Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/5731da-6665-4161-80c1-5e79b4435e2c/1/SkCVVRBQQFeMspYHAHT0UQclLus.mft
File: SkCVVRBQQFeMspYHAHT0UQclLus.mft (raw, json)
Hash identifier: kYjPV7e84YJtaU8bFb6H7DUcYfHiYW2mFuBNtdu6/1Y=
Subject key identifier: 33:5E:0A:87:4E:CB:1B:DF:BB:CD:1E:A2:09:CE:A0:D8:78:0A:88:B6
Authority key identifier: 4A:40:95:55:10:50:40:57:8C:B2:96:07:00:74:F4:51:07:25:2E:EB
Certificate issuer: /CN=4a409555105040578cb296070074f45107252eeb
Certificate serial: 019747E750BA0A272E6F532C388965AEAB8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SkCVVRBQQFeMspYHAHT0UQclLus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/5731da-6665-4161-80c1-5e79b4435e2c/1/SkCVVRBQQFeMspYHAHT0UQclLus.mft
Manifest number: 0E2E
Signing time: Sat 07 Jun 2025 01:00:31 +0000
Manifest this update: Sat 07 Jun 2025 01:00:31 +0000
Manifest next update: Sun 08 Jun 2025 01:00:31 +0000
Files and hashes: 1: RZvG8tfD1IhES3sTSq4PUTIau5M.roa (hash: 156XMiSx9vA1oBj0STlN0OZ/clFU7kVwEnhKeXGoaaM=)
2: SkCVVRBQQFeMspYHAHT0UQclLus.crl (hash: w2WIK9BuGyOtEu8tO3MAM6DTFzAbazEqJVWpZ/oxwD0=)
3: n34nAFTJk7pyD4Fldmcf5TLggoo.roa (hash: a/rNjgL4eu7nYmXqkssaZat+cUqAsRT2cGSOePDkoao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/5731da-6665-4161-80c1-5e79b4435e2c/1/SkCVVRBQQFeMspYHAHT0UQclLus.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/5731da-6665-4161-80c1-5e79b4435e2c/1/SkCVVRBQQFeMspYHAHT0UQclLus.mft
rsync://rpki.ripe.net/repository/DEFAULT/SkCVVRBQQFeMspYHAHT0UQclLus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:e7:50:ba:0a:27:2e:6f:53:2c:38:89:65:ae:ab:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a409555105040578cb296070074f45107252eeb
Validity
Not Before: Jun 7 01:00:31 2025 GMT
Not After : Jun 8 01:00:31 2025 GMT
Subject: CN=335e0a874ecb1bdfbbcd1ea209cea0d8780a88b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c6:d0:0d:57:a5:79:e7:7a:c1:4f:13:a2:5b:
84:7f:65:06:25:e3:26:16:05:07:2d:ef:e0:c0:64:
47:2a:f9:9b:51:84:b2:e0:49:22:04:93:79:e2:4f:
64:27:4c:25:d2:a5:8c:98:8a:e3:5e:ee:07:64:80:
88:d5:a1:50:ba:3a:09:7a:90:f3:1b:4f:dd:19:d0:
54:c0:42:d9:10:20:85:36:b6:19:29:89:31:13:bf:
37:2b:76:74:05:40:42:7f:0e:cd:5f:6d:2e:85:96:
9f:25:dd:83:c7:0f:8b:96:5f:2e:af:e2:af:d9:9f:
03:79:7a:eb:91:d5:50:44:f7:da:d1:7c:c0:29:68:
df:6f:ba:36:29:6d:16:29:d7:40:2b:18:f7:93:7f:
3e:6a:a4:89:38:8d:ca:ed:ce:2f:40:1b:02:b3:54:
f8:02:53:96:95:79:ec:cb:61:ec:0e:3c:9d:8d:96:
87:c0:62:32:fd:f8:88:a4:70:71:08:a7:95:7d:15:
78:cc:2f:f9:cf:0f:05:29:2d:84:d5:72:2a:22:c4:
02:ca:a6:c8:be:5d:40:dc:8e:c6:49:6a:0f:12:c2:
2e:16:b9:d2:50:8d:66:ad:bb:bd:8c:33:c0:1c:6c:
06:49:8c:97:a8:13:e5:a3:ef:50:70:cd:61:0d:d3:
9f:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:5E:0A:87:4E:CB:1B:DF:BB:CD:1E:A2:09:CE:A0:D8:78:0A:88:B6
X509v3 Authority Key Identifier:
keyid:4A:40:95:55:10:50:40:57:8C:B2:96:07:00:74:F4:51:07:25:2E:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SkCVVRBQQFeMspYHAHT0UQclLus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/5731da-6665-4161-80c1-5e79b4435e2c/1/SkCVVRBQQFeMspYHAHT0UQclLus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/5731da-6665-4161-80c1-5e79b4435e2c/1/SkCVVRBQQFeMspYHAHT0UQclLus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:27:e5:3b:ca:b3:96:58:30:66:f8:74:11:57:85:31:7f:d4:
7d:f7:0f:4f:3b:68:6f:5b:f8:dd:58:8d:f5:6a:a4:1a:cb:9b:
82:01:25:1f:a8:a9:5d:7a:36:3d:22:b8:02:52:a2:37:c2:2b:
39:7b:d1:5a:31:87:94:ae:f1:43:8b:18:64:88:c3:be:1e:df:
6d:73:88:6a:f0:9a:12:5e:85:28:b3:b4:99:c0:f7:e8:6e:1e:
d5:38:d1:6a:77:5a:46:98:96:c5:f8:ee:85:1e:80:9e:b1:ae:
48:3e:49:1f:dd:de:f9:cd:bf:52:9d:fb:9d:9b:b1:28:70:8c:
a1:e5:72:bd:86:51:ea:32:46:7b:5a:92:77:48:79:c2:3b:8b:
62:57:15:d5:fd:46:0d:9c:78:79:e5:58:7e:59:b5:dd:c2:48:
fa:30:86:b9:06:e8:c8:74:93:93:c6:4a:0b:a5:d3:f7:a1:58:
df:01:fe:63:28:da:19:cd:c2:fc:5a:c5:90:bb:6e:a9:95:ce:
0b:21:e1:28:ca:19:62:c0:e7:e2:f0:03:64:3e:a7:ca:66:bd:
dc:ec:0c:c3:ea:91:c1:c4:96:30:51:df:0d:e0:5b:cb:af:b7:
49:06:22:4b:2f:31:b0:1e:cb:67:65:5f:5b:13:e0:07:38:ce:
f3:72:c7:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:27:53 2025 by rpki-client