Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/3f0083-59d7-433a-905a-47b1bdf8d530/1/sTlxv-p41qpbSe1aw1x3tqMKCJQ.mft
File: sTlxv-p41qpbSe1aw1x3tqMKCJQ.mft (raw, json)
Hash identifier: P7mjahnm974URnjObK1XNtp+l5wvYRxmfiu84Sb28RI=
Subject key identifier: CF:72:87:14:A0:00:12:DE:62:2A:27:06:44:1C:D6:C6:44:57:70:E8
Authority key identifier: B1:39:71:BF:EA:78:D6:AA:5B:49:ED:5A:C3:5C:77:B6:A3:0A:08:94
Certificate issuer: /CN=b13971bfea78d6aa5b49ed5ac35c77b6a30a0894
Certificate serial: 0197CBDF60380C45180249416A2989CC992B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sTlxv-p41qpbSe1aw1x3tqMKCJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/3f0083-59d7-433a-905a-47b1bdf8d530/1/sTlxv-p41qpbSe1aw1x3tqMKCJQ.mft
Manifest number: 0AA4
Signing time: Wed 02 Jul 2025 16:01:43 +0000
Manifest this update: Wed 02 Jul 2025 16:01:43 +0000
Manifest next update: Thu 03 Jul 2025 16:01:43 +0000
Files and hashes: 1: Ewu_L9NGAMIn9J1bD2mKPYHfLN0.roa (hash: MPg//qxTuFJeVfIte2bOUUVJ5G8w+mQ6T68mV0V7xWY=)
2: sTlxv-p41qpbSe1aw1x3tqMKCJQ.crl (hash: utWfvLt++hA8VCRC3zcuoCVsakolDxfXdOHj/6RAbp4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/3f0083-59d7-433a-905a-47b1bdf8d530/1/sTlxv-p41qpbSe1aw1x3tqMKCJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/3f0083-59d7-433a-905a-47b1bdf8d530/1/sTlxv-p41qpbSe1aw1x3tqMKCJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sTlxv-p41qpbSe1aw1x3tqMKCJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cb:df:60:38:0c:45:18:02:49:41:6a:29:89:cc:99:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b13971bfea78d6aa5b49ed5ac35c77b6a30a0894
Validity
Not Before: Jul 2 16:01:43 2025 GMT
Not After : Jul 3 16:01:43 2025 GMT
Subject: CN=cf728714a00012de622a2706441cd6c6445770e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d8:18:98:b7:ff:f0:b8:36:61:fc:4e:5d:bb:
57:be:97:2e:d3:cc:4f:84:57:52:a8:6d:f5:9f:e5:
2e:7b:92:45:9a:d4:26:ff:00:ad:4e:c0:7c:9e:48:
e4:50:7d:f5:51:86:e1:d7:31:af:fb:41:8c:71:6f:
7e:73:cd:c8:1d:a9:48:d2:64:36:97:1a:15:d6:de:
3c:b9:28:74:04:76:87:05:93:23:3f:8c:0b:95:56:
01:53:38:a0:40:ba:7e:1e:33:15:5e:5c:e9:89:12:
b9:08:31:1b:49:99:2e:25:50:7e:c7:3d:e3:c5:0f:
05:d2:2b:3a:fa:e8:f9:dd:02:e9:d0:64:5d:10:54:
e7:c4:99:a6:e9:67:74:c8:83:de:7e:f7:a5:f7:70:
97:e0:76:2c:a5:c4:da:a0:52:e4:41:aa:6b:69:67:
4e:2f:bb:cc:89:a1:2c:b0:99:8d:7f:8b:68:fe:6b:
48:9b:24:5a:82:3c:ee:46:4f:1e:fe:5c:3c:99:f7:
85:33:fb:a9:f7:69:a2:98:07:93:af:7c:59:94:e6:
5f:27:47:9b:27:8b:c3:e9:01:2c:a3:7a:77:3d:68:
ae:7f:3e:c5:f1:47:64:ee:b5:9c:6d:44:dc:52:38:
d1:70:b1:a0:ce:55:34:95:f7:57:8e:bc:8d:e3:b5:
20:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:72:87:14:A0:00:12:DE:62:2A:27:06:44:1C:D6:C6:44:57:70:E8
X509v3 Authority Key Identifier:
keyid:B1:39:71:BF:EA:78:D6:AA:5B:49:ED:5A:C3:5C:77:B6:A3:0A:08:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sTlxv-p41qpbSe1aw1x3tqMKCJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/3f0083-59d7-433a-905a-47b1bdf8d530/1/sTlxv-p41qpbSe1aw1x3tqMKCJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/3f0083-59d7-433a-905a-47b1bdf8d530/1/sTlxv-p41qpbSe1aw1x3tqMKCJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:ce:78:97:ec:5b:99:bf:e8:b1:69:14:dc:95:d2:23:15:0f:
94:c4:bb:30:23:e8:d7:08:7a:be:e8:18:fb:71:ff:85:b0:29:
9f:d7:12:cb:8d:fe:eb:2b:95:ab:e2:44:2d:bc:fd:2f:1c:8c:
06:6d:f3:cc:4f:6d:4d:74:08:bd:82:82:19:e7:c8:28:82:e0:
b2:bd:9d:f0:f1:90:26:f9:88:a2:d2:46:44:6b:d0:cb:0b:d1:
35:44:8d:40:ae:81:aa:1f:e2:5e:76:7e:a5:ee:48:39:22:38:
81:8c:5d:c1:a7:55:f7:ca:4a:1f:02:5a:0b:29:79:30:35:70:
cd:c2:a9:5a:2e:2c:f1:9c:8b:b5:05:48:ef:d4:b6:bd:cd:a1:
d2:72:a3:c1:96:50:36:e8:d5:5f:c2:8d:1b:69:35:40:7e:4f:
87:4f:bb:02:75:8a:57:89:f5:1e:78:63:b1:3e:5c:44:09:90:
d4:74:fb:ad:04:40:c3:55:0a:5f:4a:ac:13:1a:3b:1c:8b:9b:
72:8d:2a:36:4c:ee:19:ee:fa:76:6a:02:02:c4:00:d2:08:61:
35:49:b6:3e:f8:6d:63:2d:ed:fa:a7:09:8e:b6:22:42:22:29:
6a:cf:59:5e:64:3c:20:3e:f5:41:3c:74:81:26:d4:fa:2a:f2:
0a:b3:20:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 20:01:23 2025 by rpki-client