Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/6f6613-e798-47f4-b313-304a54e8c264/1/sK_tekcdesOF47k2Wk6WASoBwJU.mft
File: sK_tekcdesOF47k2Wk6WASoBwJU.mft (raw, json)
Hash identifier: oGSJDBMgh6k3EWJIJZ2mWZbnR0gS2/Azfjksp9X4feE=
Subject key identifier: EE:81:B8:A8:0C:DD:43:6F:AF:38:C8:8B:8D:AA:F0:AD:4C:E9:D5:A6
Authority key identifier: B0:AF:ED:7A:47:1D:7A:C3:85:E3:B9:36:5A:4E:96:01:2A:01:C0:95
Certificate issuer: /CN=b0afed7a471d7ac385e3b9365a4e96012a01c095
Certificate serial: 01967AC493C4DF91E001D5F28FFF50131BD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sK_tekcdesOF47k2Wk6WASoBwJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/6f6613-e798-47f4-b313-304a54e8c264/1/sK_tekcdesOF47k2Wk6WASoBwJU.mft
Manifest number: 0C72
Signing time: Mon 28 Apr 2025 05:00:25 +0000
Manifest this update: Mon 28 Apr 2025 05:00:25 +0000
Manifest next update: Tue 29 Apr 2025 05:00:25 +0000
Files and hashes: 1: C3xtGxxSgp_Plz4Lpk-Ue-Bhuno.roa (hash: so9nDoVUdg/Us7gUe7/dKOyUe77DOJSLVO4IrdFOjZ8=)
2: sK_tekcdesOF47k2Wk6WASoBwJU.crl (hash: HKSOqtnBsqY7ao6724l1sDjT0scJvBYkTPldjJkYCRA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/6f6613-e798-47f4-b313-304a54e8c264/1/sK_tekcdesOF47k2Wk6WASoBwJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/6f6613-e798-47f4-b313-304a54e8c264/1/sK_tekcdesOF47k2Wk6WASoBwJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/sK_tekcdesOF47k2Wk6WASoBwJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:c4:93:c4:df:91:e0:01:d5:f2:8f:ff:50:13:1b:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0afed7a471d7ac385e3b9365a4e96012a01c095
Validity
Not Before: Apr 28 05:00:25 2025 GMT
Not After : Apr 29 05:00:25 2025 GMT
Subject: CN=ee81b8a80cdd436faf38c88b8daaf0ad4ce9d5a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d5:78:cb:b9:fb:5f:d2:2e:0b:d3:7c:71:50:
82:8f:de:72:b0:cb:ab:97:de:28:10:a1:03:a9:30:
d4:1c:de:fc:35:bc:21:d1:c0:3f:8c:cf:e2:79:15:
87:c4:83:51:cb:5a:c5:57:d3:9b:f3:1a:ba:e5:1b:
88:14:bf:b3:08:46:46:b6:e5:52:85:38:ff:b0:01:
39:5d:67:5d:8e:78:f0:49:90:df:1c:e6:ff:39:5f:
af:7e:5a:b6:c3:a1:ca:57:63:56:bb:bd:f8:ac:e1:
6a:81:cf:b8:34:bb:c9:ec:c2:ab:6c:44:77:68:dc:
f4:61:21:b8:73:08:0b:13:61:4a:8e:4f:5b:fd:bc:
05:33:08:f5:4a:db:2d:8f:84:02:3b:27:e3:4d:bb:
88:de:67:86:2c:8c:c9:97:d9:e2:69:4f:7b:f6:5f:
4f:a6:dd:6c:03:f7:ec:d1:1f:3e:02:2b:c5:a6:9a:
1b:92:da:be:0e:17:49:ec:c1:0e:e8:1d:3d:00:a0:
3a:cf:bd:21:0c:c0:91:38:a5:2d:15:c1:c7:06:58:
26:51:00:6f:4b:e9:06:fb:02:38:3e:66:4e:c9:d8:
5c:76:ba:b9:57:ac:16:6d:12:54:d7:fb:7a:05:37:
92:49:45:9f:7e:7c:af:b5:be:bd:b6:cc:0e:92:52:
a7:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:81:B8:A8:0C:DD:43:6F:AF:38:C8:8B:8D:AA:F0:AD:4C:E9:D5:A6
X509v3 Authority Key Identifier:
