Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/b38821-23f2-4e5e-941c-a8f0ee00b2ad/1/sTLpNaEPnOIW4Jk65BmclvUnOvQ.mft
File: sTLpNaEPnOIW4Jk65BmclvUnOvQ.mft (raw, json)
Hash identifier: mcGDw+3iOfKdtma8Otg0UbubxZXTweNTncjc3/Gqzd0=
Subject key identifier: B9:44:CC:A1:F7:29:67:D9:1C:FF:7A:50:E3:F8:14:14:29:C6:C8:1B
Authority key identifier: B1:32:E9:35:A1:0F:9C:E2:16:E0:99:3A:E4:19:9C:96:F5:27:3A:F4
Certificate issuer: /CN=b132e935a10f9ce216e0993ae4199c96f5273af4
Certificate serial: 0197BA0F37A68F01BD5F139824F238C81F24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sTLpNaEPnOIW4Jk65BmclvUnOvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/b38821-23f2-4e5e-941c-a8f0ee00b2ad/1/sTLpNaEPnOIW4Jk65BmclvUnOvQ.mft
Manifest number: 11F4
Signing time: Sun 29 Jun 2025 05:00:48 +0000
Manifest this update: Sun 29 Jun 2025 05:00:48 +0000
Manifest next update: Mon 30 Jun 2025 05:00:48 +0000
Files and hashes: 1: DLK7aUuoCrkixmfK1Tr6lgYywbs.roa (hash: P1mAikX7/iUCIq0Iyy8fvjfAyIPndaCCAY0oESDv+Qo=)
2: mxU7ZGuWRrVnoU7neP0ntyKL78s.roa (hash: X4Bp+WOWNCY8+u0/f19L8Y2SQKOHLXJCsrOK+p7unk8=)
3: sTLpNaEPnOIW4Jk65BmclvUnOvQ.crl (hash: kJUL0nEP3/BMDYH9CC9+6p/0hIJQNpqiKol6pFALHAQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/b38821-23f2-4e5e-941c-a8f0ee00b2ad/1/sTLpNaEPnOIW4Jk65BmclvUnOvQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/b38821-23f2-4e5e-941c-a8f0ee00b2ad/1/sTLpNaEPnOIW4Jk65BmclvUnOvQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sTLpNaEPnOIW4Jk65BmclvUnOvQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 05:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:0f:37:a6:8f:01:bd:5f:13:98:24:f2:38:c8:1f:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b132e935a10f9ce216e0993ae4199c96f5273af4
Validity
Not Before: Jun 29 05:00:48 2025 GMT
Not After : Jun 30 05:00:48 2025 GMT
Subject: CN=b944cca1f72967d91cff7a50e3f8141429c6c81b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:38:c5:d1:f5:95:f0:78:ad:76:33:05:bf:4a:
ba:fe:d3:7e:1e:b6:9c:e2:65:56:22:f3:c5:e4:8d:
8e:a1:7b:05:69:73:2c:10:df:db:c0:83:38:2f:72:
ff:ed:7b:bb:0a:32:29:11:9d:9a:0c:a9:b5:22:e2:
82:18:28:7e:8d:c2:89:e3:00:bf:cd:59:8d:d1:3e:
a4:60:60:28:a3:7b:0d:82:61:2a:5b:76:f0:4e:c6:
49:9d:58:d3:2e:1b:e1:c0:30:a6:15:b8:42:1d:a7:
7b:ae:48:b7:d8:b2:28:82:f8:ac:a2:de:0f:f9:85:
67:a4:7a:53:19:62:e4:17:82:95:eb:6d:6d:05:d6:
00:f1:ca:9e:6a:0c:84:12:16:62:5f:09:5b:0b:b0:
1b:a1:3f:28:a1:27:bd:84:e0:90:ba:b0:ca:36:94:
05:e2:65:01:11:8c:ec:00:54:df:fb:bb:c1:1a:6f:
c2:0d:6a:03:b3:25:1e:38:e3:c9:20:4e:79:71:3b:
e6:56:03:91:00:db:f7:d9:f0:90:b6:f7:45:f1:b4:
ca:15:b2:9d:21:21:ab:e4:de:cb:51:42:dd:01:84:
a9:6a:f8:4f:03:62:75:66:a4:a7:8f:2b:3a:4e:a3:
fe:2c:6e:f3:33:d3:33:5a:1c:93:77:62:cf:e9:cf:
b0:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:44:CC:A1:F7:29:67:D9:1C:FF:7A:50:E3:F8:14:14:29:C6:C8:1B
X509v3 Authority Key Identifier:
keyid:B1:32:E9:35:A1:0F:9C:E2:16:E0:99:3A:E4:19:9C:96:F5:27:3A:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sTLpNaEPnOIW4Jk65BmclvUnOvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b38821-23f2-4e5e-941c-a8f0ee00b2ad/1/sTLpNaEPnOIW4Jk65BmclvUnOvQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b38821-23f2-4e5e-941c-a8f0ee00b2ad/1/sTLpNaEPnOIW4Jk65BmclvUnOvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:06:8a:51:aa:a4:54:94:c8:ad:42:e2:24:e8:dc:66:e9:0e:
88:12:b6:b9:b5:c7:0c:91:66:49:b7:31:8d:31:f1:b2:4c:13:
24:31:6a:b1:e5:45:00:9e:d1:a9:84:dc:67:f3:14:f0:ad:2a:
ae:06:94:a2:ce:2b:14:65:8d:63:b4:47:95:be:61:8a:87:19:
3a:2d:4d:99:cb:09:6c:13:8f:b6:6e:c6:40:8b:21:2c:82:1c:
09:97:f2:57:db:ee:05:ad:f3:50:44:a2:f2:28:c1:5f:bf:3c:
a6:1b:0c:29:68:87:b2:c7:eb:42:5a:e1:76:06:de:13:bd:ed:
cb:a9:5d:0f:90:a0:d5:b7:1d:94:23:cb:de:9a:7d:7b:02:75:
cc:f4:7b:4f:5a:8a:21:e6:c5:e2:b5:df:ba:09:5a:85:63:c3:
dd:ae:d4:b1:1f:c2:24:77:f8:83:6b:95:72:d2:04:ca:37:f6:
ed:49:d4:38:71:99:29:84:85:93:f1:6c:b4:fe:3f:1b:72:90:
2f:2c:c3:b0:5d:00:ed:2a:ca:fd:d7:f6:d5:d6:22:73:28:d8:
b2:d3:5f:09:14:c7:f1:77:86:9d:92:bb:65:6d:41:13:b2:78:
eb:8b:d6:c7:0b:8e:4b:3d:7c:a1:b7:1b:6c:52:49:ae:1e:57:
5c:d1:f3:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 15:38:05 2025 by rpki-client