Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/b24936-097f-41e3-b58d-d2cfd5f22e7a/1/SIkYymYYDe4Hm69FBT5M61dikr0.mft
File: SIkYymYYDe4Hm69FBT5M61dikr0.mft (raw, json)
Hash identifier: WUXp1jCA4JBBBRw5PdjmC1tVBaiRRp1oBguFHUQlZ6M=
Subject key identifier: 4C:7C:25:C7:2B:03:EC:B5:B0:FE:79:51:BA:2B:8A:5A:15:A2:27:9C
Authority key identifier: 48:89:18:CA:66:18:0D:EE:07:9B:AF:45:05:3E:4C:EB:57:62:92:BD
Certificate issuer: /CN=488918ca66180dee079baf45053e4ceb576292bd
Certificate serial: 0197469D8E6B4CFDD1C4B5A37E1A32A0E6E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SIkYymYYDe4Hm69FBT5M61dikr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/b24936-097f-41e3-b58d-d2cfd5f22e7a/1/SIkYymYYDe4Hm69FBT5M61dikr0.mft
Manifest number: 150B
Signing time: Fri 06 Jun 2025 19:00:19 +0000
Manifest this update: Fri 06 Jun 2025 19:00:19 +0000
Manifest next update: Sat 07 Jun 2025 19:00:19 +0000
Files and hashes: 1: SIkYymYYDe4Hm69FBT5M61dikr0.crl (hash: SuOcOzQp6iRIo6/MHohrcQVwU2AMuRenXetuGl5GhNE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/b24936-097f-41e3-b58d-d2cfd5f22e7a/1/SIkYymYYDe4Hm69FBT5M61dikr0.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/b24936-097f-41e3-b58d-d2cfd5f22e7a/1/SIkYymYYDe4Hm69FBT5M61dikr0.mft
rsync://rpki.ripe.net/repository/DEFAULT/SIkYymYYDe4Hm69FBT5M61dikr0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 19:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:9d:8e:6b:4c:fd:d1:c4:b5:a3:7e:1a:32:a0:e6:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=488918ca66180dee079baf45053e4ceb576292bd
Validity
Not Before: Jun 6 19:00:19 2025 GMT
Not After : Jun 7 19:00:19 2025 GMT
Subject: CN=4c7c25c72b03ecb5b0fe7951ba2b8a5a15a2279c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:86:1b:e9:d5:d7:4b:24:7e:ea:01:e3:df:02:
e5:45:78:96:39:d8:5b:86:8b:01:55:ea:e7:61:79:
17:27:b2:26:3c:24:4b:99:df:9d:5c:db:93:d0:2f:
a7:36:a2:c6:67:19:e4:72:2e:c3:95:41:8c:42:a0:
ef:03:f7:66:58:c7:0d:4d:f9:45:d8:8d:9a:72:81:
86:62:db:a4:f5:43:59:7a:de:0d:64:51:fe:30:d0:
c5:fe:64:64:eb:48:7e:f4:b2:7b:7c:3d:cf:d6:4e:
f5:43:ca:75:da:69:a9:7b:89:71:8c:04:14:c3:0d:
bb:5f:7d:aa:64:55:ac:b7:8a:a7:c2:e7:4e:8d:49:
05:1b:e9:c7:95:52:78:7e:db:f6:60:74:f0:32:83:
ae:19:b4:23:d6:23:b7:9a:a3:33:94:92:cb:58:df:
78:1b:8f:70:a5:ec:e2:24:28:34:4b:18:59:f1:70:
55:87:ba:fb:7a:36:93:a6:52:cb:c1:57:f8:c5:6b:
c9:3e:94:2f:23:ca:26:00:f2:9d:73:72:1d:b0:05:
82:42:f9:24:a9:b8:b2:15:c3:b5:ce:6d:15:6f:96:
82:47:dd:f9:96:66:ce:91:2b:c7:9f:20:69:ad:bc:
fc:af:05:73:b0:32:98:c5:55:7b:b1:41:37:bc:bd:
82:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:7C:25:C7:2B:03:EC:B5:B0:FE:79:51:BA:2B:8A:5A:15:A2:27:9C
X509v3 Authority Key Identifier:
keyid:48:89:18:CA:66:18:0D:EE:07:9B:AF:45:05:3E:4C:EB:57:62:92:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SIkYymYYDe4Hm69FBT5M61dikr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/b24936-097f-41e3-b58d-d2cfd5f22e7a/1/SIkYymYYDe4Hm69FBT5M61dikr0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/b24936-097f-41e3-b58d-d2cfd5f22e7a/1/SIkYymYYDe4Hm69FBT5M61dikr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:db:c8:2a:28:55:d3:3f:6a:5e:f9:72:10:79:cc:cc:19:3a:
f3:23:b2:8b:21:e2:ed:dc:c4:f4:8d:3d:96:dd:39:e7:93:a1:
d7:20:82:c0:29:bb:36:6a:45:7d:58:cf:8d:40:f4:e3:cf:ae:
61:2b:e3:19:52:20:38:d1:ee:49:61:50:d2:bf:cc:a0:3c:00:
57:26:35:cd:68:6e:b0:4b:72:70:69:b3:64:95:cd:3c:1e:43:
42:3b:a7:89:14:35:01:66:f0:6b:23:2a:97:85:62:1b:3b:dc:
5c:88:e7:07:80:8c:f7:f3:70:af:3b:26:90:0b:e3:91:fe:5e:
ad:2b:9e:87:2a:f8:c9:de:59:e7:76:f2:bc:b7:70:8c:35:ed:
cf:81:2c:f9:b0:a1:7b:5d:d8:80:b8:59:c7:6f:83:e5:11:90:
30:b2:7c:78:87:e1:c5:48:c3:d1:8f:01:51:61:bd:e8:e8:eb:
a3:6e:66:dc:84:fe:3e:9f:59:49:ad:77:95:45:bb:e0:d6:1e:
12:7f:1b:b9:f1:f6:a5:99:d4:f1:8f:03:0f:55:e2:b6:b8:3d:
6f:e8:11:e4:3e:46:de:38:d1:f1:c4:82:a9:a6:5f:65:b9:9e:
41:85:6e:0e:73:aa:fb:8a:16:6a:58:9d:b7:d6:6a:1e:cb:dc:
c5:a7:24:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 02:29:18 2025 by rpki-client