Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/41c79d-592b-44ad-8693-f2e058957bc9/1/SK-hF0sO7qKOcDHwF6k-vl3kKOQ.mft
File: SK-hF0sO7qKOcDHwF6k-vl3kKOQ.mft (raw, json)
Hash identifier: C9R1cNwTrGby7Fu5euE6ytiGC0pvI4TMaBUtqrSbp8E=
Subject key identifier: E6:F4:C9:4A:33:A0:3E:EE:83:6F:1A:40:AB:60:97:3F:06:D5:C7:09
Authority key identifier: 48:AF:A1:17:4B:0E:EE:A2:8E:70:31:F0:17:A9:3E:BE:5D:E4:28:E4
Certificate issuer: /CN=48afa1174b0eeea28e7031f017a93ebe5de428e4
Certificate serial: 0197868F848B925CE1ACF628D243E2042F97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SK-hF0sO7qKOcDHwF6k-vl3kKOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/41c79d-592b-44ad-8693-f2e058957bc9/1/SK-hF0sO7qKOcDHwF6k-vl3kKOQ.mft
Manifest number: 159B
Signing time: Thu 19 Jun 2025 05:00:41 +0000
Manifest this update: Thu 19 Jun 2025 05:00:41 +0000
Manifest next update: Fri 20 Jun 2025 05:00:41 +0000
Files and hashes: 1: SK-hF0sO7qKOcDHwF6k-vl3kKOQ.crl (hash: LSv7YS5p4Rk2x69lcIffoRGBgGepjk3A3J1oCiX08nw=)
2: fxES6V-YcHLIYfWbK1XCrf--99E.roa (hash: /7Za8qsVUiet1d+zZvUbv7RF8k01UQmlJjxyUgXzNdY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/41c79d-592b-44ad-8693-f2e058957bc9/1/SK-hF0sO7qKOcDHwF6k-vl3kKOQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/41c79d-592b-44ad-8693-f2e058957bc9/1/SK-hF0sO7qKOcDHwF6k-vl3kKOQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/SK-hF0sO7qKOcDHwF6k-vl3kKOQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 05:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:86:8f:84:8b:92:5c:e1:ac:f6:28:d2:43:e2:04:2f:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48afa1174b0eeea28e7031f017a93ebe5de428e4
Validity
Not Before: Jun 19 05:00:41 2025 GMT
Not After : Jun 20 05:00:41 2025 GMT
Subject: CN=e6f4c94a33a03eee836f1a40ab60973f06d5c709
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b5:d4:56:9b:39:6c:cb:4f:9e:23:89:47:eb:
4b:de:d2:8a:33:9c:74:ae:16:a7:f0:b8:8a:43:55:
04:83:7b:83:e7:80:9f:67:58:59:80:36:be:82:17:
50:ab:c3:3d:a0:0b:85:95:f8:8b:b6:f0:18:dc:d5:
ef:9a:b4:49:0e:9b:00:21:ef:a3:16:1e:be:63:34:
66:12:10:de:0b:15:20:e4:86:48:91:be:04:4a:e4:
f7:3e:29:d3:80:12:56:d7:6f:21:8a:d3:53:95:d8:
6f:b9:44:38:e9:b7:c7:b2:0e:da:51:7c:9f:99:bc:
8c:62:b5:75:fb:ab:2b:df:2f:05:45:5d:3b:a4:cb:
66:c1:28:3a:f1:01:9d:de:8d:56:b4:f9:0e:ad:0d:
b3:b2:84:bf:14:22:be:6f:76:cb:fb:98:d2:21:d0:
07:7b:43:09:46:28:9e:d5:d2:3d:e6:ee:2d:33:8c:
0b:62:69:3f:69:56:f1:fa:8f:9b:7a:9b:6c:9f:a0:
57:ba:f5:35:86:72:63:85:71:6e:2b:9b:db:c5:d5:
ef:d4:36:c8:32:e6:c7:5a:4a:70:dd:f7:d4:31:9b:
7e:37:4e:93:0c:57:25:cc:5f:e9:89:11:01:2e:bf:
8e:d2:64:70:eb:c6:c7:64:ea:ed:15:2e:66:28:bd:
a0:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:F4:C9:4A:33:A0:3E:EE:83:6F:1A:40:AB:60:97:3F:06:D5:C7:09
X509v3 Authority Key Identifier:
keyid:48:AF:A1:17:4B:0E:EE:A2:8E:70:31:F0:17:A9:3E:BE:5D:E4:28:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SK-hF0sO7qKOcDHwF6k-vl3kKOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/41c79d-592b-44ad-8693-f2e058957bc9/1/SK-hF0sO7qKOcDHwF6k-vl3kKOQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/41c79d-592b-44ad-8693-f2e058957bc9/1/SK-hF0sO7qKOcDHwF6k-vl3kKOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:c8:99:2a:9e:29:82:1e:ac:99:94:ec:3e:9a:75:46:7c:b7:
48:a8:94:f9:92:cb:bf:6c:77:58:d4:a7:97:45:11:0a:92:8b:
4a:59:05:0c:5d:06:97:b3:e0:53:27:75:03:ad:3f:9f:6c:42:
18:10:ac:d0:b0:7c:3d:98:86:b2:9c:00:84:ff:ab:81:ea:f5:
22:e2:a2:d5:c9:44:0b:06:45:bd:5b:a3:2c:43:cd:a1:17:6a:
a2:11:03:2d:2a:76:30:f6:59:95:cd:a1:3b:6d:08:8d:fc:6d:
5e:1f:7d:e4:6a:c1:fb:6c:46:b4:aa:a5:86:62:38:eb:be:49:
91:b6:ac:b2:1f:09:d9:2a:30:ca:4f:d9:f2:9d:23:10:a8:d9:
f1:d2:49:63:fb:f4:c7:f0:b9:df:aa:9f:2c:a8:fb:e7:13:f2:
db:0f:56:32:13:13:3f:69:78:91:b8:c4:38:4c:96:64:9d:53:
17:78:01:70:23:b2:36:be:9f:ad:44:fb:f9:e3:7f:89:d0:d7:
af:56:e0:ef:48:68:fc:0a:2b:60:ff:2e:30:d1:d9:82:5b:f7:
95:c4:8e:69:03:9e:11:85:7f:1c:ea:23:e7:0a:69:16:eb:4b:
62:60:ab:ad:f5:7f:e2:9b:02:0a:e5:06:32:92:df:0b:d9:64:
44:3e:41:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 14:28:17 2025 by rpki-client