Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/75785f-0e82-4d46-8456-759ac50414de/1/SksX0DK5-19-W8n9Jo37gO3u0h0.mft
File: SksX0DK5-19-W8n9Jo37gO3u0h0.mft (raw, json)
Hash identifier: VdeJ4DqczRv2Yh8YFOfSgOwFJLSR2PfewDDV/5s6Oso=
Subject key identifier: 67:C8:73:19:0A:AB:2D:2A:F1:DD:52:59:4F:D4:CC:E9:A1:4C:E1:49
Authority key identifier: 4A:4B:17:D0:32:B9:FB:5F:7E:5B:C9:FD:26:8D:FB:80:ED:EE:D2:1D
Certificate issuer: /CN=4a4b17d032b9fb5f7e5bc9fd268dfb80edeed21d
Certificate serial: 01978E48DC60DF2CF8A861497BBE82403B4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SksX0DK5-19-W8n9Jo37gO3u0h0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/75785f-0e82-4d46-8456-759ac50414de/1/SksX0DK5-19-W8n9Jo37gO3u0h0.mft
Manifest number: 14BD
Signing time: Fri 20 Jun 2025 17:00:29 +0000
Manifest this update: Fri 20 Jun 2025 17:00:29 +0000
Manifest next update: Sat 21 Jun 2025 17:00:29 +0000
Files and hashes: 1: SksX0DK5-19-W8n9Jo37gO3u0h0.crl (hash: WzXh8BTYQMZcRGP5M13SQuL7f5CRH+ECT81JnS24gJo=)
2: rOZzXqhZDodX-Oc13GcxPruRbSM.roa (hash: YeJHzy/9tbn5hMpXLH6O6XO6xL28nuOSs+m8iNhWA4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/75785f-0e82-4d46-8456-759ac50414de/1/SksX0DK5-19-W8n9Jo37gO3u0h0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/75785f-0e82-4d46-8456-759ac50414de/1/SksX0DK5-19-W8n9Jo37gO3u0h0.mft
rsync://rpki.ripe.net/repository/DEFAULT/SksX0DK5-19-W8n9Jo37gO3u0h0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Jun 2025 17:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:8e:48:dc:60:df:2c:f8:a8:61:49:7b:be:82:40:3b:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a4b17d032b9fb5f7e5bc9fd268dfb80edeed21d
Validity
Not Before: Jun 20 17:00:29 2025 GMT
Not After : Jun 21 17:00:29 2025 GMT
Subject: CN=67c873190aab2d2af1dd52594fd4cce9a14ce149
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:01:11:94:c3:42:dc:1f:c9:26:b7:01:9e:97:
de:2c:1b:43:e0:e0:ac:56:26:25:89:43:3a:34:0c:
5a:1a:5e:e2:34:ad:0e:46:d9:ff:94:7f:17:6b:1c:
80:4d:20:25:60:35:e8:bc:35:c5:ef:47:a8:0c:53:
74:71:2a:0f:43:a8:37:de:da:ed:08:d8:fa:84:de:
1e:10:af:f6:91:a4:a2:5a:fd:59:16:67:66:17:43:
b7:bb:46:96:22:f8:88:e5:2f:3d:88:ea:1d:d2:d2:
e9:f4:c9:1b:b0:60:4d:0c:0a:b2:06:96:a9:d1:18:
bc:44:84:d4:a2:71:74:f1:ed:69:68:78:c3:20:ef:
e7:b9:08:d4:ab:5f:96:61:bd:58:fd:82:38:76:2a:
95:19:2b:04:85:16:18:cc:83:61:43:90:e7:06:44:
ba:04:59:15:8a:2d:3b:e1:06:32:4e:fa:4f:98:a9:
e7:28:f5:49:f0:a3:27:71:52:54:86:c6:fc:d4:02:
c1:a3:c2:88:35:14:ea:a8:25:e4:df:98:94:59:1f:
9a:ae:54:db:00:5e:06:7b:b4:75:05:6a:e2:97:fe:
c2:dc:ec:82:38:2c:67:d6:17:33:14:be:5a:79:db:
24:32:d9:a4:74:90:32:1d:54:fd:93:90:82:cc:b9:
b9:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:C8:73:19:0A:AB:2D:2A:F1:DD:52:59:4F:D4:CC:E9:A1:4C:E1:49
X509v3 Authority Key Identifier:
keyid:4A:4B:17:D0:32:B9:FB:5F:7E:5B:C9:FD:26:8D:FB:80:ED:EE:D2:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SksX0DK5-19-W8n9Jo37gO3u0h0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/75785f-0e82-4d46-8456-759ac50414de/1/SksX0DK5-19-W8n9Jo37gO3u0h0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/75785f-0e82-4d46-8456-759ac50414de/1/SksX0DK5-19-W8n9Jo37gO3u0h0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:ee:73:30:be:c7:1b:13:e7:19:a2:c4:93:4c:7c:65:02:59:
f0:18:e8:bb:99:f1:bc:5b:2b:e6:b7:3b:19:ba:ca:cd:72:d7:
b5:32:11:9a:e0:46:be:e5:a6:a1:2e:43:16:f6:85:05:5a:d6:
85:93:14:b0:c1:1f:52:a8:09:b8:e6:d8:30:87:10:f6:3a:fe:
f5:c1:a7:f3:73:c6:09:2d:cd:25:b7:58:d7:32:8b:ec:67:20:
ce:a5:1d:f9:66:3d:0f:09:e9:3c:4c:3d:87:77:fd:b8:db:e5:
a7:15:43:2c:f8:72:df:48:fe:9f:2e:2b:b7:87:44:73:a1:dd:
b5:55:c9:1e:04:ec:21:56:96:09:7e:72:1e:62:2a:fd:b9:17:
5c:59:8f:59:d1:3e:62:e4:23:20:b5:17:70:f6:99:63:ea:21:
28:a5:93:ea:a1:4b:66:b2:ef:58:b7:a4:3b:15:01:20:96:34:
70:7f:8b:9b:2e:48:a9:b5:0c:90:10:38:9d:39:93:9a:62:e9:
e6:2c:a1:55:4e:8e:18:f7:8d:75:29:4e:02:84:8c:82:fc:72:
4c:ec:47:ad:ca:9c:cd:aa:47:67:48:c3:a0:df:b3:c9:7a:82:
ff:f4:39:11:08:c9:13:1b:47:d8:c5:89:19:69:c7:65:43:8d:
6c:ee:f7:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 01:26:11 2025 by rpki-client