Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/33444c-0529-4fa9-b712-1abadd1b12d6/1/SKLoEfALrhakR0I_EeJCFxQs_3w.mft
File: SKLoEfALrhakR0I_EeJCFxQs_3w.mft (raw, json)
Hash identifier: zxlupWyRAsJ7LhS0GDUf3XxooJhZO02rUVpL+7tUbs8=
Subject key identifier: DF:91:D0:86:FA:91:CF:6F:BE:FB:CB:3E:34:E7:F2:D8:51:80:B2:AF
Authority key identifier: 48:A2:E8:11:F0:0B:AE:16:A4:47:42:3F:11:E2:42:17:14:2C:FF:7C
Certificate issuer: /CN=48a2e811f00bae16a447423f11e24217142cff7c
Certificate serial: 0198857A414D74A30602B9AB514C96CB3516
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SKLoEfALrhakR0I_EeJCFxQs_3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/33444c-0529-4fa9-b712-1abadd1b12d6/1/SKLoEfALrhakR0I_EeJCFxQs_3w.mft
Manifest number: 77
Signing time: Thu 07 Aug 2025 17:00:38 +0000
Manifest this update: Thu 07 Aug 2025 17:00:38 +0000
Manifest next update: Fri 08 Aug 2025 17:00:38 +0000
Files and hashes: 1: 5_4_sAkbSvWJQW-nU_3z-g5dxpA.roa (hash: F/KthvnH0mRjG4XxKOZeHwPHj4wXZSHXZrhRe1Un8RI=)
2: SKLoEfALrhakR0I_EeJCFxQs_3w.crl (hash: mc7f1TZZh7dvkZz02M3k/0qXu+awjz4kkNe6IIuKrkQ=)
3: dAFfVeRQHDh0WmpSmmqEgkhLBtY.roa (hash: u3HHw4rNRzAfW0hfQSsiDVFPNAx+TXWvqrwLoXpaKig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/33444c-0529-4fa9-b712-1abadd1b12d6/1/SKLoEfALrhakR0I_EeJCFxQs_3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/33444c-0529-4fa9-b712-1abadd1b12d6/1/SKLoEfALrhakR0I_EeJCFxQs_3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/SKLoEfALrhakR0I_EeJCFxQs_3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:85:7a:41:4d:74:a3:06:02:b9:ab:51:4c:96:cb:35:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48a2e811f00bae16a447423f11e24217142cff7c
Validity
Not Before: Aug 7 17:00:38 2025 GMT
Not After : Aug 8 17:00:38 2025 GMT
Subject: CN=df91d086fa91cf6fbefbcb3e34e7f2d85180b2af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:36:64:84:66:b5:1b:b1:31:ce:0b:69:9d:ae:
63:7d:7c:97:0a:e5:1e:09:c4:6a:f2:47:e5:7f:81:
cd:6b:c8:04:c4:aa:b6:f4:a1:ee:42:5f:79:2e:ff:
e1:7c:79:3a:a5:d3:1f:c0:ef:94:e5:c5:ad:28:52:
ec:d0:81:80:9a:0c:0a:88:f4:6f:8c:0f:d1:7e:ec:
3e:9d:41:cb:66:77:9b:e9:03:b1:c0:bb:67:9b:f2:
40:65:b3:cd:24:87:3c:82:63:8a:64:b4:c0:6a:b1:
96:77:92:07:bf:52:ba:24:f6:2b:86:f7:da:1e:7e:
f3:ce:a2:d2:fb:1e:a4:97:06:8b:2b:2a:24:0d:47:
e6:89:a3:f5:b1:0e:d2:25:23:97:44:75:b6:b1:6d:
d1:19:fc:e2:7e:2c:48:80:99:92:24:b1:10:c2:c1:
42:7f:5b:ed:a6:15:91:08:f9:9b:3e:74:3b:4c:f0:
12:dc:32:82:d0:10:20:a1:4d:5a:91:2f:32:ba:df:
78:f6:1a:45:f0:e8:ed:2e:9e:d6:5a:2d:a0:c6:a9:
48:07:1b:9e:00:da:c5:a4:0e:0f:85:34:cb:5c:95:
f4:ac:60:fb:31:95:68:02:15:a3:9c:02:30:d0:d5:
8e:2f:c5:04:1a:ca:04:1b:8b:55:86:72:67:ed:51:
d4:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:91:D0:86:FA:91:CF:6F:BE:FB:CB:3E:34:E7:F2:D8:51:80:B2:AF
X509v3 Authority Key Identifier:
keyid:48:A2:E8:11:F0:0B:AE:16:A4:47:42:3F:11:E2:42:17:14:2C:FF:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SKLoEfALrhakR0I_EeJCFxQs_3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/33444c-0529-4fa9-b712-1abadd1b12d6/1/SKLoEfALrhakR0I_EeJCFxQs_3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/33444c-0529-4fa9-b712-1abadd1b12d6/1/SKLoEfALrhakR0I_EeJCFxQs_3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:c4:30:53:c7:7d:c8:75:ef:5f:0a:b4:5b:57:87:d3:ae:02:
42:f9:00:e4:3e:76:c7:1a:71:42:52:a5:3f:c2:bf:1d:a8:0d:
3c:a9:0e:80:22:08:2d:55:f1:4f:20:f0:a4:fd:1a:07:5f:7a:
4d:ab:eb:85:8a:c0:2b:92:0f:58:7f:b8:d7:bb:11:c5:39:11:
9f:9e:00:a4:c7:22:89:10:a1:88:28:6e:f0:6b:0a:04:84:a1:
90:da:75:5f:70:c2:cc:e2:d5:51:ec:00:85:6e:9b:5f:0d:d8:
97:bd:38:e3:30:19:33:4a:aa:04:fb:9b:32:20:00:08:50:50:
70:f1:5c:1e:1c:af:74:ad:28:3a:52:7a:00:e3:d7:de:97:a1:
f4:11:46:fb:16:09:80:fd:97:d6:44:17:12:dd:a6:fe:c6:2f:
68:85:08:79:f9:41:11:68:09:bd:9b:89:0d:fe:0f:cc:e0:1f:
8d:be:cb:8d:eb:d0:f5:90:70:95:82:54:82:a0:84:9a:68:53:
6d:5e:08:02:c1:86:c1:64:fd:f2:d3:4f:fa:dd:5c:e0:f9:0c:
12:2c:d6:1b:71:3c:98:de:83:e9:a7:b7:eb:b9:a9:66:b5:10:
b1:7d:e9:6d:e3:3e:af:e1:8a:c6:fb:5f:e1:52:45:6d:81:93:
c3:1a:9c:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:35:43 2025 by rpki-client