Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/b06956-e733-4564-9781-d0c4c86bb5fe/1/st8cE314lMzbp2jOuXHE099Z_pY.mft
File: st8cE314lMzbp2jOuXHE099Z_pY.mft (raw, json)
Hash identifier: LpcmBP4vpqWmUWoNIYZe6NrVxwQSG2T5qY81SweH4aU=
Subject key identifier: ED:6B:A0:90:DB:3A:F4:FF:98:51:A9:44:C3:00:F6:65:6E:B8:89:70
Authority key identifier: B2:DF:1C:13:7D:78:94:CC:DB:A7:68:CE:B9:71:C4:D3:DF:59:FE:96
Certificate issuer: /CN=b2df1c137d7894ccdba768ceb971c4d3df59fe96
Certificate serial: 0197B7B31C5442780D9BCDFE97006C87868C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/st8cE314lMzbp2jOuXHE099Z_pY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/b06956-e733-4564-9781-d0c4c86bb5fe/1/st8cE314lMzbp2jOuXHE099Z_pY.mft
Manifest number: 15B8
Signing time: Sat 28 Jun 2025 18:00:58 +0000
Manifest this update: Sat 28 Jun 2025 18:00:58 +0000
Manifest next update: Sun 29 Jun 2025 18:00:58 +0000
Files and hashes: 1: st8cE314lMzbp2jOuXHE099Z_pY.crl (hash: ONbVM055CmUXb6n4J75uJFhMPKSsDGcfYJ6p7/5FuPI=)
2: utentqqy5GUX6xjOO70Zx55fsK0.roa (hash: Z4JeWyzB0L9+u00qmx46AQ9h8ajUGAFCIAhK67ja97c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/b06956-e733-4564-9781-d0c4c86bb5fe/1/st8cE314lMzbp2jOuXHE099Z_pY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/b06956-e733-4564-9781-d0c4c86bb5fe/1/st8cE314lMzbp2jOuXHE099Z_pY.mft
rsync://rpki.ripe.net/repository/DEFAULT/st8cE314lMzbp2jOuXHE099Z_pY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 18:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:1c:54:42:78:0d:9b:cd:fe:97:00:6c:87:86:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2df1c137d7894ccdba768ceb971c4d3df59fe96
Validity
Not Before: Jun 28 18:00:58 2025 GMT
Not After : Jun 29 18:00:58 2025 GMT
Subject: CN=ed6ba090db3af4ff9851a944c300f6656eb88970
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ce:7d:ba:d3:90:bb:f6:34:de:0d:ef:1a:48:
97:b2:e4:3e:94:e3:13:13:a8:29:4f:5b:34:bf:6c:
b9:27:bb:ea:bc:af:d5:96:8c:71:7a:ae:97:a0:15:
c6:56:ca:f5:83:5f:21:77:cc:ea:ce:a8:49:2e:64:
cf:d7:01:47:c5:e2:55:20:d4:22:23:65:43:4c:85:
c3:93:ba:3f:b6:88:4c:9c:55:bf:d9:33:26:4d:9b:
6a:e4:33:02:e0:48:e8:ba:aa:ed:a8:a0:8c:ee:42:
7b:e2:a5:1a:8a:b1:de:fe:4e:55:fb:e7:b1:20:e2:
22:4d:09:d4:7d:8b:3c:0c:fe:10:f0:14:3a:9b:0a:
40:7f:24:b1:e9:ab:ca:f7:8e:09:cb:19:a9:ad:75:
d6:4b:de:5d:bc:46:8b:52:59:03:0a:c8:4e:d2:25:
48:26:bb:a7:aa:f0:82:7a:da:65:a8:97:66:3b:94:
20:40:e4:0e:d3:41:d0:e9:cb:9d:c0:cd:09:26:a9:
60:8f:f9:92:65:ac:ea:dd:c5:07:51:71:18:d4:ad:
91:e4:87:f0:81:e9:f4:8f:ef:e8:64:34:78:ab:06:
87:b4:25:92:16:86:4f:7c:91:23:c4:e7:00:9b:7a:
5a:97:84:37:0d:d3:e4:3a:13:d8:db:65:2e:5c:f0:
20:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:6B:A0:90:DB:3A:F4:FF:98:51:A9:44:C3:00:F6:65:6E:B8:89:70
X509v3 Authority Key Identifier:
keyid:B2:DF:1C:13:7D:78:94:CC:DB:A7:68:CE:B9:71:C4:D3:DF:59:FE:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/st8cE314lMzbp2jOuXHE099Z_pY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b06956-e733-4564-9781-d0c4c86bb5fe/1/st8cE314lMzbp2jOuXHE099Z_pY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b06956-e733-4564-9781-d0c4c86bb5fe/1/st8cE314lMzbp2jOuXHE099Z_pY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:5e:90:59:b4:82:6b:62:6c:a4:da:7e:0b:f0:aa:28:a5:9d:
be:e2:07:3f:0a:24:25:d5:b1:8f:65:f2:30:ab:23:de:86:04:
9a:4c:18:cb:e9:08:60:19:17:aa:59:68:95:f6:05:79:30:e8:
18:af:2c:35:c3:a8:2e:b7:ed:5a:39:ea:00:a5:d9:4a:35:a1:
ba:1c:b6:d6:46:0b:db:60:3e:88:dd:f3:a1:11:7c:6d:d6:29:
c9:b6:c9:d7:60:ef:9f:14:64:5c:a3:20:d0:f3:34:3f:7d:ec:
23:9e:bb:9d:a6:28:d9:cd:45:6d:ed:1d:33:5a:fe:de:30:98:
16:5b:53:07:62:ae:d7:40:b1:c7:f0:f8:30:cc:25:e9:f4:de:
f2:15:2d:0a:4b:ad:d6:95:3b:1a:bd:12:f2:b8:f3:72:ff:10:
62:2b:31:22:be:01:6d:5b:2c:68:3d:82:a7:20:75:55:b1:a4:
00:67:b3:f4:90:e5:a9:6d:0f:b2:d5:8c:42:d3:4e:08:bc:f4:
ab:1b:49:ef:67:9b:2d:e6:0c:dd:ee:47:8c:fb:e9:4a:02:db:
7d:b3:5d:34:73:3d:2f:cb:6c:74:61:83:4d:d7:af:2e:b8:e4:
ba:45:4e:a5:03:0f:46:8a:a1:ec:e4:99:01:25:21:01:86:45:
50:b5:29:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:45:59 2025 by rpki-client