Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/fa5519-0e35-44cf-9d4f-2aea75c2df78/1/SktRP35EbgzW3P5Wgpu8n-SY0-g.mft
File: SktRP35EbgzW3P5Wgpu8n-SY0-g.mft (raw, json)
Hash identifier: Q3W2OUyeRo7A5MoG3re6dMoSPEGLxl/VhuRAM9JiMrc=
Subject key identifier: 23:72:9C:CA:86:44:72:D3:E6:34:A6:92:5B:3E:51:25:33:F3:34:82
Authority key identifier: 4A:4B:51:3F:7E:44:6E:0C:D6:DC:FE:56:82:9B:BC:9F:E4:98:D3:E8
Certificate issuer: /CN=4a4b513f7e446e0cd6dcfe56829bbc9fe498d3e8
Certificate serial: 0194BB96D2939D777FE019C8CF188998BE04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SktRP35EbgzW3P5Wgpu8n-SY0-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/fa5519-0e35-44cf-9d4f-2aea75c2df78/1/SktRP35EbgzW3P5Wgpu8n-SY0-g.mft
Manifest number: 13A7
Signing time: Fri 31 Jan 2025 09:00:11 +0000
Manifest this update: Fri 31 Jan 2025 09:00:11 +0000
Manifest next update: Sat 01 Feb 2025 09:00:11 +0000
Files and hashes: 1: HHCE3_k42ANiRenbW8_HYWzMUCQ.roa (hash: +PRlcFsqioXeS3bFma85/Up104JVGK2pFTDzqwQatjg=)
2: SktRP35EbgzW3P5Wgpu8n-SY0-g.crl (hash: LlCQRjLgS8KVZsRuPoui8u9/jhElYA0+v6CQ1/CJYdM=)
3: YwES8R9xRhrFpLG3cV7yoeKQ6tE.roa (hash: fX/IIRdgZ8uMVTDgkZp0nm1MBfHNGan3NvLFwQRulBs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/fa5519-0e35-44cf-9d4f-2aea75c2df78/1/SktRP35EbgzW3P5Wgpu8n-SY0-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/fa5519-0e35-44cf-9d4f-2aea75c2df78/1/SktRP35EbgzW3P5Wgpu8n-SY0-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/SktRP35EbgzW3P5Wgpu8n-SY0-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:96:d2:93:9d:77:7f:e0:19:c8:cf:18:89:98:be:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a4b513f7e446e0cd6dcfe56829bbc9fe498d3e8
Validity
Not Before: Jan 31 09:00:11 2025 GMT
Not After : Feb 1 09:00:11 2025 GMT
Subject: CN=23729cca864472d3e634a6925b3e512533f33482
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:30:a8:a2:8d:fb:57:9a:be:da:ac:9e:d1:ad:
3e:6d:b5:5e:89:cf:0f:cc:d6:bf:a6:0b:73:2e:3c:
4a:cc:87:8a:aa:5b:e4:ca:64:be:fe:d8:96:e9:f6:
1d:24:c3:4d:6d:ef:dd:bf:be:15:fc:b8:30:91:8a:
0e:4d:b4:c5:c2:09:32:74:2d:d5:2b:dc:58:da:47:
6a:1f:cc:96:65:76:1c:27:62:38:fd:1e:0a:be:e1:
3f:1b:21:4a:19:9d:29:80:a7:d7:97:74:ff:88:2d:
b0:e1:2d:62:85:56:04:4a:bb:37:56:4e:88:b9:9d:
30:88:ba:f2:25:42:6c:f1:48:cf:e2:f2:b3:75:50:
7b:34:19:dc:65:74:21:92:a3:83:86:7a:de:1a:2f:
73:cf:bf:e4:80:8e:77:8c:12:b7:1a:d5:99:ed:6c:
f6:54:d7:1b:da:c7:b6:61:b0:68:05:29:6e:f6:b8:
6e:a0:6e:dc:52:d5:c1:05:f7:ec:7f:20:cd:7e:7f:
8b:51:e0:e5:a8:eb:da:58:70:a5:f2:bd:cc:95:82:
3c:b5:06:b8:f6:b7:e0:78:62:5a:97:5e:91:72:0c:
ff:64:61:fc:f9:56:af:36:be:9e:53:34:f7:ba:98:
d8:eb:a4:ff:9e:bc:c0:a7:b5:6a:6a:dd:b6:0a:22:
86:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:72:9C:CA:86:44:72:D3:E6:34:A6:92:5B:3E:51:25:33:F3:34:82
X509v3 Authority Key Identifier:
