Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/8c6395-646a-47a2-b4b6-c6f6e3f28956/1/st6zdl9Tnx7D8AIT_4NAhbfIx28.mft
File: st6zdl9Tnx7D8AIT_4NAhbfIx28.mft (raw, json)
Hash identifier: jLKEuNaehu+j4ODv/8NagGnRkB95/KujBEUHvg5r1cw=
Subject key identifier: E4:9D:51:56:1E:A8:20:C4:FE:92:BB:DB:FB:4F:E4:76:B8:2F:C9:6F
Authority key identifier: B2:DE:B3:76:5F:53:9F:1E:C3:F0:02:13:FF:83:40:85:B7:C8:C7:6F
Certificate issuer: /CN=b2deb3765f539f1ec3f00213ff834085b7c8c76f
Certificate serial: 0196B7B543CD0AD5F24148F83A7BC8DE4DD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/st6zdl9Tnx7D8AIT_4NAhbfIx28.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/8c6395-646a-47a2-b4b6-c6f6e3f28956/1/st6zdl9Tnx7D8AIT_4NAhbfIx28.mft
Manifest number: 0497
Signing time: Sat 10 May 2025 01:00:31 +0000
Manifest this update: Sat 10 May 2025 01:00:31 +0000
Manifest next update: Sun 11 May 2025 01:00:31 +0000
Files and hashes: 1: TSugCU0pqUpliat_toqMDIoNIEc.roa (hash: wndd5eFIU8yCHwaZ5EgfwtAvzQXellC4WrfhfkeDZ9U=)
2: st6zdl9Tnx7D8AIT_4NAhbfIx28.crl (hash: +KRDhwt7afk9axeHQLe4BWIrClQHNBzshsed16RzBMY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/8c6395-646a-47a2-b4b6-c6f6e3f28956/1/st6zdl9Tnx7D8AIT_4NAhbfIx28.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/8c6395-646a-47a2-b4b6-c6f6e3f28956/1/st6zdl9Tnx7D8AIT_4NAhbfIx28.mft
rsync://rpki.ripe.net/repository/DEFAULT/st6zdl9Tnx7D8AIT_4NAhbfIx28.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:b5:43:cd:0a:d5:f2:41:48:f8:3a:7b:c8:de:4d:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2deb3765f539f1ec3f00213ff834085b7c8c76f
Validity
Not Before: May 10 01:00:31 2025 GMT
Not After : May 11 01:00:31 2025 GMT
Subject: CN=e49d51561ea820c4fe92bbdbfb4fe476b82fc96f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:8b:3b:c8:e4:f2:44:3f:11:18:64:2e:56:cd:
1a:05:39:9d:9f:2f:8a:df:2b:f3:c4:2e:5f:cd:e6:
4d:8c:e9:7a:f7:f9:f3:f5:22:01:52:a3:64:97:4b:
c7:cf:c8:99:2f:13:60:8a:b5:93:21:3a:3e:a5:09:
e1:24:cc:ec:a3:5d:0d:13:41:6b:f9:4f:73:56:fe:
3b:32:13:38:5f:4c:7b:dd:ce:0d:13:c0:de:27:0b:
bc:4a:a2:5d:8c:d8:1a:df:40:24:75:d2:1d:db:b6:
6a:d1:40:13:1f:71:c9:43:4e:60:1d:79:2a:8a:dd:
0f:27:52:6c:9f:78:eb:eb:82:d0:6c:ef:e3:88:d7:
54:cb:bc:c1:88:b3:9d:94:4f:f5:70:45:8d:26:c0:
2b:c8:2a:1a:82:21:03:8c:f4:7b:e0:70:c3:8d:19:
06:f6:f9:2e:12:20:4a:31:b2:eb:45:a3:93:ac:d4:
a1:69:09:e4:a5:a0:bb:91:a9:35:03:d7:a5:0e:8f:
16:d1:1b:f3:52:dd:30:90:d3:04:2b:e8:e0:97:1f:
0f:83:e9:40:ad:6d:ba:0d:37:55:94:a3:6d:93:48:
5e:ae:1a:3f:3f:8f:3a:2e:00:81:07:a8:35:1b:97:
ca:bd:bd:1a:c1:6d:e8:f7:d6:aa:0c:ac:78:ac:20:
f5:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:9D:51:56:1E:A8:20:C4:FE:92:BB:DB:FB:4F:E4:76:B8:2F:C9:6F
X509v3 Authority Key Identifier:
