Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/c670e2-5401-4243-a9bb-3736d40ca07e/1/SKvTlzl8CmIzcipFkF6MZzEgx6w.mft
File: SKvTlzl8CmIzcipFkF6MZzEgx6w.mft (raw, json)
Hash identifier: tCcC9Sflsu9c7W++ZIsYFYmD0HPzl6aZuDB0UTna+hU=
Subject key identifier: CD:5E:49:EC:E0:CF:4B:EF:0E:B4:BA:FE:67:64:E3:03:FF:87:27:1A
Authority key identifier: 48:AB:D3:97:39:7C:0A:62:33:72:2A:45:90:5E:8C:67:31:20:C7:AC
Certificate issuer: /CN=48abd397397c0a6233722a45905e8c673120c7ac
Certificate serial: 019766293110DEFD06541FBDDB1527C669F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SKvTlzl8CmIzcipFkF6MZzEgx6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/c670e2-5401-4243-a9bb-3736d40ca07e/1/SKvTlzl8CmIzcipFkF6MZzEgx6w.mft
Manifest number: 0310
Signing time: Thu 12 Jun 2025 22:01:04 +0000
Manifest this update: Thu 12 Jun 2025 22:01:04 +0000
Manifest next update: Fri 13 Jun 2025 22:01:04 +0000
Files and hashes: 1: SKvTlzl8CmIzcipFkF6MZzEgx6w.crl (hash: izNOUmqebCFG3kaXIo4WHTvNGiVaReFJhSDT4uKNp3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/c670e2-5401-4243-a9bb-3736d40ca07e/1/SKvTlzl8CmIzcipFkF6MZzEgx6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/c670e2-5401-4243-a9bb-3736d40ca07e/1/SKvTlzl8CmIzcipFkF6MZzEgx6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/SKvTlzl8CmIzcipFkF6MZzEgx6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 22:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:66:29:31:10:de:fd:06:54:1f:bd:db:15:27:c6:69:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48abd397397c0a6233722a45905e8c673120c7ac
Validity
Not Before: Jun 12 22:01:04 2025 GMT
Not After : Jun 13 22:01:04 2025 GMT
Subject: CN=cd5e49ece0cf4bef0eb4bafe6764e303ff87271a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:69:01:77:fa:dd:c0:c2:f6:b5:54:a8:b3:7a:
aa:b5:22:ed:9a:a0:d9:1e:f5:c2:f6:38:d2:a6:5d:
05:e6:48:73:f0:e0:42:41:db:25:c4:e7:fb:48:bc:
09:c3:91:b2:c8:c4:50:d0:29:aa:b8:b5:aa:93:cb:
75:bd:86:79:26:b2:3e:37:43:80:ef:4d:95:96:b5:
40:75:cd:ef:39:49:a6:35:b3:b2:4c:9e:0d:b3:69:
d6:78:4b:22:cd:d4:68:d5:27:bf:f2:f2:6e:a7:7d:
ea:b2:93:34:6e:66:53:ff:89:3c:3a:e7:9a:4a:49:
2f:08:23:6a:dd:b1:07:e8:26:5e:cc:9f:4c:29:3b:
0d:2c:e9:0c:e6:f7:1b:36:63:90:8e:fe:35:4a:94:
fa:38:d2:d1:96:27:c8:2a:31:14:2b:14:ef:b7:d3:
49:58:29:4d:4f:d2:ef:de:f4:f1:f3:0c:75:20:91:
79:42:01:27:c7:c0:7f:84:38:69:f8:5b:06:0b:f2:
10:5f:6f:c6:02:54:0f:b9:8e:8e:55:f4:33:4b:6c:
d0:ae:a6:b8:e8:b2:a0:5c:d0:56:8a:e2:45:6e:3e:
41:ab:6e:16:4f:dc:3c:37:ba:ae:ba:ca:9b:6e:a4:
ae:c7:22:98:7d:de:82:97:ce:f4:a8:20:d8:68:a6:
b3:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:5E:49:EC:E0:CF:4B:EF:0E:B4:BA:FE:67:64:E3:03:FF:87:27:1A
X509v3 Authority Key Identifier:
keyid:48:AB:D3:97:39:7C:0A:62:33:72:2A:45:90:5E:8C:67:31:20:C7:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SKvTlzl8CmIzcipFkF6MZzEgx6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/c670e2-5401-4243-a9bb-3736d40ca07e/1/SKvTlzl8CmIzcipFkF6MZzEgx6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/c670e2-5401-4243-a9bb-3736d40ca07e/1/SKvTlzl8CmIzcipFkF6MZzEgx6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:7a:42:0a:e2:98:c6:38:b7:94:82:df:06:43:94:0b:a3:a1:
ca:6b:2a:3e:20:17:63:d5:b0:14:63:a0:af:ec:0e:6a:d1:ec:
5b:60:41:2e:0e:0c:c3:1a:c6:87:8c:b4:ad:8c:bc:92:4a:69:
24:40:2b:b2:b8:0a:57:62:a0:e8:34:f4:4b:85:ad:e6:4e:e7:
fa:e0:8f:76:bc:40:a1:75:c1:b5:eb:7e:57:68:46:dd:06:4d:
7f:ab:3f:22:63:42:a6:c6:90:61:76:69:5e:ad:8e:f4:b7:86:
52:a0:81:7c:4c:6c:c6:32:c4:43:99:e7:a8:ba:9a:17:00:d8:
33:12:77:da:b5:6c:d6:32:ec:53:f5:55:49:40:28:73:69:b8:
08:1d:d1:0d:3e:40:a8:61:6e:49:7c:81:00:04:96:5f:d2:ae:
63:81:8c:0f:bc:bd:6e:1c:74:1c:05:b7:5b:fd:d0:87:72:d2:
ea:0d:79:c3:50:71:6f:21:23:5e:81:c7:d8:81:fc:a0:4b:1d:
29:92:f3:8a:8a:17:2e:c7:19:7d:9f:21:9e:82:12:d3:a1:6d:
b9:33:c1:0f:33:74:95:e4:c3:05:1f:7e:f2:b0:3e:9c:ae:01:
87:97:be:28:e4:19:17:83:5b:ec:ee:7a:5f:18:85:47:b6:f6:
3f:53:d4:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 03:59:57 2025 by rpki-client