Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/2d2eb6-05d5-47a0-8fed-ebf32a0469c7/1/StzxlnKWX1GxbYevqxsUkILmw-4.mft
File: StzxlnKWX1GxbYevqxsUkILmw-4.mft (raw, json)
Hash identifier: d8VPGVevCAcIWUn4vZU9BZRkqUinliXssZ1brOCNlww=
Subject key identifier: 0A:59:61:2C:A3:1F:AF:21:0B:93:3A:FA:33:E0:03:61:BA:6C:81:7F
Authority key identifier: 4A:DC:F1:96:72:96:5F:51:B1:6D:87:AF:AB:1B:14:90:82:E6:C3:EE
Certificate issuer: /CN=4adcf19672965f51b16d87afab1b149082e6c3ee
Certificate serial: 019771F5FE23D85EF65DDBA7F6E9E715E92E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/StzxlnKWX1GxbYevqxsUkILmw-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/2d2eb6-05d5-47a0-8fed-ebf32a0469c7/1/StzxlnKWX1GxbYevqxsUkILmw-4.mft
Manifest number: 1592
Signing time: Sun 15 Jun 2025 05:00:36 +0000
Manifest this update: Sun 15 Jun 2025 05:00:36 +0000
Manifest next update: Mon 16 Jun 2025 05:00:36 +0000
Files and hashes: 1: StzxlnKWX1GxbYevqxsUkILmw-4.crl (hash: 6+YtTnLbXrZ/eOJKoUgt1anZbCXGXkuR4Mx8fUjJUZE=)
2: rGUQbl63n9K0Wn_57q9XL0tQAuA.roa (hash: vyvu3YaIjRy8oAh1PUr3JRdMW+KlCqlVTwrvF8kfQF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/2d2eb6-05d5-47a0-8fed-ebf32a0469c7/1/StzxlnKWX1GxbYevqxsUkILmw-4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/2d2eb6-05d5-47a0-8fed-ebf32a0469c7/1/StzxlnKWX1GxbYevqxsUkILmw-4.mft
rsync://rpki.ripe.net/repository/DEFAULT/StzxlnKWX1GxbYevqxsUkILmw-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:f5:fe:23:d8:5e:f6:5d:db:a7:f6:e9:e7:15:e9:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4adcf19672965f51b16d87afab1b149082e6c3ee
Validity
Not Before: Jun 15 05:00:36 2025 GMT
Not After : Jun 16 05:00:36 2025 GMT
Subject: CN=0a59612ca31faf210b933afa33e00361ba6c817f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:35:88:f4:cc:99:52:aa:27:e1:b4:5f:8c:05:
73:1f:f6:99:46:c0:84:57:ce:a6:d0:4a:af:06:bf:
78:87:a0:4f:1a:64:81:35:b4:97:ac:3b:ad:a5:2e:
3a:2d:82:a2:07:6a:bf:13:3b:df:e7:bb:30:27:1d:
7b:6e:64:25:f4:1c:f5:a2:e3:04:70:60:eb:8f:74:
e2:94:7d:64:84:4f:7a:1c:dc:a5:9a:96:f7:59:95:
57:5e:12:8a:35:af:3b:a8:19:c6:b8:85:bc:4e:e0:
aa:7e:80:20:45:0a:dd:e9:1e:44:86:74:00:45:e3:
10:57:61:2f:f0:e6:58:99:8e:ed:49:9b:7f:e2:d1:
05:44:dd:42:fb:37:b2:47:bf:cd:c3:5d:2b:f4:21:
ea:ad:95:54:64:4c:ab:e3:06:24:eb:eb:0e:32:8a:
b3:89:cc:1c:b9:5c:7b:b9:7b:5d:b4:bc:b5:0b:e1:
2b:ed:1b:35:cd:b1:7f:af:6a:f3:75:ef:1c:cf:c9:
f2:23:a7:74:7e:14:12:01:48:05:37:dd:ea:7f:f4:
b8:86:74:09:45:86:27:e3:e3:06:28:fb:08:01:a5:
fe:f2:96:0a:6d:a3:12:8e:af:54:a6:54:48:1e:ff:
98:ab:10:b2:6f:6b:2b:40:12:74:e9:14:33:e5:d9:
9a:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:59:61:2C:A3:1F:AF:21:0B:93:3A:FA:33:E0:03:61:BA:6C:81:7F
X509v3 Authority Key Identifier:
keyid:4A:DC:F1:96:72:96:5F:51:B1:6D:87:AF:AB:1B:14:90:82:E6:C3:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/StzxlnKWX1GxbYevqxsUkILmw-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/2d2eb6-05d5-47a0-8fed-ebf32a0469c7/1/StzxlnKWX1GxbYevqxsUkILmw-4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/2d2eb6-05d5-47a0-8fed-ebf32a0469c7/1/StzxlnKWX1GxbYevqxsUkILmw-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:24:1c:ac:ab:ff:ec:bd:c1:22:74:3b:5f:67:8f:a3:6d:f9:
0a:0c:0c:cc:27:2c:b6:36:d4:68:93:92:b6:1a:ba:ef:fd:b8:
42:cd:b1:30:0a:c8:fe:57:83:f9:54:10:b4:36:fd:f7:9e:79:
8b:25:eb:56:ec:23:12:f0:f4:72:d7:6e:f5:40:30:19:87:76:
bd:73:3b:0c:08:a6:1c:c0:b2:21:45:53:1f:f6:54:64:2f:dd:
fb:77:3f:d7:0e:55:ff:b2:de:6b:d6:eb:3a:11:5d:44:1d:79:
10:25:69:91:b6:b9:34:04:1b:1d:79:16:fe:49:84:c0:0e:9e:
15:db:7b:ee:47:b7:0a:9e:4e:e6:9b:59:88:d6:8b:44:63:98:
65:24:86:58:3e:21:12:93:76:c8:78:39:db:43:91:cc:fd:3e:
5e:64:a3:47:2f:83:61:7e:e9:e9:6f:c9:11:6b:0f:a0:f7:20:
56:85:9c:4d:3f:08:f3:c6:92:2b:20:ac:8b:5e:2e:7e:d2:ce:
2e:b4:73:6b:63:39:ac:4a:99:30:b7:5f:94:00:b8:a3:4d:06:
1b:bf:6c:85:a6:1f:98:6a:4e:96:55:c1:fa:c7:f1:9e:70:5b:
cb:ed:ba:7b:d9:23:f7:e4:8d:86:29:1b:80:48:f6:d5:23:de:
cd:7f:d5:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 08:23:44 2025 by rpki-client