Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/07cdcf-8875-4770-8c75-41b745bf53db/1/STeGYPXwGSOUbDXZS-XM19K3EFE.mft
File: STeGYPXwGSOUbDXZS-XM19K3EFE.mft (raw, json)
Hash identifier: jut44tL9gmH77JR/hXQArXEyzfWsDururbfWnGO3vYY=
Subject key identifier: 92:EE:A4:75:64:1E:5A:81:66:79:A6:EA:5A:C7:37:45:E3:E6:FD:51
Authority key identifier: 49:37:86:60:F5:F0:19:23:94:6C:35:D9:4B:E5:CC:D7:D2:B7:10:51
Certificate issuer: /CN=49378660f5f01923946c35d94be5ccd7d2b71051
Certificate serial: 0197B70F51E9CE73CC21581C2778B089D1D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/STeGYPXwGSOUbDXZS-XM19K3EFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/07cdcf-8875-4770-8c75-41b745bf53db/1/STeGYPXwGSOUbDXZS-XM19K3EFE.mft
Manifest number: 0B4A
Signing time: Sat 28 Jun 2025 15:02:03 +0000
Manifest this update: Sat 28 Jun 2025 15:02:03 +0000
Manifest next update: Sun 29 Jun 2025 15:02:03 +0000
Files and hashes: 1: 2ZvpZ0sZ6P6ydTiCDEFolKMvfh0.roa (hash: 1DssY9QtTEut1NYlrrYk3dvjYOvc/xqpRvFLT8I4S4E=)
2: NjASS9Fcywmz2PQGC289Z6czZDw.roa (hash: HSbgUfk0PK7NcRU0i0FIegZSv4Qc7DSpvzCcUEz+mx0=)
3: STeGYPXwGSOUbDXZS-XM19K3EFE.crl (hash: 2bhE++Wdu3d+DTsQK0X954/JIHBH0PQH0G4mJ61NU/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/07cdcf-8875-4770-8c75-41b745bf53db/1/STeGYPXwGSOUbDXZS-XM19K3EFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/07cdcf-8875-4770-8c75-41b745bf53db/1/STeGYPXwGSOUbDXZS-XM19K3EFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/STeGYPXwGSOUbDXZS-XM19K3EFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:51:e9:ce:73:cc:21:58:1c:27:78:b0:89:d1:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49378660f5f01923946c35d94be5ccd7d2b71051
Validity
Not Before: Jun 28 15:02:03 2025 GMT
Not After : Jun 29 15:02:03 2025 GMT
Subject: CN=92eea475641e5a816679a6ea5ac73745e3e6fd51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f5:ae:79:43:90:4d:07:77:a8:76:93:e2:a0:
b4:53:9a:81:38:34:4a:f1:e0:5f:5c:43:41:5a:01:
be:69:81:c2:f6:46:83:c6:2b:45:44:2b:e2:c1:16:
cc:91:b8:1d:59:22:e6:f0:ca:0c:78:bf:b9:a5:2c:
99:83:7b:f7:17:ed:c1:7a:04:91:c1:46:99:f5:74:
7d:33:61:c7:77:2d:6f:28:fb:d0:6d:bf:b4:8d:60:
31:ad:c0:42:42:1b:14:b5:67:73:fc:ad:12:79:e0:
94:d0:a5:ba:fa:7a:8e:2e:23:dd:1c:cc:9f:40:76:
ff:ca:ff:77:df:e0:ad:e8:ab:e3:35:d1:50:73:80:
59:13:8b:6b:e5:07:34:fc:87:a9:98:af:5f:3c:0e:
f3:04:3a:cd:7d:2e:68:90:76:aa:79:39:1c:63:e6:
a9:06:a0:d9:de:dd:43:87:ab:ad:97:93:c5:79:09:
29:57:0f:b8:e6:cf:08:0b:3f:32:3a:d7:78:52:86:
85:83:da:20:19:34:89:61:41:ab:af:de:b7:db:f7:
d4:c6:b7:c0:09:88:e4:cd:93:6d:c1:a6:77:e5:83:
aa:e8:f5:0c:30:4f:00:98:7a:f3:12:55:9e:54:ff:
76:2b:6b:22:38:d7:fc:de:f8:68:6d:82:7c:02:3d:
bf:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:EE:A4:75:64:1E:5A:81:66:79:A6:EA:5A:C7:37:45:E3:E6:FD:51
X509v3 Authority Key Identifier:
keyid:49:37:86:60:F5:F0:19:23:94:6C:35:D9:4B:E5:CC:D7:D2:B7:10:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/STeGYPXwGSOUbDXZS-XM19K3EFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/07cdcf-8875-4770-8c75-41b745bf53db/1/STeGYPXwGSOUbDXZS-XM19K3EFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/07cdcf-8875-4770-8c75-41b745bf53db/1/STeGYPXwGSOUbDXZS-XM19K3EFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:c6:f0:ab:7f:db:5c:7d:5f:19:5a:2f:67:39:7c:be:a0:fa:
dc:53:a5:98:37:c2:9a:ab:03:93:98:70:6d:e1:51:14:df:7e:
25:42:9b:d4:0b:24:b9:7e:49:29:2c:93:66:f7:38:d4:00:5e:
94:8a:bd:cd:c7:7e:48:cd:0e:71:44:08:2b:24:23:05:6c:fa:
35:98:00:2b:ec:3a:6e:10:96:26:75:ef:89:32:2f:4a:d0:f1:
55:ea:57:67:de:8c:b9:20:f8:6d:be:48:89:83:0a:eb:25:c8:
23:29:a0:60:3d:1b:1d:09:26:70:2f:23:3f:c8:0e:11:a4:af:
2f:81:4f:1b:af:82:5a:e9:bc:7e:44:41:e9:5e:6b:af:d9:5f:
14:81:28:ff:c7:4a:03:46:65:19:2b:5b:79:f8:b7:a0:a2:80:
05:e3:da:2b:fe:7a:1f:a3:39:54:09:02:4e:08:02:de:24:a7:
33:c8:81:f5:8b:6c:99:be:f1:57:01:32:a1:38:dd:e2:b2:57:
ff:9d:2c:5c:ae:af:a1:5b:81:41:8b:07:ad:08:ca:cf:bd:e1:
70:a1:e6:50:7f:a8:fd:03:a7:67:f9:80:6b:0e:a5:fb:a5:35:
28:ed:08:c3:37:1f:6b:d2:a0:76:89:d1:58:c8:28:2b:2f:26:
b0:17:4e:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:36:46 2025 by rpki-client