Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/c670e2-5401-4243-a9bb-3736d40ca07e/1/SKvTlzl8CmIzcipFkF6MZzEgx6w.mft
File: SKvTlzl8CmIzcipFkF6MZzEgx6w.mft (raw, json)
Hash identifier: /T2yVZoS4tIp1XNw4lVfstCLS9tnP9pC3wSg0Tle/XI=
Subject key identifier: BA:9E:8D:9E:9D:FB:9B:13:8B:DC:49:D1:00:23:83:E0:DE:50:60:89
Authority key identifier: 48:AB:D3:97:39:7C:0A:62:33:72:2A:45:90:5E:8C:67:31:20:C7:AC
Certificate issuer: /CN=48abd397397c0a6233722a45905e8c673120c7ac
Certificate serial: 01975C813EB712B57C809607D6B8A0652A43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SKvTlzl8CmIzcipFkF6MZzEgx6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/c670e2-5401-4243-a9bb-3736d40ca07e/1/SKvTlzl8CmIzcipFkF6MZzEgx6w.mft
Manifest number: 030B
Signing time: Wed 11 Jun 2025 01:01:03 +0000
Manifest this update: Wed 11 Jun 2025 01:01:03 +0000
Manifest next update: Thu 12 Jun 2025 01:01:03 +0000
Files and hashes: 1: SKvTlzl8CmIzcipFkF6MZzEgx6w.crl (hash: 4JqMLy+Aon1aQIBuE/+i4jNU9RgRHk0bxOVCyJuUcbc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/c670e2-5401-4243-a9bb-3736d40ca07e/1/SKvTlzl8CmIzcipFkF6MZzEgx6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/c670e2-5401-4243-a9bb-3736d40ca07e/1/SKvTlzl8CmIzcipFkF6MZzEgx6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/SKvTlzl8CmIzcipFkF6MZzEgx6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 23:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5c:81:3e:b7:12:b5:7c:80:96:07:d6:b8:a0:65:2a:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48abd397397c0a6233722a45905e8c673120c7ac
Validity
Not Before: Jun 11 01:01:03 2025 GMT
Not After : Jun 12 01:01:03 2025 GMT
Subject: CN=ba9e8d9e9dfb9b138bdc49d1002383e0de506089
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:7d:80:a3:d2:0f:e0:0b:8f:63:5c:df:2e:18:
50:9b:13:b6:d6:e4:0b:9e:00:73:8b:aa:cd:85:35:
2d:c5:eb:af:91:ff:63:c9:20:4f:41:e0:cf:13:36:
fc:02:8b:e9:16:1e:3a:fe:10:12:af:15:b3:f4:2c:
de:a4:35:55:e9:1f:8c:09:50:4a:07:23:7b:82:de:
98:d0:3d:44:97:8a:d1:c7:d6:86:7c:57:30:67:ec:
65:0e:46:fe:b7:78:59:ca:c8:3b:0d:0e:d9:08:24:
ee:7e:f5:6f:18:47:83:e3:32:53:d8:a5:2e:9d:80:
58:c9:b4:95:03:24:05:d5:45:44:ab:a9:fd:e1:17:
db:58:f3:28:a6:2e:56:d4:73:69:28:41:e2:d5:d2:
be:a8:66:b3:11:2e:fa:8e:85:7d:8e:9a:ee:14:17:
d4:39:92:40:d3:52:4f:d5:a8:9d:d7:f4:36:42:d9:
53:5e:83:04:81:00:5a:94:e5:3e:57:ff:16:73:2a:
a3:09:a3:d5:f0:c1:44:3e:58:85:e2:2c:14:7b:14:
13:ec:d9:0f:88:3d:4e:a8:1e:6b:19:bd:2c:59:8c:
12:ab:ef:d7:f5:b2:64:d3:9f:97:24:6f:6b:db:54:
1c:ee:9d:66:5d:54:49:47:46:8d:ea:e0:84:ab:60:
d7:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:9E:8D:9E:9D:FB:9B:13:8B:DC:49:D1:00:23:83:E0:DE:50:60:89
X509v3 Authority Key Identifier:
keyid:48:AB:D3:97:39:7C:0A:62:33:72:2A:45:90:5E:8C:67:31:20:C7:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SKvTlzl8CmIzcipFkF6MZzEgx6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/c670e2-5401-4243-a9bb-3736d40ca07e/1/SKvTlzl8CmIzcipFkF6MZzEgx6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/c670e2-5401-4243-a9bb-3736d40ca07e/1/SKvTlzl8CmIzcipFkF6MZzEgx6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:c0:4c:89:77:96:a1:35:78:42:91:37:45:70:0d:b2:bc:c9:
53:85:35:51:34:1f:ed:22:4d:a8:3c:5c:58:0b:85:f8:52:df:
6c:45:21:e1:2a:a7:2d:ea:6e:1e:01:b3:53:51:c8:84:39:d5:
54:e3:5a:f6:f1:30:43:c5:40:fe:02:cc:ad:f1:28:8a:01:46:
1c:2d:25:2e:34:54:9a:46:05:c5:86:8c:57:a5:57:03:53:25:
cd:91:19:79:d0:96:e8:e4:d0:b3:0c:2d:a8:d3:d1:04:ed:d1:
cf:e1:2d:76:99:3f:5f:52:9f:d5:e5:30:99:e6:9a:2b:c4:f3:
ce:9f:98:b1:81:f4:df:cd:5f:d0:21:0e:4f:00:62:87:d5:0c:
3a:b5:a4:05:6d:f9:a8:a3:fc:cd:a9:57:a2:1e:0c:9b:94:ba:
29:62:26:53:9d:7f:b0:51:1d:8e:6f:f9:a6:a0:2d:8d:7b:75:
7e:8f:a0:42:e4:f4:e1:70:5c:17:28:91:2d:18:80:77:51:c4:
29:8f:48:85:90:c5:47:37:f3:98:1f:3d:8a:45:8a:ca:3b:72:
46:17:f1:7e:1c:b0:84:80:51:a7:0c:06:e9:28:77:53:7f:97:
84:eb:51:02:15:8c:ad:9e:79:86:55:18:f9:f9:8d:03:ff:fb:
18:6e:cf:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 07:36:40 2025 by rpki-client