Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/685b5a-fa27-41ec-adf9-9df2f79bef10/1/skmuabOnLsLm6a25kJDYEqHSmVE.mft
File: skmuabOnLsLm6a25kJDYEqHSmVE.mft (raw, json)
Hash identifier: OAIr9nWEfG1u5IJ3rzryLjHe8TFhWb8BD+MSKZobGXs=
Subject key identifier: CD:98:38:FB:89:85:A1:F0:B2:30:A5:43:C1:95:02:E4:00:31:D2:CA
Authority key identifier: B2:49:AE:69:B3:A7:2E:C2:E6:E9:AD:B9:90:90:D8:12:A1:D2:99:51
Certificate issuer: /CN=b249ae69b3a72ec2e6e9adb99090d812a1d29951
Certificate serial: 01964632F8273808D0E773386A167838E3C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/skmuabOnLsLm6a25kJDYEqHSmVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/685b5a-fa27-41ec-adf9-9df2f79bef10/1/skmuabOnLsLm6a25kJDYEqHSmVE.mft
Manifest number: 14F7
Signing time: Fri 18 Apr 2025 00:01:07 +0000
Manifest this update: Fri 18 Apr 2025 00:01:07 +0000
Manifest next update: Sat 19 Apr 2025 00:01:07 +0000
Files and hashes: 1: omiVo8lJOxBO3d2eFDOX09spiwY.roa (hash: 3VKQ20p2zglj9J79jWC9kZRYgl/DejI2kMckcoXVkGA=)
2: skmuabOnLsLm6a25kJDYEqHSmVE.crl (hash: foOc4gZx1UmFkcMKJFyrEAdOdq4UeH809um6VDfMMa0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/685b5a-fa27-41ec-adf9-9df2f79bef10/1/skmuabOnLsLm6a25kJDYEqHSmVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/685b5a-fa27-41ec-adf9-9df2f79bef10/1/skmuabOnLsLm6a25kJDYEqHSmVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/skmuabOnLsLm6a25kJDYEqHSmVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 00:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:46:32:f8:27:38:08:d0:e7:73:38:6a:16:78:38:e3:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b249ae69b3a72ec2e6e9adb99090d812a1d29951
Validity
Not Before: Apr 18 00:01:07 2025 GMT
Not After : Apr 19 00:01:07 2025 GMT
Subject: CN=cd9838fb8985a1f0b230a543c19502e40031d2ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:94:f7:60:03:2c:a6:eb:49:c6:ef:17:e1:da:
e8:8a:23:a2:3c:80:67:27:e8:68:49:4e:6f:0c:96:
82:2d:c0:57:c2:46:33:4d:19:63:09:3b:85:1d:2e:
3f:57:15:34:12:5a:13:60:cc:49:8b:26:84:e9:38:
8c:a4:37:21:3f:d9:b0:98:d5:a0:83:7e:05:63:b9:
58:ef:d0:fe:5a:3f:27:cf:f8:fb:6b:cf:ac:08:7b:
f6:11:c2:a8:36:3e:25:f9:1a:cc:6f:1c:7e:ec:47:
4a:ec:2d:67:6d:b2:ad:6e:00:d4:d8:e6:a5:fa:21:
f3:3d:55:1b:df:b8:30:dc:c5:b2:87:23:e6:26:aa:
ed:d4:8f:1b:0d:17:6e:72:5e:7a:20:84:3c:2b:a0:
0b:c4:89:4a:f2:b0:7f:3d:14:4b:ac:e9:41:89:00:
3b:fb:e4:35:a6:66:bc:bf:35:9a:a3:89:2e:26:ab:
2b:7a:f4:fd:a9:ab:00:7a:8a:e0:f8:78:43:47:fc:
97:c8:b0:a6:05:6d:3e:19:78:e5:fd:1e:61:7c:3d:
da:14:79:af:52:d6:f3:5b:d3:3c:23:3f:46:04:e1:
c8:4b:38:98:cf:f2:65:f4:ca:8b:41:d4:56:ea:32:
f9:09:13:70:55:41:8e:45:59:a2:ab:df:2e:38:30:
fe:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:98:38:FB:89:85:A1:F0:B2:30:A5:43:C1:95:02:E4:00:31:D2:CA
X509v3 Authority Key Identifier:
