Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/07cdcf-8875-4770-8c75-41b745bf53db/1/STeGYPXwGSOUbDXZS-XM19K3EFE.mft
File: STeGYPXwGSOUbDXZS-XM19K3EFE.mft (raw, json)
Hash identifier: bTB5KH3PrPyHziGTJDhDBMFAPq/SiPyd+rCsUTtgoH0=
Subject key identifier: 76:FB:DE:6C:16:47:42:FD:F5:43:A0:82:48:58:E7:6E:52:C0:E7:33
Authority key identifier: 49:37:86:60:F5:F0:19:23:94:6C:35:D9:4B:E5:CC:D7:D2:B7:10:51
Certificate issuer: /CN=49378660f5f01923946c35d94be5ccd7d2b71051
Certificate serial: 01976C98BA87B0AE548FBE5908D063126BA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/STeGYPXwGSOUbDXZS-XM19K3EFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/07cdcf-8875-4770-8c75-41b745bf53db/1/STeGYPXwGSOUbDXZS-XM19K3EFE.mft
Manifest number: 0B1C
Signing time: Sat 14 Jun 2025 04:00:37 +0000
Manifest this update: Sat 14 Jun 2025 04:00:37 +0000
Manifest next update: Sun 15 Jun 2025 04:00:37 +0000
Files and hashes: 1: 2ZvpZ0sZ6P6ydTiCDEFolKMvfh0.roa (hash: 1DssY9QtTEut1NYlrrYk3dvjYOvc/xqpRvFLT8I4S4E=)
2: Nd7RiM9HcPfJG0Luml6fbQP8Ccc.roa (hash: 12HrzEJgqYZZKVYzptFAFjEBlvrDx+MP7ZbjX9byhIE=)
3: STeGYPXwGSOUbDXZS-XM19K3EFE.crl (hash: 0YpSWx1RQeOY7uZiUfs0FEBt9qxgdASDVxiCqRfdeP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/07cdcf-8875-4770-8c75-41b745bf53db/1/STeGYPXwGSOUbDXZS-XM19K3EFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/07cdcf-8875-4770-8c75-41b745bf53db/1/STeGYPXwGSOUbDXZS-XM19K3EFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/STeGYPXwGSOUbDXZS-XM19K3EFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:98:ba:87:b0:ae:54:8f:be:59:08:d0:63:12:6b:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49378660f5f01923946c35d94be5ccd7d2b71051
Validity
Not Before: Jun 14 04:00:37 2025 GMT
Not After : Jun 15 04:00:37 2025 GMT
Subject: CN=76fbde6c164742fdf543a0824858e76e52c0e733
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:0e:2e:3f:a3:4f:28:9e:c2:67:05:82:8a:99:
a5:f6:de:b5:59:47:d3:f5:d9:fb:21:fd:5f:aa:03:
bb:13:8a:41:37:55:f2:81:a1:7e:d4:e7:a0:f0:a2:
4c:4d:10:e4:5d:33:b1:35:67:2f:f2:7c:8b:49:d3:
a4:08:16:75:da:2b:6e:af:c1:56:68:5c:53:8c:ec:
eb:56:a5:74:ac:57:69:74:df:ae:6a:a3:7f:ab:47:
bd:8f:ad:70:15:b0:a8:3d:05:a1:74:a0:00:6b:cd:
d5:2d:0d:3d:3b:3f:07:65:61:ef:59:02:37:8f:16:
ef:2f:60:5d:df:cf:00:5d:df:c4:98:8f:68:84:ca:
bb:90:a4:a3:4b:8b:f4:26:86:13:03:7d:12:48:0f:
bf:4a:51:3a:59:b5:6f:af:21:c3:87:9f:ed:e1:ac:
a9:06:0e:ce:81:b6:68:2b:3e:dd:01:b4:35:81:e3:
9b:19:ae:3c:ac:d4:98:5b:f3:f2:e2:d0:3e:dc:a1:
1f:6a:64:0d:e1:b8:fd:c2:74:e6:35:31:32:71:d3:
c7:89:2c:63:2c:98:57:f7:61:74:2b:c8:35:d7:24:
cd:87:2f:fd:60:b2:1d:63:76:d9:76:2a:a3:ab:81:
f5:d5:ae:37:77:70:9e:b8:71:2d:d0:a1:f7:98:f0:
46:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:FB:DE:6C:16:47:42:FD:F5:43:A0:82:48:58:E7:6E:52:C0:E7:33
X509v3 Authority Key Identifier:
keyid:49:37:86:60:F5:F0:19:23:94:6C:35:D9:4B:E5:CC:D7:D2:B7:10:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/STeGYPXwGSOUbDXZS-XM19K3EFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/07cdcf-8875-4770-8c75-41b745bf53db/1/STeGYPXwGSOUbDXZS-XM19K3EFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/07cdcf-8875-4770-8c75-41b745bf53db/1/STeGYPXwGSOUbDXZS-XM19K3EFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:73:eb:9f:f5:39:2d:51:64:96:c7:37:f7:98:8f:e4:50:72:
42:fa:0e:45:46:74:9a:7b:cf:66:3e:79:c6:21:f0:74:3e:f0:
6c:4a:bc:10:01:ef:28:f3:b4:23:7b:89:7a:55:32:03:03:06:
70:47:3a:0f:86:f6:5c:c8:b5:59:4a:40:b0:eb:9b:67:95:18:
46:1e:b9:dc:1d:58:f4:de:c7:c5:ae:74:bd:11:38:5b:75:55:
ac:2f:21:d4:c6:c8:88:a1:a1:60:66:aa:70:c8:3a:54:57:c8:
f7:9a:60:28:7b:86:7a:9c:cc:e8:29:8e:85:a8:86:2b:68:22:
71:e1:2c:42:03:15:14:de:1b:51:6d:7f:85:8a:e8:fb:a4:1d:
51:18:40:8a:3a:1a:a7:bd:4e:24:16:16:4d:ec:2e:f0:80:91:
33:b4:43:1f:0d:36:3f:df:ee:39:c1:b8:f0:71:13:39:40:7c:
0a:8d:3c:fb:b3:a6:91:a7:23:20:fb:d5:cb:ac:59:90:1d:c9:
9f:48:9d:af:56:1c:e7:2c:d7:0c:34:5b:51:25:f9:c9:07:d8:
d3:3b:4a:b8:00:6b:42:6d:80:6e:ac:72:7d:c5:49:93:85:33:
c7:06:ff:b6:05:2f:51:8e:10:c1:b4:33:a1:8a:5e:82:7c:11:
f4:73:87:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:11:14 2025 by rpki-client