Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/b38821-23f2-4e5e-941c-a8f0ee00b2ad/1/sTLpNaEPnOIW4Jk65BmclvUnOvQ.mft
File: sTLpNaEPnOIW4Jk65BmclvUnOvQ.mft (raw, json)
Hash identifier: STpVUgO9nWcqyZ5C/ukjmpKF7dLjw5Lvj77MBiKEKmA=
Subject key identifier: 81:0E:DD:DA:C6:D6:05:A2:F3:84:80:96:12:72:DC:2D:8E:5C:B2:72
Authority key identifier: B1:32:E9:35:A1:0F:9C:E2:16:E0:99:3A:E4:19:9C:96:F5:27:3A:F4
Certificate issuer: /CN=b132e935a10f9ce216e0993ae4199c96f5273af4
Certificate serial: 01984AE5A60DD749CF81B68BA18AFB8CFC12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sTLpNaEPnOIW4Jk65BmclvUnOvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/b38821-23f2-4e5e-941c-a8f0ee00b2ad/1/sTLpNaEPnOIW4Jk65BmclvUnOvQ.mft
Manifest number: 123F
Signing time: Sun 27 Jul 2025 08:00:20 +0000
Manifest this update: Sun 27 Jul 2025 08:00:20 +0000
Manifest next update: Mon 28 Jul 2025 08:00:20 +0000
Files and hashes: 1: DLK7aUuoCrkixmfK1Tr6lgYywbs.roa (hash: P1mAikX7/iUCIq0Iyy8fvjfAyIPndaCCAY0oESDv+Qo=)
2: mxU7ZGuWRrVnoU7neP0ntyKL78s.roa (hash: X4Bp+WOWNCY8+u0/f19L8Y2SQKOHLXJCsrOK+p7unk8=)
3: sTLpNaEPnOIW4Jk65BmclvUnOvQ.crl (hash: dVRySPA8ubwUo7qjkoXzwlKIf7RiTS2pEOigCc2NnhI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/b38821-23f2-4e5e-941c-a8f0ee00b2ad/1/sTLpNaEPnOIW4Jk65BmclvUnOvQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/b38821-23f2-4e5e-941c-a8f0ee00b2ad/1/sTLpNaEPnOIW4Jk65BmclvUnOvQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sTLpNaEPnOIW4Jk65BmclvUnOvQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:e5:a6:0d:d7:49:cf:81:b6:8b:a1:8a:fb:8c:fc:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b132e935a10f9ce216e0993ae4199c96f5273af4
Validity
Not Before: Jul 27 08:00:20 2025 GMT
Not After : Jul 28 08:00:20 2025 GMT
Subject: CN=810edddac6d605a2f38480961272dc2d8e5cb272
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5a:aa:88:73:ad:45:51:01:0c:91:dc:fa:bc:
de:71:b0:5e:88:f4:7c:d7:bc:9e:83:76:72:eb:54:
db:cf:6c:96:c6:97:29:92:9b:f2:ad:ce:51:59:f0:
c5:69:88:aa:5c:1a:c8:4b:91:f8:1b:d7:29:59:b9:
7a:b1:fd:d0:83:f9:f2:ad:57:cc:0f:fd:e9:de:7f:
08:c4:93:3f:ed:bf:ac:18:f0:3b:d1:96:85:4b:56:
56:20:32:32:4e:fb:ed:06:c7:b6:0a:c3:67:de:c8:
c9:fc:2f:97:af:62:b7:0a:91:f1:3b:d0:2b:e2:64:
12:84:ab:76:2d:2a:e4:18:89:d5:f7:aa:cd:9a:e8:
87:d2:21:b1:fc:d6:f2:68:36:8a:93:63:1a:b1:95:
26:33:c3:d8:fa:cb:21:f7:45:da:6d:ff:e0:d8:d1:
73:c2:3a:89:9b:b2:3c:92:ae:94:40:b0:7c:8e:d0:
1c:b8:c9:3c:b7:f9:bb:d0:7d:58:b6:a7:cd:06:00:
b8:64:e1:7e:fd:20:45:f0:35:62:24:94:89:2a:7b:
19:e7:92:c9:f6:21:28:98:2e:bd:51:91:a8:74:32:
e7:73:48:72:8d:79:55:5d:25:1e:5c:3b:34:94:9d:
ae:f1:7e:7c:84:bb:27:b4:1c:25:b8:a8:81:af:2a:
a6:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:0E:DD:DA:C6:D6:05:A2:F3:84:80:96:12:72:DC:2D:8E:5C:B2:72
X509v3 Authority Key Identifier:
keyid:B1:32:E9:35:A1:0F:9C:E2:16:E0:99:3A:E4:19:9C:96:F5:27:3A:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sTLpNaEPnOIW4Jk65BmclvUnOvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b38821-23f2-4e5e-941c-a8f0ee00b2ad/1/sTLpNaEPnOIW4Jk65BmclvUnOvQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b38821-23f2-4e5e-941c-a8f0ee00b2ad/1/sTLpNaEPnOIW4Jk65BmclvUnOvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:1e:1c:28:a2:1c:17:56:eb:03:7a:86:c2:b0:97:6b:fe:a6:
fb:ae:2e:fa:f1:89:96:25:14:18:4d:14:cc:5a:cd:ee:34:7e:
54:ef:f8:b2:62:4f:23:28:a5:be:5c:84:87:33:b2:23:d1:52:
cf:c8:60:6d:a8:da:0b:9e:92:13:7d:67:42:d3:d7:45:df:ec:
d5:e2:7b:86:49:5c:2c:a1:51:43:d0:cb:17:0e:a7:6a:19:5d:
92:e5:ea:71:bc:d6:f4:44:43:1c:a3:19:6a:f1:23:de:8e:6e:
30:62:19:cc:af:0f:f1:92:b0:1f:22:bf:22:6d:04:d2:8a:7c:
bd:6b:f6:83:a9:81:55:56:23:8e:0c:6c:74:33:ef:34:3f:35:
9f:5c:d3:85:4a:c0:f4:e3:5a:39:4f:34:e3:94:25:6b:16:31:
cc:7e:6a:fc:b4:e3:f3:79:ba:52:66:e6:59:2d:7d:a9:cd:45:
0e:d9:07:24:17:c0:0e:42:7a:2f:10:b1:ef:82:00:c9:12:d5:
d1:ae:8c:50:1b:dd:2a:c2:b7:7e:5b:d9:67:2e:45:1b:e7:80:
ca:26:84:23:64:49:9e:68:4a:0c:ca:77:e6:56:a4:0c:19:8d:
f9:0e:17:83:a3:64:27:fc:87:f4:c5:f8:59:b6:08:ee:53:32:
63:42:bf:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:57:34 2025 by rpki-client