Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/d765a4-54eb-410d-8f3d-689ba4d33c4b/1/STotSDdjMKWC-vPjAy73sLzKM-g.mft
File: STotSDdjMKWC-vPjAy73sLzKM-g.mft (raw, json)
Hash identifier: cfZgM2+JoVM0QynkrUAWGiwvfkhn41p520E9MFfOnBY=
Subject key identifier: B2:EE:36:D1:AE:B7:3E:1A:11:62:A4:94:58:C6:A6:75:C2:17:4E:C3
Authority key identifier: 49:3A:2D:48:37:63:30:A5:82:FA:F3:E3:03:2E:F7:B0:BC:CA:33:E8
Certificate issuer: /CN=493a2d48376330a582faf3e3032ef7b0bcca33e8
Certificate serial: 0197B7453DB0508A1F95CAE026BFA33A5668
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/STotSDdjMKWC-vPjAy73sLzKM-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/d765a4-54eb-410d-8f3d-689ba4d33c4b/1/STotSDdjMKWC-vPjAy73sLzKM-g.mft
Manifest number: 03DD
Signing time: Sat 28 Jun 2025 16:00:57 +0000
Manifest this update: Sat 28 Jun 2025 16:00:57 +0000
Manifest next update: Sun 29 Jun 2025 16:00:57 +0000
Files and hashes: 1: 1eZlwD4fnzVx_ZuiX-KY-unzRYA.roa (hash: FfjJukJvNSQzT9n6wjLCsM9xDWFdpCKe+CsdvwMwZRs=)
2: GXnQPnuqnvBWk7kpONau-2u0RoQ.roa (hash: uxonlVe7DqVs73Mq5GsJwlXeQ95X/yFAybekoDtId+I=)
3: KyYmqZA206kErzPtR2YQzPU--WY.roa (hash: fQeQLftranJsCVjcRRs8kVttSYkJPcfUSHb9P69BPM8=)
4: STotSDdjMKWC-vPjAy73sLzKM-g.crl (hash: NbWFH6LHn3rmHvUmBUhHQou07Ep1EIA/AdyqxZS4wl4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/d765a4-54eb-410d-8f3d-689ba4d33c4b/1/STotSDdjMKWC-vPjAy73sLzKM-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/d765a4-54eb-410d-8f3d-689ba4d33c4b/1/STotSDdjMKWC-vPjAy73sLzKM-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/STotSDdjMKWC-vPjAy73sLzKM-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:3d:b0:50:8a:1f:95:ca:e0:26:bf:a3:3a:56:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=493a2d48376330a582faf3e3032ef7b0bcca33e8
Validity
Not Before: Jun 28 16:00:57 2025 GMT
Not After : Jun 29 16:00:57 2025 GMT
Subject: CN=b2ee36d1aeb73e1a1162a49458c6a675c2174ec3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:5c:7f:52:c3:1d:d1:26:db:54:c3:65:87:f0:
ec:8c:27:79:88:ef:41:03:42:e0:62:4a:e7:09:af:
e2:7c:64:30:1a:1f:28:84:74:7d:5f:57:b1:bf:03:
6d:34:4f:22:8b:6b:c9:e8:3a:e6:0e:8f:98:0b:0b:
49:6a:18:65:f5:a7:18:3f:e7:3f:2e:76:06:5d:61:
23:8a:57:2e:ad:04:44:4a:6c:a6:f0:40:7f:2d:e3:
ac:f4:cb:9f:84:df:8d:8f:07:50:a4:25:8e:58:1e:
7c:05:b6:9e:81:85:8e:a4:0d:d4:99:d0:01:89:ff:
c0:e6:9c:67:39:ab:9e:78:b8:80:f2:fd:2f:7f:0f:
2e:5c:46:8f:5a:d6:d4:31:23:c5:ad:55:93:ae:35:
4f:e1:1c:5c:1d:df:fa:36:dd:ff:55:7b:2a:11:c7:
a8:27:ca:82:a6:b5:8c:61:6a:5b:24:5a:82:60:9d:
0a:d0:74:7f:db:85:de:3f:95:26:10:3d:49:52:e8:
1f:ac:dd:9c:93:42:07:4d:6e:71:26:4b:09:5d:e2:
71:e8:93:65:22:eb:cd:a9:09:77:84:3a:56:c5:4e:
a5:e8:21:a5:89:43:7b:cf:1d:c4:f0:3e:18:8b:eb:
cb:cc:28:d3:36:d4:9b:12:47:e5:b8:9e:2e:7b:ab:
33:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:EE:36:D1:AE:B7:3E:1A:11:62:A4:94:58:C6:A6:75:C2:17:4E:C3
X509v3 Authority Key Identifier:
keyid:49:3A:2D:48:37:63:30:A5:82:FA:F3:E3:03:2E:F7:B0:BC:CA:33:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/STotSDdjMKWC-vPjAy73sLzKM-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d765a4-54eb-410d-8f3d-689ba4d33c4b/1/STotSDdjMKWC-vPjAy73sLzKM-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d765a4-54eb-410d-8f3d-689ba4d33c4b/1/STotSDdjMKWC-vPjAy73sLzKM-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:85:ad:e6:4a:57:d5:a6:2a:fc:5d:7d:40:40:39:bc:e2:5d:
05:8d:47:6f:50:35:e5:5d:88:97:1c:75:5b:c0:20:32:44:e7:
69:fb:e5:02:2a:5f:9f:a3:fd:5e:d0:c4:44:85:3b:f8:15:ce:
22:53:b6:66:14:d2:cc:04:e6:8f:1f:15:a9:f5:1c:b6:05:23:
61:57:5a:20:16:a8:34:b6:bc:59:54:01:88:cd:97:9d:44:23:
c2:4d:db:86:bf:38:5f:69:4d:c8:a5:6d:b5:67:7a:45:ed:b2:
37:8b:4b:50:36:b9:50:d1:dd:8f:71:2f:b6:d3:fc:78:e9:37:
a6:10:68:16:6d:62:8f:00:6c:cf:7b:b1:da:c0:c0:4a:0e:c4:
38:55:5a:3b:45:26:9f:5c:bf:a6:44:16:79:4f:23:1f:df:3b:
10:19:02:a5:40:52:68:da:b6:87:68:b8:b9:8c:c5:64:a1:fd:
8b:81:ce:5b:1a:7f:7b:f4:8f:3c:d3:a3:38:46:3f:d3:87:47:
d9:e0:c8:42:f0:0f:c6:97:9d:d7:31:5c:05:d2:fd:2d:1a:7c:
f4:ca:50:69:f5:a3:2f:13:0c:44:ea:8e:50:1a:55:aa:fb:f9:
c6:72:e8:47:f3:20:c4:18:c0:40:cb:99:82:c7:51:31:38:96:
05:cc:aa:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:22:44 2025 by rpki-client