Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/33444c-0529-4fa9-b712-1abadd1b12d6/1/SKLoEfALrhakR0I_EeJCFxQs_3w.mft
File: SKLoEfALrhakR0I_EeJCFxQs_3w.mft (raw, json)
Hash identifier: lW9IsekBePNh95HlzvwmrYGyr2xhQVxwKHlEeLdixWg=
Subject key identifier: EF:55:4B:DE:DC:FC:FB:E4:70:C2:76:38:22:FE:D3:D6:D5:06:93:F5
Authority key identifier: 48:A2:E8:11:F0:0B:AE:16:A4:47:42:3F:11:E2:42:17:14:2C:FF:7C
Certificate issuer: /CN=48a2e811f00bae16a447423f11e24217142cff7c
Certificate serial: 0198CB0153E2DD95BC1A4EC2F0435D1EB2D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SKLoEfALrhakR0I_EeJCFxQs_3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/33444c-0529-4fa9-b712-1abadd1b12d6/1/SKLoEfALrhakR0I_EeJCFxQs_3w.mft
Manifest number: 9B
Signing time: Thu 21 Aug 2025 05:01:58 +0000
Manifest this update: Thu 21 Aug 2025 05:01:58 +0000
Manifest next update: Fri 22 Aug 2025 05:01:58 +0000
Files and hashes: 1: 5_4_sAkbSvWJQW-nU_3z-g5dxpA.roa (hash: F/KthvnH0mRjG4XxKOZeHwPHj4wXZSHXZrhRe1Un8RI=)
2: SKLoEfALrhakR0I_EeJCFxQs_3w.crl (hash: sywtR2OF/clz85J8Fx1SlqEFuCPdOYNs81gXYnkf1Go=)
3: dAFfVeRQHDh0WmpSmmqEgkhLBtY.roa (hash: u3HHw4rNRzAfW0hfQSsiDVFPNAx+TXWvqrwLoXpaKig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/33444c-0529-4fa9-b712-1abadd1b12d6/1/SKLoEfALrhakR0I_EeJCFxQs_3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/33444c-0529-4fa9-b712-1abadd1b12d6/1/SKLoEfALrhakR0I_EeJCFxQs_3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/SKLoEfALrhakR0I_EeJCFxQs_3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Aug 2025 05:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:cb:01:53:e2:dd:95:bc:1a:4e:c2:f0:43:5d:1e:b2:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48a2e811f00bae16a447423f11e24217142cff7c
Validity
Not Before: Aug 21 05:01:58 2025 GMT
Not After : Aug 22 05:01:58 2025 GMT
Subject: CN=ef554bdedcfcfbe470c2763822fed3d6d50693f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:45:db:eb:3e:36:e4:01:af:19:7b:6f:66:23:
1e:00:e5:08:cd:67:6b:cb:09:be:c4:41:1a:cd:6e:
b9:de:4f:01:d5:9e:f4:38:b1:e5:3b:02:da:bb:8c:
dc:1a:8e:d3:45:0b:71:c3:a6:37:d5:3f:67:15:90:
b2:51:3a:3d:cf:7e:bf:18:b6:93:2f:dc:9a:5f:92:
8b:3e:e1:3c:89:ab:ce:b4:93:59:c9:b8:b4:08:2d:
cd:f4:f9:64:21:47:be:ff:4d:17:46:5c:18:7a:1d:
a6:d2:f3:c5:65:8d:9c:44:de:95:42:90:71:b4:73:
30:bc:3a:fd:6f:ed:9e:96:cd:44:38:9f:71:92:1b:
99:11:b1:5a:e8:4e:30:4d:e1:75:b8:1f:88:13:20:
46:dd:a6:e0:db:dc:5d:b3:3f:e7:50:ed:1f:db:db:
3a:8d:72:bd:9b:55:f4:74:da:68:91:97:9f:dd:f1:
0f:49:1a:77:bc:d6:a9:4b:f2:8a:e9:82:4b:88:9d:
bc:e9:8a:77:3c:96:eb:a0:d5:cf:52:a4:e1:99:3b:
30:4f:ce:07:90:46:dc:89:40:f8:4c:2d:d1:4f:3f:
20:25:40:43:ce:e5:9f:4f:76:31:16:34:81:13:e0:
6c:75:6e:cd:42:97:ea:54:44:19:da:72:4c:b4:32:
84:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:55:4B:DE:DC:FC:FB:E4:70:C2:76:38:22:FE:D3:D6:D5:06:93:F5
X509v3 Authority Key Identifier:
keyid:48:A2:E8:11:F0:0B:AE:16:A4:47:42:3F:11:E2:42:17:14:2C:FF:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SKLoEfALrhakR0I_EeJCFxQs_3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/33444c-0529-4fa9-b712-1abadd1b12d6/1/SKLoEfALrhakR0I_EeJCFxQs_3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/33444c-0529-4fa9-b712-1abadd1b12d6/1/SKLoEfALrhakR0I_EeJCFxQs_3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:2b:ce:60:d7:b7:9a:89:52:5c:1f:96:08:e5:9d:02:e3:f1:
f2:0f:d2:c5:ba:c1:03:b5:5b:9a:11:12:3b:c5:c9:53:99:dd:
93:14:0e:9f:59:c2:de:7e:1c:49:fd:44:ed:47:59:66:75:34:
79:e7:a3:2d:2c:af:fc:6c:fe:fb:f1:34:07:36:0c:c1:89:f0:
21:38:35:f3:9c:e9:30:3b:d3:81:ed:2e:ea:2a:c1:09:bf:c1:
80:ee:49:4d:cb:6c:7e:86:4d:c7:bf:88:91:a6:c7:21:e8:c8:
e6:ba:ef:7d:f3:f9:15:af:26:d3:83:0b:4e:a8:dd:c4:d7:07:
17:2f:66:f7:bf:13:5c:19:41:7b:80:ec:d8:0e:2d:7d:44:a6:
6a:b3:81:9f:30:6e:20:da:82:bf:c3:45:22:62:01:4b:81:72:
b2:a5:c0:71:04:60:29:8f:8d:03:53:d2:24:3b:e0:a0:86:80:
88:9f:3e:09:6d:95:b9:cb:76:ac:e8:ea:b4:24:c1:23:74:03:
dc:4d:58:2d:2c:87:45:10:92:ad:94:a9:36:26:e7:82:2d:bd:
bd:0c:ef:f6:6c:6f:22:5d:07:a6:01:b9:a1:48:89:1f:e9:0f:
e1:0d:97:c8:38:fd:5f:26:32:e1:61:2e:b1:90:55:f9:ef:09:
97:00:a2:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 13:51:03 2025 by rpki-client