Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/338605-4db4-4ede-a310-5642353d431a/1/StRn8W0JUeQwcTgyxsdZVh52BB8.mft
File: StRn8W0JUeQwcTgyxsdZVh52BB8.mft (raw, json)
Hash identifier: 2WeLDrSoNdLpaQyfNMG8QyWEv6K4hj7W/A1QvKKWM6k=
Subject key identifier: 35:99:90:27:F5:0F:38:D3:14:4C:72:F4:B1:BE:FE:13:8F:65:2C:18
Authority key identifier: 4A:D4:67:F1:6D:09:51:E4:30:71:38:32:C6:C7:59:56:1E:76:04:1F
Certificate issuer: /CN=4ad467f16d0951e430713832c6c759561e76041f
Certificate serial: 0197DD401644CEA00A8E9E775B2328FF2F2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/StRn8W0JUeQwcTgyxsdZVh52BB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/338605-4db4-4ede-a310-5642353d431a/1/StRn8W0JUeQwcTgyxsdZVh52BB8.mft
Manifest number: 15C9
Signing time: Sun 06 Jul 2025 01:00:54 +0000
Manifest this update: Sun 06 Jul 2025 01:00:54 +0000
Manifest next update: Mon 07 Jul 2025 01:00:54 +0000
Files and hashes: 1: 0qO4O1iuPzCMlLlUt1HamKiYOoA.roa (hash: cgE/JK3sVjQnbjv1N0QFg9l7ug/Hstmhscf6qZhJ3xA=)
2: StRn8W0JUeQwcTgyxsdZVh52BB8.crl (hash: uJsAv48iOkGFQ45KL7N1Hi/RMeHTI4YEbmho3N/QlCM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/338605-4db4-4ede-a310-5642353d431a/1/StRn8W0JUeQwcTgyxsdZVh52BB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/338605-4db4-4ede-a310-5642353d431a/1/StRn8W0JUeQwcTgyxsdZVh52BB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/StRn8W0JUeQwcTgyxsdZVh52BB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Jul 2025 01:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:dd:40:16:44:ce:a0:0a:8e:9e:77:5b:23:28:ff:2f:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ad467f16d0951e430713832c6c759561e76041f
Validity
Not Before: Jul 6 01:00:54 2025 GMT
Not After : Jul 7 01:00:54 2025 GMT
Subject: CN=35999027f50f38d3144c72f4b1befe138f652c18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:5e:19:5b:97:47:5c:fd:c2:3e:97:52:ab:db:
b0:0b:13:ad:0f:25:34:17:5b:ac:6d:30:cd:82:dc:
32:9f:85:f1:af:c4:e8:5d:88:0e:1a:48:e2:a9:ea:
a3:34:59:da:95:3d:11:70:71:2b:a6:40:c3:7c:f6:
d4:1f:a0:a4:9b:22:75:f4:6e:44:7a:6f:e3:bd:78:
4c:4a:39:fe:14:c4:61:74:b7:0a:27:07:33:0b:9f:
d8:c7:7b:18:a9:0a:bb:a9:70:f8:a5:97:ce:80:65:
48:21:3c:69:25:9d:43:91:d3:93:9c:eb:27:41:c9:
14:9e:7d:41:c4:91:66:89:ea:8b:4e:3d:6a:9f:23:
17:a1:8b:c8:4c:6f:d5:cc:7c:b0:cb:be:21:2c:c0:
30:ad:e7:6f:73:7a:e3:9d:57:68:14:14:3c:e2:c9:
68:6b:80:02:70:d5:9c:bb:df:cf:50:e9:0b:21:13:
29:45:e2:74:6d:b4:60:57:54:a0:c9:03:8b:88:40:
6c:98:84:dd:93:c6:ff:79:c0:aa:21:90:27:eb:a4:
93:d6:87:ee:0a:c4:df:1b:b4:5d:50:10:6c:5c:9b:
cb:c4:2e:03:23:a9:5d:1a:52:f0:82:dd:13:a6:14:
2f:2b:2b:3b:58:08:c9:22:6b:1f:cf:f6:41:4a:8d:
64:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:99:90:27:F5:0F:38:D3:14:4C:72:F4:B1:BE:FE:13:8F:65:2C:18
X509v3 Authority Key Identifier:
keyid:4A:D4:67:F1:6D:09:51:E4:30:71:38:32:C6:C7:59:56:1E:76:04:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/StRn8W0JUeQwcTgyxsdZVh52BB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/338605-4db4-4ede-a310-5642353d431a/1/StRn8W0JUeQwcTgyxsdZVh52BB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/338605-4db4-4ede-a310-5642353d431a/1/StRn8W0JUeQwcTgyxsdZVh52BB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:62:e2:b8:71:09:59:63:82:35:8f:92:1b:cd:ab:e4:40:bd:
59:c6:12:ad:b3:7c:d5:3c:fb:2d:60:ef:0b:a6:77:9c:25:c2:
b8:74:74:7d:26:df:11:2d:ec:ae:9a:78:46:b8:27:16:4e:e0:
ac:fc:f2:cc:b4:1b:f7:cf:0c:9a:ef:9c:7c:eb:d1:fa:97:ed:
70:35:ab:19:5d:e2:b2:1d:01:ca:9d:a9:e8:b2:65:dc:00:e0:
f5:cf:35:a3:08:ea:34:be:9c:6e:92:62:8d:bc:43:91:e0:f5:
9b:ce:4a:03:c4:14:89:71:cc:f4:73:8a:62:0d:9e:f2:98:da:
83:16:5c:53:cb:ab:5e:10:75:aa:d0:a6:cd:a9:6a:a5:39:b5:
a1:b5:87:87:32:aa:51:9f:e4:23:41:63:83:b8:50:46:74:72:
7d:58:30:60:4f:8d:e0:75:44:6e:4e:77:d9:9d:21:94:b3:b1:
81:fa:fa:63:4d:3b:af:a1:85:2f:66:27:15:c9:08:51:45:4e:
42:7d:dc:ca:a0:95:e7:1f:5c:57:3f:e5:00:73:47:5d:0e:d5:
af:19:a6:f8:dc:66:9f:fb:ee:c2:1a:d7:48:30:32:52:ff:78:
02:79:a2:1e:45:fc:74:cd:88:a2:97:30:39:5a:a8:be:9e:08:
5c:a3:30:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 6 07:07:42 2025 by rpki-client