Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/d29730-515a-4bfb-ad55-e038d81b3f97/1/STRpVEIDCC0sPB3fDwu9kL3FaUE.mft
File: STRpVEIDCC0sPB3fDwu9kL3FaUE.mft (raw, json)
Hash identifier: /v7p7ri+o3OyXEbLk6u+3Fz9yUXTzU3Yrvkf55ZxGIA=
Subject key identifier: 63:D2:E0:3A:3C:A1:2B:0C:2F:DE:55:47:62:9F:45:F5:19:11:75:3F
Authority key identifier: 49:34:69:54:42:03:08:2D:2C:3C:1D:DF:0F:0B:BD:90:BD:C5:69:41
Certificate issuer: /CN=493469544203082d2c3c1ddf0f0bbd90bdc56941
Certificate serial: 01963B40C2C41B52E81C25084E77671B17A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/STRpVEIDCC0sPB3fDwu9kL3FaUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/d29730-515a-4bfb-ad55-e038d81b3f97/1/STRpVEIDCC0sPB3fDwu9kL3FaUE.mft
Manifest number: 13E0
Signing time: Tue 15 Apr 2025 21:00:22 +0000
Manifest this update: Tue 15 Apr 2025 21:00:22 +0000
Manifest next update: Wed 16 Apr 2025 21:00:22 +0000
Files and hashes: 1: STRpVEIDCC0sPB3fDwu9kL3FaUE.crl (hash: NmiLRF7ECjeXZoMxWSJ4KAv2+eQdAU3XCf+GmsmUe54=)
2: j2dUbB-NK5CfnidiqDMKydgI8YE.roa (hash: ZUxAxryB168omhb8dlNaslAttNVaqi4+cbp8ns+rOL0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/d29730-515a-4bfb-ad55-e038d81b3f97/1/STRpVEIDCC0sPB3fDwu9kL3FaUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/d29730-515a-4bfb-ad55-e038d81b3f97/1/STRpVEIDCC0sPB3fDwu9kL3FaUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/STRpVEIDCC0sPB3fDwu9kL3FaUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 21:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3b:40:c2:c4:1b:52:e8:1c:25:08:4e:77:67:1b:17:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=493469544203082d2c3c1ddf0f0bbd90bdc56941
Validity
Not Before: Apr 15 21:00:22 2025 GMT
Not After : Apr 16 21:00:22 2025 GMT
Subject: CN=63d2e03a3ca12b0c2fde5547629f45f51911753f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:57:e3:e3:83:98:bf:ab:ac:1e:18:1d:82:4d:
ff:ff:8f:56:c4:dc:ec:56:7f:69:e1:90:4c:7e:b0:
a6:e5:b4:67:35:62:05:81:b4:c9:09:13:c6:50:53:
7f:b6:80:cf:f9:bd:78:8b:fd:05:43:8a:d8:17:9c:
79:75:97:7a:f2:a1:12:56:e2:ac:f8:fc:b0:79:8d:
aa:bb:57:94:50:93:0d:46:44:9d:c4:7e:a7:2f:fb:
b7:cf:34:a7:a0:de:ff:14:8b:7b:4d:c3:6d:87:07:
ee:10:6f:4a:7d:ac:1f:29:de:ca:57:a3:ed:e3:47:
67:8e:fb:50:50:92:3e:e2:d1:5f:4f:c7:3c:3d:74:
68:03:92:87:a5:46:02:8a:44:9d:a4:62:b4:14:c6:
48:5b:a2:51:0a:34:53:46:33:ba:e3:ca:66:a4:02:
c6:88:7b:56:63:cc:12:e7:99:2a:de:03:f9:6e:c6:
39:25:f0:db:fb:6e:b6:30:d8:e3:e4:b6:8b:57:e6:
c3:a3:c4:75:fb:4a:6a:7b:79:0d:c0:16:7a:5d:d4:
c6:6e:cc:ff:4d:9f:5d:99:41:7f:29:ee:7f:16:96:
97:70:c6:38:12:ed:2e:f4:f7:22:87:1a:fc:26:48:
30:69:f6:d9:43:fb:aa:bc:01:10:4a:a1:c2:e3:b5:
8e:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:D2:E0:3A:3C:A1:2B:0C:2F:DE:55:47:62:9F:45:F5:19:11:75:3F
X509v3 Authority Key Identifier:
