Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/c670e2-5401-4243-a9bb-3736d40ca07e/1/SKvTlzl8CmIzcipFkF6MZzEgx6w.mft
File: SKvTlzl8CmIzcipFkF6MZzEgx6w.mft (raw, json)
Hash identifier: /amTNsYNLz3eJbx+SE9KygZxICw2+h0KJlMK55JetXo=
Subject key identifier: 4D:F8:9E:4D:08:D7:1E:7B:18:8B:A7:C4:8A:7C:2F:27:85:95:A8:7D
Authority key identifier: 48:AB:D3:97:39:7C:0A:62:33:72:2A:45:90:5E:8C:67:31:20:C7:AC
Certificate issuer: /CN=48abd397397c0a6233722a45905e8c673120c7ac
Certificate serial: 0198955BCA2E51ECEDC0FF28A7EBB3C28078
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SKvTlzl8CmIzcipFkF6MZzEgx6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/c670e2-5401-4243-a9bb-3736d40ca07e/1/SKvTlzl8CmIzcipFkF6MZzEgx6w.mft
Manifest number: 03AD
Signing time: Sun 10 Aug 2025 19:01:17 +0000
Manifest this update: Sun 10 Aug 2025 19:01:17 +0000
Manifest next update: Mon 11 Aug 2025 19:01:17 +0000
Files and hashes: 1: SKvTlzl8CmIzcipFkF6MZzEgx6w.crl (hash: GQ1oz5r3k5RoJcvFlB4qqq99ObmQRYv2wImqvNkyQkc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/c670e2-5401-4243-a9bb-3736d40ca07e/1/SKvTlzl8CmIzcipFkF6MZzEgx6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/c670e2-5401-4243-a9bb-3736d40ca07e/1/SKvTlzl8CmIzcipFkF6MZzEgx6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/SKvTlzl8CmIzcipFkF6MZzEgx6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 19:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:95:5b:ca:2e:51:ec:ed:c0:ff:28:a7:eb:b3:c2:80:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48abd397397c0a6233722a45905e8c673120c7ac
Validity
Not Before: Aug 10 19:01:17 2025 GMT
Not After : Aug 11 19:01:17 2025 GMT
Subject: CN=4df89e4d08d71e7b188ba7c48a7c2f278595a87d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f7:ea:d0:11:05:fe:09:57:b7:63:86:c8:fd:
4f:e3:51:21:66:9a:20:97:10:94:08:a1:31:00:14:
a4:f7:9a:ab:f0:2a:be:f2:20:55:84:e7:ec:36:5f:
4d:f7:17:6c:bc:1f:9d:17:b3:72:99:8a:96:8a:e3:
e9:72:c9:3f:cd:84:d8:63:f7:44:63:e5:28:b8:84:
e2:b1:00:49:82:ba:7b:32:84:71:e1:c9:a0:1c:5c:
57:ab:0e:21:14:68:06:76:32:03:65:4a:b9:d4:27:
85:ba:28:8e:c4:78:7b:42:7a:a6:50:12:5d:dd:38:
d5:ef:65:e7:54:a4:cc:44:14:13:c1:60:42:a3:70:
96:f8:89:03:90:0b:86:ab:6f:cb:2d:28:c2:aa:0b:
da:10:26:1b:66:55:16:8e:6b:51:8f:54:91:ed:c5:
80:a1:e1:e9:d1:9c:50:ad:d8:61:48:79:82:72:06:
ed:82:4a:af:e5:a9:40:d9:68:d1:16:af:df:34:6a:
3f:f4:58:50:00:0e:43:d7:60:c0:f0:24:f7:88:e4:
93:a4:ee:4b:2d:70:78:0e:b1:9f:cf:dd:16:1a:13:
2c:2f:ae:76:6a:97:29:11:dc:58:1b:dd:1d:ef:c4:
cb:a1:34:79:d8:87:b4:6a:90:3d:3a:93:47:90:54:
4d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:F8:9E:4D:08:D7:1E:7B:18:8B:A7:C4:8A:7C:2F:27:85:95:A8:7D
X509v3 Authority Key Identifier:
keyid:48:AB:D3:97:39:7C:0A:62:33:72:2A:45:90:5E:8C:67:31:20:C7:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SKvTlzl8CmIzcipFkF6MZzEgx6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/c670e2-5401-4243-a9bb-3736d40ca07e/1/SKvTlzl8CmIzcipFkF6MZzEgx6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/c670e2-5401-4243-a9bb-3736d40ca07e/1/SKvTlzl8CmIzcipFkF6MZzEgx6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:07:4d:fb:ee:80:2c:92:05:d9:6a:50:de:44:a6:a5:05:a5:
f7:9d:a5:58:6e:40:3f:c6:68:7c:61:07:d5:c7:aa:02:25:1d:
9f:cb:e4:49:0a:de:7e:7a:79:c5:d5:3a:a1:bc:69:97:8d:7d:
a3:c0:93:85:42:5e:cf:5e:81:a5:94:58:c3:5d:77:2b:02:52:
a3:3e:aa:35:2e:56:02:a2:9a:52:d8:4a:8e:70:e6:84:30:74:
e1:47:96:be:03:b3:19:5c:6a:94:5d:1f:bc:82:a7:98:b2:43:
e0:05:4c:a7:8c:31:ae:f8:3b:cf:18:54:74:f0:56:20:a3:65:
10:c0:54:91:89:d6:c2:7b:16:d5:c4:2b:f1:3f:85:00:ae:73:
34:1f:3f:4c:fc:c4:48:09:36:3e:9f:b3:58:b5:a4:f9:0f:3d:
e2:c7:80:47:b4:9d:36:d1:19:8b:ef:67:c6:10:9a:0f:03:6b:
e8:8c:18:28:4a:36:2b:22:bd:92:af:6c:61:6f:9c:e7:1a:22:
35:58:05:5e:c1:ae:f5:fe:41:f6:66:c1:09:c7:3b:42:c8:8e:
2a:00:f6:09:81:68:8c:7f:0c:f2:78:9a:d0:ca:3e:78:ec:ba:
56:f5:ed:f7:b6:51:9d:af:a1:8d:8c:50:f7:af:1b:c7:ab:33:
b4:39:e4:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:13:42 2025 by rpki-client