Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/b3d0d7-e10a-486f-885d-41ab7c872fea/1/stCgxoogOf8MpRQCQRUnHIoEZgg.mft
File: stCgxoogOf8MpRQCQRUnHIoEZgg.mft (raw, json)
Hash identifier: GEoWcdhbaP8UQI3SBF/d8pVUAmeqDXNE1kLknAhVLWY=
Subject key identifier: 0E:DE:97:6E:9D:B0:E7:81:74:E3:E5:5E:66:71:F4:0F:82:29:CC:DC
Authority key identifier: B2:D0:A0:C6:8A:20:39:FF:0C:A5:14:02:41:15:27:1C:8A:04:66:08
Certificate issuer: /CN=b2d0a0c68a2039ff0ca514024115271c8a046608
Certificate serial: 01977865C1DA69BFAD337817B8396ED1CBBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/stCgxoogOf8MpRQCQRUnHIoEZgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/b3d0d7-e10a-486f-885d-41ab7c872fea/1/stCgxoogOf8MpRQCQRUnHIoEZgg.mft
Manifest number: 1524
Signing time: Mon 16 Jun 2025 11:00:24 +0000
Manifest this update: Mon 16 Jun 2025 11:00:24 +0000
Manifest next update: Tue 17 Jun 2025 11:00:24 +0000
Files and hashes: 1: 98pSG03PsWjsaovooO14-BTQ9Vo.roa (hash: Nos0vMcOhKzLe90FJjKrPfa+9LXdDpzz5DlngxI3jBk=)
2: stCgxoogOf8MpRQCQRUnHIoEZgg.crl (hash: zmGc8R/dF4NRdeWRfwYzRYg14LcvmTTK+QaaoAeOG3o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/b3d0d7-e10a-486f-885d-41ab7c872fea/1/stCgxoogOf8MpRQCQRUnHIoEZgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/b3d0d7-e10a-486f-885d-41ab7c872fea/1/stCgxoogOf8MpRQCQRUnHIoEZgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/stCgxoogOf8MpRQCQRUnHIoEZgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:78:65:c1:da:69:bf:ad:33:78:17:b8:39:6e:d1:cb:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2d0a0c68a2039ff0ca514024115271c8a046608
Validity
Not Before: Jun 16 11:00:24 2025 GMT
Not After : Jun 17 11:00:24 2025 GMT
Subject: CN=0ede976e9db0e78174e3e55e6671f40f8229ccdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:25:32:f3:32:d8:ba:d0:aa:d6:89:3d:04:30:
4d:49:cd:50:16:76:38:eb:b8:27:b0:10:a5:96:4d:
66:98:60:4c:d5:61:99:d5:60:fb:38:ba:09:be:ac:
3b:a9:2e:f8:e8:2c:cc:38:c4:f3:ad:1c:c7:bf:6b:
13:94:af:2f:53:c3:68:01:98:4d:8e:33:5e:45:7e:
5b:dc:97:9e:50:37:6a:59:65:b4:ac:e2:c1:da:99:
b5:87:dd:92:85:cf:91:70:60:ee:21:6c:a8:b0:e8:
23:2c:5d:40:ba:17:f4:f9:5a:e3:50:bc:69:83:87:
21:31:8e:97:b7:a8:0a:1f:bb:4f:ab:c6:6e:c2:7b:
96:d1:3c:45:bf:b5:f5:2b:99:96:c8:d9:f9:f9:32:
f1:34:68:18:10:9a:e4:1b:63:a3:39:4e:80:2e:10:
47:90:af:10:eb:33:a0:16:6b:f8:87:2f:5e:f0:f3:
2b:4d:b1:1d:45:40:13:ca:75:00:e7:5b:3e:63:f0:
42:52:0e:66:57:55:54:50:a4:5d:87:99:1e:81:4e:
8e:7b:e2:35:a1:aa:c7:8c:1d:a4:ba:ea:fc:47:f5:
b3:9d:27:b5:35:ea:26:cf:a3:6c:2c:58:b2:ad:d7:
88:02:c7:cc:3e:f1:40:bc:61:26:7d:80:bf:7a:ef:
6f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:DE:97:6E:9D:B0:E7:81:74:E3:E5:5E:66:71:F4:0F:82:29:CC:DC
X509v3 Authority Key Identifier:
keyid:B2:D0:A0:C6:8A:20:39:FF:0C:A5:14:02:41:15:27:1C:8A:04:66:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/stCgxoogOf8MpRQCQRUnHIoEZgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/b3d0d7-e10a-486f-885d-41ab7c872fea/1/stCgxoogOf8MpRQCQRUnHIoEZgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/b3d0d7-e10a-486f-885d-41ab7c872fea/1/stCgxoogOf8MpRQCQRUnHIoEZgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:45:3f:7a:21:a3:27:2a:7b:40:63:90:b3:e7:66:06:fb:91:
1b:d1:fd:99:4e:2c:22:3d:5b:ef:d3:43:da:05:11:53:f2:30:
04:4d:fc:46:57:49:32:a7:c0:6c:03:db:04:d6:d1:72:c9:b8:
88:b3:51:c4:ea:52:81:40:9b:02:dc:45:d3:49:46:be:82:0b:
5a:e0:2d:b0:6f:e5:4f:12:76:3f:f2:d3:11:58:3a:49:a5:22:
c7:57:3f:50:6a:61:91:24:26:a7:bb:f7:51:a1:c3:d1:0d:9d:
4b:d0:f4:2d:e3:10:e2:fa:b9:f1:38:d5:19:a2:49:48:6f:3c:
bf:0c:0f:ae:d6:75:7e:44:0d:e4:0a:64:62:0b:64:ac:09:77:
2d:41:e4:cf:53:ac:3b:f6:03:5b:52:01:42:30:4a:40:6c:25:
49:c4:91:33:c8:25:37:ed:9f:ce:92:a5:b1:bc:86:ac:f8:1b:
c1:58:3b:4f:e3:06:e8:c8:aa:4b:fd:23:35:dd:7e:1c:fe:9b:
40:64:fe:01:fb:75:70:4c:36:37:e1:3d:5c:df:61:a7:34:98:
fc:d5:22:04:e3:f8:88:d1:ba:dc:c1:c0:7a:73:98:4e:d6:a5:
ed:51:64:81:5e:e2:2e:10:c0:fc:43:75:be:7c:cb:6e:3d:a5:
76:46:73:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 19:06:32 2025 by rpki-client