Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/b38821-23f2-4e5e-941c-a8f0ee00b2ad/1/sTLpNaEPnOIW4Jk65BmclvUnOvQ.mft
File: sTLpNaEPnOIW4Jk65BmclvUnOvQ.mft (raw, json)
Hash identifier: 0s59S5UaMDmZZu9hAaefhbKNsXDDee6L/gi+BSohCSs=
Subject key identifier: 39:84:9B:F6:8E:29:9D:C7:13:84:07:09:24:33:BB:14:1C:57:EF:4E
Authority key identifier: B1:32:E9:35:A1:0F:9C:E2:16:E0:99:3A:E4:19:9C:96:F5:27:3A:F4
Certificate issuer: /CN=b132e935a10f9ce216e0993ae4199c96f5273af4
Certificate serial: 0198D5F14F304E4E585C16FDF1358D0EAAB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sTLpNaEPnOIW4Jk65BmclvUnOvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/b38821-23f2-4e5e-941c-a8f0ee00b2ad/1/sTLpNaEPnOIW4Jk65BmclvUnOvQ.mft
Manifest number: 1287
Signing time: Sat 23 Aug 2025 08:00:18 +0000
Manifest this update: Sat 23 Aug 2025 08:00:18 +0000
Manifest next update: Sun 24 Aug 2025 08:00:18 +0000
Files and hashes: 1: DLK7aUuoCrkixmfK1Tr6lgYywbs.roa (hash: P1mAikX7/iUCIq0Iyy8fvjfAyIPndaCCAY0oESDv+Qo=)
2: mxU7ZGuWRrVnoU7neP0ntyKL78s.roa (hash: X4Bp+WOWNCY8+u0/f19L8Y2SQKOHLXJCsrOK+p7unk8=)
3: sTLpNaEPnOIW4Jk65BmclvUnOvQ.crl (hash: ZNbH7FMy6ImZgqpWEd87wYBmqXNJ8wsiFT+ky6OuxvA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/b38821-23f2-4e5e-941c-a8f0ee00b2ad/1/sTLpNaEPnOIW4Jk65BmclvUnOvQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/b38821-23f2-4e5e-941c-a8f0ee00b2ad/1/sTLpNaEPnOIW4Jk65BmclvUnOvQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sTLpNaEPnOIW4Jk65BmclvUnOvQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:4f:30:4e:4e:58:5c:16:fd:f1:35:8d:0e:aa:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b132e935a10f9ce216e0993ae4199c96f5273af4
Validity
Not Before: Aug 23 08:00:18 2025 GMT
Not After : Aug 24 08:00:18 2025 GMT
Subject: CN=39849bf68e299dc7138407092433bb141c57ef4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:6e:b2:51:7c:7c:b7:8d:3d:9b:9b:28:57:fd:
ee:40:a3:cf:50:6a:71:ac:0a:bd:83:04:26:df:86:
c2:52:5b:0f:d8:d5:4c:4e:a6:37:c6:49:5e:f1:01:
14:99:3f:67:f0:a5:ca:f3:91:3a:29:eb:0c:75:ad:
a8:24:99:17:4a:54:72:50:50:88:61:bb:21:4b:c9:
69:1b:78:b4:88:3f:78:88:b8:d3:22:95:cd:e6:60:
9f:ad:6e:98:44:bb:f7:c5:12:40:c2:03:0c:85:18:
a3:36:95:5c:90:c9:bd:8a:bb:50:55:13:46:4e:d2:
46:bd:c9:56:07:e8:c4:13:f0:34:28:9a:8a:d2:4d:
00:39:e4:3a:d6:fc:41:e4:1f:07:47:5a:17:33:74:
d1:68:81:b7:cb:47:8e:95:7c:89:9a:f5:65:d1:8f:
60:ac:9c:47:ba:8f:87:0c:17:5a:d6:e7:8c:c4:2f:
6c:c6:7f:1d:36:ab:05:d4:1e:69:e9:49:00:55:5e:
4f:6f:ae:9d:c6:1a:6a:cd:53:57:aa:0f:b0:aa:bf:
e0:a2:10:99:ab:a5:6f:ae:95:dd:e5:87:ea:53:c2:
92:d4:94:50:c3:ee:d4:0d:5d:6d:7d:9b:90:9c:ef:
46:d1:51:75:8a:59:c0:f1:00:18:d0:b9:06:ee:dc:
df:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:84:9B:F6:8E:29:9D:C7:13:84:07:09:24:33:BB:14:1C:57:EF:4E
X509v3 Authority Key Identifier:
keyid:B1:32:E9:35:A1:0F:9C:E2:16:E0:99:3A:E4:19:9C:96:F5:27:3A:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sTLpNaEPnOIW4Jk65BmclvUnOvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b38821-23f2-4e5e-941c-a8f0ee00b2ad/1/sTLpNaEPnOIW4Jk65BmclvUnOvQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b38821-23f2-4e5e-941c-a8f0ee00b2ad/1/sTLpNaEPnOIW4Jk65BmclvUnOvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:ec:f3:af:b7:f3:c5:18:7b:b3:e2:d2:d2:5a:aa:ae:2d:df:
12:ce:71:e7:9f:2a:36:1b:f2:82:3a:5c:81:24:fc:11:68:ec:
24:2b:9b:c8:67:3d:11:4d:89:47:c1:86:6e:be:25:69:38:bb:
e3:3f:e8:05:a0:76:c7:3f:8a:f2:76:f4:84:a2:45:f0:0b:14:
16:2c:58:e9:c1:b2:84:b3:d4:6f:15:88:8d:32:83:eb:44:3f:
13:10:d0:33:ee:5b:82:af:4c:8c:ff:44:b8:1c:6b:d2:e7:a5:
56:fa:78:28:5f:1d:10:dd:3e:c1:26:f5:77:81:b8:83:f8:cd:
68:a9:76:a2:f2:f8:ac:43:eb:b7:a1:5d:70:b1:12:e3:07:30:
18:61:17:b4:b7:eb:c6:ba:c2:94:80:d3:ac:45:88:95:c2:00:
1e:34:cb:10:c1:b6:76:8c:6d:45:32:26:6e:89:85:49:b1:9c:
75:a7:d8:74:6e:73:47:c2:9a:3a:a1:1f:03:5d:42:3f:c3:34:
a9:35:fb:ef:ff:16:1d:4c:cb:b5:93:84:6f:a7:1a:80:aa:ee:
f5:e8:81:53:c4:df:9c:8d:3b:27:6e:47:e7:0f:1e:7e:a3:b8:
71:2b:f2:9f:4b:4f:c8:30:d1:0c:89:88:a9:07:09:6a:86:8c:
3e:6b:bb:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:05:03 2025 by rpki-client