Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/c670e2-5401-4243-a9bb-3736d40ca07e/1/SKvTlzl8CmIzcipFkF6MZzEgx6w.mft
File: SKvTlzl8CmIzcipFkF6MZzEgx6w.mft (raw, json)
Hash identifier: WjS6pC57o7xAfQhO7q9XylTq3K38OpabD1kXDmpuk7M=
Subject key identifier: C8:49:23:BA:57:BE:CB:0C:16:ED:B9:D3:F2:D4:D8:38:58:99:14:07
Authority key identifier: 48:AB:D3:97:39:7C:0A:62:33:72:2A:45:90:5E:8C:67:31:20:C7:AC
Certificate issuer: /CN=48abd397397c0a6233722a45905e8c673120c7ac
Certificate serial: 0197605E0618CC3DA6777FFF1F8D8C79A490
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SKvTlzl8CmIzcipFkF6MZzEgx6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/c670e2-5401-4243-a9bb-3736d40ca07e/1/SKvTlzl8CmIzcipFkF6MZzEgx6w.mft
Manifest number: 030D
Signing time: Wed 11 Jun 2025 19:01:03 +0000
Manifest this update: Wed 11 Jun 2025 19:01:03 +0000
Manifest next update: Thu 12 Jun 2025 19:01:03 +0000
Files and hashes: 1: SKvTlzl8CmIzcipFkF6MZzEgx6w.crl (hash: v1v5hL5ol6Zp3GzoTRxqHwJFA0Jx7jo0gfQbee3zTck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/c670e2-5401-4243-a9bb-3736d40ca07e/1/SKvTlzl8CmIzcipFkF6MZzEgx6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/c670e2-5401-4243-a9bb-3736d40ca07e/1/SKvTlzl8CmIzcipFkF6MZzEgx6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/SKvTlzl8CmIzcipFkF6MZzEgx6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 19:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:60:5e:06:18:cc:3d:a6:77:7f:ff:1f:8d:8c:79:a4:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48abd397397c0a6233722a45905e8c673120c7ac
Validity
Not Before: Jun 11 19:01:03 2025 GMT
Not After : Jun 12 19:01:03 2025 GMT
Subject: CN=c84923ba57becb0c16edb9d3f2d4d83858991407
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ed:88:ce:63:35:9e:d9:3c:eb:28:98:be:12:
56:67:4d:be:8a:13:18:34:41:8c:76:37:f8:d9:3a:
51:10:ca:96:fc:d7:af:b3:39:07:1d:30:fc:24:67:
27:30:f7:1e:61:a0:22:17:7f:a4:43:26:f2:c7:bc:
48:7b:50:2c:af:fb:df:1a:9d:84:2b:e9:11:35:7d:
25:ec:40:9a:e0:5b:44:58:fd:88:7e:ea:6e:0c:28:
06:2e:06:97:1a:e9:69:dc:66:5a:e3:4c:36:ba:02:
2d:eb:16:f2:c9:30:93:15:cf:e2:02:da:af:db:43:
a5:41:62:1a:ea:1c:e8:5c:f7:9a:2d:c6:58:2a:a2:
76:fe:2a:9c:a3:b7:fd:a5:1b:c3:9e:af:cf:35:94:
ad:8a:5b:87:e7:88:a6:6b:af:61:9d:a9:f4:f5:fc:
e2:32:14:c6:f6:8d:17:bc:ca:a8:35:c7:96:02:d5:
5c:98:4e:70:f1:6d:17:b6:1e:58:02:87:32:67:86:
23:c7:fe:66:77:98:d4:e8:37:2e:95:26:0c:b0:3e:
3e:7b:b5:12:7c:b8:05:72:ef:94:75:8b:ca:ce:4a:
9a:b5:74:8c:b2:5f:92:58:67:30:75:fb:94:a1:26:
f5:64:63:00:39:46:9d:d0:a6:ba:be:37:47:18:7c:
70:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:49:23:BA:57:BE:CB:0C:16:ED:B9:D3:F2:D4:D8:38:58:99:14:07
X509v3 Authority Key Identifier:
keyid:48:AB:D3:97:39:7C:0A:62:33:72:2A:45:90:5E:8C:67:31:20:C7:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SKvTlzl8CmIzcipFkF6MZzEgx6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/c670e2-5401-4243-a9bb-3736d40ca07e/1/SKvTlzl8CmIzcipFkF6MZzEgx6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/c670e2-5401-4243-a9bb-3736d40ca07e/1/SKvTlzl8CmIzcipFkF6MZzEgx6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:ac:57:18:fd:c5:14:84:32:0c:75:99:df:41:a8:5c:41:3e:
cb:84:0e:7e:88:2b:86:48:4a:a8:ad:ea:a8:6d:6d:ff:68:7c:
1a:db:a6:57:d3:91:d7:c9:2e:70:f7:5d:76:1e:a4:e6:41:ae:
22:06:47:e3:8c:02:b4:04:38:67:8b:73:4b:c4:4b:e9:13:f4:
d5:32:9c:32:37:42:14:32:8e:8e:17:21:66:78:ce:37:15:e0:
b3:f2:16:7b:3d:68:12:9a:e0:2e:e4:1a:f4:cd:6a:99:ed:ca:
a6:4d:7a:50:3c:27:99:63:07:4d:01:47:9d:f9:a9:47:5e:90:
ee:44:8a:14:d7:e1:33:2c:25:60:09:49:6e:a1:73:11:25:10:
c6:43:44:ee:2d:7c:2d:5e:20:ce:fd:5c:58:5f:22:81:e0:0d:
d8:b3:2a:df:8f:2e:1b:ac:6e:79:f1:ae:15:7d:96:64:11:02:
58:da:0e:63:74:ea:c0:9c:37:0d:32:c8:fb:cf:dc:f2:ec:8c:
1a:e2:44:7b:71:73:a2:c2:14:7a:f0:4b:1a:6c:7d:01:9e:44:
bd:ec:93:99:d5:1e:14:5f:f7:51:ab:d7:68:8b:1a:88:9f:a1:
66:c9:f5:25:aa:fa:67:4f:2d:d8:4b:35:8e:2c:25:81:4a:29:
9c:d7:f3:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 04:45:11 2025 by rpki-client