Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/918ac3-49a5-4a32-bd72-723baa8e688a/1/SKyAa1vKTH2RbVA9XHk8jfRO5tM.mft
File: SKyAa1vKTH2RbVA9XHk8jfRO5tM.mft (raw, json)
Hash identifier: i8mDi8PsLEuyzxvRtW7Drsal/tN9ghSkfdqJcQKmcjg=
Subject key identifier: 3A:E4:D6:1F:BB:2B:73:B7:55:8F:9D:70:CB:E3:A8:03:E2:2D:BE:6B
Authority key identifier: 48:AC:80:6B:5B:CA:4C:7D:91:6D:50:3D:5C:79:3C:8D:F4:4E:E6:D3
Certificate issuer: /CN=48ac806b5bca4c7d916d503d5c793c8df44ee6d3
Certificate serial: 01967567B43845A0340871F47D07D91E1F96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SKyAa1vKTH2RbVA9XHk8jfRO5tM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/918ac3-49a5-4a32-bd72-723baa8e688a/1/SKyAa1vKTH2RbVA9XHk8jfRO5tM.mft
Manifest number: 041D
Signing time: Sun 27 Apr 2025 04:00:52 +0000
Manifest this update: Sun 27 Apr 2025 04:00:52 +0000
Manifest next update: Mon 28 Apr 2025 04:00:52 +0000
Files and hashes: 1: SKyAa1vKTH2RbVA9XHk8jfRO5tM.crl (hash: 0SVAg0eyE7aKYfXM+sc4YV8YJXstZs9D5zU81wdIKVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/918ac3-49a5-4a32-bd72-723baa8e688a/1/SKyAa1vKTH2RbVA9XHk8jfRO5tM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/918ac3-49a5-4a32-bd72-723baa8e688a/1/SKyAa1vKTH2RbVA9XHk8jfRO5tM.mft
rsync://rpki.ripe.net/repository/DEFAULT/SKyAa1vKTH2RbVA9XHk8jfRO5tM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 04:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:67:b4:38:45:a0:34:08:71:f4:7d:07:d9:1e:1f:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48ac806b5bca4c7d916d503d5c793c8df44ee6d3
Validity
Not Before: Apr 27 04:00:52 2025 GMT
Not After : Apr 28 04:00:52 2025 GMT
Subject: CN=3ae4d61fbb2b73b7558f9d70cbe3a803e22dbe6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d5:b6:6b:2c:d4:7b:f8:09:ac:3c:b1:59:42:
35:41:d7:61:04:a1:e7:66:6a:ba:03:60:29:47:d0:
75:72:48:c6:0d:e4:02:53:8d:17:b1:68:7e:a2:e3:
7b:78:d3:6b:d2:40:89:c6:26:2e:92:bc:0e:7a:32:
43:04:e8:38:ac:46:9f:92:3e:dd:34:98:0d:80:fb:
df:19:4b:b3:9a:eb:7f:a3:58:e4:2a:86:b8:5d:a7:
4b:80:82:c2:a7:65:c4:d3:b9:64:e4:86:7e:0c:2c:
39:01:d1:6d:e3:7d:f9:f0:2a:1e:e3:c8:0f:26:61:
37:91:38:4f:49:0c:85:98:81:79:59:4d:19:39:41:
da:c3:96:62:34:32:ba:0f:31:4b:e8:d0:04:8d:dd:
25:93:69:1c:f8:2c:c3:60:00:ef:8a:a3:0f:55:48:
02:87:d6:69:e0:50:ca:0b:ea:e0:cd:df:3c:da:e9:
cf:aa:05:24:9b:63:d0:81:c3:17:04:d1:35:69:ea:
e3:64:62:46:34:14:16:e4:b3:fe:2d:2a:5f:5b:63:
ae:1b:62:10:95:98:f4:6b:e2:62:82:0c:68:12:ba:
52:b3:14:12:14:93:74:84:60:04:67:e3:a1:71:78:
ea:24:b4:66:62:49:03:cc:9b:cf:1c:80:e1:2f:69:
28:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:E4:D6:1F:BB:2B:73:B7:55:8F:9D:70:CB:E3:A8:03:E2:2D:BE:6B
X509v3 Authority Key Identifier:
keyid:48:AC:80:6B:5B:CA:4C:7D:91:6D:50:3D:5C:79:3C:8D:F4:4E:E6:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SKyAa1vKTH2RbVA9XHk8jfRO5tM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/918ac3-49a5-4a32-bd72-723baa8e688a/1/SKyAa1vKTH2RbVA9XHk8jfRO5tM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/918ac3-49a5-4a32-bd72-723baa8e688a/1/SKyAa1vKTH2RbVA9XHk8jfRO5tM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:37:0e:5a:a9:dd:e1:c3:3a:d7:21:8b:38:81:2c:0c:ab:59:
c0:fb:09:62:9b:a5:89:81:42:94:36:ae:79:7c:7e:ab:34:eb:
d1:b9:79:78:aa:6b:28:29:33:86:ec:96:b6:3a:c3:91:b5:2d:
35:54:9a:2a:56:3c:9e:64:15:70:5d:7b:4a:c2:28:25:ee:77:
5e:d4:2d:46:cb:c6:bf:44:84:6d:d3:ec:5c:a2:f3:4f:45:89:
4a:cf:92:74:f3:1a:19:ae:01:be:93:bf:a9:8c:63:2f:5f:49:
47:fb:f1:dc:6f:fe:6b:a5:8e:54:9a:74:85:c6:27:84:47:39:
08:55:c2:af:e4:16:13:a2:46:06:99:04:5c:02:01:66:03:7c:
6b:50:93:13:a6:f7:5b:52:18:58:02:60:96:64:92:3c:f8:71:
44:5d:3f:ea:f4:18:b2:37:87:14:02:e2:68:1c:ad:55:ba:c5:
f7:2e:4b:65:70:61:79:b1:14:de:d4:28:f6:85:34:ff:f4:96:
b9:d2:26:b4:04:d4:e7:b1:f8:53:99:c8:28:fe:69:84:17:6b:
e2:2c:93:01:d5:f0:53:52:08:e5:f6:f1:1f:06:7f:0f:e4:cc:
a9:35:39:09:bc:b8:41:bc:da:dc:2e:cd:95:4f:75:b5:f4:23:
a7:db:c9:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:07:57 2025 by rpki-client