Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/d29730-515a-4bfb-ad55-e038d81b3f97/1/STRpVEIDCC0sPB3fDwu9kL3FaUE.mft
File: STRpVEIDCC0sPB3fDwu9kL3FaUE.mft (raw, json)
Hash identifier: epv68gnM0fpDdKf7nRSBJ6N8YHr+qv9VvItorPlZz+k=
Subject key identifier: 52:95:8F:B0:52:3A:EB:B8:6C:C8:BA:D4:94:ED:AA:21:91:65:06:86
Authority key identifier: 49:34:69:54:42:03:08:2D:2C:3C:1D:DF:0F:0B:BD:90:BD:C5:69:41
Certificate issuer: /CN=493469544203082d2c3c1ddf0f0bbd90bdc56941
Certificate serial: 0198488954A427C571E0695E073F1F3948B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/STRpVEIDCC0sPB3fDwu9kL3FaUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/d29730-515a-4bfb-ad55-e038d81b3f97/1/STRpVEIDCC0sPB3fDwu9kL3FaUE.mft
Manifest number: 14F0
Signing time: Sat 26 Jul 2025 21:00:16 +0000
Manifest this update: Sat 26 Jul 2025 21:00:16 +0000
Manifest next update: Sun 27 Jul 2025 21:00:16 +0000
Files and hashes: 1: STRpVEIDCC0sPB3fDwu9kL3FaUE.crl (hash: tu3TNh2TJsxcpGnFqBxsPEWjRux26VCr5XIFpGdqiCQ=)
2: j2dUbB-NK5CfnidiqDMKydgI8YE.roa (hash: ZUxAxryB168omhb8dlNaslAttNVaqi4+cbp8ns+rOL0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/d29730-515a-4bfb-ad55-e038d81b3f97/1/STRpVEIDCC0sPB3fDwu9kL3FaUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/d29730-515a-4bfb-ad55-e038d81b3f97/1/STRpVEIDCC0sPB3fDwu9kL3FaUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/STRpVEIDCC0sPB3fDwu9kL3FaUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:89:54:a4:27:c5:71:e0:69:5e:07:3f:1f:39:48:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=493469544203082d2c3c1ddf0f0bbd90bdc56941
Validity
Not Before: Jul 26 21:00:16 2025 GMT
Not After : Jul 27 21:00:16 2025 GMT
Subject: CN=52958fb0523aebb86cc8bad494edaa2191650686
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:42:44:38:74:a6:d5:dd:b8:3d:2d:5b:6a:86:
f4:70:97:e2:36:61:ab:a6:0f:31:d0:59:1d:b1:25:
17:8a:88:49:3e:a0:b3:26:92:6f:85:55:cc:96:3b:
f6:4f:3e:d4:e0:10:3a:b6:77:e7:d5:7c:43:77:4f:
5d:c6:15:84:49:32:92:7c:1f:bc:18:f4:f2:5b:88:
3f:59:8b:f4:4c:fd:42:64:b7:d2:16:3a:7e:ad:ca:
bb:d5:06:aa:a1:f6:a1:8b:3a:bf:78:e4:86:cd:84:
8b:04:b4:09:0c:33:1b:f4:a0:9c:05:5d:95:20:08:
39:34:f3:76:a4:e5:56:eb:ad:91:f4:cc:1c:78:27:
74:29:fd:fd:a4:30:86:14:7a:ce:db:07:e0:38:a9:
46:c0:ae:f6:a7:2e:07:6b:29:23:3a:2c:cf:32:ce:
1b:f4:4f:1c:8a:dc:8d:a9:d5:63:5c:0f:7b:0d:4f:
09:ee:ea:c3:69:7d:34:4d:a6:31:a1:e0:b2:e7:c1:
3c:5e:55:78:a5:40:d6:90:e7:ba:d0:af:5c:a3:24:
6b:b9:83:ee:bf:15:06:ab:f4:34:b6:38:b2:15:7f:
45:db:ba:fd:f8:e9:5d:d4:95:79:b2:a9:94:08:3e:
a5:a4:c1:22:a9:e9:fa:0b:05:95:96:ac:95:c5:c3:
13:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:95:8F:B0:52:3A:EB:B8:6C:C8:BA:D4:94:ED:AA:21:91:65:06:86
X509v3 Authority Key Identifier:
keyid:49:34:69:54:42:03:08:2D:2C:3C:1D:DF:0F:0B:BD:90:BD:C5:69:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/STRpVEIDCC0sPB3fDwu9kL3FaUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/d29730-515a-4bfb-ad55-e038d81b3f97/1/STRpVEIDCC0sPB3fDwu9kL3FaUE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/d29730-515a-4bfb-ad55-e038d81b3f97/1/STRpVEIDCC0sPB3fDwu9kL3FaUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:83:3e:14:bf:40:41:a3:4a:f7:67:d0:3f:30:4f:ee:11:0e:
ed:2e:4e:c1:d4:6e:80:4c:cb:91:b8:d2:e0:8d:80:65:cb:03:
d1:29:53:ac:08:52:2e:63:71:26:7f:5b:b5:64:52:78:77:57:
34:af:1a:c6:27:89:d0:b4:cf:e3:11:8d:a9:17:bb:1a:83:e8:
d3:4d:3c:c6:1f:29:4f:3c:e6:fd:27:48:79:e3:85:f0:d3:55:
f2:c2:1a:ef:eb:31:03:b7:bb:82:7c:e9:5c:a4:b6:eb:50:5f:
12:b8:9a:6b:46:bf:a6:2d:b8:3d:b8:4b:5c:f1:e4:4b:34:2c:
5d:27:0b:bf:d8:13:40:fa:c3:39:36:74:33:a9:15:9d:b1:6b:
b2:32:25:41:55:a0:b2:e3:ca:c0:f8:82:94:77:49:9e:9c:a8:
ea:63:e6:38:2a:16:35:99:d2:bf:f3:ad:70:8f:37:9f:be:a7:
3a:07:60:c2:4a:13:78:a5:99:8d:42:d5:b0:fa:27:4c:0e:93:
cc:af:0f:fb:b6:36:93:8a:dd:31:48:d8:64:03:18:cf:0b:86:
c9:22:6f:8e:f8:ab:1d:2f:69:57:81:68:13:7d:5a:7f:e2:23:
5a:94:ad:56:ee:6c:c6:6a:e0:db:d1:6b:a6:7e:13:9b:88:ad:
c6:93:cf:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:11:53 2025 by rpki-client