keyid:B2:DE:B3:76:5F:53:9F:1E:C3:F0:02:13:FF:83:40:85:B7:C8:C7:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/st6zdl9Tnx7D8AIT_4NAhbfIx28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/8c6395-646a-47a2-b4b6-c6f6e3f28956/1/st6zdl9Tnx7D8AIT_4NAhbfIx28.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/8c6395-646a-47a2-b4b6-c6f6e3f28956/1/st6zdl9Tnx7D8AIT_4NAhbfIx28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:0e:7b:18:59:ad:51:55:b1:5f:86:d0:06:85:19:d8:82:0a:
87:ea:df:f2:99:f7:bc:6b:c7:41:d0:be:96:1a:9a:8e:19:b7:
8b:ce:2b:8a:1f:87:44:bb:24:5f:d4:5a:74:05:ce:7f:fe:f9:
17:11:6c:9d:5b:ac:cc:72:1f:0d:ab:74:53:72:81:3b:00:7f:
b1:4a:7d:df:b4:cb:3a:c1:8e:de:d6:a6:32:e5:55:02:5a:2c:
03:9b:25:ce:b5:45:2e:bc:d2:00:c6:03:4e:07:8d:84:08:79:
15:40:af:7e:3f:6b:3b:b7:cc:7e:20:82:2d:ab:e9:df:aa:8c:
4c:21:3d:64:fa:98:63:44:98:a7:ef:e8:fc:cf:8f:23:40:e6:
60:d9:9c:23:60:c9:e3:a8:9a:f6:98:33:c0:d5:b5:f0:79:8c:
02:24:c4:56:c9:b6:37:c5:49:2c:01:16:1d:40:87:b5:40:e8:
cf:1e:26:28:04:60:53:0e:c1:ba:86:82:de:b3:ec:92:23:c2:
28:41:c8:4a:be:60:64:5d:ee:3b:e3:08:76:eb:82:18:1d:9f:
56:06:c0:60:dc:91:09:ab:77:f9:85:4c:95:de:b0:b1:83:c1:
70:78:c3:73:a5:88:eb:de:05:56:db:23:ad:fe:ff:2f:cf:e6:
e9:b4:ac:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa3tUPNCtXyQUj4OnvI3k3ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyZGViMzc2NWY1MzlmMWVjM2YwMDIxM2ZmODM0MDg1Yjdj
OGM3NmYwHhcNMjUwNTEwMDEwMDMxWhcNMjUwNTExMDEwMDMxWjAzMTEwLwYDVQQD
EyhlNDlkNTE1NjFlYTgyMGM0ZmU5MmJiZGJmYjRmZTQ3NmI4MmZjOTZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzIs7yOTyRD8RGGQuVs0aBTmdny+K
3yvzxC5fzeZNjOl69/nz9SIBUqNkl0vHz8iZLxNgirWTITo+pQnhJMzso10NE0Fr
+U9zVv47MhM4X0x73c4NE8DeJwu8SqJdjNga30AkddId27Zq0UATH3HJQ05gHXkq
it0PJ1Jsn3jr64LQbO/jiNdUy7zBiLOdlE/1cEWNJsAryCoagiEDjPR74HDDjRkG
9vkuEiBKMbLrRaOTrNShaQnkpaC7kak1A9elDo8W0RvzUt0wkNMEK+jglx8Pg+lA
rW26DTdVlKNtk0herho/P486LgCBB6g1G5fKvb0awW3o99aqDKx4rCD1fQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOSdUVYeqCDE/pK72/tP5Ha4L8lvMB8GA1UdIwQY
MBaAFLLes3ZfU58ew/ACE/+DQIW3yMdvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3Q2emRsOVRueDdEOEFJVF80TkFoYmZJeDI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC84YzYzOTUtNjQ2YS00N2EyLWI0YjYt
YzZmNmUzZjI4OTU2LzEvc3Q2emRsOVRueDdEOEFJVF80TkFoYmZJeDI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC84YzYzOTUtNjQ2YS00N2EyLWI0YjYtYzZmNmUzZjI4OTU2
LzEvc3Q2emRsOVRueDdEOEFJVF80TkFoYmZJeDI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgg57GFmt
UVWxX4bQBoUZ2IIKh+rf8pn3vGvHQdC+lhqajhm3i84rih+HRLskX9RadAXOf/75
FxFsnVuszHIfDat0U3KBOwB/sUp937TLOsGO3tamMuVVAlosA5slzrVFLrzSAMYD
TgeNhAh5FUCvfj9rO7fMfiCCLavp36qMTCE9ZPqYY0SYp+/o/M+PI0DmYNmcI2DJ
46ia9pgzwNW18HmMAiTEVsm2N8VJLAEWHUCHtUDozx4mKARgUw7BuoaC3rPskiPC
KEHISr5gZF3uO+MIduuCGB2fVgbAYNyRCat3+YVMld6wsYPBcHjDc6WI694FVtsj
rf7/L8/m6bSsVg==
-----END CERTIFICATE-----
Generated at Sat May 10 05:15:57 2025 by rpki-client