keyid:B2:49:AE:69:B3:A7:2E:C2:E6:E9:AD:B9:90:90:D8:12:A1:D2:99:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/skmuabOnLsLm6a25kJDYEqHSmVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/685b5a-fa27-41ec-adf9-9df2f79bef10/1/skmuabOnLsLm6a25kJDYEqHSmVE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/685b5a-fa27-41ec-adf9-9df2f79bef10/1/skmuabOnLsLm6a25kJDYEqHSmVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:01:a4:8e:ab:ec:02:e4:16:d8:82:dd:82:d1:c1:64:db:02:
c1:45:0e:84:dd:c2:a3:04:ee:2b:ab:96:ca:55:de:c9:1a:a1:
9b:d5:3f:dc:25:c3:09:5a:76:2c:0e:45:23:9f:22:17:79:6e:
05:20:31:4c:ec:39:28:f7:58:28:80:62:54:84:a8:5b:5e:5c:
16:f3:2d:85:bb:73:d7:a0:0e:85:90:d4:ef:81:29:c6:c6:ee:
f8:55:3b:aa:7a:de:c4:6b:d0:0d:87:85:ae:98:04:dd:2b:3b:
e9:0b:93:ef:35:51:98:10:05:9a:f9:94:16:0a:8a:38:6d:b5:
6f:20:47:82:bc:d0:f1:d7:41:48:83:14:c2:e5:47:4b:68:2e:
c6:30:25:8b:56:cc:bf:6a:df:bd:5b:5b:02:e4:2a:ae:12:71:
c7:2c:88:6b:45:95:d1:83:fe:f3:15:78:6c:fe:ac:d1:62:18:
ed:41:41:5f:55:55:4a:7f:1f:c0:f8:6f:65:15:06:d7:60:75:
62:ac:e1:cc:af:c8:77:e8:e5:0d:e5:02:9e:78:3a:34:ca:d4:
10:ea:58:65:56:d5:6a:46:87:55:3e:e1:09:aa:01:a6:1b:af:
20:c0:e1:37:ff:69:aa:6c:94:84:31:6e:04:d2:34:ef:4c:fb:
2f:c6:d7:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZGMvgnOAjQ53M4ahZ4OOPDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyNDlhZTY5YjNhNzJlYzJlNmU5YWRiOTkwOTBkODEyYTFk
Mjk5NTEwHhcNMjUwNDE4MDAwMTA3WhcNMjUwNDE5MDAwMTA3WjAzMTEwLwYDVQQD
EyhjZDk4MzhmYjg5ODVhMWYwYjIzMGE1NDNjMTk1MDJlNDAwMzFkMmNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5T3YAMsputJxu8X4droiiOiPIBn
J+hoSU5vDJaCLcBXwkYzTRljCTuFHS4/VxU0EloTYMxJiyaE6TiMpDchP9mwmNWg
g34FY7lY79D+Wj8nz/j7a8+sCHv2EcKoNj4l+RrMbxx+7EdK7C1nbbKtbgDU2Oal
+iHzPVUb37gw3MWyhyPmJqrt1I8bDRducl56IIQ8K6ALxIlK8rB/PRRLrOlBiQA7
++Q1pma8vzWao4kuJqsrevT9qasAeorg+HhDR/yXyLCmBW0+GXjl/R5hfD3aFHmv
UtbzW9M8Iz9GBOHISziYz/Jl9MqLQdRW6jL5CRNwVUGORVmiq98uODD+8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM2YOPuJhaHwsjClQ8GVAuQAMdLKMB8GA1UdIwQY
MBaAFLJJrmmzpy7C5umtuZCQ2BKh0plRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2ttdWFiT25Mc0xtNmEyNWtKRFlFcUhTbVZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC82ODViNWEtZmEyNy00MWVjLWFkZjkt
OWRmMmY3OWJlZjEwLzEvc2ttdWFiT25Mc0xtNmEyNWtKRFlFcUhTbVZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC82ODViNWEtZmEyNy00MWVjLWFkZjktOWRmMmY3OWJlZjEw
LzEvc2ttdWFiT25Mc0xtNmEyNWtKRFlFcUhTbVZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACgGkjqvs
AuQW2ILdgtHBZNsCwUUOhN3CowTuK6uWylXeyRqhm9U/3CXDCVp2LA5FI58iF3lu
BSAxTOw5KPdYKIBiVISoW15cFvMthbtz16AOhZDU74Epxsbu+FU7qnrexGvQDYeF
rpgE3Ss76QuT7zVRmBAFmvmUFgqKOG21byBHgrzQ8ddBSIMUwuVHS2guxjAli1bM
v2rfvVtbAuQqrhJxxyyIa0WV0YP+8xV4bP6s0WIY7UFBX1VVSn8fwPhvZRUG12B1
YqzhzK/Id+jlDeUCnng6NMrUEOpYZVbVakaHVT7hCaoBphuvIMDhN/9pqmyUhDFu
BNI070z7L8bXjg==
-----END CERTIFICATE-----
Generated at Fri Apr 18 06:38:53 2025 by rpki-client