Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/5a3cd1-8109-4c66-8324-4828d65104e1/1/StFxca6oV2xDHGN0GGkcnB9VdRY.mft
File: StFxca6oV2xDHGN0GGkcnB9VdRY.mft (raw, json)
Hash identifier: CmjaT5u5UNZvm7c6fjpI9QMmpIVOsnWsSnUctFZsKpY=
Subject key identifier: 14:DE:D6:71:5C:C9:9C:52:3C:3B:AA:0E:BD:CD:B1:FE:22:1C:C0:92
Authority key identifier: 4A:D1:71:71:AE:A8:57:6C:43:1C:63:74:18:69:1C:9C:1F:55:75:16
Certificate issuer: /CN=4ad17171aea8576c431c637418691c9c1f557516
Certificate serial: 0196756714F854100EA83AC5DB909B03220A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/StFxca6oV2xDHGN0GGkcnB9VdRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/5a3cd1-8109-4c66-8324-4828d65104e1/1/StFxca6oV2xDHGN0GGkcnB9VdRY.mft
Manifest number: 11BB
Signing time: Sun 27 Apr 2025 04:00:11 +0000
Manifest this update: Sun 27 Apr 2025 04:00:11 +0000
Manifest next update: Mon 28 Apr 2025 04:00:11 +0000
Files and hashes: 1: SHXTlexCU640W6zbYxhCmQn8Cw4.roa (hash: k2ku6jDV9cI0tnwN43DyJg87QMwSJe7N2AG8yOiDsPE=)
2: StFxca6oV2xDHGN0GGkcnB9VdRY.crl (hash: chlUiGjdykUFlMOl9/IlguXWsNoTn1CxQtsLFJ1FxrU=)
3: TPLmVhwEw6jgrdMtUuhmz_0dBbo.roa (hash: wGkqaR7oIjPHLb7cXn0PbtIJ1WFfuKuRjd0OcbETY00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/5a3cd1-8109-4c66-8324-4828d65104e1/1/StFxca6oV2xDHGN0GGkcnB9VdRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/5a3cd1-8109-4c66-8324-4828d65104e1/1/StFxca6oV2xDHGN0GGkcnB9VdRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/StFxca6oV2xDHGN0GGkcnB9VdRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 04:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:67:14:f8:54:10:0e:a8:3a:c5:db:90:9b:03:22:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ad17171aea8576c431c637418691c9c1f557516
Validity
Not Before: Apr 27 04:00:11 2025 GMT
Not After : Apr 28 04:00:11 2025 GMT
Subject: CN=14ded6715cc99c523c3baa0ebdcdb1fe221cc092
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:84:9b:24:04:27:13:e5:c6:6c:95:78:cb:c2:
32:37:b7:54:ba:7f:81:de:36:20:3f:30:4f:31:4d:
51:e2:58:9b:44:40:47:a8:68:70:b6:e7:28:11:f1:
cf:31:ee:47:36:66:cf:f2:d1:25:ed:61:b9:93:42:
40:22:1b:2b:86:ea:f3:fb:da:bc:0f:ec:e4:e0:5e:
0e:92:43:9f:d0:ad:0b:ae:1b:a8:aa:2c:24:01:ba:
87:bd:a5:77:3b:de:33:fc:cc:6a:c7:92:39:38:b4:
04:9c:d1:aa:ec:20:54:e6:5e:94:0b:c8:0d:bd:4b:
6f:c5:de:e2:71:94:3f:56:f0:06:83:0e:ca:29:82:
4b:11:98:e3:2f:0f:2a:7d:bb:4d:3a:87:ce:29:95:
d5:93:7e:af:fc:aa:73:65:24:3c:3a:45:ce:3c:c9:
97:2e:43:00:c0:b4:83:71:8e:68:3a:21:48:78:1e:
f3:72:0e:a7:11:6f:fc:e3:dd:b9:36:3a:b1:67:2e:
64:80:50:dd:f2:7b:af:3b:c2:95:df:ff:58:df:7a:
9a:17:ad:3b:10:97:87:37:81:48:e7:bb:4d:64:03:
a7:2d:c2:b4:9e:2c:ac:9e:87:12:62:3f:e2:7f:ed:
de:35:2f:6b:a2:d4:0a:71:9c:2c:b7:f3:a2:fd:33:
27:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:DE:D6:71:5C:C9:9C:52:3C:3B:AA:0E:BD:CD:B1:FE:22:1C:C0:92
X509v3 Authority Key Identifier:
keyid:4A:D1:71:71:AE:A8:57:6C:43:1C:63:74:18:69:1C:9C:1F:55:75:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/StFxca6oV2xDHGN0GGkcnB9VdRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5a3cd1-8109-4c66-8324-4828d65104e1/1/StFxca6oV2xDHGN0GGkcnB9VdRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5a3cd1-8109-4c66-8324-4828d65104e1/1/StFxca6oV2xDHGN0GGkcnB9VdRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:e4:d7:c7:68:11:0e:82:2d:f7:0c:70:2c:30:c2:01:2d:e7:
f6:dc:46:35:8c:5e:ff:1c:38:68:eb:03:e1:67:b7:55:d0:19:
a5:2a:eb:35:80:98:72:86:2f:1b:6c:ef:fb:89:f3:7d:9a:b7:
d9:1a:02:a2:01:6c:02:c2:85:93:69:31:4f:8a:36:49:b7:56:
21:8a:3a:41:62:e5:5d:d4:ab:80:93:02:01:1f:df:dc:46:c2:
fb:f9:44:7e:2b:d5:8b:5c:1e:9e:12:00:b6:90:07:26:8b:63:
ee:bd:a3:2e:3b:9d:07:46:fa:9a:a3:64:08:8a:08:e4:05:ef:
4c:a5:77:cb:d5:1e:d5:28:21:5f:19:82:94:aa:52:6a:50:27:
ff:7d:24:7d:a0:ee:e6:95:cc:e9:df:c7:74:ed:ce:61:13:6b:
cb:f4:34:f9:67:50:7e:0e:aa:89:f3:ea:4a:47:47:03:7f:99:
d0:1c:b6:e1:0f:50:52:50:74:c4:2f:24:7d:ef:2b:71:d3:14:
26:1e:49:03:a4:ef:7f:23:81:79:8e:6c:49:d3:31:64:86:27:
15:33:dc:f9:fa:52:f5:d6:8a:b3:5b:ed:b9:e8:e5:59:73:d9:
6f:01:ec:2a:a7:f8:f2:51:2c:f7:0e:44:8b:99:17:55:d5:ca:
dc:da:2c:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 10:50:15 2025 by rpki-client