
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/c9c181-3582-4f2d-968a-941d2f1f2d16/1/SKGBKVSA9hv1hC13EvSV7CSacs8.mft
File: SKGBKVSA9hv1hC13EvSV7CSacs8.mft (raw, json)
Hash identifier: uoII1P1N6Qwh1ryikN1VgB9kaP94uQfctSA6ILdrjAU=
Subject key identifier: 98:C3:EC:1B:29:E6:4A:E9:5F:AC:34:FF:59:69:F7:B6:09:3C:58:20
Authority key identifier: 48:A1:81:29:54:80:F6:1B:F5:84:2D:77:12:F4:95:EC:24:9A:72:CF
Certificate issuer: /CN=48a181295480f61bf5842d7712f495ec249a72cf
Certificate serial: 01967AFBBE0558C1487AB7F33848FF51DF73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SKGBKVSA9hv1hC13EvSV7CSacs8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/c9c181-3582-4f2d-968a-941d2f1f2d16/1/SKGBKVSA9hv1hC13EvSV7CSacs8.mft
Manifest number: A5
Signing time: Mon 28 Apr 2025 06:00:40 +0000
Manifest this update: Mon 28 Apr 2025 06:00:40 +0000
Manifest next update: Tue 29 Apr 2025 06:00:40 +0000
Files and hashes: 1: SKGBKVSA9hv1hC13EvSV7CSacs8.crl (hash: wcLHZl/ZvltIMJhkO6Ge3wdVgF6pouU7RMt+0auuEsA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/c9c181-3582-4f2d-968a-941d2f1f2d16/1/SKGBKVSA9hv1hC13EvSV7CSacs8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/c9c181-3582-4f2d-968a-941d2f1f2d16/1/SKGBKVSA9hv1hC13EvSV7CSacs8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SKGBKVSA9hv1hC13EvSV7CSacs8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:fb:be:05:58:c1:48:7a:b7:f3:38:48:ff:51:df:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48a181295480f61bf5842d7712f495ec249a72cf
Validity
Not Before: Apr 28 06:00:40 2025 GMT
Not After : Apr 29 06:00:40 2025 GMT
Subject: CN=98c3ec1b29e64ae95fac34ff5969f7b6093c5820
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5a:fe:e8:4c:5f:df:1a:40:a4:6f:d8:9a:22:
57:19:86:0c:34:5e:e1:98:52:3d:d4:bc:87:34:20:
d3:c9:74:aa:5d:c0:1b:c1:88:87:c7:fa:c3:5e:bb:
84:c1:44:d7:5a:c8:57:24:a2:05:2f:d3:7f:68:f8:
19:e2:5b:02:0c:7b:6b:83:bf:c7:80:16:ba:5d:56:
c6:9e:2c:2f:bc:61:01:c5:0f:91:79:72:0a:2b:01:
34:e0:45:bb:cb:e1:00:5b:66:88:81:17:9b:f7:55:
73:a0:bb:c8:97:32:59:cb:58:55:69:42:ff:d9:9e:
08:3b:3e:d6:df:3d:b2:47:d3:e7:a1:89:55:56:a6:
1b:29:50:ac:d1:c0:31:38:af:1c:e3:bd:71:8e:a5:
96:af:1e:20:61:d9:5a:12:2b:a1:74:4c:af:8d:60:
f2:27:f8:6b:dc:b3:2a:70:26:f6:06:32:f6:55:e9:
c5:f9:bd:ea:60:a7:c7:79:38:7b:9b:fb:81:8a:0a:
c5:b2:6a:13:65:0b:94:f9:3b:76:a6:5c:7c:1f:07:
91:83:88:f6:fb:9b:77:b1:e7:f6:78:52:f9:2f:ac:
87:42:41:3b:37:84:88:5a:1d:60:de:e2:91:83:de:
69:51:f3:9a:a7:db:71:65:53:32:79:9b:8b:78:60:
10:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:C3:EC:1B:29:E6:4A:E9:5F:AC:34:FF:59:69:F7:B6:09:3C:58:20
X509v3 Authority Key Identifier:
keyid:48:A1:81:29:54:80:F6:1B:F5:84:2D:77:12:F4:95:EC:24:9A:72:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SKGBKVSA9hv1hC13EvSV7CSacs8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c9c181-3582-4f2d-968a-941d2f1f2d16/1/SKGBKVSA9hv1hC13EvSV7CSacs8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c9c181-3582-4f2d-968a-941d2f1f2d16/1/SKGBKVSA9hv1hC13EvSV7CSacs8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:67:bc:9b:a2:3f:66:8f:3b:45:cd:76:ad:da:00:f3:74:c9:
f4:35:73:fc:8b:f3:e8:b3:14:31:b0:1a:e2:6e:a7:fa:31:58:
0b:2e:ec:fa:4c:49:a6:47:f3:1b:10:29:a9:ca:31:8c:00:39:
41:20:71:01:7e:ef:e9:68:b2:8e:ba:a3:27:95:aa:18:ef:08:
c1:e4:bb:ae:97:b7:3c:6c:6a:6b:8e:cb:96:46:79:f2:89:90:
47:d8:fa:b3:09:a6:cf:8a:1c:c4:a6:e2:3d:fc:11:dc:1b:29:
81:8d:37:6f:bb:5b:0a:08:f6:3b:7d:12:b7:2a:9e:1d:63:1d:
d0:50:6d:4e:5f:20:24:2d:92:8b:f8:68:fd:c8:2c:62:b8:9f:
3f:a2:a4:4b:bd:98:d0:7d:a8:87:c1:d2:ca:0b:a1:35:ec:f3:
11:21:10:ab:85:3b:97:cb:a8:a9:11:81:9d:f3:f3:a1:5f:c9:
81:ce:90:1e:3b:01:a7:23:a0:ce:8f:8a:5e:3a:0e:48:ac:e7:
8a:d4:c8:79:8f:90:ac:df:f1:00:39:51:08:d2:42:37:45:14:
aa:12:14:11:32:0b:08:66:60:ea:9d:61:87:4a:16:25:37:06:
2a:05:55:50:3f:36:4c:eb:7c:2e:d9:22:5b:51:34:4b:42:59:
c6:82:6c:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:32:14 2025 by rpki-client