Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/397f55-2b76-41de-86aa-a4202a40ce18/1/SkcTzDG36jiRvhRV3hHcwvMp1RU.mft
File: SkcTzDG36jiRvhRV3hHcwvMp1RU.mft (raw, json)
Hash identifier: Jx2wPHISW76Dv0jfv+BAWn8zHnz5Xr5fGrbf2UijCNo=
Subject key identifier: 9F:09:06:35:02:2B:43:2D:8E:E1:50:63:A0:28:6B:D6:3B:94:E6:83
Authority key identifier: 4A:47:13:CC:31:B7:EA:38:91:BE:14:55:DE:11:DC:C2:F3:29:D5:15
Certificate issuer: /CN=4a4713cc31b7ea3891be1455de11dcc2f329d515
Certificate serial: 01968B13BA3D3ED77C2D4838AA80AE4D6204
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SkcTzDG36jiRvhRV3hHcwvMp1RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/397f55-2b76-41de-86aa-a4202a40ce18/1/SkcTzDG36jiRvhRV3hHcwvMp1RU.mft
Manifest number: 0BA4
Signing time: Thu 01 May 2025 09:00:47 +0000
Manifest this update: Thu 01 May 2025 09:00:47 +0000
Manifest next update: Fri 02 May 2025 09:00:47 +0000
Files and hashes: 1: SkcTzDG36jiRvhRV3hHcwvMp1RU.crl (hash: ZyjCopHTzvyFbZqTIyx9zGElQ0SahbpQvw+IyrLuSvk=)
2: gF8ZN3C0a45HX0BtFSTg6shwTi4.roa (hash: YzHFKuHmdK7saGrTnv4LM1NaquoFvehSW3aShl6a+YM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/397f55-2b76-41de-86aa-a4202a40ce18/1/SkcTzDG36jiRvhRV3hHcwvMp1RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/397f55-2b76-41de-86aa-a4202a40ce18/1/SkcTzDG36jiRvhRV3hHcwvMp1RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SkcTzDG36jiRvhRV3hHcwvMp1RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8b:13:ba:3d:3e:d7:7c:2d:48:38:aa:80:ae:4d:62:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a4713cc31b7ea3891be1455de11dcc2f329d515
Validity
Not Before: May 1 09:00:47 2025 GMT
Not After : May 2 09:00:47 2025 GMT
Subject: CN=9f090635022b432d8ee15063a0286bd63b94e683
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:73:8a:3f:66:0f:ac:9f:33:de:cb:aa:8e:6b:
de:6f:7e:76:09:50:14:84:9a:b1:93:76:4e:b7:7f:
bc:2f:29:3b:ab:74:6c:5e:21:9b:2b:85:1d:8b:d4:
52:ce:1e:f5:8a:df:56:a8:87:c7:0e:06:6e:9d:7a:
a7:d0:87:eb:84:76:12:8e:34:b1:74:bf:f6:28:e1:
a9:32:a2:9f:40:45:c9:08:07:d0:58:02:dd:14:2e:
e2:f8:e4:5e:48:f2:69:a7:8d:8b:f1:02:fd:11:f5:
ab:fe:d0:63:c9:7c:07:39:8e:cb:d0:a2:bb:ce:9d:
9d:89:a6:90:88:67:ec:ec:12:0c:75:a6:4c:57:af:
ff:e6:42:e5:f1:03:d6:c2:a9:a5:aa:4f:11:5f:2b:
ce:e1:f4:f7:ee:18:00:d1:48:0e:40:1a:0e:91:2b:
20:7c:91:e6:58:d1:6d:68:9c:23:dd:3c:bc:86:42:
29:86:1c:ba:22:e3:97:7b:a2:5e:0f:63:60:e2:73:
0a:0d:f9:38:6c:57:c7:73:d6:fe:82:8e:8d:9f:82:
ed:ee:d5:8b:7c:15:e3:77:94:3f:9c:73:74:91:38:
25:bb:1c:25:65:26:59:c7:a4:aa:8f:b4:36:6f:b5:
e8:3e:fd:cc:e7:fe:a1:9d:ce:16:dc:7f:3a:88:36:
71:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:09:06:35:02:2B:43:2D:8E:E1:50:63:A0:28:6B:D6:3B:94:E6:83
X509v3 Authority Key Identifier:
