Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/07cdcf-8875-4770-8c75-41b745bf53db/1/STeGYPXwGSOUbDXZS-XM19K3EFE.mft
File: STeGYPXwGSOUbDXZS-XM19K3EFE.mft (raw, json)
Hash identifier: yUkKZhYcRrBaquc1QcTSukJMGMRLB+XFudswAhIGfsE=
Subject key identifier: 43:AA:1E:40:48:9A:DC:7E:F4:15:58:D9:94:A6:8B:8B:04:07:10:63
Authority key identifier: 49:37:86:60:F5:F0:19:23:94:6C:35:D9:4B:E5:CC:D7:D2:B7:10:51
Certificate issuer: /CN=49378660f5f01923946c35d94be5ccd7d2b71051
Certificate serial: 019847E54928198EF2A7ABD973B0549A1B16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/STeGYPXwGSOUbDXZS-XM19K3EFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/07cdcf-8875-4770-8c75-41b745bf53db/1/STeGYPXwGSOUbDXZS-XM19K3EFE.mft
Manifest number: 0B95
Signing time: Sat 26 Jul 2025 18:01:05 +0000
Manifest this update: Sat 26 Jul 2025 18:01:05 +0000
Manifest next update: Sun 27 Jul 2025 18:01:05 +0000
Files and hashes: 1: 2ZvpZ0sZ6P6ydTiCDEFolKMvfh0.roa (hash: 1DssY9QtTEut1NYlrrYk3dvjYOvc/xqpRvFLT8I4S4E=)
2: NjASS9Fcywmz2PQGC289Z6czZDw.roa (hash: HSbgUfk0PK7NcRU0i0FIegZSv4Qc7DSpvzCcUEz+mx0=)
3: STeGYPXwGSOUbDXZS-XM19K3EFE.crl (hash: coMEuDXYgexQh1S/uzWnwTeRmQLypqCKUefPbUYvQNY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/07cdcf-8875-4770-8c75-41b745bf53db/1/STeGYPXwGSOUbDXZS-XM19K3EFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/07cdcf-8875-4770-8c75-41b745bf53db/1/STeGYPXwGSOUbDXZS-XM19K3EFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/STeGYPXwGSOUbDXZS-XM19K3EFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:e5:49:28:19:8e:f2:a7:ab:d9:73:b0:54:9a:1b:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49378660f5f01923946c35d94be5ccd7d2b71051
Validity
Not Before: Jul 26 18:01:05 2025 GMT
Not After : Jul 27 18:01:05 2025 GMT
Subject: CN=43aa1e40489adc7ef41558d994a68b8b04071063
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:74:fe:09:2a:c5:49:27:03:af:67:1c:45:1a:
58:89:d2:8f:f0:0e:cd:7b:ea:dd:2a:6e:e1:86:6c:
5a:0b:6a:7b:84:4c:f9:47:38:5d:bc:e8:5e:fd:6f:
f0:45:60:4a:6e:87:28:08:d2:ee:73:e0:9d:6e:00:
2b:d4:23:b6:b9:3e:bd:eb:1c:ca:10:37:4a:55:1e:
ed:21:3f:fc:64:aa:59:fd:5a:61:01:07:d3:38:fd:
8e:79:e8:bf:2f:21:10:40:56:eb:18:d9:24:68:1f:
e9:a3:43:8c:e8:7e:5c:6d:d1:6e:ea:0a:a6:ac:a5:
5b:8a:e4:1e:f5:90:df:85:86:6b:c1:4b:45:21:4c:
19:23:d6:fc:22:db:92:03:bb:37:9c:e6:72:a2:bd:
26:b5:e2:55:4e:55:bc:1a:44:17:13:4e:ec:c1:7c:
5c:12:6b:cb:b2:09:5d:c3:9e:94:aa:a8:cd:78:31:
5c:84:0a:3b:9c:a7:14:b6:ed:5f:3b:4e:1f:5e:9a:
cf:13:56:76:4f:32:77:84:51:9a:d2:a3:9a:1d:6f:
09:55:24:1d:37:55:1c:9d:88:d3:27:62:ef:05:67:
de:90:d4:52:3f:67:b2:e5:e6:ff:48:c0:94:22:42:
b3:88:34:17:ae:27:5b:27:9f:d7:b3:c1:00:43:35:
00:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:AA:1E:40:48:9A:DC:7E:F4:15:58:D9:94:A6:8B:8B:04:07:10:63
X509v3 Authority Key Identifier:
