Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/d765a4-54eb-410d-8f3d-689ba4d33c4b/1/STotSDdjMKWC-vPjAy73sLzKM-g.mft
File: STotSDdjMKWC-vPjAy73sLzKM-g.mft (raw, json)
Hash identifier: NZ0+1kLE0Ld78QYu6IhbCWKknKCxV6SQbGMwRCSjgas=
Subject key identifier: 95:13:B8:08:16:8C:D6:BC:47:0A:BF:F4:EC:DE:4C:B9:E7:D1:6D:F8
Authority key identifier: 49:3A:2D:48:37:63:30:A5:82:FA:F3:E3:03:2E:F7:B0:BC:CA:33:E8
Certificate issuer: /CN=493a2d48376330a582faf3e3032ef7b0bcca33e8
Certificate serial: 019771BF45FAB0D096634E42A2A90E8468B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/STotSDdjMKWC-vPjAy73sLzKM-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/d765a4-54eb-410d-8f3d-689ba4d33c4b/1/STotSDdjMKWC-vPjAy73sLzKM-g.mft
Manifest number: 03B9
Signing time: Sun 15 Jun 2025 04:00:50 +0000
Manifest this update: Sun 15 Jun 2025 04:00:50 +0000
Manifest next update: Mon 16 Jun 2025 04:00:50 +0000
Files and hashes: 1: 1eZlwD4fnzVx_ZuiX-KY-unzRYA.roa (hash: FfjJukJvNSQzT9n6wjLCsM9xDWFdpCKe+CsdvwMwZRs=)
2: GXnQPnuqnvBWk7kpONau-2u0RoQ.roa (hash: uxonlVe7DqVs73Mq5GsJwlXeQ95X/yFAybekoDtId+I=)
3: KyYmqZA206kErzPtR2YQzPU--WY.roa (hash: fQeQLftranJsCVjcRRs8kVttSYkJPcfUSHb9P69BPM8=)
4: STotSDdjMKWC-vPjAy73sLzKM-g.crl (hash: nlc6ixHshR3/LyhmzXyUBKCmEYVhD7S2aXf79az9rAk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/d765a4-54eb-410d-8f3d-689ba4d33c4b/1/STotSDdjMKWC-vPjAy73sLzKM-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/d765a4-54eb-410d-8f3d-689ba4d33c4b/1/STotSDdjMKWC-vPjAy73sLzKM-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/STotSDdjMKWC-vPjAy73sLzKM-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:bf:45:fa:b0:d0:96:63:4e:42:a2:a9:0e:84:68:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=493a2d48376330a582faf3e3032ef7b0bcca33e8
Validity
Not Before: Jun 15 04:00:50 2025 GMT
Not After : Jun 16 04:00:50 2025 GMT
Subject: CN=9513b808168cd6bc470abff4ecde4cb9e7d16df8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ed:2d:3f:79:43:f9:d7:35:85:fa:a7:f3:60:
99:d2:01:9f:13:95:cf:5f:2b:65:0a:d4:2a:cc:4f:
46:9a:41:3f:98:e0:4c:69:2d:f9:ba:fb:06:c3:54:
f8:18:29:85:13:ac:de:07:28:29:8b:81:48:18:bd:
2a:1f:0a:2e:21:3b:ef:bd:a3:a9:28:8e:e6:91:f6:
fd:c4:67:b1:71:90:80:7c:f3:e0:53:cf:dd:f5:46:
a5:96:08:a5:7c:9e:a9:5b:2e:c6:5f:fa:47:8d:c4:
ca:c2:04:f3:35:d9:1d:62:42:e5:16:c0:c4:2c:72:
3c:c3:db:9f:86:a7:17:c2:e8:ff:9f:66:eb:dc:0a:
59:c8:f5:77:e0:b9:24:dd:0a:b7:fd:bd:e4:28:cd:
cd:8b:3f:62:77:94:91:6c:b9:8f:4e:20:1f:01:1d:
77:47:ee:8f:cc:7a:ab:df:0a:fd:c1:2d:f3:3e:32:
bf:92:9e:63:c8:db:39:0e:c5:0f:9d:c2:02:c7:b8:
a7:3c:98:28:2d:91:05:1c:b7:43:c1:6c:2c:58:08:
1a:74:48:60:62:0c:51:fd:10:9d:df:32:06:7a:27:
3c:a3:4d:25:f8:ef:ee:6f:5d:d0:db:79:e3:a9:94:
77:9f:7f:ec:53:98:c6:7c:1c:cd:ed:75:b8:d2:28:
ae:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:13:B8:08:16:8C:D6:BC:47:0A:BF:F4:EC:DE:4C:B9:E7:D1:6D:F8
X509v3 Authority Key Identifier:
keyid:49:3A:2D:48:37:63:30:A5:82:FA:F3:E3:03:2E:F7:B0:BC:CA:33:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/STotSDdjMKWC-vPjAy73sLzKM-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d765a4-54eb-410d-8f3d-689ba4d33c4b/1/STotSDdjMKWC-vPjAy73sLzKM-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d765a4-54eb-410d-8f3d-689ba4d33c4b/1/STotSDdjMKWC-vPjAy73sLzKM-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:bd:e1:78:86:15:89:5b:a3:81:3b:fe:c6:06:e5:30:86:27:
e3:8b:ef:58:f2:c7:cb:68:17:83:d9:f8:40:4a:79:8d:94:b1:
c2:f2:4a:f2:dd:d8:db:25:bd:d7:5f:a6:91:a7:65:d0:4d:8e:
40:2a:33:10:5a:2d:4e:77:37:5f:9f:83:7d:fc:66:ee:23:8e:
40:dd:c4:97:5c:6c:b2:af:71:9d:04:73:5f:62:86:0e:bb:74:
a7:17:d2:14:10:69:8d:83:aa:ff:89:e8:7c:36:22:6d:18:17:
ad:bf:fa:33:64:c5:df:b7:1f:fd:bf:e9:a7:6f:52:f0:62:02:
be:13:d5:06:40:e9:3e:01:1a:6e:1e:b3:93:1c:1c:c3:c4:fc:
0b:1f:8b:96:78:00:0a:3e:59:b3:bd:40:95:a8:de:3e:a9:f4:
b2:6d:c4:0f:0a:01:a7:85:d2:07:6c:f9:63:e3:45:10:5b:46:
60:64:3d:ff:42:d9:72:bb:d9:32:ab:5f:35:fc:6a:66:06:5f:
b7:07:76:42:28:b2:38:48:40:58:3a:b0:7b:c0:62:dc:15:62:
71:24:46:eb:e9:fa:f5:1a:96:c7:9b:39:62:f8:5f:4a:9b:ab:
08:46:6c:2a:1e:54:ca:74:5e:d9:ef:ba:0f:fe:c5:2b:62:44:
cc:e2:31:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 11:34:02 2025 by rpki-client