Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/07cdcf-8875-4770-8c75-41b745bf53db/1/STeGYPXwGSOUbDXZS-XM19K3EFE.mft
File: STeGYPXwGSOUbDXZS-XM19K3EFE.mft (raw, json)
Hash identifier: Ogh4qk/KpwHp6u7PEsPeBOURRCi3YOdIS96ypoNyhaw=
Subject key identifier: 64:4C:CE:1D:61:EC:07:77:EA:1C:84:62:1C:C9:A5:C5:55:D3:88:28
Authority key identifier: 49:37:86:60:F5:F0:19:23:94:6C:35:D9:4B:E5:CC:D7:D2:B7:10:51
Certificate issuer: /CN=49378660f5f01923946c35d94be5ccd7d2b71051
Certificate serial: 0198D6CD78DCD2E850FE67FEB11D12E70186
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/STeGYPXwGSOUbDXZS-XM19K3EFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/07cdcf-8875-4770-8c75-41b745bf53db/1/STeGYPXwGSOUbDXZS-XM19K3EFE.mft
Manifest number: 0BDF
Signing time: Sat 23 Aug 2025 12:00:46 +0000
Manifest this update: Sat 23 Aug 2025 12:00:46 +0000
Manifest next update: Sun 24 Aug 2025 12:00:46 +0000
Files and hashes: 1: 2ZvpZ0sZ6P6ydTiCDEFolKMvfh0.roa (hash: 1DssY9QtTEut1NYlrrYk3dvjYOvc/xqpRvFLT8I4S4E=)
2: NjASS9Fcywmz2PQGC289Z6czZDw.roa (hash: HSbgUfk0PK7NcRU0i0FIegZSv4Qc7DSpvzCcUEz+mx0=)
3: STeGYPXwGSOUbDXZS-XM19K3EFE.crl (hash: qlCLYHMxRjNT3pk2vR7joxXfZZkR7bE8jfJNqtr3Cmg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/07cdcf-8875-4770-8c75-41b745bf53db/1/STeGYPXwGSOUbDXZS-XM19K3EFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/07cdcf-8875-4770-8c75-41b745bf53db/1/STeGYPXwGSOUbDXZS-XM19K3EFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/STeGYPXwGSOUbDXZS-XM19K3EFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:78:dc:d2:e8:50:fe:67:fe:b1:1d:12:e7:01:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49378660f5f01923946c35d94be5ccd7d2b71051
Validity
Not Before: Aug 23 12:00:46 2025 GMT
Not After : Aug 24 12:00:46 2025 GMT
Subject: CN=644cce1d61ec0777ea1c84621cc9a5c555d38828
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:0d:e7:22:09:54:d0:84:0a:67:c7:f5:c5:eb:
9f:ee:fa:4b:10:1f:6c:1f:ef:f3:f8:09:7a:e7:9a:
7b:f0:69:1f:18:63:d8:43:8f:fe:1f:eb:a5:a4:d4:
71:d5:12:4d:99:f5:cd:33:0d:d0:af:d1:21:46:f6:
44:45:18:53:fc:dd:86:9c:52:9a:78:a9:c5:2c:05:
45:40:5d:69:c0:f3:f3:04:85:b4:9d:c4:1d:35:8a:
8d:4e:97:bf:1d:59:de:47:b2:ae:ef:a6:3c:3c:ca:
1f:ce:9b:74:ce:f7:b0:18:37:b7:20:7d:02:83:8f:
d7:3c:46:d5:31:a9:2d:e5:71:80:20:37:f0:1a:1d:
30:8e:1f:cb:38:43:ce:da:e2:3a:ba:ff:22:7c:15:
3a:cc:70:05:02:54:cc:03:30:a8:37:61:c0:79:3b:
80:f3:24:e0:04:b1:12:62:3f:d2:7b:e7:46:49:64:
31:dc:b1:36:e3:9a:f7:7c:e2:ca:79:39:f5:29:a1:
2d:7c:46:34:cc:20:ac:3b:01:5e:ef:25:12:a9:eb:
55:d2:0b:af:1c:aa:1e:5e:67:8f:7d:8b:27:ea:cb:
d7:7b:e9:6e:fd:60:d6:14:e3:ea:c9:e0:23:65:52:
bf:e2:d5:50:03:45:cb:60:c8:c8:22:80:f3:b6:27:
13:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:4C:CE:1D:61:EC:07:77:EA:1C:84:62:1C:C9:A5:C5:55:D3:88:28
X509v3 Authority Key Identifier:
keyid:49:37:86:60:F5:F0:19:23:94:6C:35:D9:4B:E5:CC:D7:D2:B7:10:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/STeGYPXwGSOUbDXZS-XM19K3EFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/07cdcf-8875-4770-8c75-41b745bf53db/1/STeGYPXwGSOUbDXZS-XM19K3EFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/07cdcf-8875-4770-8c75-41b745bf53db/1/STeGYPXwGSOUbDXZS-XM19K3EFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:32:24:ca:36:74:69:3d:e0:66:ed:44:03:8b:de:88:f2:28:
46:3b:e2:90:9d:b4:bf:3e:e6:7c:d0:24:ef:ca:f5:f4:dd:08:
e9:f6:61:1a:c6:26:08:f4:80:51:56:9d:5f:76:62:17:62:27:
b3:1e:58:30:df:b3:29:80:e4:c7:ef:73:b6:e2:ac:e9:2a:37:
c4:4d:cf:d7:a2:80:a3:08:6e:a7:bf:e5:44:2b:20:05:a0:e3:
8a:a1:3b:cf:26:2e:aa:b1:0e:3d:64:a5:7b:64:b9:36:78:a6:
4b:3c:0d:67:52:f2:61:cb:c1:fa:a9:9f:43:90:55:6d:d2:f8:
5e:d1:08:f9:a0:cd:1c:39:70:5d:77:0f:8a:b5:41:c2:b4:45:
f9:c7:98:70:64:40:13:1d:3d:6e:22:8a:0f:b2:1a:b5:c1:fa:
de:bc:2a:a5:4a:86:27:c2:25:2a:fb:09:e5:5f:3b:2a:b7:6e:
f8:3d:5b:7f:f9:e3:4a:14:e3:94:6b:0f:8e:58:ad:71:7d:15:
8c:c8:50:29:4c:b4:69:f8:8d:b4:48:d2:47:41:64:98:39:3f:
68:92:ec:21:25:d8:ae:2f:9d:b1:e0:64:ae:45:c2:52:48:4a:
11:b0:e4:77:1f:af:fb:21:8e:fb:a5:38:61:a6:67:45:52:54:
c6:ab:b6:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:47:57 2025 by rpki-client