Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/592cf0-03df-4886-b061-284f7c9622b5/1/sTCZw4tkd6aMmAGf9uAECAgHi5A.mft
File: sTCZw4tkd6aMmAGf9uAECAgHi5A.mft (raw, json)
Hash identifier: vQEAmkXonzzfPCdGz+8zx3zRvx7qwW217TLi3dj9Zb0=
Subject key identifier: 39:C9:2D:23:0F:CC:5D:66:90:60:55:7E:D2:3B:29:6B:FF:21:64:86
Authority key identifier: B1:30:99:C3:8B:64:77:A6:8C:98:01:9F:F6:E0:04:08:08:07:8B:90
Certificate issuer: /CN=b13099c38b6477a68c98019ff6e0040808078b90
Certificate serial: 019768850F1FB80A0A5EBD43BD3C5F5079FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sTCZw4tkd6aMmAGf9uAECAgHi5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/592cf0-03df-4886-b061-284f7c9622b5/1/sTCZw4tkd6aMmAGf9uAECAgHi5A.mft
Manifest number: 158E
Signing time: Fri 13 Jun 2025 09:00:39 +0000
Manifest this update: Fri 13 Jun 2025 09:00:39 +0000
Manifest next update: Sat 14 Jun 2025 09:00:39 +0000
Files and hashes: 1: cRAAzm69rK1x2VXcQUJ_DYkM5W0.roa (hash: QMURLhpiB70UAjkJMuKHXFWklTM0r8n8ucBI0KCwX8g=)
2: sTCZw4tkd6aMmAGf9uAECAgHi5A.crl (hash: SogWXFdWGz5K+M53HXCa+kFfaKZvdh/iAJTTAABsv+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/592cf0-03df-4886-b061-284f7c9622b5/1/sTCZw4tkd6aMmAGf9uAECAgHi5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/592cf0-03df-4886-b061-284f7c9622b5/1/sTCZw4tkd6aMmAGf9uAECAgHi5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/sTCZw4tkd6aMmAGf9uAECAgHi5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 09:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:85:0f:1f:b8:0a:0a:5e:bd:43:bd:3c:5f:50:79:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b13099c38b6477a68c98019ff6e0040808078b90
Validity
Not Before: Jun 13 09:00:39 2025 GMT
Not After : Jun 14 09:00:39 2025 GMT
Subject: CN=39c92d230fcc5d669060557ed23b296bff216486
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:03:7d:80:9e:df:cd:f5:18:ad:71:b4:19:db:
bc:45:f5:36:d3:1f:10:cf:57:a9:38:77:d9:8e:cc:
4b:f1:d0:a0:f1:c3:22:2a:38:05:89:8c:c4:83:ee:
f8:c1:ec:c9:3e:10:26:63:d3:f2:29:08:16:d9:e5:
84:13:1e:5f:f6:d4:77:b5:83:5d:0d:d3:a7:e0:f2:
94:b0:e9:4d:5d:da:ec:e7:a0:c8:1e:5e:da:71:db:
41:cd:a7:ac:05:3c:dc:da:ec:08:fd:09:39:80:2a:
1f:4e:27:9d:79:3e:f3:8b:10:b2:91:12:94:f6:04:
77:c0:8d:3c:a3:93:9c:45:94:a4:58:7b:c0:52:2e:
18:1e:ca:dc:fc:d9:1b:d1:a6:85:33:3a:1e:60:13:
b8:42:91:1f:67:6d:7f:b9:ba:f8:e2:9e:74:4b:ff:
c3:0a:3d:44:e5:77:cb:89:76:9f:15:52:76:bb:99:
b1:60:d0:63:fe:12:9a:af:e6:e3:30:bc:6a:d0:11:
94:bb:0f:9e:b8:fe:34:da:93:db:18:ed:9f:8f:a4:
d0:6c:a6:c8:c3:13:cf:32:aa:ff:c0:91:77:4c:ce:
aa:50:ce:97:1e:c7:8c:16:8f:57:a8:7c:b8:02:1f:
88:1c:40:58:a2:b4:f1:b8:2f:32:4a:94:59:ff:29:
03:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:C9:2D:23:0F:CC:5D:66:90:60:55:7E:D2:3B:29:6B:FF:21:64:86
X509v3 Authority Key Identifier:
keyid:B1:30:99:C3:8B:64:77:A6:8C:98:01:9F:F6:E0:04:08:08:07:8B:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sTCZw4tkd6aMmAGf9uAECAgHi5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/592cf0-03df-4886-b061-284f7c9622b5/1/sTCZw4tkd6aMmAGf9uAECAgHi5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/592cf0-03df-4886-b061-284f7c9622b5/1/sTCZw4tkd6aMmAGf9uAECAgHi5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:03:25:ff:61:cc:ac:c1:77:9a:c3:5e:aa:ed:1a:14:a4:d0:
71:f0:f9:cb:0e:b1:39:ec:8c:d9:e3:92:6a:ce:85:46:c5:50:
21:1f:a7:ec:a6:bd:2c:b0:d0:a9:36:b8:e7:a5:f5:4f:8b:12:
73:a7:9a:dc:06:c4:89:23:b7:f8:a1:4c:f5:9e:84:c9:a7:c1:
ad:19:68:9c:3e:07:c5:d7:4f:42:9d:80:8b:b3:cc:43:ca:3e:
e7:93:87:d3:6e:c1:c7:a4:d5:bb:ff:ff:de:d4:bf:0b:60:dc:
bc:32:7e:3d:4f:78:c4:55:d6:6d:38:fe:df:d5:6e:55:d8:ab:
54:49:8f:4e:72:fe:77:a7:b2:2a:6f:03:92:5e:42:b3:71:aa:
33:85:8c:13:a2:7d:ec:2b:83:60:b8:48:12:e7:6b:e5:97:ac:
e1:3b:d4:a7:6c:a8:06:f9:b0:11:e4:de:e5:4a:2a:5c:aa:bb:
ba:55:11:75:db:5c:98:a8:d8:15:b3:fe:f8:17:e4:96:15:0e:
ff:a1:09:6a:00:eb:97:7f:59:ec:d4:22:a3:bb:3e:3f:30:23:
b0:c0:69:cf:ca:1d:8c:6a:d0:d5:03:4f:d6:cf:ba:e6:5d:23:
99:a7:5e:53:98:42:71:8b:35:ca:9d:d5:d1:19:1f:6f:6a:ff:
7a:2a:89:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:07:03 2025 by rpki-client