Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/338605-4db4-4ede-a310-5642353d431a/1/StRn8W0JUeQwcTgyxsdZVh52BB8.mft
File: StRn8W0JUeQwcTgyxsdZVh52BB8.mft (raw, json)
Hash identifier: UlKSF1X4Ru00dHVsfWMrU6KfiDJUurFcGCLq1SJKXms=
Subject key identifier: 4E:3D:B8:6B:57:B8:60:FE:03:42:44:4E:BF:C9:60:0C:D8:2B:93:FA
Authority key identifier: 4A:D4:67:F1:6D:09:51:E4:30:71:38:32:C6:C7:59:56:1E:76:04:1F
Certificate issuer: /CN=4ad467f16d0951e430713832c6c759561e76041f
Certificate serial: 0196D1E2A213E80AF48E15D11758C2BEEAA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/StRn8W0JUeQwcTgyxsdZVh52BB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/338605-4db4-4ede-a310-5642353d431a/1/StRn8W0JUeQwcTgyxsdZVh52BB8.mft
Manifest number: 153E
Signing time: Thu 15 May 2025 03:00:12 +0000
Manifest this update: Thu 15 May 2025 03:00:12 +0000
Manifest next update: Fri 16 May 2025 03:00:12 +0000
Files and hashes: 1: Rt1gtqsL3XGckE6ravfPMbXd82w.roa (hash: 2JwbGC82Puo98akTLN0YA0GBgvd3GFrPbqPDWMBfEo8=)
2: StRn8W0JUeQwcTgyxsdZVh52BB8.crl (hash: k+e08szSfbRxAM19CZQ80tPLaef0Ml1nJE8lanJ5slQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/338605-4db4-4ede-a310-5642353d431a/1/StRn8W0JUeQwcTgyxsdZVh52BB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/338605-4db4-4ede-a310-5642353d431a/1/StRn8W0JUeQwcTgyxsdZVh52BB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/StRn8W0JUeQwcTgyxsdZVh52BB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 May 2025 03:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d1:e2:a2:13:e8:0a:f4:8e:15:d1:17:58:c2:be:ea:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ad467f16d0951e430713832c6c759561e76041f
Validity
Not Before: May 15 03:00:12 2025 GMT
Not After : May 16 03:00:12 2025 GMT
Subject: CN=4e3db86b57b860fe0342444ebfc9600cd82b93fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:81:a2:c8:bb:4d:2a:de:45:08:74:71:01:96:
42:95:7b:0c:28:f2:be:69:e4:6b:ee:88:1c:7f:70:
51:5c:67:fb:59:d7:af:54:21:47:e1:31:0f:6c:64:
47:99:7b:bc:ce:e0:2f:42:ab:25:af:d9:92:74:bc:
af:72:28:42:74:bc:7a:b8:31:9b:95:22:88:03:36:
08:2f:95:da:e0:e0:c8:9f:ea:77:88:39:56:3a:bd:
20:b5:42:13:f5:a3:b0:bb:2e:e6:36:87:19:2a:6a:
a1:94:7d:a2:70:04:6c:f0:70:14:05:11:dd:b5:39:
50:c2:07:da:2e:98:85:50:b6:96:32:b5:5e:a1:2f:
40:48:28:82:ae:d1:ec:70:93:e5:8f:f9:b1:2e:ed:
e6:e0:70:ad:90:2f:e6:3e:21:5b:66:1a:1c:82:36:
66:9e:32:7c:b8:61:98:59:45:70:1e:2f:87:8b:88:
7e:20:9d:36:35:30:78:68:fd:ee:85:96:c4:f9:1a:
dd:5f:07:94:bd:7f:da:84:d3:b4:3a:37:64:94:c6:
7e:32:4c:38:ee:53:b6:c5:d7:d0:cd:d4:3a:e3:9f:
66:7e:e0:77:e7:82:15:aa:c3:1e:92:76:f9:fa:3c:
79:75:f6:13:c0:98:b8:16:8f:76:0c:8f:e4:c3:6d:
b3:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:3D:B8:6B:57:B8:60:FE:03:42:44:4E:BF:C9:60:0C:D8:2B:93:FA
X509v3 Authority Key Identifier:
