Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/33444c-0529-4fa9-b712-1abadd1b12d6/1/SKLoEfALrhakR0I_EeJCFxQs_3w.mft
File: SKLoEfALrhakR0I_EeJCFxQs_3w.mft (raw, json)
Hash identifier: WTzew6bGZNUwT1I9gR9v51BTtNBBHFqTacAEtqWIK+w=
Subject key identifier: DF:11:64:E5:63:90:2D:DF:1E:E2:13:0D:20:50:D6:D9:07:05:07:9F
Authority key identifier: 48:A2:E8:11:F0:0B:AE:16:A4:47:42:3F:11:E2:42:17:14:2C:FF:7C
Certificate issuer: /CN=48a2e811f00bae16a447423f11e24217142cff7c
Certificate serial: 0197E3422D166F72CEFF92151D7F71852500
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SKLoEfALrhakR0I_EeJCFxQs_3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/33444c-0529-4fa9-b712-1abadd1b12d6/1/SKLoEfALrhakR0I_EeJCFxQs_3w.mft
Manifest number: 23
Signing time: Mon 07 Jul 2025 05:00:54 +0000
Manifest this update: Mon 07 Jul 2025 05:00:54 +0000
Manifest next update: Tue 08 Jul 2025 05:00:54 +0000
Files and hashes: 1: 5_4_sAkbSvWJQW-nU_3z-g5dxpA.roa (hash: F/KthvnH0mRjG4XxKOZeHwPHj4wXZSHXZrhRe1Un8RI=)
2: SKLoEfALrhakR0I_EeJCFxQs_3w.crl (hash: JDDpeTj7b/bysCTQrinf2Q69LYjSoS5mBtRkCVvMmrM=)
3: dAFfVeRQHDh0WmpSmmqEgkhLBtY.roa (hash: u3HHw4rNRzAfW0hfQSsiDVFPNAx+TXWvqrwLoXpaKig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/33444c-0529-4fa9-b712-1abadd1b12d6/1/SKLoEfALrhakR0I_EeJCFxQs_3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/33444c-0529-4fa9-b712-1abadd1b12d6/1/SKLoEfALrhakR0I_EeJCFxQs_3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/SKLoEfALrhakR0I_EeJCFxQs_3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Jul 2025 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:e3:42:2d:16:6f:72:ce:ff:92:15:1d:7f:71:85:25:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48a2e811f00bae16a447423f11e24217142cff7c
Validity
Not Before: Jul 7 05:00:54 2025 GMT
Not After : Jul 8 05:00:54 2025 GMT
Subject: CN=df1164e563902ddf1ee2130d2050d6d90705079f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:1c:a5:b9:e5:eb:ab:93:48:18:c7:7a:80:dd:
ae:10:77:8d:29:e9:3b:c0:b9:de:74:3a:c5:16:20:
a4:4b:bf:ae:a8:2c:22:df:ce:33:ba:86:46:72:98:
a1:8c:19:5a:27:02:28:dd:30:02:45:d8:4e:84:e5:
13:1f:31:a8:b2:39:b6:19:ce:7b:a2:4e:b1:e7:4e:
93:3c:46:76:b0:33:4e:71:62:d2:a4:5c:9d:b2:5b:
0a:43:24:3d:81:e6:fb:b1:01:6e:99:c7:30:48:84:
24:a3:30:3a:5c:ff:3d:39:84:ec:64:bb:97:aa:77:
29:7b:98:16:8b:4a:27:94:f0:30:8a:cf:85:6c:ad:
38:28:1d:2f:ff:47:2e:aa:e8:69:a4:4b:3a:9c:4b:
9b:97:08:f9:63:b8:75:b9:72:a1:36:34:24:64:43:
63:79:52:de:60:67:01:9a:f3:f9:4c:7c:6c:19:87:
12:2f:e2:fa:40:81:dd:4b:7e:12:90:d6:e3:a1:41:
6d:a3:33:25:aa:77:1e:b6:7f:3e:1f:e5:c2:46:ca:
d6:bb:be:64:0a:56:ad:be:85:a7:74:29:c9:2a:b4:
bf:1c:0c:cb:7e:7f:64:4a:45:26:62:ce:fb:15:95:
9d:eb:bf:3c:f5:72:72:02:24:21:0f:e7:d9:60:67:
c5:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:11:64:E5:63:90:2D:DF:1E:E2:13:0D:20:50:D6:D9:07:05:07:9F
X509v3 Authority Key Identifier:
keyid:48:A2:E8:11:F0:0B:AE:16:A4:47:42:3F:11:E2:42:17:14:2C:FF:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SKLoEfALrhakR0I_EeJCFxQs_3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/33444c-0529-4fa9-b712-1abadd1b12d6/1/SKLoEfALrhakR0I_EeJCFxQs_3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/33444c-0529-4fa9-b712-1abadd1b12d6/1/SKLoEfALrhakR0I_EeJCFxQs_3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:6a:2b:af:20:1d:ce:57:14:d8:9a:72:9e:60:d6:0a:22:81:
37:1a:6c:92:a6:7b:1e:e1:96:23:fa:7b:c9:6a:8a:a5:5e:53:
96:6a:75:5d:20:3f:a7:49:f7:d3:a2:6e:7c:57:75:b0:04:f3:
49:88:82:b6:da:e3:0d:18:c4:fd:6e:7b:6f:3c:ce:c8:cf:4b:
69:48:be:c3:da:86:05:99:9d:23:5a:67:ab:f7:80:42:ea:f0:
7c:37:81:c0:e2:4f:03:e2:bb:d2:91:8a:f7:8f:33:a5:00:e3:
76:15:44:22:9e:22:e2:e8:5d:b3:53:5f:50:0e:16:92:41:64:
ab:8a:1a:95:75:98:cf:0e:3f:c5:83:8c:9f:f6:e9:09:1b:86:
76:4f:10:1b:d5:49:d2:8b:7e:61:a5:21:47:07:36:17:d5:78:
c3:b5:75:bd:7e:2c:56:3e:db:53:f2:c5:0f:bf:52:13:9b:51:
dd:fd:00:f7:c4:2d:79:ea:c8:80:32:6f:e7:1d:e7:b9:e1:19:
4b:f1:8c:d7:4e:16:cf:0d:76:e7:19:34:a3:d4:0f:99:ba:13:
f7:22:63:b9:89:df:f5:2d:5d:6e:26:ae:96:a1:c7:5d:12:ff:
7c:3c:e2:35:3b:4f:e6:40:e4:12:5b:98:c1:dc:47:27:d7:55:
d7:36:8f:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 7 08:47:38 2025 by rpki-client