Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/918ac3-49a5-4a32-bd72-723baa8e688a/1/SKyAa1vKTH2RbVA9XHk8jfRO5tM.mft
File: SKyAa1vKTH2RbVA9XHk8jfRO5tM.mft (raw, json)
Hash identifier: AAVc4PGRwh3nml2VzOEJrqDxPQ2l11pJTYlEg/MjD6s=
Subject key identifier: E0:E5:D5:72:F5:DB:BA:E2:A1:5E:BC:B7:45:C8:10:04:DE:E3:73:D4
Authority key identifier: 48:AC:80:6B:5B:CA:4C:7D:91:6D:50:3D:5C:79:3C:8D:F4:4E:E6:D3
Certificate issuer: /CN=48ac806b5bca4c7d916d503d5c793c8df44ee6d3
Certificate serial: 019768BC25EAB2B68ECED20A7CB482A8ACA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SKyAa1vKTH2RbVA9XHk8jfRO5tM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/918ac3-49a5-4a32-bd72-723baa8e688a/1/SKyAa1vKTH2RbVA9XHk8jfRO5tM.mft
Manifest number: 049B
Signing time: Fri 13 Jun 2025 10:00:50 +0000
Manifest this update: Fri 13 Jun 2025 10:00:50 +0000
Manifest next update: Sat 14 Jun 2025 10:00:50 +0000
Files and hashes: 1: SKyAa1vKTH2RbVA9XHk8jfRO5tM.crl (hash: uWQJ7hiE8I8MIl9wUcB96LDK2MRJGnwaC9AbymZJiXU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/918ac3-49a5-4a32-bd72-723baa8e688a/1/SKyAa1vKTH2RbVA9XHk8jfRO5tM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/918ac3-49a5-4a32-bd72-723baa8e688a/1/SKyAa1vKTH2RbVA9XHk8jfRO5tM.mft
rsync://rpki.ripe.net/repository/DEFAULT/SKyAa1vKTH2RbVA9XHk8jfRO5tM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 10:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:bc:25:ea:b2:b6:8e:ce:d2:0a:7c:b4:82:a8:ac:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48ac806b5bca4c7d916d503d5c793c8df44ee6d3
Validity
Not Before: Jun 13 10:00:50 2025 GMT
Not After : Jun 14 10:00:50 2025 GMT
Subject: CN=e0e5d572f5dbbae2a15ebcb745c81004dee373d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:72:db:34:09:8f:64:fd:83:42:ad:c9:87:15:
31:35:f5:7d:a2:10:86:e0:f0:b3:a4:0d:17:39:58:
d0:54:ae:ab:e3:81:7b:43:03:5c:84:25:d0:ce:b3:
3b:b9:ea:d7:bb:df:5c:7c:94:7a:0c:d7:e7:5b:f9:
9b:13:3b:e6:12:3b:f3:44:e3:4a:50:3c:c6:2c:63:
8f:2e:49:9b:92:1f:72:a4:5d:be:70:19:6c:5b:ab:
c7:ed:7e:08:d4:6d:46:27:ab:59:f7:da:b1:8c:d9:
43:d4:f3:ef:51:95:1e:b5:c1:20:1a:55:38:bf:28:
18:df:b7:6c:01:c3:ad:3f:7d:5e:99:d1:a7:d7:a6:
36:cf:97:8c:66:a2:b8:79:6f:ca:6c:dc:34:39:b8:
e6:67:e1:4a:a4:4d:d2:b5:12:15:c9:b9:cd:cf:cd:
fb:12:6f:21:c1:b9:9a:ec:02:29:6a:d1:4a:93:8d:
22:e3:e0:eb:e1:25:ec:9f:f7:82:a1:58:62:56:68:
f4:6f:4c:5c:f9:dc:72:be:2a:78:0e:cc:42:3f:84:
a0:8d:72:a7:6c:01:b2:7c:f8:1f:9d:78:51:6f:df:
3e:83:64:cd:61:95:83:e1:35:59:ad:9b:d4:3f:ae:
b0:b9:32:04:d6:bd:1d:92:d6:fe:34:dc:82:f5:8f:
10:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:E5:D5:72:F5:DB:BA:E2:A1:5E:BC:B7:45:C8:10:04:DE:E3:73:D4
X509v3 Authority Key Identifier:
