:84:f6:cb:9e:0f:db:b0:fc:12:a6:bb:d5:d7:
5f:57:74:47:0a:44:0d:14:4a:9b:b1:a9:e0:d1:c0:
17:13:34:d2:24:6f:f8:1c:9d:b2:28:45:89:2d:5b:
ce:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:1E:B3:32:59:73:54:90:B0:E0:C7:48:52:46:E4:C3:F5:20:4C:23
X509v3 Authority Key Identifier:
keyid:4A:4B:51:3F:7E:44:6E:0C:D6:DC:FE:56:82:9B:BC:9F:E4:98:D3:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SktRP35EbgzW3P5Wgpu8n-SY0-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fa5519-0e35-44cf-9d4f-2aea75c2df78/1/SktRP35EbgzW3P5Wgpu8n-SY0-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fa5519-0e35-44cf-9d4f-2aea75c2df78/1/SktRP35EbgzW3P5Wgpu8n-SY0-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:4e:3f:4a:48:98:4f:ff:0a:41:bf:55:1e:64:49:84:ae:cf:
bf:ce:02:89:3f:b6:5c:01:c0:23:b7:8d:9c:23:14:51:16:4d:
0f:f0:cb:1f:7c:ee:d6:fd:8d:c1:d5:2f:b6:01:d8:63:4e:1b:
bb:f1:d2:0a:93:c6:0b:67:a8:6f:dd:a2:b5:95:3f:9b:10:d4:
71:31:ae:4c:68:f5:b6:4f:41:10:fa:4d:65:03:63:14:3b:d0:
26:28:40:ff:dc:35:ab:1e:9a:45:a9:92:f3:8e:46:93:ad:25:
92:2a:32:50:c3:2b:5c:c1:7d:10:35:75:8f:84:47:ee:b9:b8:
93:1c:41:2a:dc:5d:eb:79:dc:6c:c9:20:9d:6c:5f:d5:b9:ca:
a3:b6:54:73:b0:a0:0f:33:48:38:b7:48:dc:52:43:10:37:50:
4e:e0:61:b2:46:c8:0e:ad:72:8a:34:b4:2c:6d:46:67:b7:68:
10:de:61:44:71:5d:83:47:0d:fb:00:d6:b7:fd:62:e2:83:88:
56:b8:86:77:0b:0e:c2:1f:b1:ed:c0:59:a4:3a:ae:b9:bb:70:
c9:ba:b6:2e:11:c5:f0:57:1a:5b:a6:3a:79:b9:39:1b:c4:88:
d6:b3:f3:59:76:c2:a5:56:f8:23:6b:9f:c8:8f:d9:56:20:1b:
bc:76:9a:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:06:03 2025 by rpki-client