Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/a32c29-4087-4f87-89d9-9e4d1376ba31/1/sTFfExaKIog9oEuECAZgc7Hz8Nw.mft
File: sTFfExaKIog9oEuECAZgc7Hz8Nw.mft (raw, json)
Hash identifier: u0KmVbao5CMPNDg0Rt1bn5db8UgqnEKM7nllteo/Gbs=
Subject key identifier: 94:3B:77:B0:3E:C6:45:84:E3:5B:B9:28:8F:9A:99:33:DE:A8:35:36
Authority key identifier: B1:31:5F:13:16:8A:22:88:3D:A0:4B:84:08:06:60:73:B1:F3:F0:DC
Certificate issuer: /CN=b1315f13168a22883da04b8408066073b1f3f0dc
Certificate serial: 01977308D17ADB1217C9A74BD423558AC4CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sTFfExaKIog9oEuECAZgc7Hz8Nw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/a32c29-4087-4f87-89d9-9e4d1376ba31/1/sTFfExaKIog9oEuECAZgc7Hz8Nw.mft
Manifest number: 158F
Signing time: Sun 15 Jun 2025 10:00:46 +0000
Manifest this update: Sun 15 Jun 2025 10:00:46 +0000
Manifest next update: Mon 16 Jun 2025 10:00:46 +0000
Files and hashes: 1: sTFfExaKIog9oEuECAZgc7Hz8Nw.crl (hash: 3IAi2wuy55T9CC6gCnp7oZbqMelDi6JCgvmh5Fv4u88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/a32c29-4087-4f87-89d9-9e4d1376ba31/1/sTFfExaKIog9oEuECAZgc7Hz8Nw.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/a32c29-4087-4f87-89d9-9e4d1376ba31/1/sTFfExaKIog9oEuECAZgc7Hz8Nw.mft
rsync://rpki.ripe.net/repository/DEFAULT/sTFfExaKIog9oEuECAZgc7Hz8Nw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:73:08:d1:7a:db:12:17:c9:a7:4b:d4:23:55:8a:c4:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1315f13168a22883da04b8408066073b1f3f0dc
Validity
Not Before: Jun 15 10:00:46 2025 GMT
Not After : Jun 16 10:00:46 2025 GMT
Subject: CN=943b77b03ec64584e35bb9288f9a9933dea83536
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0d:48:90:2a:05:b8:8d:ba:84:69:85:05:d2:
38:79:b4:68:0a:a8:6c:9f:e5:44:80:dc:48:75:32:
df:1a:b3:3b:5a:7b:ca:60:c4:7a:1e:0c:29:90:9e:
81:c1:6e:d5:dc:44:5c:1d:61:dd:3e:49:a6:82:71:
0c:58:99:da:f5:f1:a2:42:49:9a:3d:57:de:38:a6:
d4:37:6f:6b:d9:5d:81:05:5e:40:b1:be:c8:b3:d7:
6c:5b:2e:af:0c:0b:3d:d9:80:2a:11:04:45:b2:f8:
dd:2a:37:5c:9f:cf:48:e7:7b:75:7f:db:77:ac:ba:
42:3e:42:83:b3:d0:22:c8:db:70:72:e4:f4:b2:36:
20:49:72:4e:8c:8d:69:48:f9:06:7f:26:85:5f:f5:
27:06:a8:9c:df:29:2f:c1:1b:bf:05:0f:d5:47:e4:
91:a9:4b:b2:e8:b3:49:42:bc:f5:af:3d:55:d7:2d:
42:89:69:54:e8:c6:c5:6f:a5:f5:84:90:08:3a:f6:
a9:98:15:61:8b:05:13:8f:23:dc:d0:e7:02:4c:da:
61:08:da:28:95:e1:ab:38:09:c7:e4:cd:d7:0e:04:
07:d5:ba:ae:df:5a:2e:a5:fa:75:92:74:0d:46:23:
15:0a:ad:a4:db:60:1a:af:ad:24:e0:79:e2:e6:32:
22:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:3B:77:B0:3E:C6:45:84:E3:5B:B9:28:8F:9A:99:33:DE:A8:35:36
X509v3 Authority Key Identifier:
keyid:B1:31:5F:13:16:8A:22:88:3D:A0:4B:84:08:06:60:73:B1:F3:F0:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sTFfExaKIog9oEuECAZgc7Hz8Nw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/a32c29-4087-4f87-89d9-9e4d1376ba31/1/sTFfExaKIog9oEuECAZgc7Hz8Nw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/a32c29-4087-4f87-89d9-9e4d1376ba31/1/sTFfExaKIog9oEuECAZgc7Hz8Nw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:07:43:7c:50:96:74:9a:49:d8:6c:2e:76:d9:f1:2d:9d:5d:
6e:87:b3:a3:33:3e:e1:6f:90:f6:9c:20:e5:f8:1d:c7:67:e6:
fc:d3:17:bb:66:89:60:88:d2:b5:72:9a:e6:cc:75:2c:fc:ec:
3c:d6:c7:98:8a:01:c5:41:84:f4:33:8c:07:e9:e5:c3:8f:df:
90:d9:95:09:35:17:02:ab:e1:aa:af:2f:b2:0f:81:17:43:5b:
54:59:2d:bf:b0:f4:b8:86:de:46:b5:15:f7:45:d4:7d:97:ad:
c9:da:60:e7:a4:3d:58:b6:1b:b9:d8:79:3b:49:0f:ea:55:4c:
da:7e:10:a6:8b:5b:db:a9:16:1d:fb:e6:03:f3:9b:79:aa:24:
ec:25:fd:5b:94:94:64:11:ee:4d:bb:44:c4:07:be:14:eb:e3:
fa:99:41:bb:18:86:fb:69:dd:ea:73:3d:b7:d1:05:c3:25:76:
4e:f3:de:01:45:37:76:54:74:2b:2e:19:4d:55:5a:ea:92:a9:
67:77:70:1b:bc:e0:da:6d:c3:17:88:aa:f5:21:e6:f7:90:56:
9a:a7:bb:00:0e:6d:6c:02:dd:4c:6c:f5:82:75:cf:ed:2b:e6:
a1:9b:b8:da:e3:34:95:65:84:48:eb:89:60:76:6e:03:8f:66:
f3:b0:e4:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 13:04:20 2025 by rpki-client