Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/5172cb-4b4b-43f1-8d27-f62766974353/1/skX7DTNtIH91Ns4pX55phiihTuQ.mft
File: skX7DTNtIH91Ns4pX55phiihTuQ.mft (raw, json)
Hash identifier: uSKNyBixFi6FB0FpM1mLZfJzTgxVzJTzy3Em1U02aNQ=
Subject key identifier: 24:BC:55:B1:CA:30:FC:6E:39:79:45:C3:24:7E:2A:FD:B9:99:D1:AB
Authority key identifier: B2:45:FB:0D:33:6D:20:7F:75:36:CE:29:5F:9E:69:86:28:A1:4E:E4
Certificate issuer: /CN=b245fb0d336d207f7536ce295f9e698628a14ee4
Certificate serial: 019759ED7F6EED8063EAEC9883A005555142
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/skX7DTNtIH91Ns4pX55phiihTuQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/5172cb-4b4b-43f1-8d27-f62766974353/1/skX7DTNtIH91Ns4pX55phiihTuQ.mft
Manifest number: 0991
Signing time: Tue 10 Jun 2025 13:00:26 +0000
Manifest this update: Tue 10 Jun 2025 13:00:26 +0000
Manifest next update: Wed 11 Jun 2025 13:00:26 +0000
Files and hashes: 1: skX7DTNtIH91Ns4pX55phiihTuQ.crl (hash: ujOLDHJi8zFzIzgG05UrvAfkhxSNK4ONyf/GSy55d1M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/5172cb-4b4b-43f1-8d27-f62766974353/1/skX7DTNtIH91Ns4pX55phiihTuQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/5172cb-4b4b-43f1-8d27-f62766974353/1/skX7DTNtIH91Ns4pX55phiihTuQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/skX7DTNtIH91Ns4pX55phiihTuQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 13:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:59:ed:7f:6e:ed:80:63:ea:ec:98:83:a0:05:55:51:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b245fb0d336d207f7536ce295f9e698628a14ee4
Validity
Not Before: Jun 10 13:00:26 2025 GMT
Not After : Jun 11 13:00:26 2025 GMT
Subject: CN=24bc55b1ca30fc6e397945c3247e2afdb999d1ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:52:24:66:99:72:42:59:66:a4:27:fa:27:a8:
d7:a6:3d:5a:f4:47:86:e8:19:4d:9d:95:a6:31:6b:
d5:05:46:9f:ed:fc:e6:12:b0:e9:2c:bc:87:11:10:
90:b0:30:ee:98:8b:3e:0c:c3:f1:2d:63:4a:35:9c:
47:b2:e2:39:57:42:da:f5:86:a9:29:80:b3:59:be:
da:4e:47:20:c6:56:9d:f5:01:6f:16:06:cf:78:ef:
e3:56:74:1d:c5:89:89:cc:21:8e:3e:8e:9e:31:97:
06:5a:84:43:6d:fe:5a:69:5a:7c:bc:95:51:ce:30:
fc:fa:6b:da:70:f4:fa:78:6e:5f:06:69:a6:12:28:
0b:b8:29:d0:08:1a:b5:2f:c3:64:99:44:5a:de:e0:
93:ea:8b:58:db:10:4a:27:ad:0e:c9:ef:1b:49:86:
c7:7c:38:88:d9:93:f5:a1:f7:60:0c:c2:f0:bb:bb:
10:f2:87:60:6a:64:ed:c9:62:9a:ac:3e:3d:0f:58:
03:85:43:58:20:65:72:55:d9:a0:cc:16:88:46:04:
d0:a4:a6:e4:ab:19:5d:4a:af:79:94:b2:1c:59:6b:
86:5d:38:d2:97:2d:67:f5:86:cb:39:3d:ac:cf:dc:
38:e6:13:02:93:de:2a:ce:e7:bd:29:eb:ae:5c:d5:
bf:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:BC:55:B1:CA:30:FC:6E:39:79:45:C3:24:7E:2A:FD:B9:99:D1:AB
X509v3 Authority Key Identifier:
keyid:B2:45:FB:0D:33:6D:20:7F:75:36:CE:29:5F:9E:69:86:28:A1:4E:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/skX7DTNtIH91Ns4pX55phiihTuQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/5172cb-4b4b-43f1-8d27-f62766974353/1/skX7DTNtIH91Ns4pX55phiihTuQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/5172cb-4b4b-43f1-8d27-f62766974353/1/skX7DTNtIH91Ns4pX55phiihTuQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:a3:c9:67:41:ef:5e:04:ed:db:7d:b6:26:04:95:e3:06:f3:
d4:64:3c:ed:e2:84:39:bd:65:8f:62:20:e5:67:44:cc:91:00:
cc:4c:5e:a3:5a:26:ce:ab:99:72:43:8e:a6:d7:6b:1f:b2:b5:
bd:fa:bc:51:a6:96:65:8d:8f:9b:bf:6c:2f:4d:4f:e3:f8:44:
7d:d9:fe:d8:b2:02:4d:1f:eb:26:72:c0:c0:37:31:22:44:2c:
d2:26:c6:fe:a6:dd:e7:a7:2f:01:fb:26:8f:f2:39:3e:4a:ae:
5e:eb:fc:f1:f5:ad:8e:5a:55:2c:87:cf:be:6c:69:d7:df:c3:
14:f9:74:fe:1a:e8:1d:10:42:be:76:dd:08:81:8f:93:d3:54:
d2:aa:a4:0c:86:b8:63:a1:9a:bf:a3:89:04:01:1b:5a:b7:00:
ae:f3:6f:4a:a6:ae:42:83:fa:ae:39:39:b1:da:2f:39:e9:e9:
68:ec:64:e4:6f:34:5f:7b:93:0d:47:f8:50:04:d1:b3:60:87:
b7:2c:e6:25:90:b2:3b:85:17:49:e3:48:64:d2:53:60:73:82:
37:18:32:a1:d2:d0:c9:88:41:75:26:82:67:b6:e3:a9:ce:c5:
b1:cf:d0:94:aa:08:c0:1f:bf:f9:c1:a7:c0:37:21:d1:64:31:
f8:2b:f4:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 23:15:49 2025 by rpki-client