keyid:49:34:69:54:42:03:08:2D:2C:3C:1D:DF:0F:0B:BD:90:BD:C5:69:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/STRpVEIDCC0sPB3fDwu9kL3FaUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/d29730-515a-4bfb-ad55-e038d81b3f97/1/STRpVEIDCC0sPB3fDwu9kL3FaUE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/d29730-515a-4bfb-ad55-e038d81b3f97/1/STRpVEIDCC0sPB3fDwu9kL3FaUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:4f:24:33:c4:52:65:2c:74:91:b6:af:12:1b:76:95:db:06:
d3:3d:51:99:1a:69:06:ca:89:1b:d5:ee:c2:61:b9:4b:d4:a9:
64:70:53:9b:09:29:9f:37:00:a6:e6:9c:d0:b0:51:a4:87:d5:
c9:fb:ff:cd:b2:5d:5e:db:34:91:d2:d6:ef:09:35:14:cf:5c:
53:a0:67:d7:41:4e:a1:0d:e3:20:c8:2f:a1:c0:91:d1:bc:90:
d2:31:b9:aa:d3:3a:e0:4e:76:d9:69:80:31:68:6d:c6:15:ed:
26:56:49:40:8b:bf:c8:05:2d:b9:56:c7:71:ee:90:24:31:19:
b9:c6:40:27:be:88:10:fb:91:a9:b1:80:20:48:d6:17:e8:3c:
5a:d8:0d:6b:7d:35:e2:98:25:7e:85:63:4c:b4:7a:cc:5d:27:
e1:1d:de:6b:85:85:46:e5:fe:a8:09:7f:c1:3f:27:82:0b:ff:
14:a9:31:b1:d0:6c:91:25:3f:07:95:07:61:6b:3c:e8:03:f7:
bd:10:e3:b0:60:eb:a3:e3:73:06:60:5f:61:bf:cc:7e:f4:68:
d0:c0:bb:51:6f:bd:63:68:3f:4c:4e:c8:8e:a5:e1:a2:6b:e7:
e4:96:49:63:ab:87:f0:bd:03:9b:30:32:52:42:5c:2d:f0:d0:
4f:78:6d:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZY7QMLEG1LoHCUITndnGxemMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5MzQ2OTU0NDIwMzA4MmQyYzNjMWRkZjBmMGJiZDkwYmRj
NTY5NDEwHhcNMjUwNDE1MjEwMDIyWhcNMjUwNDE2MjEwMDIyWjAzMTEwLwYDVQQD
Eyg2M2QyZTAzYTNjYTEyYjBjMmZkZTU1NDc2MjlmNDVmNTE5MTE3NTNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA21fj44OYv6usHhgdgk3//49WxNzs
Vn9p4ZBMfrCm5bRnNWIFgbTJCRPGUFN/toDP+b14i/0FQ4rYF5x5dZd68qESVuKs
+PyweY2qu1eUUJMNRkSdxH6nL/u3zzSnoN7/FIt7TcNthwfuEG9KfawfKd7KV6Pt
40dnjvtQUJI+4tFfT8c8PXRoA5KHpUYCikSdpGK0FMZIW6JRCjRTRjO648pmpALG
iHtWY8wS55kq3gP5bsY5JfDb+262MNjj5LaLV+bDo8R1+0pqe3kNwBZ6XdTGbsz/
TZ9dmUF/Ke5/FpaXcMY4Eu0u9Pcihxr8JkgwafbZQ/uqvAEQSqHC47WOIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGPS4Do8oSsML95VR2KfRfUZEXU/MB8GA1UdIwQY
MBaAFEk0aVRCAwgtLDwd3w8LvZC9xWlBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1RScFZFSURDQzBzUEIzZkR3dTlrTDNGYVVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9kMjk3MzAtNTE1YS00YmZiLWFkNTUt
ZTAzOGQ4MWIzZjk3LzEvU1RScFZFSURDQzBzUEIzZkR3dTlrTDNGYVVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS9kMjk3MzAtNTE1YS00YmZiLWFkNTUtZTAzOGQ4MWIzZjk3
LzEvU1RScFZFSURDQzBzUEIzZkR3dTlrTDNGYVVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK08kM8RS
ZSx0kbavEht2ldsG0z1RmRppBsqJG9XuwmG5S9SpZHBTmwkpnzcApuac0LBRpIfV
yfv/zbJdXts0kdLW7wk1FM9cU6Bn10FOoQ3jIMgvocCR0byQ0jG5qtM64E522WmA
MWhtxhXtJlZJQIu/yAUtuVbHce6QJDEZucZAJ76IEPuRqbGAIEjWF+g8WtgNa301
4pglfoVjTLR6zF0n4R3ea4WFRuX+qAl/wT8nggv/FKkxsdBskSU/B5UHYWs86AP3
vRDjsGDro+NzBmBfYb/MfvRo0MC7UW+9Y2g/TE7IjqXhomvn5JZJY6uH8L0DmzAy
UkJcLfDQT3htwg==
-----END CERTIFICATE-----
Generated at Wed Apr 16 04:42:17 2025 by rpki-client