Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/d29730-515a-4bfb-ad55-e038d81b3f97/1/STRpVEIDCC0sPB3fDwu9kL3FaUE.mft
File: STRpVEIDCC0sPB3fDwu9kL3FaUE.mft (raw, json)
Hash identifier: mQBjb8bXaG+jJB8cppatRtcgJ/AgAue2hiYQNeKdNpI=
Subject key identifier: 46:7C:E0:24:05:6A:12:42:84:56:D7:04:75:39:F7:E9:4B:3A:3B:31
Authority key identifier: 49:34:69:54:42:03:08:2D:2C:3C:1D:DF:0F:0B:BD:90:BD:C5:69:41
Certificate issuer: /CN=493469544203082d2c3c1ddf0f0bbd90bdc56941
Certificate serial: 0196BAB677F14B8E88BF8DB8A3F5243B1CC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/STRpVEIDCC0sPB3fDwu9kL3FaUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/d29730-515a-4bfb-ad55-e038d81b3f97/1/STRpVEIDCC0sPB3fDwu9kL3FaUE.mft
Manifest number: 1422
Signing time: Sat 10 May 2025 15:00:42 +0000
Manifest this update: Sat 10 May 2025 15:00:42 +0000
Manifest next update: Sun 11 May 2025 15:00:42 +0000
Files and hashes: 1: STRpVEIDCC0sPB3fDwu9kL3FaUE.crl (hash: d8fhn7khdJ9n7Yxf4qp5i6oSqHvZdtSDtSG6nYkGxeM=)
2: j2dUbB-NK5CfnidiqDMKydgI8YE.roa (hash: ZUxAxryB168omhb8dlNaslAttNVaqi4+cbp8ns+rOL0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/d29730-515a-4bfb-ad55-e038d81b3f97/1/STRpVEIDCC0sPB3fDwu9kL3FaUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/d29730-515a-4bfb-ad55-e038d81b3f97/1/STRpVEIDCC0sPB3fDwu9kL3FaUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/STRpVEIDCC0sPB3fDwu9kL3FaUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:b6:77:f1:4b:8e:88:bf:8d:b8:a3:f5:24:3b:1c:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=493469544203082d2c3c1ddf0f0bbd90bdc56941
Validity
Not Before: May 10 15:00:42 2025 GMT
Not After : May 11 15:00:42 2025 GMT
Subject: CN=467ce024056a12428456d7047539f7e94b3a3b31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:49:88:87:d3:47:61:59:3e:ca:d1:27:3c:58:
3e:a6:ca:c2:e8:2f:68:2d:0a:80:58:2b:41:84:db:
6c:e4:ac:f8:d6:78:e0:55:40:dd:66:ec:89:ae:8d:
67:d4:7c:b0:b3:7b:9d:21:86:cf:8b:70:fe:2f:30:
ae:9f:e4:67:15:63:fc:e1:8c:6b:5a:51:56:fd:95:
f6:cf:d6:18:df:af:8b:a6:fb:9c:ea:a3:5a:96:f3:
f0:ce:d8:24:b8:cb:b7:2c:c5:d0:73:e1:f5:6f:bc:
34:26:50:8c:d2:76:2b:d7:f5:8d:af:df:4d:b6:c9:
be:2f:48:5f:98:9d:6b:72:60:d0:3e:cd:b9:f3:bd:
41:33:a2:7d:2e:60:7b:4d:38:f6:95:51:c0:dd:3a:
7d:94:e6:66:01:e8:02:42:52:7c:d2:46:88:c5:49:
af:74:4d:f7:b4:b2:0d:a7:d6:36:4f:81:23:23:fa:
53:b4:cf:05:49:95:18:fe:16:fb:a5:95:5d:d3:c5:
2e:4c:90:bf:82:37:68:a8:6d:9d:4a:34:8e:6b:a4:
cc:ff:88:dc:e6:0f:f8:4a:ce:02:81:6b:18:b4:cc:
be:65:9b:b4:cf:f4:bf:29:86:7e:8c:61:7b:03:f2:
5f:f0:23:4b:55:09:97:f0:42:b4:3f:96:85:59:fd:
ed:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:7C:E0:24:05:6A:12:42:84:56:D7:04:75:39:F7:E9:4B:3A:3B:31
X509v3 Authority Key Identifier:
keyid:49:34:69:54:42:03:08:2D:2C:3C:1D:DF:0F:0B:BD:90:BD:C5:69:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/STRpVEIDCC0sPB3fDwu9kL3FaUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/d29730-515a-4bfb-ad55-e038d81b3f97/1/STRpVEIDCC0sPB3fDwu9kL3FaUE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/d29730-515a-4bfb-ad55-e038d81b3f97/1/STRpVEIDCC0sPB3fDwu9kL3FaUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:f5:6b:c0:a9:7b:a4:cf:2e:fe:c8:d4:35:4a:0a:5e:71:f7:
d2:f1:d9:00:30:62:f0:ef:d1:72:40:11:40:3e:6f:d2:34:08:
0d:f4:24:99:96:df:74:16:ba:27:2f:30:cc:ef:13:5a:81:6a:
5f:2e:f1:e4:e1:68:1a:15:45:2c:f7:96:f6:38:ef:f6:6d:f2:
c9:3b:d3:5d:85:2c:33:a0:29:a2:58:87:2b:66:a1:ee:c7:8b:
38:44:d4:27:f5:d4:9a:93:83:1c:65:56:d4:70:48:f8:ef:93:
7c:a5:0c:18:68:74:7e:a4:65:7e:a9:8d:ab:ea:d4:5c:b2:27:
d2:81:ce:e7:48:b4:c3:fc:bc:b1:eb:0a:53:65:0c:5b:1c:2f:
cc:cf:f7:08:48:63:a0:40:e9:f6:06:ed:eb:4e:cb:00:bd:fd:
e8:5b:b9:81:c9:5b:f8:9c:98:ee:24:9e:58:67:a6:34:5d:20:
48:45:ee:08:e5:78:a3:f4:49:6b:e6:0a:70:d7:24:6b:58:d5:
c9:4d:d3:1c:a9:6a:6f:63:f2:e6:10:c2:8d:6b:0a:76:39:d9:
0c:6e:27:f4:0a:03:41:a8:1c:d0:34:7b:fc:50:cb:7a:4f:99:
89:5f:9c:1b:fe:41:74:f9:37:a3:89:bf:ab:f4:a3:58:96:12:
23:73:7a:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 17:02:24 2025 by rpki-client