keyid:4A:D4:67:F1:6D:09:51:E4:30:71:38:32:C6:C7:59:56:1E:76:04:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/StRn8W0JUeQwcTgyxsdZVh52BB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/338605-4db4-4ede-a310-5642353d431a/1/StRn8W0JUeQwcTgyxsdZVh52BB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/338605-4db4-4ede-a310-5642353d431a/1/StRn8W0JUeQwcTgyxsdZVh52BB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:59:30:f4:22:5c:51:f0:17:fb:a6:4e:0e:af:ae:df:fe:f2:
06:cb:fe:dd:4c:da:4e:f6:88:7e:ff:fc:d3:aa:11:27:a5:12:
af:31:1c:c7:10:89:33:b9:5a:e0:4b:b4:b2:74:0d:a0:2c:26:
d7:ac:6e:ad:f6:c0:78:06:25:db:c1:0a:ef:f2:9c:cf:7b:bf:
10:84:92:4f:c7:2e:7a:43:71:a3:cb:84:a7:20:0c:9f:62:6b:
55:c9:04:bb:81:86:59:62:36:fb:5a:4f:3f:ef:10:4e:bb:6a:
b1:52:55:23:23:9f:32:0b:95:49:86:65:f4:28:42:74:36:c9:
94:fe:16:ee:34:ea:d7:17:27:1a:5d:6a:dc:84:2f:a0:87:59:
6e:70:1f:a4:21:13:17:27:9c:50:1d:7f:35:aa:a9:11:ec:5c:
e7:4e:de:7b:90:77:d1:9e:b3:5a:f2:a4:17:5a:96:54:13:cc:
19:43:56:58:7c:59:e4:d4:cc:a8:67:38:e7:62:f7:c5:c5:d5:
80:33:2e:4f:fd:a7:b0:26:b0:b8:e9:7a:e4:e0:10:d0:38:e7:
9b:21:b6:0e:cd:67:f4:da:48:76:11:ca:e9:81:1d:d4:c7:9b:
e2:cf:26:3d:5e:1b:07:f0:83:1e:2a:f0:1f:98:8b:20:c8:cf:
73:00:e8:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbR4qIT6Ar0jhXRF1jCvuqhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhZDQ2N2YxNmQwOTUxZTQzMDcxMzgzMmM2Yzc1OTU2MWU3
NjA0MWYwHhcNMjUwNTE1MDMwMDEyWhcNMjUwNTE2MDMwMDEyWjAzMTEwLwYDVQQD
Eyg0ZTNkYjg2YjU3Yjg2MGZlMDM0MjQ0NGViZmM5NjAwY2Q4MmI5M2ZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqIGiyLtNKt5FCHRxAZZClXsMKPK+
aeRr7ogcf3BRXGf7WdevVCFH4TEPbGRHmXu8zuAvQqslr9mSdLyvcihCdLx6uDGb
lSKIAzYIL5Xa4ODIn+p3iDlWOr0gtUIT9aOwuy7mNocZKmqhlH2icARs8HAUBRHd
tTlQwgfaLpiFULaWMrVeoS9ASCiCrtHscJPlj/mxLu3m4HCtkC/mPiFbZhocgjZm
njJ8uGGYWUVwHi+Hi4h+IJ02NTB4aP3uhZbE+RrdXweUvX/ahNO0OjdklMZ+Mkw4
7lO2xdfQzdQ6459mfuB354IVqsMeknb5+jx5dfYTwJi4Fo92DI/kw22zSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE49uGtXuGD+A0JETr/JYAzYK5P6MB8GA1UdIwQY
MBaAFErUZ/FtCVHkMHE4MsbHWVYedgQfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU3RSbjhXMEpVZVF3Y1RneXhzZFpWaDUyQkI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8zMzg2MDUtNGRiNC00ZWRlLWEzMTAt
NTY0MjM1M2Q0MzFhLzEvU3RSbjhXMEpVZVF3Y1RneXhzZFpWaDUyQkI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC8zMzg2MDUtNGRiNC00ZWRlLWEzMTAtNTY0MjM1M2Q0MzFh
LzEvU3RSbjhXMEpVZVF3Y1RneXhzZFpWaDUyQkI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXFkw9CJc
UfAX+6ZODq+u3/7yBsv+3UzaTvaIfv/806oRJ6USrzEcxxCJM7la4Eu0snQNoCwm
16xurfbAeAYl28EK7/Kcz3u/EISST8cuekNxo8uEpyAMn2JrVckEu4GGWWI2+1pP
P+8QTrtqsVJVIyOfMguVSYZl9ChCdDbJlP4W7jTq1xcnGl1q3IQvoIdZbnAfpCET
FyecUB1/NaqpEexc507ee5B30Z6zWvKkF1qWVBPMGUNWWHxZ5NTMqGc452L3xcXV
gDMuT/2nsCawuOl65OAQ0DjnmyG2Ds1n9NpIdhHK6YEd1Meb4s8mPV4bB/CDHirw
H5iLIMjPcwDoog==
-----END CERTIFICATE-----
Generated at Thu May 15 10:04:46 2025 by rpki-client