keyid:B0:AF:ED:7A:47:1D:7A:C3:85:E3:B9:36:5A:4E:96:01:2A:01:C0:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sK_tekcdesOF47k2Wk6WASoBwJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6f6613-e798-47f4-b313-304a54e8c264/1/sK_tekcdesOF47k2Wk6WASoBwJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6f6613-e798-47f4-b313-304a54e8c264/1/sK_tekcdesOF47k2Wk6WASoBwJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:59:ec:1b:3c:60:86:75:f9:81:f5:e7:d8:c7:11:7a:43:fe:
f7:42:18:fe:83:8d:43:2f:3c:22:38:40:3b:8b:99:40:ea:e9:
d8:a9:08:68:4e:9b:7b:f8:5c:60:a9:94:07:1a:42:c6:ea:89:
ef:aa:4c:4e:da:a4:4c:a1:99:1c:74:53:dc:b4:15:58:b2:67:
15:9b:eb:07:8d:61:dd:9f:52:fb:53:b3:5d:b0:0c:f7:2d:c9:
2a:4e:63:08:d6:72:8d:f0:5c:71:6f:be:99:8b:65:7b:83:26:
d4:be:6b:b2:50:a5:81:9a:19:9b:8e:e8:26:c9:b3:ce:23:65:
f4:03:18:cf:23:f7:e7:4b:71:35:15:59:93:48:a6:f8:b4:29:
f7:62:62:b7:58:63:71:2e:34:49:aa:63:67:89:8e:ee:c4:81:
dd:9a:f2:f7:30:a3:e9:36:bc:a3:ac:3d:64:24:39:76:47:26:
88:f7:92:13:3e:5c:0c:3d:d8:47:49:c4:33:66:57:9c:9c:58:
b9:7d:24:3b:1c:07:2b:32:18:8f:fa:1a:ae:6c:e2:38:16:d5:
1b:3d:35:21:f2:76:19:c2:29:e6:66:8b:a7:ba:9b:33:39:d6:
bb:fe:79:a8:7f:57:cc:c0:97:e1:60:07:9a:58:28:a5:7f:57:
c9:31:47:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ6xJPE35HgAdXyj/9QExvVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwYWZlZDdhNDcxZDdhYzM4NWUzYjkzNjVhNGU5NjAxMmEw
MWMwOTUwHhcNMjUwNDI4MDUwMDI1WhcNMjUwNDI5MDUwMDI1WjAzMTEwLwYDVQQD
EyhlZTgxYjhhODBjZGQ0MzZmYWYzOGM4OGI4ZGFhZjBhZDRjZTlkNWE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwNV4y7n7X9IuC9N8cVCCj95ysMur
l94oEKEDqTDUHN78Nbwh0cA/jM/ieRWHxINRy1rFV9Ob8xq65RuIFL+zCEZGtuVS
hTj/sAE5XWddjnjwSZDfHOb/OV+vflq2w6HKV2NWu734rOFqgc+4NLvJ7MKrbER3
aNz0YSG4cwgLE2FKjk9b/bwFMwj1Ststj4QCOyfjTbuI3meGLIzJl9niaU979l9P
pt1sA/fs0R8+AivFppobktq+DhdJ7MEO6B09AKA6z70hDMCROKUtFcHHBlgmUQBv
S+kG+wI4PmZOydhcdrq5V6wWbRJU1/t6BTeSSUWffnyvtb69tswOklKn5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO6BuKgM3UNvrzjIi42q8K1M6dWmMB8GA1UdIwQY
MBaAFLCv7XpHHXrDheO5NlpOlgEqAcCVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0tfdGVrY2Rlc09GNDdrMldrNldBU29Cd0pVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC82ZjY2MTMtZTc5OC00N2Y0LWIzMTMt
MzA0YTU0ZThjMjY0LzEvc0tfdGVrY2Rlc09GNDdrMldrNldBU29Cd0pVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC82ZjY2MTMtZTc5OC00N2Y0LWIzMTMtMzA0YTU0ZThjMjY0
LzEvc0tfdGVrY2Rlc09GNDdrMldrNldBU29Cd0pVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT1nsGzxg
hnX5gfXn2McRekP+90IY/oONQy88IjhAO4uZQOrp2KkIaE6be/hcYKmUBxpCxuqJ
76pMTtqkTKGZHHRT3LQVWLJnFZvrB41h3Z9S+1OzXbAM9y3JKk5jCNZyjfBccW++
mYtle4Mm1L5rslClgZoZm47oJsmzziNl9AMYzyP350txNRVZk0im+LQp92Jit1hj
cS40SapjZ4mO7sSB3Zry9zCj6Ta8o6w9ZCQ5dkcmiPeSEz5cDD3YR0nEM2ZXnJxY
uX0kOxwHKzIYj/oarmziOBbVGz01IfJ2GcIp5maLp7qbMznWu/55qH9XzMCX4WAH
mlgopX9XyTFHKw==
-----END CERTIFICATE-----
Generated at Mon Apr 28 10:26:25 2025 by rpki-client