Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/4906ff-9e20-4118-9aae-f6d0ff458648/1/04SkGZfu6k0F_MfNQLEhE6W7aeg.mft
File: 04SkGZfu6k0F_MfNQLEhE6W7aeg.mft (raw, json)
Hash identifier: OqSj7UZ3yzhSJrkczzAu+CWtQT19G3oYAIkrQh17I94=
Subject key identifier: 38:AC:51:0E:C9:1A:82:B5:1E:7D:1A:68:CA:B3:2B:56:FB:F2:14:01
Authority key identifier: D3:84:A4:19:97:EE:EA:4D:05:FC:C7:CD:40:B1:21:13:A5:BB:69:E8
Certificate issuer: /CN=d384a41997eeea4d05fcc7cd40b12113a5bb69e8
Certificate serial: 0197808D980E533F1735E8889FA24EF5EF7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/04SkGZfu6k0F_MfNQLEhE6W7aeg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/4906ff-9e20-4118-9aae-f6d0ff458648/1/04SkGZfu6k0F_MfNQLEhE6W7aeg.mft
Manifest number: 09A5
Signing time: Wed 18 Jun 2025 01:00:52 +0000
Manifest this update: Wed 18 Jun 2025 01:00:52 +0000
Manifest next update: Thu 19 Jun 2025 01:00:52 +0000
Files and hashes: 1: 04SkGZfu6k0F_MfNQLEhE6W7aeg.crl (hash: 5E3sRk5pqMYBvEaf7wWLlX2QwyoS26y50Wue12UsNyo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/4906ff-9e20-4118-9aae-f6d0ff458648/1/04SkGZfu6k0F_MfNQLEhE6W7aeg.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/4906ff-9e20-4118-9aae-f6d0ff458648/1/04SkGZfu6k0F_MfNQLEhE6W7aeg.mft
rsync://rpki.ripe.net/repository/DEFAULT/04SkGZfu6k0F_MfNQLEhE6W7aeg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 22:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:80:8d:98:0e:53:3f:17:35:e8:88:9f:a2:4e:f5:ef:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d384a41997eeea4d05fcc7cd40b12113a5bb69e8
Validity
Not Before: Jun 18 01:00:52 2025 GMT
Not After : Jun 19 01:00:52 2025 GMT
Subject: CN=38ac510ec91a82b51e7d1a68cab32b56fbf21401
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:68:e8:6d:3d:6e:2e:a6:3e:9f:4b:5b:4f:c4:
e1:1e:6d:e3:02:66:0e:7b:ba:e4:0b:dc:cf:7d:32:
f0:a9:1f:b0:71:e3:b0:8b:8c:cb:25:bf:db:0e:6f:
9f:c2:92:d4:c6:40:9e:02:80:5d:b7:44:01:7f:d9:
03:1e:7d:b1:de:e8:d8:30:cc:d0:70:0d:c6:ce:e5:
ad:44:0c:12:86:2a:01:97:1c:93:fd:0b:8c:9f:37:
08:31:47:e7:bf:a8:5e:98:9c:36:9e:55:b0:13:6d:
76:03:4b:e5:0c:9c:e6:48:e3:f4:2d:8d:cf:04:b2:
d1:cb:83:f1:1e:97:b1:bb:70:20:b4:9d:c6:82:d5:
ab:8d:a4:a1:6e:1a:4c:56:8c:8e:ab:22:2d:55:35:
a2:f6:e3:ff:06:58:4f:e2:36:43:b3:01:ae:36:dd:
3c:0d:5b:5c:d0:9e:67:45:be:10:f4:4f:8c:ba:5d:
11:ce:b1:96:17:7b:d6:b3:6a:d8:10:95:73:11:28:
7f:08:3b:a3:6e:ea:d6:0b:79:23:dd:7c:86:e8:42:
2a:0f:4c:f1:a0:6d:e9:7a:bb:f8:cf:7d:05:eb:59:
b5:40:f7:a1:75:4d:95:50:ee:ac:cb:f8:9a:69:bb:
ee:23:94:14:75:e7:59:d0:07:d6:31:a5:7c:a6:58:
f9:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:AC:51:0E:C9:1A:82:B5:1E:7D:1A:68:CA:B3:2B:56:FB:F2:14:01
X509v3 Authority Key Identifier:
keyid:D3:84:A4:19:97:EE:EA:4D:05:FC:C7:CD:40:B1:21:13:A5:BB:69:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/04SkGZfu6k0F_MfNQLEhE6W7aeg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4906ff-9e20-4118-9aae-f6d0ff458648/1/04SkGZfu6k0F_MfNQLEhE6W7aeg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4906ff-9e20-4118-9aae-f6d0ff458648/1/04SkGZfu6k0F_MfNQLEhE6W7aeg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:f3:c2:d3:5d:ad:06:f4:e4:81:c8:b9:dd:58:17:e7:9e:60:
01:ce:44:53:e2:a1:68:27:f3:0b:20:be:5d:79:f2:ae:47:f6:
ad:87:91:d7:43:e2:8a:8f:c7:93:d6:a7:9e:09:b4:6f:fe:9c:
f6:d1:f6:59:0e:c7:3c:03:c1:2f:a1:d4:a9:17:05:d4:07:9e:
c5:85:fd:15:89:02:24:9f:47:3c:b2:d3:00:a2:6c:6c:a8:f0:
01:22:d8:70:f3:d0:8b:c4:1a:02:25:61:2d:b8:3e:eb:67:a6:
47:49:2a:13:b1:dd:6c:4f:2d:95:27:2f:c2:e9:00:87:01:1f:
39:dc:9a:6a:e8:77:91:df:e2:e0:da:05:91:e5:41:9e:da:91:
92:70:3f:8e:64:92:f6:0c:d5:a3:59:b2:23:13:45:6c:71:10:
04:98:7e:97:4e:0c:01:41:01:69:c8:ff:3d:22:a2:88:49:fe:
7e:65:87:1d:50:c0:0c:b5:a9:fa:82:9b:fb:a4:1e:76:19:89:
d1:4e:13:d7:fc:3d:c0:1c:ac:58:26:19:b3:d7:86:19:04:50:
3b:3a:ba:de:a7:55:af:07:07:f4:07:25:6d:f4:0e:59:80:50:
8d:55:37:06:44:f8:79:0d:a0:4f:a5:7a:ca:3e:1b:f2:1b:57:
b3:c0:35:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 08:28:14 2025 by rpki-client