Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/167903-f426-4bf0-9233-a9ac66be48f7/1/SkrQOg9ZK7nJfDBSppASXYRkFaQ.mft
File: SkrQOg9ZK7nJfDBSppASXYRkFaQ.mft (raw, json)
Hash identifier: R5QjWWqTMxeu1UfUPSAYpTL2CPYjKOE3aXrWwxcdbh8=
Subject key identifier: CA:4C:38:16:A6:EF:17:56:93:82:4A:F2:5B:8E:73:7D:A3:A5:5D:7C
Authority key identifier: 4A:4A:D0:3A:0F:59:2B:B9:C9:7C:30:52:A6:90:12:5D:84:64:15:A4
Certificate issuer: /CN=4a4ad03a0f592bb9c97c3052a690125d846415a4
Certificate serial: 01967BD834C7D96276BDD4DF06822CB9C708
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SkrQOg9ZK7nJfDBSppASXYRkFaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/167903-f426-4bf0-9233-a9ac66be48f7/1/SkrQOg9ZK7nJfDBSppASXYRkFaQ.mft
Manifest number: 1517
Signing time: Mon 28 Apr 2025 10:01:28 +0000
Manifest this update: Mon 28 Apr 2025 10:01:28 +0000
Manifest next update: Tue 29 Apr 2025 10:01:28 +0000
Files and hashes: 1: 1-XNkV-CHFeLSAB8v7LjTlroe6Iw.roa (hash: GluiNGZxsHxMI1guABtXYth8XDdUuWytJuXVUN1uHow=)
2: SkrQOg9ZK7nJfDBSppASXYRkFaQ.crl (hash: JAzzzw0UxmY1uyNBmKOwEfGVZ9WGR4usuNAkafDUhM8=)
3: l-ehjkba5MFL6bTBmw0p0je8kv0.roa (hash: SBj+lER6GA3nSUubC1AdXeW27xw7XEGQlpuymCAxj5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/167903-f426-4bf0-9233-a9ac66be48f7/1/SkrQOg9ZK7nJfDBSppASXYRkFaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/167903-f426-4bf0-9233-a9ac66be48f7/1/SkrQOg9ZK7nJfDBSppASXYRkFaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/SkrQOg9ZK7nJfDBSppASXYRkFaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:d8:34:c7:d9:62:76:bd:d4:df:06:82:2c:b9:c7:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a4ad03a0f592bb9c97c3052a690125d846415a4
Validity
Not Before: Apr 28 10:01:28 2025 GMT
Not After : Apr 29 10:01:28 2025 GMT
Subject: CN=ca4c3816a6ef175693824af25b8e737da3a55d7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:fd:7c:00:07:c1:4b:b5:60:92:23:39:97:7c:
f5:ad:38:15:0b:57:09:54:ad:42:bd:4f:e0:a4:3b:
fa:15:7e:3f:41:16:d5:6b:29:3f:5b:70:f1:6e:fa:
0c:5a:0f:cc:a8:c8:b9:7d:1a:99:55:9f:bf:50:d4:
ce:0e:50:17:fe:a7:a4:5c:e8:ed:98:a9:ab:a0:b0:
9f:2b:21:03:8a:26:2c:66:f2:88:44:f3:b4:fa:93:
04:5a:46:1c:5e:c9:63:a7:ca:0c:8f:8f:a5:32:51:
f1:42:e6:91:00:fc:69:75:c1:2d:e6:58:6e:6c:79:
2f:3b:d1:0b:e7:ac:09:ec:f6:92:4d:90:49:17:91:
14:c4:20:a7:7d:7f:4c:36:15:56:8f:bf:36:c4:4f:
b8:af:e1:b8:43:1c:de:16:90:de:7c:53:c9:73:16:
80:c2:a5:11:a5:fc:67:72:65:19:75:f8:56:c3:42:
92:66:d8:e3:61:d4:c6:b0:58:36:e8:86:e2:31:3b:
a7:95:6a:e4:52:49:65:75:a6:83:66:1c:94:6f:28:
fc:69:d2:d7:b0:04:48:f2:14:17:d1:d3:8b:2b:81:
74:a6:22:c7:5f:2b:35:27:ce:40:dc:34:4f:fe:18:
6c:02:d3:18:64:b2:5e:6e:be:a6:a6:28:ff:d0:8e:
b4:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:4C:38:16:A6:EF:17:56:93:82:4A:F2:5B:8E:73:7D:A3:A5:5D:7C
X509v3 Authority Key Identifier:
keyid:4A:4A:D0:3A:0F:59:2B:B9:C9:7C:30:52:A6:90:12:5D:84:64:15:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SkrQOg9ZK7nJfDBSppASXYRkFaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/167903-f426-4bf0-9233-a9ac66be48f7/1/SkrQOg9ZK7nJfDBSppASXYRkFaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/167903-f426-4bf0-9233-a9ac66be48f7/1/SkrQOg9ZK7nJfDBSppASXYRkFaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:b0:b1:9d:0b:50:0b:5a:9e:d3:df:bb:50:74:86:f3:f6:3d:
68:51:ec:35:cd:fc:7a:98:04:de:64:3c:ef:db:0a:22:6d:95:
9e:9e:d2:b9:3d:a2:99:a7:35:ec:aa:bd:b8:9f:2a:0a:71:e8:
1b:0e:fc:7a:36:d5:56:e6:ea:e1:fb:a5:bc:af:4d:66:51:15:
96:91:82:fe:1f:bb:36:36:55:ba:d7:08:7c:e6:88:af:95:03:
53:ab:97:f0:2a:7a:71:ac:55:03:23:95:11:25:5a:ad:7f:36:
4f:a1:1b:96:77:ed:55:8d:2f:b8:df:12:e0:a0:79:e4:8c:7d:
a2:0a:ba:10:81:94:7e:7d:75:ba:9d:e9:8b:ac:7d:56:56:39:
a0:65:7b:6b:95:05:f6:a2:31:15:3b:d7:86:09:2c:37:16:0f:
26:53:c0:b3:76:ba:e1:d6:85:99:c5:27:e3:47:cc:7f:10:f9:
11:4d:3f:64:63:d7:78:de:96:52:9c:c8:da:5a:9d:83:ed:1b:
86:e3:cc:e1:5a:46:f6:54:9b:f1:69:50:c4:d9:85:0d:6b:3a:
48:ee:bf:21:fd:62:7b:d3:44:6a:5b:da:98:ab:e3:f7:ac:68:
a6:8e:24:01:91:84:bb:e7:12:1b:f2:5b:2d:ed:7e:ab:c7:ae:
c8:f9:1a:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 15:04:32 2025 by rpki-client