Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/c670e2-5401-4243-a9bb-3736d40ca07e/1/SKvTlzl8CmIzcipFkF6MZzEgx6w.mft
File: SKvTlzl8CmIzcipFkF6MZzEgx6w.mft (raw, json)
Hash identifier: L/BSUYHYZJSqsSS/4ME8NH9AM9wqS5EjEfPkaIo5N2c=
Subject key identifier: 63:DB:3B:21:54:50:FC:BC:80:05:88:1A:DC:6F:D5:DE:5F:9B:AF:CE
Authority key identifier: 48:AB:D3:97:39:7C:0A:62:33:72:2A:45:90:5E:8C:67:31:20:C7:AC
Certificate issuer: /CN=48abd397397c0a6233722a45905e8c673120c7ac
Certificate serial: 01969D50D9B285B146803C0902668541862A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SKvTlzl8CmIzcipFkF6MZzEgx6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/c670e2-5401-4243-a9bb-3736d40ca07e/1/SKvTlzl8CmIzcipFkF6MZzEgx6w.mft
Manifest number: 02A8
Signing time: Sun 04 May 2025 22:00:43 +0000
Manifest this update: Sun 04 May 2025 22:00:43 +0000
Manifest next update: Mon 05 May 2025 22:00:43 +0000
Files and hashes: 1: SKvTlzl8CmIzcipFkF6MZzEgx6w.crl (hash: Jb1qwdATBbpCwkAVGLcR6uibSJVvEy5bfNvGxT+FNFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/c670e2-5401-4243-a9bb-3736d40ca07e/1/SKvTlzl8CmIzcipFkF6MZzEgx6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/c670e2-5401-4243-a9bb-3736d40ca07e/1/SKvTlzl8CmIzcipFkF6MZzEgx6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/SKvTlzl8CmIzcipFkF6MZzEgx6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9d:50:d9:b2:85:b1:46:80:3c:09:02:66:85:41:86:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48abd397397c0a6233722a45905e8c673120c7ac
Validity
Not Before: May 4 22:00:43 2025 GMT
Not After : May 5 22:00:43 2025 GMT
Subject: CN=63db3b215450fcbc8005881adc6fd5de5f9bafce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:07:fb:25:c6:32:c0:11:46:d3:8f:ac:1c:e7:
43:8e:9f:86:cc:32:9d:bc:79:ae:e0:bf:94:d5:38:
0e:05:c1:6c:48:b6:7b:98:4f:c2:5f:d9:4f:fb:42:
65:f4:09:18:70:71:29:4d:42:07:06:02:63:45:f7:
30:ed:a5:90:02:d9:94:1c:c3:f3:2f:16:97:05:79:
6f:ee:00:20:bf:32:08:59:a3:ba:84:14:f7:71:a8:
2e:9e:ae:3a:76:31:aa:84:6a:10:7f:07:78:d6:96:
19:41:6d:d9:df:36:e0:32:7b:c2:d0:1d:6f:bb:60:
b4:96:49:4e:2f:b6:f8:7f:74:a8:5b:7e:78:3d:ba:
70:7f:27:7c:dd:49:4d:18:1b:ad:ec:ff:60:e6:3c:
0b:b3:02:6d:50:cd:70:2a:e0:05:c0:1d:b8:69:10:
0c:70:9b:57:e4:76:89:91:d3:71:5a:90:01:b4:40:
74:66:d5:e4:fe:0e:9b:e0:87:dd:17:5f:ca:0c:4a:
0f:1b:a4:c7:5c:1f:e6:13:93:86:82:b0:eb:e7:ae:
62:03:d4:fd:3c:51:4a:69:0e:b5:26:56:7c:37:7e:
24:5b:2e:5a:a0:63:22:78:77:aa:7e:5e:38:51:c0:
12:95:57:be:05:5f:31:9a:33:3c:3d:9b:7c:c2:eb:
fb:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:DB:3B:21:54:50:FC:BC:80:05:88:1A:DC:6F:D5:DE:5F:9B:AF:CE
X509v3 Authority Key Identifier:
keyid:48:AB:D3:97:39:7C:0A:62:33:72:2A:45:90:5E:8C:67:31:20:C7:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SKvTlzl8CmIzcipFkF6MZzEgx6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/c670e2-5401-4243-a9bb-3736d40ca07e/1/SKvTlzl8CmIzcipFkF6MZzEgx6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/c670e2-5401-4243-a9bb-3736d40ca07e/1/SKvTlzl8CmIzcipFkF6MZzEgx6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:f1:7e:6f:15:7c:f8:f2:b9:b2:70:1b:6e:8b:af:59:1b:0f:
67:22:cc:c7:7f:f8:b9:89:90:7d:ad:61:ab:3e:4b:3a:79:e8:
8e:26:b9:8b:51:e1:28:7f:1d:7a:c4:84:1a:72:1c:7d:ec:70:
a9:37:38:6e:dd:46:21:18:66:3f:87:15:4d:10:18:1c:76:e2:
1b:d6:53:7b:ca:49:17:f6:98:4a:78:f0:f0:61:4d:d9:15:a0:
b0:b6:e0:76:b3:9f:24:a2:6f:39:94:e4:58:16:40:50:7b:55:
08:d8:ab:20:36:17:5b:4f:d2:f6:82:ba:94:f0:71:18:7d:af:
41:55:f6:b5:cd:bf:10:b2:6f:4c:22:18:ee:e0:b4:10:ae:ca:
30:38:46:49:25:d7:9b:3a:f9:3d:70:78:28:0a:43:ac:27:62:
97:de:a8:b5:74:6a:d5:9f:f8:f6:2f:f5:bf:1e:4a:04:46:45:
d6:f2:91:57:d1:be:32:e7:d8:ba:83:ec:f8:6b:fb:b2:36:e5:
42:56:32:50:b8:68:77:69:81:7b:61:79:7d:af:bd:9f:0d:ae:
1f:e3:0b:ce:4d:d2:99:39:24:2a:54:97:43:d2:9b:bb:ea:d2:
f5:b5:c2:b5:a1:4c:c2:e6:32:50:4d:d5:b7:b5:8c:30:d4:f0:
32:13:6d:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 04:55:47 2025 by rpki-client