Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/5172cb-4b4b-43f1-8d27-f62766974353/1/skX7DTNtIH91Ns4pX55phiihTuQ.mft
File: skX7DTNtIH91Ns4pX55phiihTuQ.mft (raw, json)
Hash identifier: Kz1eewlwdq0Ge29wYhoIrKt0EqXpZZ4IJXa4mH8itgU=
Subject key identifier: 48:FA:25:37:37:57:0C:7F:73:E0:9E:BE:BE:B0:7E:1F:EA:8D:E2:E4
Authority key identifier: B2:45:FB:0D:33:6D:20:7F:75:36:CE:29:5F:9E:69:86:28:A1:4E:E4
Certificate issuer: /CN=b245fb0d336d207f7536ce295f9e698628a14ee4
Certificate serial: 019890DB347AEA8117BEFDBF2988ED1E5765
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/skX7DTNtIH91Ns4pX55phiihTuQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/5172cb-4b4b-43f1-8d27-f62766974353/1/skX7DTNtIH91Ns4pX55phiihTuQ.mft
Manifest number: 0A32
Signing time: Sat 09 Aug 2025 22:02:21 +0000
Manifest this update: Sat 09 Aug 2025 22:02:21 +0000
Manifest next update: Sun 10 Aug 2025 22:02:21 +0000
Files and hashes: 1: skX7DTNtIH91Ns4pX55phiihTuQ.crl (hash: u9/8i7QI1cOWXQNEz6srYRFmnOEokdlvOpPojCldtWo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/5172cb-4b4b-43f1-8d27-f62766974353/1/skX7DTNtIH91Ns4pX55phiihTuQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/5172cb-4b4b-43f1-8d27-f62766974353/1/skX7DTNtIH91Ns4pX55phiihTuQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/skX7DTNtIH91Ns4pX55phiihTuQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 18:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:90:db:34:7a:ea:81:17:be:fd:bf:29:88:ed:1e:57:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b245fb0d336d207f7536ce295f9e698628a14ee4
Validity
Not Before: Aug 9 22:02:21 2025 GMT
Not After : Aug 10 22:02:21 2025 GMT
Subject: CN=48fa253737570c7f73e09ebebeb07e1fea8de2e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:8d:f5:ea:bb:5e:81:c7:13:9c:60:60:1d:3e:
45:04:eb:bf:6a:6e:ad:cd:3c:58:bd:36:88:ee:1e:
e3:78:e5:3e:cc:56:7c:12:d9:72:6e:21:20:7b:15:
c2:d3:04:c2:0d:b4:0c:42:fe:8e:0a:d4:14:d1:65:
a2:39:f3:73:f0:fe:c6:34:c0:70:f4:17:6d:5c:6c:
f7:47:69:15:b3:f7:e8:10:f8:27:42:ec:7d:0b:13:
ed:7c:fd:b4:6c:d3:a2:2f:7a:17:cb:04:57:24:75:
59:34:ea:cd:8d:27:7d:74:c4:0f:4a:bf:2d:2d:a9:
4b:0c:5a:cc:29:94:e6:6f:bd:41:47:11:ae:2e:51:
85:af:9c:2f:d2:34:99:e8:d4:28:28:20:36:3a:d4:
34:6c:e8:f2:df:f9:1f:34:b3:88:4f:49:37:77:72:
b5:c7:62:0b:69:17:c3:ec:b7:4e:45:d2:f6:94:3c:
47:2e:d1:b5:f8:df:5b:00:21:b1:11:e3:f2:7f:d3:
92:f8:ab:5e:87:b0:3b:cb:86:29:d4:2d:75:af:4e:
1c:40:f3:a7:13:4d:45:bf:1a:67:cc:62:4e:e3:f7:
df:ba:10:43:fe:e8:e3:5e:1e:00:57:7f:36:92:f6:
12:ff:22:27:ca:90:02:f5:cf:98:c6:bd:b0:2a:c3:
c0:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:FA:25:37:37:57:0C:7F:73:E0:9E:BE:BE:B0:7E:1F:EA:8D:E2:E4
X509v3 Authority Key Identifier:
keyid:B2:45:FB:0D:33:6D:20:7F:75:36:CE:29:5F:9E:69:86:28:A1:4E:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/skX7DTNtIH91Ns4pX55phiihTuQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/5172cb-4b4b-43f1-8d27-f62766974353/1/skX7DTNtIH91Ns4pX55phiihTuQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/5172cb-4b4b-43f1-8d27-f62766974353/1/skX7DTNtIH91Ns4pX55phiihTuQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:a5:25:4a:08:43:66:ab:ab:bf:ed:b8:1d:f8:0b:2d:e1:12:
19:2f:2c:65:ff:37:84:1f:8d:76:8f:62:38:b2:56:88:1f:57:
8e:4b:16:61:e9:66:55:b4:12:48:73:88:ed:58:94:f7:d3:0e:
83:e2:ce:aa:e5:9f:01:8d:44:e8:26:47:32:49:60:2e:6a:8e:
a1:2d:63:9e:13:ae:6d:1f:f6:bb:52:32:63:7f:ec:21:e9:bd:
33:75:29:c0:d9:99:af:e4:ce:3b:9c:0e:42:80:53:55:31:17:
d1:5a:bc:12:35:e0:0a:c9:ff:89:95:5e:66:e8:2c:fe:e9:fc:
2d:78:7a:74:26:b3:8b:62:d9:c3:fa:d3:9a:a8:d3:90:dd:ec:
5f:21:f1:38:39:33:2b:19:14:66:5d:b0:65:e5:eb:f3:c3:10:
64:39:1b:c7:e5:8b:18:85:65:08:69:da:94:a3:92:af:da:7e:
fe:ea:a9:84:c0:3e:fd:83:bd:e5:67:4f:51:04:b1:19:6f:68:
fb:8c:20:fd:2f:6c:a8:9a:f5:44:cb:62:e8:63:ad:82:f6:31:
4d:e4:0e:7a:e7:49:8d:f0:23:d3:3d:f2:41:58:da:73:f0:d2:
43:db:1e:c4:93:e7:47:d7:a4:a1:b2:d7:fd:8d:1c:fb:f2:4f:
9b:cb:9f:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 03:57:26 2025 by rpki-client