Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/fa5519-0e35-44cf-9d4f-2aea75c2df78/1/SktRP35EbgzW3P5Wgpu8n-SY0-g.mft
File: SktRP35EbgzW3P5Wgpu8n-SY0-g.mft (raw, json)
Hash identifier: rtooOt81PGDKONXKt2PaWydMEELMz3MR8a6vQvt2aK4=
Subject key identifier: 71:E1:6B:90:CE:5C:04:3E:29:C6:57:CF:C6:46:9E:69:3B:B5:FE:41
Authority key identifier: 4A:4B:51:3F:7E:44:6E:0C:D6:DC:FE:56:82:9B:BC:9F:E4:98:D3:E8
Certificate issuer: /CN=4a4b513f7e446e0cd6dcfe56829bbc9fe498d3e8
Certificate serial: 019748558F0A7C5EE5EE945031EDEACBD826
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SktRP35EbgzW3P5Wgpu8n-SY0-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/fa5519-0e35-44cf-9d4f-2aea75c2df78/1/SktRP35EbgzW3P5Wgpu8n-SY0-g.mft
Manifest number: 14F9
Signing time: Sat 07 Jun 2025 03:00:56 +0000
Manifest this update: Sat 07 Jun 2025 03:00:56 +0000
Manifest next update: Sun 08 Jun 2025 03:00:56 +0000
Files and hashes: 1: HHCE3_k42ANiRenbW8_HYWzMUCQ.roa (hash: +PRlcFsqioXeS3bFma85/Up104JVGK2pFTDzqwQatjg=)
2: SktRP35EbgzW3P5Wgpu8n-SY0-g.crl (hash: /9FIMIkdwZlj0nqYXcXfIhL1m65NnQH+TpwBL+2kxUI=)
3: YwES8R9xRhrFpLG3cV7yoeKQ6tE.roa (hash: fX/IIRdgZ8uMVTDgkZp0nm1MBfHNGan3NvLFwQRulBs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/fa5519-0e35-44cf-9d4f-2aea75c2df78/1/SktRP35EbgzW3P5Wgpu8n-SY0-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/fa5519-0e35-44cf-9d4f-2aea75c2df78/1/SktRP35EbgzW3P5Wgpu8n-SY0-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/SktRP35EbgzW3P5Wgpu8n-SY0-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:55:8f:0a:7c:5e:e5:ee:94:50:31:ed:ea:cb:d8:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a4b513f7e446e0cd6dcfe56829bbc9fe498d3e8
Validity
Not Before: Jun 7 03:00:56 2025 GMT
Not After : Jun 8 03:00:56 2025 GMT
Subject: CN=71e16b90ce5c043e29c657cfc6469e693bb5fe41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:8f:e9:9f:a3:0e:95:22:a4:15:81:7f:f8:1c:
f0:b2:7d:5b:8e:42:f8:19:f1:5a:3a:35:98:05:f9:
5e:16:b6:b4:3c:fc:de:39:de:bf:a4:81:48:27:d4:
cc:19:26:bb:4c:84:7a:c0:87:bd:94:cb:e3:b6:ab:
6e:b0:12:2f:23:83:34:b3:ec:99:2e:9c:8e:f1:f7:
b5:35:64:50:cb:ca:07:f8:33:bb:c2:23:d0:e2:66:
99:40:98:f1:54:1b:37:62:6e:a9:26:d4:7d:fa:f7:
6c:0b:cd:a6:d6:b4:90:ae:a4:1f:e6:d6:ff:3c:91:
e4:8c:75:14:ea:60:2d:51:0c:58:ab:eb:68:3e:86:
72:80:23:34:a5:5f:c2:98:5d:31:73:0e:b4:e4:59:
0d:3f:0f:83:02:5c:e7:ba:ff:d7:e8:c6:44:d7:07:
3d:fe:d3:a7:14:37:3e:9f:ae:6d:42:a9:9f:7a:8b:
44:db:f4:02:da:17:f6:76:80:26:f2:7f:dd:a5:e8:
3c:4d:6f:55:37:31:2f:63:b3:1e:51:9a:a6:0d:8c:
ae:3b:18:04:89:a3:56:4a:52:fe:d9:d1:b9:87:e7:
e4:88:6f:fb:fd:cd:be:5b:e5:df:e3:59:b5:7d:cb:
cb:d1:57:d7:f4:21:67:cc:72:31:b2:22:90:7d:f6:
4e:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:E1:6B:90:CE:5C:04:3E:29:C6:57:CF:C6:46:9E:69:3B:B5:FE:41
X509v3 Authority Key Identifier:
keyid:4A:4B:51:3F:7E:44:6E:0C:D6:DC:FE:56:82:9B:BC:9F:E4:98:D3:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SktRP35EbgzW3P5Wgpu8n-SY0-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fa5519-0e35-44cf-9d4f-2aea75c2df78/1/SktRP35EbgzW3P5Wgpu8n-SY0-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fa5519-0e35-44cf-9d4f-2aea75c2df78/1/SktRP35EbgzW3P5Wgpu8n-SY0-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:fb:85:4f:b9:03:f2:78:5a:46:7a:65:68:7a:50:08:fc:5c:
be:40:c1:32:37:be:32:20:34:5a:17:5d:ad:08:7a:cd:8c:6b:
7b:13:e4:ee:b8:50:bf:8a:03:35:53:60:76:5f:2c:ea:cc:59:
be:c7:46:94:4b:f8:fb:f1:bf:48:00:1e:e5:a8:f5:e2:ec:46:
df:4e:0d:a5:45:8c:36:1c:99:9a:1c:bf:94:85:3d:d3:1b:fc:
e5:cc:07:ad:02:a2:4d:d5:29:c2:14:39:55:36:03:c4:22:29:
1a:33:f0:04:59:06:8d:99:fa:2a:67:56:e7:e9:51:61:b9:5c:
97:9c:1e:45:3e:37:21:8c:0a:7d:34:3a:1f:e4:25:53:f6:0f:
fd:e4:09:82:0e:80:60:cb:52:1d:16:bf:6a:c8:92:14:b9:f5:
d4:3b:ed:ca:f1:2e:c5:5a:66:65:87:24:66:b5:27:3b:ff:78:
84:20:5e:db:b5:63:d4:36:b1:61:51:4e:4c:e2:8d:64:cf:f2:
d0:6f:e6:1c:77:b8:03:32:96:d0:f9:5f:aa:e6:8c:3f:69:5d:
5d:13:ec:61:b3:54:7b:d3:96:6c:86:8d:7d:2d:bc:d3:c9:00:
a0:09:cf:24:14:88:78:4d:ad:8d:de:f0:70:42:34:a2:81:a6:
d0:8f:47:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:27:25 2025 by rpki-client