keyid:48:AC:80:6B:5B:CA:4C:7D:91:6D:50:3D:5C:79:3C:8D:F4:4E:E6:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SKyAa1vKTH2RbVA9XHk8jfRO5tM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/918ac3-49a5-4a32-bd72-723baa8e688a/1/SKyAa1vKTH2RbVA9XHk8jfRO5tM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/918ac3-49a5-4a32-bd72-723baa8e688a/1/SKyAa1vKTH2RbVA9XHk8jfRO5tM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:ff:a1:42:6e:bb:20:58:57:e6:cc:58:78:d5:ab:e9:aa:ca:
35:47:45:2b:24:c8:c0:4f:f0:72:14:f8:56:2d:b7:39:c8:23:
e8:06:b5:d8:4f:e1:6c:e6:4e:b6:33:68:30:be:63:80:b9:31:
66:bc:fd:fa:ee:1f:b2:ce:d3:d7:46:4d:5b:c3:5c:b2:06:0e:
4a:e8:f6:8d:8b:76:68:20:fb:0a:11:b9:ab:99:7a:f3:72:34:
de:3c:e8:2b:35:2a:2d:92:ac:a7:39:2e:9e:cc:49:87:61:6e:
fc:68:f6:7f:16:f5:fe:10:41:92:16:05:72:a1:a9:17:40:ee:
14:ba:59:5b:0f:4d:ac:b5:3a:d3:db:ad:19:df:46:de:d9:55:
3a:1f:3d:1f:7c:e7:c7:ba:93:95:5a:29:99:c1:2f:f0:92:aa:
d8:06:c8:d8:de:14:87:8d:ae:c2:c5:6b:a1:ca:96:0c:c2:33:
97:07:cd:06:7e:b7:cd:ce:e0:43:58:ee:ec:21:93:ab:a2:10:
0c:11:fc:55:c5:87:6c:57:1f:dd:6f:ca:9d:4b:5e:8e:3a:ad:
74:6c:1e:23:f1:6e:67:f5:c2:23:fc:c3:03:b5:46:0e:3f:00:
56:b7:dd:5b:0b:d3:88:b8:f6:b0:71:44:4e:ac:58:99:ea:43:
6c:7e:23:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdovCXqsraOztIKfLSCqKypMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4YWM4MDZiNWJjYTRjN2Q5MTZkNTAzZDVjNzkzYzhkZjQ0
ZWU2ZDMwHhcNMjUwNjEzMTAwMDUwWhcNMjUwNjE0MTAwMDUwWjAzMTEwLwYDVQQD
EyhlMGU1ZDU3MmY1ZGJiYWUyYTE1ZWJjYjc0NWM4MTAwNGRlZTM3M2Q0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxnLbNAmPZP2DQq3JhxUxNfV9ohCG
4PCzpA0XOVjQVK6r44F7QwNchCXQzrM7uerXu99cfJR6DNfnW/mbEzvmEjvzRONK
UDzGLGOPLkmbkh9ypF2+cBlsW6vH7X4I1G1GJ6tZ99qxjNlD1PPvUZUetcEgGlU4
vygY37dsAcOtP31emdGn16Y2z5eMZqK4eW/KbNw0ObjmZ+FKpE3StRIVybnNz837
Em8hwbma7AIpatFKk40i4+Dr4SXsn/eCoVhiVmj0b0xc+dxyvip4DsxCP4SgjXKn
bAGyfPgfnXhRb98+g2TNYZWD4TVZrZvUP66wuTIE1r0dktb+NNyC9Y8Q3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFODl1XL127rioV68t0XIEATe43PUMB8GA1UdIwQY
MBaAFEisgGtbykx9kW1QPVx5PI30TubTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0t5QWExdktUSDJSYlZBOVhIazhqZlJPNXRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi85MThhYzMtNDlhNS00YTMyLWJkNzIt
NzIzYmFhOGU2ODhhLzEvU0t5QWExdktUSDJSYlZBOVhIazhqZlJPNXRNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi85MThhYzMtNDlhNS00YTMyLWJkNzItNzIzYmFhOGU2ODhh
LzEvU0t5QWExdktUSDJSYlZBOVhIazhqZlJPNXRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACP+hQm67
IFhX5sxYeNWr6arKNUdFKyTIwE/wchT4Vi23Ocgj6Aa12E/hbOZOtjNoML5jgLkx
Zrz9+u4fss7T10ZNW8NcsgYOSuj2jYt2aCD7ChG5q5l683I03jzoKzUqLZKspzku
nsxJh2Fu/Gj2fxb1/hBBkhYFcqGpF0DuFLpZWw9NrLU609utGd9G3tlVOh89H3zn
x7qTlVopmcEv8JKq2AbI2N4Uh42uwsVrocqWDMIzlwfNBn63zc7gQ1ju7CGTq6IQ
DBH8VcWHbFcf3W/KnUtejjqtdGweI/FuZ/XCI/zDA7VGDj8AVrfdWwvTiLj2sHFE
TqxYmepDbH4jxw==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:29:05 2025 by rpki-client