Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/fa5519-0e35-44cf-9d4f-2aea75c2df78/1/SktRP35EbgzW3P5Wgpu8n-SY0-g.mft
File: SktRP35EbgzW3P5Wgpu8n-SY0-g.mft (raw, json)
Hash identifier: Gaf1ZHD3WvyHoFwyM+ALjSGQlz7AtlI3NmlbmwFjgpY=
Subject key identifier: 1D:F0:90:EA:B8:55:E8:3D:D9:E4:94:EA:3E:A7:6D:FF:8B:B7:63:5D
Authority key identifier: 4A:4B:51:3F:7E:44:6E:0C:D6:DC:FE:56:82:9B:BC:9F:E4:98:D3:E8
Certificate issuer: /CN=4a4b513f7e446e0cd6dcfe56829bbc9fe498d3e8
Certificate serial: 01951090212A3A4C887B0953A4276D30DF18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SktRP35EbgzW3P5Wgpu8n-SY0-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/fa5519-0e35-44cf-9d4f-2aea75c2df78/1/SktRP35EbgzW3P5Wgpu8n-SY0-g.mft
Manifest number: 13D3
Signing time: Sun 16 Feb 2025 21:00:35 +0000
Manifest this update: Sun 16 Feb 2025 21:00:35 +0000
Manifest next update: Mon 17 Feb 2025 21:00:35 +0000
Files and hashes: 1: HHCE3_k42ANiRenbW8_HYWzMUCQ.roa (hash: +PRlcFsqioXeS3bFma85/Up104JVGK2pFTDzqwQatjg=)
2: SktRP35EbgzW3P5Wgpu8n-SY0-g.crl (hash: /Z/O6OMMHw9DcW19yfVVTmru8FMsTgy+/U4P+9ITsVA=)
3: YwES8R9xRhrFpLG3cV7yoeKQ6tE.roa (hash: fX/IIRdgZ8uMVTDgkZp0nm1MBfHNGan3NvLFwQRulBs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/fa5519-0e35-44cf-9d4f-2aea75c2df78/1/SktRP35EbgzW3P5Wgpu8n-SY0-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/fa5519-0e35-44cf-9d4f-2aea75c2df78/1/SktRP35EbgzW3P5Wgpu8n-SY0-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/SktRP35EbgzW3P5Wgpu8n-SY0-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 21:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:90:21:2a:3a:4c:88:7b:09:53:a4:27:6d:30:df:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a4b513f7e446e0cd6dcfe56829bbc9fe498d3e8
Validity
Not Before: Feb 16 21:00:35 2025 GMT
Not After : Feb 17 21:00:35 2025 GMT
Subject: CN=1df090eab855e83dd9e494ea3ea76dff8bb7635d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:42:19:b7:af:ed:b8:c8:9c:68:c2:4f:d0:54:
eb:79:6c:ff:15:a9:d8:85:9b:07:6d:fe:b7:44:5a:
27:58:e1:9f:bf:1e:cf:38:d6:71:04:43:a5:40:05:
17:89:db:61:97:30:f5:5e:87:da:1d:6a:7d:84:64:
02:73:f9:62:40:08:c1:96:6e:76:c5:98:53:9b:da:
48:44:a7:49:e4:e8:0f:77:f2:45:c2:32:5b:e6:3b:
6e:48:5a:19:96:55:e0:d8:a6:e0:34:27:8c:2c:35:
6f:5f:e3:a8:c6:00:16:82:8e:d9:6b:87:22:c3:49:
92:01:56:1e:a3:aa:ba:95:6f:a2:b9:17:10:33:89:
b1:5e:56:fa:ab:38:ad:c8:be:60:36:9e:21:31:8b:
64:c0:fe:6b:1f:98:11:df:bf:5a:98:2d:70:4d:59:
1c:05:f8:cc:c0:6a:7f:16:b1:04:38:0a:fc:a5:ed:
d4:e9:80:27:8a:c9:16:e6:4f:1a:c9:5f:d9:9b:78:
a9:2f:c5:6b:73:a0:fc:84:88:e6:02:05:00:66:49:
fd:19:41:bd:b3:6f:b7:36:20:53:68:de:68:84:8d:
44:d1:16:b9:1c:d8:31:b6:2b:fd:ab:24:25:ef:a9:
bb:ec:4e:53:ad:97:c1:9b:b4:a8:83:b0:ea:e9:b3:
26:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:F0:90:EA:B8:55:E8:3D:D9:E4:94:EA:3E:A7:6D:FF:8B:B7:63:5D
X509v3 Authority Key Identifier:
keyid:4A:4B:51:3F:7E:44:6E:0C:D6:DC:FE:56:82:9B:BC:9F:E4:98:D3:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SktRP35EbgzW3P5Wgpu8n-SY0-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fa5519-0e35-44cf-9d4f-2aea75c2df78/1/SktRP35EbgzW3P5Wgpu8n-SY0-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fa5519-0e35-44cf-9d4f-2aea75c2df78/1/SktRP35EbgzW3P5Wgpu8n-SY0-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:5b:f6:6d:4d:77:ca:77:4e:ac:20:37:7e:e8:4a:f2:f0:f9:
94:25:88:3c:99:65:a8:2a:39:4b:61:5d:21:bd:63:4e:85:e9:
b8:49:a1:a0:2a:b1:1f:07:0d:e2:9a:79:0f:13:4b:d7:aa:44:
45:a7:33:68:f4:85:54:fc:c0:90:4c:c7:7a:b4:8d:e2:dc:8c:
7d:80:0f:74:e9:37:c0:14:45:55:7a:7e:dd:f5:18:22:ba:da:
7e:f3:e3:ae:0c:4d:72:4d:2d:1b:91:01:34:91:cb:28:00:07:
e4:83:27:49:88:68:21:8e:8a:28:3d:2b:0d:1c:7b:a1:cc:ba:
66:2e:6c:9a:9e:ce:f6:5a:b4:62:8b:ad:e2:b7:5a:d8:86:8c:
1e:45:14:aa:d2:c4:ac:44:54:68:5f:5f:b6:d6:35:0a:08:65:
27:40:de:75:25:5e:85:0f:11:5b:be:71:07:13:9e:24:78:9b:
bf:d6:05:7b:6d:4f:07:0a:a3:76:68:c6:03:f8:a9:3f:62:18:
8d:a0:01:56:98:ba:fe:aa:f1:05:e3:c6:05:7b:bf:5d:c4:b6:
fa:20:89:d4:10:d0:e8:8b:ef:5d:ce:4d:ea:4c:31:6c:49:38:
98:ad:53:16:3f:83:ad:c0:b9:41:77:bf:77:5b:ba:2b:30:73:
43:50:09:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:10:25 2025 by rpki-client