Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/d765a4-54eb-410d-8f3d-689ba4d33c4b/1/STotSDdjMKWC-vPjAy73sLzKM-g.mft
File: STotSDdjMKWC-vPjAy73sLzKM-g.mft (raw, json)
Hash identifier: m6/zlfiBunGW1c0qYdasnZwB+dfu4/0pvQmpefJj8ME=
Subject key identifier: EA:75:62:DA:A7:67:20:AF:F8:01:26:06:B0:17:F9:9F:DC:09:FC:C4
Authority key identifier: 49:3A:2D:48:37:63:30:A5:82:FA:F3:E3:03:2E:F7:B0:BC:CA:33:E8
Certificate issuer: /CN=493a2d48376330a582faf3e3032ef7b0bcca33e8
Certificate serial: 019853B1DF71AD4BE3EF24D1087294EE459F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/STotSDdjMKWC-vPjAy73sLzKM-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/d765a4-54eb-410d-8f3d-689ba4d33c4b/1/STotSDdjMKWC-vPjAy73sLzKM-g.mft
Manifest number: 042E
Signing time: Tue 29 Jul 2025 01:00:22 +0000
Manifest this update: Tue 29 Jul 2025 01:00:22 +0000
Manifest next update: Wed 30 Jul 2025 01:00:22 +0000
Files and hashes: 1: 1eZlwD4fnzVx_ZuiX-KY-unzRYA.roa (hash: FfjJukJvNSQzT9n6wjLCsM9xDWFdpCKe+CsdvwMwZRs=)
2: GXnQPnuqnvBWk7kpONau-2u0RoQ.roa (hash: uxonlVe7DqVs73Mq5GsJwlXeQ95X/yFAybekoDtId+I=)
3: KyYmqZA206kErzPtR2YQzPU--WY.roa (hash: fQeQLftranJsCVjcRRs8kVttSYkJPcfUSHb9P69BPM8=)
4: STotSDdjMKWC-vPjAy73sLzKM-g.crl (hash: NgRpH+6zvirSNMEhwu2YN4UxW2XQJqczisNrLa8aWGM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/d765a4-54eb-410d-8f3d-689ba4d33c4b/1/STotSDdjMKWC-vPjAy73sLzKM-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/d765a4-54eb-410d-8f3d-689ba4d33c4b/1/STotSDdjMKWC-vPjAy73sLzKM-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/STotSDdjMKWC-vPjAy73sLzKM-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:b1:df:71:ad:4b:e3:ef:24:d1:08:72:94:ee:45:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=493a2d48376330a582faf3e3032ef7b0bcca33e8
Validity
Not Before: Jul 29 01:00:22 2025 GMT
Not After : Jul 30 01:00:22 2025 GMT
Subject: CN=ea7562daa76720aff8012606b017f99fdc09fcc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:bf:7e:d2:17:cb:38:ab:9c:5a:71:c5:73:b5:
4f:39:2e:ef:da:da:11:52:17:05:9d:ff:20:85:b7:
93:42:41:9a:79:64:b0:48:86:06:30:87:04:f7:07:
fc:c6:b9:33:cc:8f:73:b2:4f:2d:58:3b:3d:da:2f:
32:12:b5:06:91:32:9d:fa:e2:7b:4c:e4:8d:f7:db:
bf:44:9c:9a:e4:04:26:b8:e2:01:3b:3b:ed:8f:89:
1e:7d:bc:21:f6:26:ec:ab:53:35:e8:b5:67:f4:de:
b6:c5:14:6b:dc:b1:89:cf:4b:d6:bc:71:01:eb:89:
70:f3:75:66:bf:b1:51:26:4d:5e:f3:c5:87:8e:88:
fe:ba:b7:51:2c:b4:39:c9:57:24:c3:35:0d:40:34:
3f:58:bf:87:6d:c9:1b:8f:5d:3b:d4:db:d6:b4:e7:
72:ca:d6:25:cb:85:82:57:90:13:3c:7f:74:75:83:
80:18:75:0b:c6:09:f5:57:45:5f:f1:26:d1:66:90:
55:52:1d:05:ba:c6:74:39:71:cc:2b:44:98:29:83:
67:fa:fc:7c:22:c2:ae:59:1c:18:86:2f:68:a5:63:
81:88:5c:c3:12:de:31:f1:87:7c:68:ba:6d:59:fe:
7b:e6:5d:a8:2e:91:54:2f:7c:a5:c6:5d:2d:9c:db:
a7:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:75:62:DA:A7:67:20:AF:F8:01:26:06:B0:17:F9:9F:DC:09:FC:C4
X509v3 Authority Key Identifier:
keyid:49:3A:2D:48:37:63:30:A5:82:FA:F3:E3:03:2E:F7:B0:BC:CA:33:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/STotSDdjMKWC-vPjAy73sLzKM-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d765a4-54eb-410d-8f3d-689ba4d33c4b/1/STotSDdjMKWC-vPjAy73sLzKM-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d765a4-54eb-410d-8f3d-689ba4d33c4b/1/STotSDdjMKWC-vPjAy73sLzKM-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:ef:c9:7f:c9:cd:95:d3:dc:82:10:3a:6f:da:53:ba:2c:e5:
1c:d6:73:97:9f:b4:ea:5f:21:84:bf:ac:53:22:6e:e6:79:a9:
54:69:f5:ce:81:ac:d0:76:f5:b3:36:89:3f:7e:62:ea:29:ca:
dd:6f:88:00:a7:c6:f1:6f:1e:15:60:6c:95:f7:a8:f0:87:44:
97:98:5e:40:d0:8f:b3:a6:2e:74:06:ea:69:28:ef:ae:1a:85:
ac:08:c3:bf:50:64:5a:ff:17:d9:44:7d:8f:d0:6f:62:66:2c:
6b:51:f6:29:db:4b:d7:f2:b8:06:99:39:1d:18:82:1b:8f:30:
7c:d8:28:bc:8f:6a:aa:2f:f6:4e:c1:2e:53:32:e7:19:66:45:
e3:a7:f8:2b:13:f4:9e:89:8b:85:20:48:d1:7d:f8:a2:3c:93:
39:ba:1c:bd:0e:f7:91:ce:d5:b7:d7:e5:f0:a9:3d:f0:dc:29:
38:38:68:19:53:f6:68:f0:09:ee:0f:81:01:3f:e7:3a:5f:0e:
9d:c0:12:b2:53:3e:8a:1f:8b:dd:c9:71:6e:88:65:fd:6a:44:
af:29:a7:bb:f7:a4:6f:64:c4:d7:27:3c:e3:0f:9b:94:01:65:
dd:48:aa:79:95:7d:b1:8d:e2:c1:ad:40:f3:83:85:8b:fc:4a:
39:17:0d:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:16:47 2025 by rpki-client