Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/07cdcf-8875-4770-8c75-41b745bf53db/1/STeGYPXwGSOUbDXZS-XM19K3EFE.mft
File: STeGYPXwGSOUbDXZS-XM19K3EFE.mft (raw, json)
Hash identifier: GBel2O3axTrk1DhPyy7Lsrc8cBtN/uprVS2LK4+Op18=
Subject key identifier: DF:1A:31:BA:81:A6:73:0D:06:4B:D1:8D:D8:0E:EC:01:3F:8F:8E:EB
Authority key identifier: 49:37:86:60:F5:F0:19:23:94:6C:35:D9:4B:E5:CC:D7:D2:B7:10:51
Certificate issuer: /CN=49378660f5f01923946c35d94be5ccd7d2b71051
Certificate serial: 019874503220B29201E061FAE4EC9CE3A7E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/STeGYPXwGSOUbDXZS-XM19K3EFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/07cdcf-8875-4770-8c75-41b745bf53db/1/STeGYPXwGSOUbDXZS-XM19K3EFE.mft
Manifest number: 0BAC
Signing time: Mon 04 Aug 2025 09:01:09 +0000
Manifest this update: Mon 04 Aug 2025 09:01:09 +0000
Manifest next update: Tue 05 Aug 2025 09:01:09 +0000
Files and hashes: 1: 2ZvpZ0sZ6P6ydTiCDEFolKMvfh0.roa (hash: 1DssY9QtTEut1NYlrrYk3dvjYOvc/xqpRvFLT8I4S4E=)
2: NjASS9Fcywmz2PQGC289Z6czZDw.roa (hash: HSbgUfk0PK7NcRU0i0FIegZSv4Qc7DSpvzCcUEz+mx0=)
3: STeGYPXwGSOUbDXZS-XM19K3EFE.crl (hash: i3vQ689G+wo05vB5z0/xlZIWBAMUaHj4p/Q2BBepb4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/07cdcf-8875-4770-8c75-41b745bf53db/1/STeGYPXwGSOUbDXZS-XM19K3EFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/07cdcf-8875-4770-8c75-41b745bf53db/1/STeGYPXwGSOUbDXZS-XM19K3EFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/STeGYPXwGSOUbDXZS-XM19K3EFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:32:20:b2:92:01:e0:61:fa:e4:ec:9c:e3:a7:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49378660f5f01923946c35d94be5ccd7d2b71051
Validity
Not Before: Aug 4 09:01:09 2025 GMT
Not After : Aug 5 09:01:09 2025 GMT
Subject: CN=df1a31ba81a6730d064bd18dd80eec013f8f8eeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:01:ba:b9:2e:90:22:dd:ed:ef:87:3a:98:e9:
5e:a0:2b:86:fe:30:16:47:bd:97:05:d2:b4:86:80:
8a:39:82:ad:af:9a:1c:c2:ae:94:d6:01:05:9a:07:
21:81:93:1c:eb:dc:61:d7:60:30:f7:4e:f5:22:23:
30:cb:09:92:37:49:cc:a9:f8:a9:66:79:87:37:1d:
85:64:28:b9:c5:b7:f8:77:64:47:a1:ce:62:89:2a:
62:e6:22:dd:32:42:05:32:1a:ce:95:93:7a:d0:bb:
e1:e4:c4:f6:11:db:23:58:94:4d:a8:dd:a8:05:c5:
23:55:f9:49:35:40:ed:e8:90:1c:3a:56:05:85:4a:
d8:0a:41:18:19:bf:38:5b:a1:87:30:96:5a:b0:05:
f1:02:3d:39:6a:d1:d0:2e:f8:f3:b7:46:05:f6:f7:
7b:f7:41:1f:95:9b:19:4d:8a:94:0d:ff:d7:18:f2:
84:74:cf:f8:c4:71:ca:a8:9b:11:2c:77:ae:88:3d:
04:20:c2:6a:d7:52:72:d8:a9:f6:a8:80:83:19:25:
f7:bd:f6:10:b7:e4:bd:19:b4:0a:0e:14:d8:66:08:
18:03:78:0a:25:32:6a:d7:0c:4e:8c:09:3f:de:6e:
93:7e:0a:9e:d1:90:9d:72:68:f7:3c:c7:fb:a1:46:
f8:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:1A:31:BA:81:A6:73:0D:06:4B:D1:8D:D8:0E:EC:01:3F:8F:8E:EB
X509v3 Authority Key Identifier:
keyid:49:37:86:60:F5:F0:19:23:94:6C:35:D9:4B:E5:CC:D7:D2:B7:10:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/STeGYPXwGSOUbDXZS-XM19K3EFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/07cdcf-8875-4770-8c75-41b745bf53db/1/STeGYPXwGSOUbDXZS-XM19K3EFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/07cdcf-8875-4770-8c75-41b745bf53db/1/STeGYPXwGSOUbDXZS-XM19K3EFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:e2:cd:f7:09:e1:95:e8:cd:9e:2d:e0:2a:23:7d:50:4b:3a:
f3:5c:f7:52:5e:b6:a6:45:c0:da:ff:85:fe:a7:c6:3a:c3:07:
b2:fd:72:f3:b9:9f:94:cb:13:a9:dd:ad:ba:af:28:a7:7c:33:
c4:01:d8:0a:17:c9:13:03:7f:29:5d:ea:1d:11:8a:77:95:69:
fc:8e:39:b8:95:c6:40:62:b9:c2:9d:4d:21:2b:92:e8:04:e2:
7c:20:43:0b:e5:3d:da:20:fa:9e:e0:d0:d8:ac:26:34:4b:64:
a9:86:4c:c1:2e:80:6f:bc:64:96:d8:0c:52:e0:57:76:0b:20:
fb:11:a3:5b:83:2e:08:81:ad:81:41:8e:6d:f4:5b:2a:67:d4:
e7:98:69:4e:6f:80:fe:88:4c:da:69:9f:e4:e8:f1:a8:9c:2f:
cf:82:9a:74:6a:a0:aa:6a:7c:5a:ac:d0:38:5c:5b:ca:70:c6:
49:28:94:d1:ac:70:ad:57:23:97:be:23:eb:28:a3:d9:4f:12:
92:4c:7e:57:a3:78:56:c7:a9:37:74:0c:2f:ae:ee:2f:9f:c5:
ce:ce:40:52:d6:26:1b:3e:73:50:8f:e4:e2:b6:d3:df:7f:91:
bc:67:d8:9f:d7:03:05:91:75:fc:bb:d5:f3:be:37:77:fc:f5:
de:6d:9e:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:27:02 2025 by rpki-client