Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/592cf0-03df-4886-b061-284f7c9622b5/1/sTCZw4tkd6aMmAGf9uAECAgHi5A.mft
File: sTCZw4tkd6aMmAGf9uAECAgHi5A.mft (raw, json)
Hash identifier: bOQ3LuWEXUB4h9T54uWwaCGXDnI04sidECIVFNzpRpo=
Subject key identifier: 61:A0:60:4F:2A:8D:98:5E:01:DF:AE:AE:10:05:6F:50:93:6E:D5:BF
Authority key identifier: B1:30:99:C3:8B:64:77:A6:8C:98:01:9F:F6:E0:04:08:08:07:8B:90
Certificate issuer: /CN=b13099c38b6477a68c98019ff6e0040808078b90
Certificate serial: 0197B6A20A43255941DB4C5F902A8B95A690
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sTCZw4tkd6aMmAGf9uAECAgHi5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/592cf0-03df-4886-b061-284f7c9622b5/1/sTCZw4tkd6aMmAGf9uAECAgHi5A.mft
Manifest number: 15B8
Signing time: Sat 28 Jun 2025 13:02:42 +0000
Manifest this update: Sat 28 Jun 2025 13:02:42 +0000
Manifest next update: Sun 29 Jun 2025 13:02:42 +0000
Files and hashes: 1: gF7OF-sH3XFh2hq8KjpdxJgt63g.roa (hash: EpA0qsYa3m/WYOamet70LyZkiEfTFAk3SQEWKz+UC8w=)
2: sTCZw4tkd6aMmAGf9uAECAgHi5A.crl (hash: 8KfSN5buVoFnifLKViunWqPWLd2/Y5yjpRXzTVIZQ1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/592cf0-03df-4886-b061-284f7c9622b5/1/sTCZw4tkd6aMmAGf9uAECAgHi5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/592cf0-03df-4886-b061-284f7c9622b5/1/sTCZw4tkd6aMmAGf9uAECAgHi5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/sTCZw4tkd6aMmAGf9uAECAgHi5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:0a:43:25:59:41:db:4c:5f:90:2a:8b:95:a6:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b13099c38b6477a68c98019ff6e0040808078b90
Validity
Not Before: Jun 28 13:02:42 2025 GMT
Not After : Jun 29 13:02:42 2025 GMT
Subject: CN=61a0604f2a8d985e01dfaeae10056f50936ed5bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:29:b2:e1:e6:1a:5c:6b:41:02:d9:97:35:b4:
21:e7:97:df:83:32:59:36:58:b8:72:a5:a1:15:64:
f1:c8:95:75:c0:b7:fb:3b:9c:13:27:7f:3b:cf:03:
8d:83:46:e0:1d:45:b8:c6:f1:4c:7d:c7:51:37:e7:
8a:4b:42:05:fd:a9:5b:df:39:99:41:39:74:1d:5f:
2f:8f:55:55:e3:13:71:19:bc:5d:f6:4e:eb:7d:02:
85:fa:e4:c0:c7:be:7a:49:d3:42:ea:bd:18:6e:58:
cc:32:41:dd:5a:b7:fe:dd:d1:ef:a2:da:81:39:63:
cb:dc:90:17:d7:9b:33:5f:2c:83:a7:76:2c:60:c1:
9d:da:a0:1a:5f:9a:d8:fc:84:e5:dc:8e:f9:74:39:
92:95:e9:b5:ac:f4:3b:ea:0c:c1:b5:fd:13:08:69:
bb:7a:e1:d9:d5:07:e9:7d:16:d8:b8:fc:1a:7a:72:
db:04:1b:6e:b3:24:d8:53:d0:fc:a2:46:ea:dc:c1:
44:f2:52:66:68:3b:e1:cd:60:c9:6a:7c:6e:51:12:
6c:ba:8a:27:9f:bf:a7:f8:06:0a:ba:9c:fd:b3:7b:
97:b3:47:0a:00:f7:77:08:3f:1b:6e:3b:c7:ed:6c:
6a:68:e8:fa:43:c9:c6:ac:a4:66:2e:69:dd:4a:16:
21:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:A0:60:4F:2A:8D:98:5E:01:DF:AE:AE:10:05:6F:50:93:6E:D5:BF
X509v3 Authority Key Identifier:
keyid:B1:30:99:C3:8B:64:77:A6:8C:98:01:9F:F6:E0:04:08:08:07:8B:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sTCZw4tkd6aMmAGf9uAECAgHi5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/592cf0-03df-4886-b061-284f7c9622b5/1/sTCZw4tkd6aMmAGf9uAECAgHi5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/592cf0-03df-4886-b061-284f7c9622b5/1/sTCZw4tkd6aMmAGf9uAECAgHi5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:bb:31:68:aa:c3:c6:85:3d:d5:21:62:b4:7e:32:35:f7:d7:
9d:bc:0d:ea:fc:2e:14:85:39:89:21:67:e6:69:7e:23:7e:a6:
86:ff:aa:59:f3:ae:b0:2f:90:b2:ad:1a:3c:ce:83:c5:fb:07:
f7:24:ce:5a:a9:8d:1f:00:a1:c0:70:91:fa:26:31:18:09:bd:
04:8f:00:f0:81:d2:4a:5c:a8:db:9b:f9:c2:28:d0:d1:c1:5d:
e9:c4:71:e4:7d:b5:9b:e2:46:7e:0b:17:dc:86:ab:f6:c0:3a:
a1:ea:6b:9d:c9:b6:d8:08:2c:04:0b:df:19:8a:93:a0:b4:3e:
56:7a:30:9f:e6:ff:8c:29:bc:4a:db:d6:b1:b5:8d:71:bb:db:
48:46:b7:9e:30:6d:11:5c:78:46:ec:fa:a6:92:99:95:35:39:
e5:84:71:f9:42:92:ee:6e:67:f3:9a:6f:95:04:99:d6:ad:94:
5a:c9:b7:d9:30:71:e2:05:e1:89:ba:b4:0d:c8:59:b9:a0:d8:
6d:e3:11:4b:de:bb:92:b4:a2:46:ae:a0:43:ae:f8:84:68:62:
f9:c2:fd:43:30:37:cf:e6:12:d7:2e:90:fd:4f:7b:04:df:64:
82:55:fe:46:3f:c5:1f:a8:04:3b:a5:84:52:c4:ef:f4:16:cd:
bf:85:20:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:48:46 2025 by rpki-client