Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/58538a-24eb-4f9d-9811-525959e6ee22/1/B__SkDh900rAeQxrnX7pn-23gUk.mft
File: B__SkDh900rAeQxrnX7pn-23gUk.mft (raw, json)
Hash identifier: ahzdrVdXDVMWsiokcEUP+o4VFifyYvnG2XVv4Uh4VcA=
Subject key identifier: C5:4B:97:06:C1:2A:5C:E7:65:40:45:72:7A:B6:FF:CF:98:72:74:C4
Authority key identifier: 07:FF:D2:90:38:7D:D3:4A:C0:79:0C:6B:9D:7E:E9:9F:ED:B7:81:49
Certificate issuer: /CN=07ffd290387dd34ac0790c6b9d7ee99fedb78149
Certificate serial: 0197515898CFB6DDD4BC34BE576B96A9A54F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B__SkDh900rAeQxrnX7pn-23gUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/58538a-24eb-4f9d-9811-525959e6ee22/1/B__SkDh900rAeQxrnX7pn-23gUk.mft
Manifest number: 03DC
Signing time: Sun 08 Jun 2025 21:00:50 +0000
Manifest this update: Sun 08 Jun 2025 21:00:50 +0000
Manifest next update: Mon 09 Jun 2025 21:00:50 +0000
Files and hashes: 1: B__SkDh900rAeQxrnX7pn-23gUk.crl (hash: zaMl34ErTc9kB3N8GzpTxWL1HE9ZeQTXPQC13vEamDE=)
2: jvHRud-0bfVZE35uo3ytxWpEsiQ.roa (hash: /JbTDkFvtTl5SlOmgYIpMzTAuGjpF4dmP37OC1pKU5o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/58538a-24eb-4f9d-9811-525959e6ee22/1/B__SkDh900rAeQxrnX7pn-23gUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/58538a-24eb-4f9d-9811-525959e6ee22/1/B__SkDh900rAeQxrnX7pn-23gUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/B__SkDh900rAeQxrnX7pn-23gUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:51:58:98:cf:b6:dd:d4:bc:34:be:57:6b:96:a9:a5:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07ffd290387dd34ac0790c6b9d7ee99fedb78149
Validity
Not Before: Jun 8 21:00:50 2025 GMT
Not After : Jun 9 21:00:50 2025 GMT
Subject: CN=c54b9706c12a5ce7654045727ab6ffcf987274c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:85:92:f5:df:0c:c7:69:3e:58:36:b6:6d:44:
12:15:71:62:8b:7d:3e:f7:62:97:df:a9:59:d2:46:
50:13:c5:8f:f9:93:90:4a:a0:0f:13:22:1e:5c:9d:
0e:c9:ae:60:dd:b5:b2:f5:97:b3:5d:93:6a:00:92:
cc:d3:ac:4a:44:4d:42:14:6f:5c:ea:96:fc:02:d8:
7c:6f:6e:95:cb:3c:0e:26:b6:9f:d8:eb:17:4c:3a:
bd:73:2f:72:b5:91:7e:86:cb:36:cb:70:a6:15:49:
f0:30:26:a4:20:82:36:fa:be:4a:52:48:71:7d:8d:
6d:20:fa:a9:95:1e:da:0a:0b:8d:a3:15:6a:53:b1:
ec:9e:47:ca:e4:01:e5:9c:e7:a2:2e:a3:f2:47:ac:
91:43:7b:0b:40:88:88:35:37:bc:c3:8d:9f:db:f6:
f3:da:15:7f:f4:2f:da:a3:88:30:4e:b5:96:3d:52:
e0:16:59:e6:fe:e9:25:d2:3a:21:5a:29:61:5e:60:
62:79:45:81:8c:66:dd:f4:28:de:b9:ac:f9:a8:49:
c3:d3:9d:73:f5:38:09:50:dd:70:75:ea:85:57:29:
09:2e:98:ec:ef:9c:33:3c:9f:38:f6:65:d9:ae:98:
2e:b1:c7:9a:73:99:56:fd:33:d8:fd:98:00:fd:a9:
d3:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:4B:97:06:C1:2A:5C:E7:65:40:45:72:7A:B6:FF:CF:98:72:74:C4
X509v3 Authority Key Identifier:
keyid:07:FF:D2:90:38:7D:D3:4A:C0:79:0C:6B:9D:7E:E9:9F:ED:B7:81:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B__SkDh900rAeQxrnX7pn-23gUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/58538a-24eb-4f9d-9811-525959e6ee22/1/B__SkDh900rAeQxrnX7pn-23gUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/58538a-24eb-4f9d-9811-525959e6ee22/1/B__SkDh900rAeQxrnX7pn-23gUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:a1:02:6c:fb:9d:4c:08:dc:cc:e1:1d:57:bb:4b:5a:55:46:
c6:0d:3f:86:d3:f0:50:a6:eb:0b:04:15:4b:43:af:9a:cb:28:
fb:ac:16:0a:c7:ae:76:6e:58:97:51:7d:b8:b0:35:7c:3a:0e:
ec:22:a5:3f:cd:28:88:22:9f:a0:3e:c9:fd:28:ea:0d:e0:4d:
2c:5c:85:1a:01:30:3e:a6:61:3a:7d:f7:f1:97:ce:53:a6:78:
09:26:e5:39:02:c3:c9:8d:75:89:bb:27:3e:1f:52:87:f9:db:
9c:8c:33:95:02:82:b1:db:be:cc:51:38:40:9e:95:6c:a6:c2:
c6:53:a6:fa:ce:c1:21:17:8e:8a:11:34:0c:36:90:90:f0:0d:
85:6d:d0:d3:fe:7a:bd:c6:00:f5:99:00:c2:5e:4a:1f:28:eb:
64:c6:6b:df:3b:df:01:7f:11:8e:f9:87:6c:da:62:08:12:b5:
e1:78:5c:d0:ed:b1:c0:78:18:84:75:bd:ea:a1:a2:15:da:53:
0d:21:cb:08:1b:f1:52:41:ce:11:d8:00:48:33:11:d1:d5:5a:
42:63:a3:8a:ec:df:95:a5:30:84:b0:ce:61:f3:51:ef:8e:07:
12:11:9c:4a:ff:0f:9e:d3:ae:b5:97:51:6a:cf:b5:5d:42:2d:
00:1f:61:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 05:55:43 2025 by rpki-client