Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/d29730-515a-4bfb-ad55-e038d81b3f97/1/STRpVEIDCC0sPB3fDwu9kL3FaUE.mft
File: STRpVEIDCC0sPB3fDwu9kL3FaUE.mft (raw, json)
Hash identifier: 6hTa0RTU/XnI+9dzwNDmyx6ZRdC5rl7LR6KVrcd89KY=
Subject key identifier: BE:D0:4E:DF:3C:D8:32:EE:D0:95:41:C4:4F:64:25:9F:39:B9:0F:3A
Authority key identifier: 49:34:69:54:42:03:08:2D:2C:3C:1D:DF:0F:0B:BD:90:BD:C5:69:41
Certificate issuer: /CN=493469544203082d2c3c1ddf0f0bbd90bdc56941
Certificate serial: 01976E50195297D648CF8EF7FB399C941C0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/STRpVEIDCC0sPB3fDwu9kL3FaUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/d29730-515a-4bfb-ad55-e038d81b3f97/1/STRpVEIDCC0sPB3fDwu9kL3FaUE.mft
Manifest number: 147F
Signing time: Sat 14 Jun 2025 12:00:32 +0000
Manifest this update: Sat 14 Jun 2025 12:00:32 +0000
Manifest next update: Sun 15 Jun 2025 12:00:32 +0000
Files and hashes: 1: STRpVEIDCC0sPB3fDwu9kL3FaUE.crl (hash: d7pUFV8IWjAKhhoxuH+Y5a9AuEn1F0AHnkYw0n7PAok=)
2: j2dUbB-NK5CfnidiqDMKydgI8YE.roa (hash: ZUxAxryB168omhb8dlNaslAttNVaqi4+cbp8ns+rOL0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/d29730-515a-4bfb-ad55-e038d81b3f97/1/STRpVEIDCC0sPB3fDwu9kL3FaUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/d29730-515a-4bfb-ad55-e038d81b3f97/1/STRpVEIDCC0sPB3fDwu9kL3FaUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/STRpVEIDCC0sPB3fDwu9kL3FaUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:50:19:52:97:d6:48:cf:8e:f7:fb:39:9c:94:1c:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=493469544203082d2c3c1ddf0f0bbd90bdc56941
Validity
Not Before: Jun 14 12:00:32 2025 GMT
Not After : Jun 15 12:00:32 2025 GMT
Subject: CN=bed04edf3cd832eed09541c44f64259f39b90f3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:01:9c:7d:3f:05:f4:ed:b0:fe:2d:03:93:58:
7a:dc:b7:f0:db:3e:42:a9:ca:af:f2:02:5a:6c:c7:
ea:b5:53:b5:44:f3:98:8b:f5:71:7d:9f:97:7b:21:
d6:57:7d:e0:8f:2a:43:4e:72:0c:2d:f7:cf:73:af:
ee:c8:78:06:32:ac:d7:f9:91:49:f9:74:c2:fd:bc:
52:fd:3c:10:8f:b3:6f:5a:b6:8c:2d:a5:f9:ea:28:
6b:91:56:de:f7:64:a9:8a:96:bd:ac:fb:b2:24:cc:
bd:f7:ef:3c:22:c7:6e:22:f4:3b:ed:51:2a:03:03:
49:60:c7:d8:6d:9d:a2:fa:66:00:47:c6:9b:ed:aa:
2c:30:14:f0:3d:ff:3e:39:0d:dc:3e:fa:29:a0:ec:
0c:ae:f3:94:18:fa:31:e3:26:18:11:40:13:a6:81:
92:c6:87:e0:6c:04:57:d4:3b:97:66:0d:ad:8f:67:
52:3f:28:51:4b:f8:79:b7:24:e3:38:40:9c:b1:23:
67:be:73:22:71:f0:2a:c8:6d:3c:ba:d8:31:25:56:
af:bc:00:74:2f:a9:f0:63:4d:1f:f6:1b:23:9e:77:
00:3d:cf:ae:0d:5c:aa:35:10:c3:34:a4:10:0f:e5:
d6:1b:ea:0b:fc:bf:cf:d1:8a:96:e6:f3:6a:08:6b:
ef:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:D0:4E:DF:3C:D8:32:EE:D0:95:41:C4:4F:64:25:9F:39:B9:0F:3A
X509v3 Authority Key Identifier:
keyid:49:34:69:54:42:03:08:2D:2C:3C:1D:DF:0F:0B:BD:90:BD:C5:69:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/STRpVEIDCC0sPB3fDwu9kL3FaUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/d29730-515a-4bfb-ad55-e038d81b3f97/1/STRpVEIDCC0sPB3fDwu9kL3FaUE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/d29730-515a-4bfb-ad55-e038d81b3f97/1/STRpVEIDCC0sPB3fDwu9kL3FaUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:f5:b7:6f:1c:ed:97:94:a1:92:d7:80:96:d9:6a:84:50:2f:
ba:b5:7b:3c:23:6d:8a:0e:fb:4d:84:a1:92:41:3b:07:eb:a5:
45:d3:32:15:1a:ad:0a:87:fd:5e:6c:02:56:81:f1:17:e3:a3:
1a:73:c6:88:65:23:97:0f:d1:b4:10:ca:2a:12:ef:86:c9:55:
4f:b3:c8:3a:24:8e:1c:92:e1:9f:14:cf:b0:c2:45:1f:1a:2e:
05:36:f1:7d:75:dc:f2:6e:f8:6e:ec:c4:6b:81:19:87:6a:5b:
f1:1c:27:03:86:ec:9a:02:01:a6:10:24:26:81:79:11:3d:f9:
32:fd:fd:b7:68:52:ad:aa:72:dc:c2:0e:18:9d:c7:ce:22:21:
10:69:a5:7d:f3:87:79:be:f4:7f:20:53:96:a2:14:a3:d7:87:
cb:e0:be:62:68:87:89:87:22:73:59:c3:07:cf:37:8f:ff:14:
6e:e7:5d:7b:c0:20:73:28:c0:f8:69:33:a1:61:35:31:10:c9:
9d:eb:43:d3:26:ce:c5:17:85:ca:af:b9:89:e4:0e:60:36:f5:
8c:8d:8a:5a:29:cb:95:bf:f3:f3:b3:66:3a:37:b7:05:44:d6:
0d:4f:f2:d0:fb:56:17:1e:01:05:39:83:ee:79:59:0b:c4:59:
d2:f1:be:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:59:02 2025 by rpki-client