keyid:49:37:86:60:F5:F0:19:23:94:6C:35:D9:4B:E5:CC:D7:D2:B7:10:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/STeGYPXwGSOUbDXZS-XM19K3EFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/07cdcf-8875-4770-8c75-41b745bf53db/1/STeGYPXwGSOUbDXZS-XM19K3EFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/07cdcf-8875-4770-8c75-41b745bf53db/1/STeGYPXwGSOUbDXZS-XM19K3EFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:d4:01:c8:01:ed:cc:5d:a6:97:8a:f7:c8:59:ef:7c:05:77:
47:9a:4f:da:4a:82:76:ee:b9:d0:68:ae:24:98:a6:fc:12:fe:
ef:7d:d9:97:a1:77:fc:f1:98:a1:86:2d:6e:9d:4c:dd:23:50:
20:2c:96:22:46:ef:5f:e9:2f:63:27:64:3a:1e:b6:97:31:5c:
22:df:e4:74:3d:2e:2e:dc:f8:3a:16:48:0d:c5:b3:c2:b8:95:
a4:2f:b1:be:e8:6a:25:1d:f2:c1:c8:e4:17:d3:8e:e4:b7:ed:
bc:f3:eb:02:84:10:fe:34:97:a0:0a:2f:a1:86:97:73:d1:c5:
8d:fe:77:47:6a:53:e0:74:87:33:b8:ef:61:4a:d2:82:d4:4b:
0a:18:37:a9:e2:c9:56:b2:b1:ec:da:c9:57:42:88:fa:47:9c:
ee:ec:fc:97:06:52:cc:98:40:74:e9:0d:d2:55:f1:e2:7a:05:
1c:e1:e2:3f:38:f1:5d:40:a4:2a:21:56:07:50:e9:d0:5a:d1:
5b:47:fa:42:d2:e3:88:fd:a8:cd:06:27:ce:0f:8c:ab:c1:be:
c0:be:89:d4:7e:4b:67:99:68:bf:6e:f2:db:ab:8b:61:fc:66:
69:1d:a4:d0:bd:61:9a:c2:8a:2a:3f:88:9f:28:84:d2:d7:40:
95:6a:bc:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhH5UkoGY7yp6vZc7BUmhsWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5Mzc4NjYwZjVmMDE5MjM5NDZjMzVkOTRiZTVjY2Q3ZDJi
NzEwNTEwHhcNMjUwNzI2MTgwMTA1WhcNMjUwNzI3MTgwMTA1WjAzMTEwLwYDVQQD
Eyg0M2FhMWU0MDQ4OWFkYzdlZjQxNTU4ZDk5NGE2OGI4YjA0MDcxMDYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1nT+CSrFSScDr2ccRRpYidKP8A7N
e+rdKm7hhmxaC2p7hEz5RzhdvOhe/W/wRWBKbocoCNLuc+CdbgAr1CO2uT696xzK
EDdKVR7tIT/8ZKpZ/VphAQfTOP2Oeei/LyEQQFbrGNkkaB/po0OM6H5cbdFu6gqm
rKVbiuQe9ZDfhYZrwUtFIUwZI9b8ItuSA7s3nOZyor0mteJVTlW8GkQXE07swXxc
EmvLsgldw56UqqjNeDFchAo7nKcUtu1fO04fXprPE1Z2TzJ3hFGa0qOaHW8JVSQd
N1UcnYjTJ2LvBWfekNRSP2ey5eb/SMCUIkKziDQXridbJ5/Xs8EAQzUASwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEOqHkBImtx+9BVY2ZSmi4sEBxBjMB8GA1UdIwQY
MBaAFEk3hmD18BkjlGw12UvlzNfStxBRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1RlR1lQWHdHU09VYkRYWlMtWE0xOUszRUZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC8wN2NkY2YtODg3NS00NzcwLThjNzUt
NDFiNzQ1YmY1M2RiLzEvU1RlR1lQWHdHU09VYkRYWlMtWE0xOUszRUZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC8wN2NkY2YtODg3NS00NzcwLThjNzUtNDFiNzQ1YmY1M2Ri
LzEvU1RlR1lQWHdHU09VYkRYWlMtWE0xOUszRUZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANdQByAHt
zF2ml4r3yFnvfAV3R5pP2kqCdu650GiuJJim/BL+733Zl6F3/PGYoYYtbp1M3SNQ
ICyWIkbvX+kvYydkOh62lzFcIt/kdD0uLtz4OhZIDcWzwriVpC+xvuhqJR3ywcjk
F9OO5LftvPPrAoQQ/jSXoAovoYaXc9HFjf53R2pT4HSHM7jvYUrSgtRLChg3qeLJ
VrKx7NrJV0KI+kec7uz8lwZSzJhAdOkN0lXx4noFHOHiPzjxXUCkKiFWB1Dp0FrR
W0f6QtLjiP2ozQYnzg+Mq8G+wL6J1H5LZ5lov27y26uLYfxmaR2k0L1hmsKKKj+I
nyiE0tdAlWq8Dg==
-----END CERTIFICATE-----
Generated at Sun Jul 27 01:22:18 2025 by rpki-client