Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/30879c-9766-4a05-adbf-9ac81ef4592c/1/Sk4s8ALUX_mt4quGQ62_4IPKEtA.mft
File: Sk4s8ALUX_mt4quGQ62_4IPKEtA.mft (raw, json)
Hash identifier: 33HgrmRog7ryvdb3AJ9lW+4c85Ke5+XluePBdGWoMGM=
Subject key identifier: A9:F5:1D:11:90:EE:BB:12:35:0B:5B:A3:EF:6B:60:37:B7:AE:98:87
Authority key identifier: 4A:4E:2C:F0:02:D4:5F:F9:AD:E2:AB:86:43:AD:BF:E0:83:CA:12:D0
Certificate issuer: /CN=4a4e2cf002d45ff9ade2ab8643adbfe083ca12d0
Certificate serial: 0197722CC7ABB83E94BA079949261D047238
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sk4s8ALUX_mt4quGQ62_4IPKEtA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/30879c-9766-4a05-adbf-9ac81ef4592c/1/Sk4s8ALUX_mt4quGQ62_4IPKEtA.mft
Manifest number: 1593
Signing time: Sun 15 Jun 2025 06:00:26 +0000
Manifest this update: Sun 15 Jun 2025 06:00:26 +0000
Manifest next update: Mon 16 Jun 2025 06:00:26 +0000
Files and hashes: 1: E_IIvSbgDnePwa4szd7VMD6gnys.roa (hash: XolhJaC158fPYvnn4RwApw3vI0d4xDumHbsdRnhLiB8=)
2: Sk4s8ALUX_mt4quGQ62_4IPKEtA.crl (hash: hai1XEDNyFoT10c9AjBiw29y42Z7DFNrQoBY5AGklrM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/30879c-9766-4a05-adbf-9ac81ef4592c/1/Sk4s8ALUX_mt4quGQ62_4IPKEtA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/30879c-9766-4a05-adbf-9ac81ef4592c/1/Sk4s8ALUX_mt4quGQ62_4IPKEtA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sk4s8ALUX_mt4quGQ62_4IPKEtA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:72:2c:c7:ab:b8:3e:94:ba:07:99:49:26:1d:04:72:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a4e2cf002d45ff9ade2ab8643adbfe083ca12d0
Validity
Not Before: Jun 15 06:00:26 2025 GMT
Not After : Jun 16 06:00:26 2025 GMT
Subject: CN=a9f51d1190eebb12350b5ba3ef6b6037b7ae9887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:59:50:d3:d1:ad:08:34:fa:64:c7:44:f8:00:
9f:a2:3d:0f:35:a6:e3:d0:38:8e:a6:b2:7b:c9:d3:
41:94:b0:a0:27:55:20:34:91:30:3a:5c:2b:ee:39:
44:f8:19:2f:28:96:b0:7e:81:40:f1:04:a9:12:48:
d1:90:2e:be:5b:01:6c:25:d1:3b:8c:0f:6f:0e:b1:
e3:2a:ea:b7:22:ff:50:a7:8c:d8:7f:4c:94:af:d4:
c7:48:26:4e:45:7a:90:6b:7d:ac:85:07:5b:55:59:
96:f1:0d:6f:1a:38:a1:af:c2:af:32:f0:5d:ac:9c:
04:b7:d5:8b:af:48:14:18:bd:0a:8d:3e:35:c8:92:
36:d8:e8:8c:7c:67:ec:8b:fd:b8:fe:e7:bf:49:c9:
2f:0d:4e:53:d7:f0:56:b1:a1:2d:fd:54:49:86:84:
ab:4c:0a:00:84:8d:8e:a0:ee:ce:4e:d7:59:19:f6:
f1:a7:79:76:61:36:a6:a0:44:48:a8:ee:85:0c:be:
3f:d0:e2:83:78:88:4f:c1:3b:36:d9:63:06:d4:ac:
12:be:3c:5d:de:9f:6f:26:e6:d1:e5:2a:3f:03:2f:
27:31:88:ff:04:95:ae:ff:b7:44:da:28:c3:0b:69:
d2:14:60:ad:61:97:6d:67:3a:26:aa:dd:9c:84:01:
75:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:F5:1D:11:90:EE:BB:12:35:0B:5B:A3:EF:6B:60:37:B7:AE:98:87
X509v3 Authority Key Identifier:
keyid:4A:4E:2C:F0:02:D4:5F:F9:AD:E2:AB:86:43:AD:BF:E0:83:CA:12:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sk4s8ALUX_mt4quGQ62_4IPKEtA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/30879c-9766-4a05-adbf-9ac81ef4592c/1/Sk4s8ALUX_mt4quGQ62_4IPKEtA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/30879c-9766-4a05-adbf-9ac81ef4592c/1/Sk4s8ALUX_mt4quGQ62_4IPKEtA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:53:35:d0:c6:d5:3d:23:5f:f2:84:92:cf:68:6c:c2:ce:2f:
56:4e:a6:70:8b:4e:ad:6a:fb:b6:7b:31:f6:34:35:54:ba:7f:
2c:d5:bc:0c:cf:4e:2b:92:5b:d0:b6:27:f3:91:dd:61:ce:ea:
bd:98:fc:9c:ec:6d:95:c6:56:dd:b8:be:a1:92:d1:5c:c2:e6:
59:b9:72:92:e9:40:8d:5b:71:32:db:c6:20:51:59:16:78:9d:
4f:a9:36:58:6e:57:a1:99:32:f5:9a:63:52:da:58:87:6e:5c:
f6:d0:44:82:ef:33:56:e3:82:34:ff:17:b2:61:4b:04:84:1e:
6a:f1:29:78:f6:6f:1a:a5:1b:0a:14:50:3b:06:19:cf:f0:cf:
ae:ea:93:95:c1:c8:15:cf:c5:fa:f0:c6:99:84:36:aa:0e:5a:
70:e6:00:f2:62:fa:68:da:ab:08:de:55:32:9c:86:18:e0:34:
a1:4e:37:00:80:e4:3d:71:0c:9d:33:da:62:5c:0e:e6:96:7a:
1b:df:8a:e4:4e:e0:69:62:5f:c0:f7:ec:46:9f:95:fd:c6:ea:
cc:60:da:ae:06:a9:8e:44:40:83:62:78:61:c0:5e:f1:29:5a:
e8:a4:a2:7f:ff:14:7c:b8:cc:7f:99:d5:e2:37:04:62:be:c3:
70:56:7e:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:35:06 2025 by rpki-client