Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/d29730-515a-4bfb-ad55-e038d81b3f97/1/STRpVEIDCC0sPB3fDwu9kL3FaUE.mft
File: STRpVEIDCC0sPB3fDwu9kL3FaUE.mft (raw, json)
Hash identifier: TdNHNGiXWqq8IsP82VB2Yxl4yd3f0+G2ZWCWfw0EQhU=
Subject key identifier: 51:B5:8C:80:09:15:1A:03:F6:14:4D:14:E5:22:06:C1:B1:32:58:AF
Authority key identifier: 49:34:69:54:42:03:08:2D:2C:3C:1D:DF:0F:0B:BD:90:BD:C5:69:41
Certificate issuer: /CN=493469544203082d2c3c1ddf0f0bbd90bdc56941
Certificate serial: 0197B7B354837B5AFA9FEEB6DFD80DDB54AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/STRpVEIDCC0sPB3fDwu9kL3FaUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/d29730-515a-4bfb-ad55-e038d81b3f97/1/STRpVEIDCC0sPB3fDwu9kL3FaUE.mft
Manifest number: 14A5
Signing time: Sat 28 Jun 2025 18:01:12 +0000
Manifest this update: Sat 28 Jun 2025 18:01:12 +0000
Manifest next update: Sun 29 Jun 2025 18:01:12 +0000
Files and hashes: 1: STRpVEIDCC0sPB3fDwu9kL3FaUE.crl (hash: 3wZzbMPkmH2B+/kG0YSnzBvzAOhWJQUVOoJ4CF/dRsM=)
2: j2dUbB-NK5CfnidiqDMKydgI8YE.roa (hash: ZUxAxryB168omhb8dlNaslAttNVaqi4+cbp8ns+rOL0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/d29730-515a-4bfb-ad55-e038d81b3f97/1/STRpVEIDCC0sPB3fDwu9kL3FaUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/d29730-515a-4bfb-ad55-e038d81b3f97/1/STRpVEIDCC0sPB3fDwu9kL3FaUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/STRpVEIDCC0sPB3fDwu9kL3FaUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:54:83:7b:5a:fa:9f:ee:b6:df:d8:0d:db:54:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=493469544203082d2c3c1ddf0f0bbd90bdc56941
Validity
Not Before: Jun 28 18:01:12 2025 GMT
Not After : Jun 29 18:01:12 2025 GMT
Subject: CN=51b58c8009151a03f6144d14e52206c1b13258af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e2:34:5e:8d:72:19:55:20:82:3e:09:0a:86:
62:84:99:8e:3a:9d:1d:5a:0e:a3:ba:44:d6:bb:ed:
26:6b:76:65:04:a0:b5:e8:34:e9:40:62:6c:b0:46:
2c:f9:0b:f2:f1:8a:0f:d8:ea:a3:36:3c:67:a8:63:
3d:88:87:b1:0e:7d:0d:47:db:3b:4b:09:cd:c9:6a:
fd:e9:1c:e0:e7:87:fa:8f:c4:55:35:d2:66:01:44:
96:5b:35:44:12:ff:a6:92:2f:bb:50:2a:7f:36:6b:
54:b3:af:7a:aa:42:f4:85:ec:27:29:2e:b1:55:42:
7e:66:3c:2a:ab:18:6c:48:30:80:28:c4:5a:83:9d:
84:4b:28:1c:a9:82:55:0f:9d:95:03:66:7d:32:43:
a4:40:d4:ac:e1:de:c9:53:f9:9b:f0:6e:c2:44:99:
18:73:fe:70:4e:03:16:b3:24:2d:0f:82:61:8c:46:
fd:47:8b:43:25:a2:4a:c0:c2:e3:77:8a:85:61:33:
7c:20:c6:7b:28:6c:0b:14:63:96:e5:97:32:4d:c9:
de:e5:0e:65:49:a2:1d:df:e5:41:90:6d:76:b8:12:
93:c5:28:dd:8e:cd:08:7a:f4:f9:15:15:c1:9a:4f:
79:a3:3f:ea:e1:3e:ef:53:17:43:83:20:32:a2:db:
24:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:B5:8C:80:09:15:1A:03:F6:14:4D:14:E5:22:06:C1:B1:32:58:AF
X509v3 Authority Key Identifier:
keyid:49:34:69:54:42:03:08:2D:2C:3C:1D:DF:0F:0B:BD:90:BD:C5:69:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/STRpVEIDCC0sPB3fDwu9kL3FaUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/d29730-515a-4bfb-ad55-e038d81b3f97/1/STRpVEIDCC0sPB3fDwu9kL3FaUE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/d29730-515a-4bfb-ad55-e038d81b3f97/1/STRpVEIDCC0sPB3fDwu9kL3FaUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:44:ac:df:8a:ea:00:ca:d5:4e:31:9a:2f:c6:2e:39:31:e5:
b2:9b:2e:03:44:8d:e6:d1:2e:8f:59:bf:cd:45:1f:30:9c:3c:
57:c4:54:df:7d:0e:e4:83:04:e8:d4:64:b7:09:be:1b:86:2b:
fe:37:d4:4f:67:09:ce:22:04:ce:dc:d0:57:77:02:15:06:29:
4c:71:93:84:97:05:46:c8:0b:18:a1:8a:a5:43:f5:45:50:04:
92:04:59:10:a9:a1:bc:08:78:3d:03:a2:8a:d6:64:18:97:98:
f3:09:df:77:56:62:c1:77:5b:5b:71:22:bc:ee:2b:35:be:9f:
ea:2d:3a:38:e1:d4:7f:a7:d0:5d:b9:7b:55:2f:bf:ef:ff:8d:
d4:2f:d2:c7:ec:5f:d7:5e:a1:ba:d3:9f:10:92:16:5e:6a:74:
39:c2:52:ca:d1:de:87:70:32:f4:af:d4:5d:42:33:b5:d6:c9:
4f:98:19:56:b2:2d:61:ae:c7:cc:ae:12:bf:81:ea:42:4c:71:
e2:e9:e1:8c:d8:96:7a:be:6a:ac:3c:a7:10:01:d4:9c:2f:e5:
09:2f:7a:11:e7:66:ba:c3:2e:7e:4d:5f:28:3f:70:f5:e9:89:
6f:f2:6b:c3:57:1d:e3:13:e4:c1:cf:d2:89:55:e9:b1:e1:39:
94:9e:f1:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:42:52 2025 by rpki-client