keyid:4A:47:13:CC:31:B7:EA:38:91:BE:14:55:DE:11:DC:C2:F3:29:D5:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SkcTzDG36jiRvhRV3hHcwvMp1RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/397f55-2b76-41de-86aa-a4202a40ce18/1/SkcTzDG36jiRvhRV3hHcwvMp1RU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/397f55-2b76-41de-86aa-a4202a40ce18/1/SkcTzDG36jiRvhRV3hHcwvMp1RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:6c:71:5d:f8:c8:0e:e0:49:1b:88:f2:a3:ba:3c:99:c6:c2:
a3:e3:23:61:19:88:e7:34:4a:fa:69:d5:02:71:f2:f3:16:f6:
8a:bf:40:d4:f5:1c:b9:5e:5e:89:68:1a:27:29:ad:49:5c:2f:
0a:1b:54:79:be:2f:27:0c:7c:46:68:20:7e:f7:90:a8:b4:2d:
f0:79:79:2e:cd:9b:1d:ed:b6:d3:4b:ad:61:dd:ba:04:fb:d4:
97:11:9f:10:88:d9:c7:3c:5b:c1:2f:b2:9d:06:22:66:60:26:
6f:dc:a2:3b:76:03:48:2d:48:1e:f2:ad:bb:0a:78:45:b7:79:
39:c8:b9:07:d6:77:50:e7:fb:77:48:11:c1:4a:52:85:20:e1:
fc:a3:7e:c9:ac:2f:43:7b:48:d3:4c:8d:67:43:54:50:01:c8:
53:e8:87:50:94:09:e4:fc:ec:35:39:29:07:6d:d7:4e:e0:18:
ca:0c:17:3f:b4:81:20:60:d5:a6:e7:45:39:60:ff:6f:0a:c9:
1d:df:b6:42:b8:cd:aa:81:01:30:8a:a0:6f:10:25:17:47:5c:
a1:0d:48:ea:0a:af:01:3d:fc:ae:3e:f6:7f:da:b6:b0:dc:6e:
3d:2c:04:23:a9:2c:ce:d9:2c:d1:7f:a4:17:89:d5:4d:1b:30:
82:95:e0:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaLE7o9Ptd8LUg4qoCuTWIEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhNDcxM2NjMzFiN2VhMzg5MWJlMTQ1NWRlMTFkY2MyZjMy
OWQ1MTUwHhcNMjUwNTAxMDkwMDQ3WhcNMjUwNTAyMDkwMDQ3WjAzMTEwLwYDVQQD
Eyg5ZjA5MDYzNTAyMmI0MzJkOGVlMTUwNjNhMDI4NmJkNjNiOTRlNjgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnOKP2YPrJ8z3suqjmveb352CVAU
hJqxk3ZOt3+8Lyk7q3RsXiGbK4Udi9RSzh71it9WqIfHDgZunXqn0IfrhHYSjjSx
dL/2KOGpMqKfQEXJCAfQWALdFC7i+OReSPJpp42L8QL9EfWr/tBjyXwHOY7L0KK7
zp2diaaQiGfs7BIMdaZMV6//5kLl8QPWwqmlqk8RXyvO4fT37hgA0UgOQBoOkSsg
fJHmWNFtaJwj3Ty8hkIphhy6IuOXe6JeD2Ng4nMKDfk4bFfHc9b+go6Nn4Lt7tWL
fBXjd5Q/nHN0kTgluxwlZSZZx6Sqj7Q2b7XoPv3M5/6hnc4W3H86iDZxLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ8JBjUCK0MtjuFQY6Aoa9Y7lOaDMB8GA1UdIwQY
MBaAFEpHE8wxt+o4kb4UVd4R3MLzKdUVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2tjVHpERzM2amlSdmhSVjNoSGN3dk1wMVJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8zOTdmNTUtMmI3Ni00MWRlLTg2YWEt
YTQyMDJhNDBjZTE4LzEvU2tjVHpERzM2amlSdmhSVjNoSGN3dk1wMVJVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi8zOTdmNTUtMmI3Ni00MWRlLTg2YWEtYTQyMDJhNDBjZTE4
LzEvU2tjVHpERzM2amlSdmhSVjNoSGN3dk1wMVJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGGxxXfjI
DuBJG4jyo7o8mcbCo+MjYRmI5zRK+mnVAnHy8xb2ir9A1PUcuV5eiWgaJymtSVwv
ChtUeb4vJwx8RmggfveQqLQt8Hl5Ls2bHe2200utYd26BPvUlxGfEIjZxzxbwS+y
nQYiZmAmb9yiO3YDSC1IHvKtuwp4Rbd5Oci5B9Z3UOf7d0gRwUpShSDh/KN+yawv
Q3tI00yNZ0NUUAHIU+iHUJQJ5PzsNTkpB23XTuAYygwXP7SBIGDVpudFOWD/bwrJ
Hd+2QrjNqoEBMIqgbxAlF0dcoQ1I6gqvAT38rj72f9q2sNxuPSwEI6ksztks0X+k
F4nVTRswgpXglg==
-----END CERTIFICATE-----
Generated at Thu May 1 15:00:37 2025 by rpki-client