keyid:4A:4B:51:3F:7E:44:6E:0C:D6:DC:FE:56:82:9B:BC:9F:E4:98:D3:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SktRP35EbgzW3P5Wgpu8n-SY0-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fa5519-0e35-44cf-9d4f-2aea75c2df78/1/SktRP35EbgzW3P5Wgpu8n-SY0-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fa5519-0e35-44cf-9d4f-2aea75c2df78/1/SktRP35EbgzW3P5Wgpu8n-SY0-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:3b:f4:78:70:4a:d5:b7:a3:05:9f:62:f2:fe:d0:33:16:3e:
83:a0:14:dd:71:b3:95:83:8f:6e:7d:04:da:f9:48:f7:4d:2a:
7d:ea:f0:18:e9:1f:ce:27:b6:48:6c:a4:72:8f:14:97:03:44:
b0:2c:fe:b2:a0:dd:2d:77:1b:a7:cb:ba:18:86:9d:95:ce:15:
6d:46:e6:48:3d:b0:f8:24:53:5b:59:19:10:e1:e8:ee:06:b4:
99:e0:fc:60:95:43:f2:1f:31:39:c6:d6:98:a8:f9:68:f2:b8:
20:20:fb:e3:d7:ff:eb:26:20:1f:48:6b:67:16:d9:08:03:0a:
1c:0e:73:cd:b1:5b:00:ce:3c:00:58:01:60:8b:05:f2:06:c0:
05:cd:17:da:c1:53:43:b3:79:dd:b0:9b:55:04:10:04:8f:ad:
59:e9:05:81:cc:c4:ea:a9:27:33:53:1f:1d:eb:ca:02:c9:a5:
ff:2d:d3:e1:9e:01:7a:58:fe:85:67:63:87:73:7e:c8:1e:e9:
f2:c6:34:f6:62:16:3e:5d:7e:29:48:c0:c0:b4:7b:90:0c:60:
3a:75:09:13:91:f3:3b:e4:c4:32:08:42:0f:43:b8:5e:23:78:
d8:81:25:d1:e4:00:f5:b7:ba:cd:24:01:94:f7:c5:4e:f8:dd:
fc:c9:2c:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7ltKTnXd/4BnIzxiJmL4EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhNGI1MTNmN2U0NDZlMGNkNmRjZmU1NjgyOWJiYzlmZTQ5
OGQzZTgwHhcNMjUwMTMxMDkwMDExWhcNMjUwMjAxMDkwMDExWjAzMTEwLwYDVQQD
EygyMzcyOWNjYTg2NDQ3MmQzZTYzNGE2OTI1YjNlNTEyNTMzZjMzNDgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzTCooo37V5q+2qye0a0+bbVeic8P
zNa/pgtzLjxKzIeKqlvkymS+/tiW6fYdJMNNbe/dv74V/LgwkYoOTbTFwgkydC3V
K9xY2kdqH8yWZXYcJ2I4/R4KvuE/GyFKGZ0pgKfXl3T/iC2w4S1ihVYESrs3Vk6I
uZ0wiLryJUJs8UjP4vKzdVB7NBncZXQhkqODhnreGi9zz7/kgI53jBK3GtWZ7Wz2
VNcb2se2YbBoBSlu9rhuoG7cUtXBBffsfyDNfn+LUeDlqOvaWHCl8r3MlYI8tQa4
9rfgeGJal16Rcgz/ZGH8+VavNr6eUzT3upjY66T/nrzAp7Vqat22CiKGnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCNynMqGRHLT5jSmkls+USUz8zSCMB8GA1UdIwQY
MBaAFEpLUT9+RG4M1tz+VoKbvJ/kmNPoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2t0UlAzNUViZ3pXM1A1V2dwdThuLVNZMC1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My9mYTU1MTktMGUzNS00NGNmLTlkNGYt
MmFlYTc1YzJkZjc4LzEvU2t0UlAzNUViZ3pXM1A1V2dwdThuLVNZMC1nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My9mYTU1MTktMGUzNS00NGNmLTlkNGYtMmFlYTc1YzJkZjc4
LzEvU2t0UlAzNUViZ3pXM1A1V2dwdThuLVNZMC1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANTv0eHBK
1bejBZ9i8v7QMxY+g6AU3XGzlYOPbn0E2vlI900qferwGOkfzie2SGykco8UlwNE
sCz+sqDdLXcbp8u6GIadlc4VbUbmSD2w+CRTW1kZEOHo7ga0meD8YJVD8h8xOcbW
mKj5aPK4ICD749f/6yYgH0hrZxbZCAMKHA5zzbFbAM48AFgBYIsF8gbABc0X2sFT
Q7N53bCbVQQQBI+tWekFgczE6qknM1MfHevKAsml/y3T4Z4Belj+hWdjh3N+yB7p
8sY09mIWPl1+KUjAwLR7kAxgOnUJE5HzO+TEMghCD0O4XiN42IEl0eQA9be6zSQB
lPfFTvjd/MksmQ==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:28:53 2025 by rpki-client on console-fra.rpki-client.org