Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/465c40-6718-4ea9-91e5-912047153e01/1/sTU3eQGnhx07_3pwJ3ovTi_A4nc.mft
File: sTU3eQGnhx07_3pwJ3ovTi_A4nc.mft (raw, json)
Hash identifier: NALO6xmkLWhP4M9fwa8pPGTUuRKD4iH9a5yaEFLiLNM=
Subject key identifier: 57:14:62:8E:4F:D8:C9:CD:79:59:91:1D:E3:4B:C3:E3:5C:39:8D:AA
Authority key identifier: B1:35:37:79:01:A7:87:1D:3B:FF:7A:70:27:7A:2F:4E:2F:C0:E2:77
Certificate issuer: /CN=b135377901a7871d3bff7a70277a2f4e2fc0e277
Certificate serial: 0197C8A6E1A1F4F1503FBD2D334E63884424
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sTU3eQGnhx07_3pwJ3ovTi_A4nc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/465c40-6718-4ea9-91e5-912047153e01/1/sTU3eQGnhx07_3pwJ3ovTi_A4nc.mft
Manifest number: 15C0
Signing time: Wed 02 Jul 2025 01:01:09 +0000
Manifest this update: Wed 02 Jul 2025 01:01:09 +0000
Manifest next update: Thu 03 Jul 2025 01:01:09 +0000
Files and hashes: 1: 00GJlkuxjT-xB1LSuZloHmKQPmA.roa (hash: 9a/Biy4j/OZlZRXYUZR8+r88dbkZ+LAsW+76+eBVauw=)
2: Z1JG5B9Mt6eluTWCjMRqbrT9b5Y.roa (hash: TLo7HXxLeEPCaG6doyM8ItbshKpgy+E58r0ur/ZFDhw=)
3: sTU3eQGnhx07_3pwJ3ovTi_A4nc.crl (hash: uTWRlcUPiiyzDwBUEY5nO/D6NRXMIkPNtI85RgPO6BM=)
4: wgdhruz0xtRxWdWf--i6dPU1wQE.roa (hash: WcvpeOu2J24CdapCRKlSln4v+gu+O2IeoZu5OdQe1GY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/465c40-6718-4ea9-91e5-912047153e01/1/sTU3eQGnhx07_3pwJ3ovTi_A4nc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/465c40-6718-4ea9-91e5-912047153e01/1/sTU3eQGnhx07_3pwJ3ovTi_A4nc.mft
rsync://rpki.ripe.net/repository/DEFAULT/sTU3eQGnhx07_3pwJ3ovTi_A4nc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 01:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c8:a6:e1:a1:f4:f1:50:3f:bd:2d:33:4e:63:88:44:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b135377901a7871d3bff7a70277a2f4e2fc0e277
Validity
Not Before: Jul 2 01:01:09 2025 GMT
Not After : Jul 3 01:01:09 2025 GMT
Subject: CN=5714628e4fd8c9cd7959911de34bc3e35c398daa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e4:97:50:45:b1:22:f3:52:1d:be:74:ff:42:
55:8b:b3:08:a7:cd:50:32:f9:31:80:f6:6e:09:2a:
60:6a:17:29:8f:91:6e:09:18:57:4e:1d:42:05:ed:
d6:63:12:73:b7:b9:f9:3f:64:fa:d4:8e:07:b8:8a:
32:35:81:4a:b6:c0:ed:49:38:95:53:19:0f:7e:28:
d0:e9:a1:9f:29:6f:c9:54:87:6e:93:6d:51:cf:8d:
19:8a:9d:f6:e5:4f:98:31:56:b0:fb:f2:98:7f:75:
4f:4b:2d:e7:9b:74:3e:dd:8e:2f:b6:c9:89:6d:32:
70:c1:da:ef:ea:ea:53:72:3f:c9:fd:17:a4:f3:5d:
5c:59:4e:82:17:f5:c5:97:6d:d7:c5:18:1a:ef:e0:
11:8e:c2:6c:e5:4e:71:cf:92:88:1f:de:c2:02:f4:
dc:42:b0:63:28:63:4e:be:58:03:7f:53:b6:f4:85:
8d:09:fb:74:be:2f:75:8a:ea:b8:60:dd:cb:57:b1:
c6:19:4f:8d:f5:9b:d9:80:51:6b:1c:90:4c:14:ef:
bf:ed:e9:79:25:b4:cf:3c:3c:ce:91:af:93:17:50:
6a:90:35:a5:44:e5:dc:e7:c5:35:80:40:d1:4a:dd:
13:dd:26:21:6f:74:01:3c:0b:0e:31:14:62:47:52:
1a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:14:62:8E:4F:D8:C9:CD:79:59:91:1D:E3:4B:C3:E3:5C:39:8D:AA
X509v3 Authority Key Identifier:
keyid:B1:35:37:79:01:A7:87:1D:3B:FF:7A:70:27:7A:2F:4E:2F:C0:E2:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sTU3eQGnhx07_3pwJ3ovTi_A4nc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/465c40-6718-4ea9-91e5-912047153e01/1/sTU3eQGnhx07_3pwJ3ovTi_A4nc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/465c40-6718-4ea9-91e5-912047153e01/1/sTU3eQGnhx07_3pwJ3ovTi_A4nc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:4b:f9:7d:77:0b:0f:a8:01:0d:07:09:65:2b:ca:26:d4:9c:
dd:cd:bc:ab:dd:1d:0d:b4:e1:21:41:55:c2:ec:fb:b3:b0:57:
07:d2:62:c7:9d:fa:bf:f0:6f:ea:72:5d:4a:1f:fd:d5:72:9a:
8d:ff:7f:03:7d:7f:0a:77:73:99:29:9d:d7:43:ed:2c:38:e3:
c2:52:bc:4b:6a:00:59:03:1a:f7:56:98:c9:fb:6b:cd:94:91:
91:66:6c:ab:e8:bb:e3:9b:c8:26:5f:12:b0:a0:bf:a0:a4:c3:
17:01:b0:9e:1c:e0:cf:7a:0a:c3:06:df:6e:bf:d0:3e:87:43:
e5:82:b2:8e:6b:bb:69:96:e8:f8:f2:74:25:b3:0c:95:87:51:
ba:6a:00:fd:3e:b6:db:1d:63:21:87:70:22:0c:e8:d6:30:7d:
05:f8:64:4f:79:5d:34:58:6c:bc:bc:9f:aa:e9:ea:c6:7e:a2:
01:ed:a8:5e:ae:70:95:65:33:8a:28:fc:2f:df:ef:38:25:45:
dd:2d:57:6d:6a:55:b1:15:de:68:91:92:ce:9d:7a:8e:a1:ba:
2c:8e:64:87:52:cb:4f:2b:6a:c5:36:47:2a:c8:23:40:36:ad:
3b:48:21:9f:b3:47:50:a5:75:65:20:9d:d5:a2:fa:12:b2:1e:
3d:6e:1b:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 05:22:02 2025 by rpki-client