Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/698efb-c6b4-4d2c-9368-7cec2d5345b4/1/stf5mYOKoWO_NE_GmRe7YNEv38M.mft
File: stf5mYOKoWO_NE_GmRe7YNEv38M.mft (raw, json)
Hash identifier: BIShHG6Wd6QyAT9teBAUmm8+kx0EgZq8NJIhG9M+cL8=
Subject key identifier: 3E:C5:58:E0:D5:69:25:46:89:E1:17:7E:FC:52:AB:6D:F0:3C:1C:90
Authority key identifier: B2:D7:F9:99:83:8A:A1:63:BF:34:4F:C6:99:17:BB:60:D1:2F:DF:C3
Certificate issuer: /CN=b2d7f999838aa163bf344fc69917bb60d12fdfc3
Certificate serial: 0197CA274DEE7771E31223D6FB574336878C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/stf5mYOKoWO_NE_GmRe7YNEv38M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/698efb-c6b4-4d2c-9368-7cec2d5345b4/1/stf5mYOKoWO_NE_GmRe7YNEv38M.mft
Manifest number: 10AE
Signing time: Wed 02 Jul 2025 08:01:02 +0000
Manifest this update: Wed 02 Jul 2025 08:01:02 +0000
Manifest next update: Thu 03 Jul 2025 08:01:02 +0000
Files and hashes: 1: i-DPtzOhX1UrAwvJvp6e_VFBpfU.roa (hash: b0DJ4Ik9RBvNDvd/V/+wWQQR6BcIK0SHDpRuzhlzJ6o=)
2: stf5mYOKoWO_NE_GmRe7YNEv38M.crl (hash: Gkyfk7jmZArbL0By28qSR63EdrQrrbuX6vMiwCjqFSs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/698efb-c6b4-4d2c-9368-7cec2d5345b4/1/stf5mYOKoWO_NE_GmRe7YNEv38M.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/698efb-c6b4-4d2c-9368-7cec2d5345b4/1/stf5mYOKoWO_NE_GmRe7YNEv38M.mft
rsync://rpki.ripe.net/repository/DEFAULT/stf5mYOKoWO_NE_GmRe7YNEv38M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 08:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ca:27:4d:ee:77:71:e3:12:23:d6:fb:57:43:36:87:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2d7f999838aa163bf344fc69917bb60d12fdfc3
Validity
Not Before: Jul 2 08:01:02 2025 GMT
Not After : Jul 3 08:01:02 2025 GMT
Subject: CN=3ec558e0d569254689e1177efc52ab6df03c1c90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:cd:6b:74:fc:1f:69:44:fa:8e:4a:cb:81:ff:
2c:1d:38:8a:1e:33:e2:22:d9:6b:af:a0:3e:de:d2:
d6:36:e9:9c:c1:ec:51:72:71:32:09:0f:6f:2f:09:
f9:0e:49:30:b9:a7:ed:da:1f:78:4a:ff:4d:80:35:
c1:36:a1:5a:d5:ce:9f:1b:90:2f:44:fa:01:42:6f:
a8:3c:cc:bf:10:45:1f:90:09:e9:8e:05:74:e4:f4:
3c:99:5e:c9:45:00:22:03:15:60:2f:08:db:3c:50:
83:52:01:e1:49:78:fb:9c:27:aa:34:8f:5b:02:07:
f7:9a:a9:85:cc:cb:2a:b1:78:b2:eb:33:12:c3:f1:
a6:13:07:36:81:f3:a0:b6:48:2d:36:cb:ab:42:fe:
d6:b4:e8:15:19:84:28:cc:e8:2f:a1:07:50:37:4c:
38:cf:aa:8a:d5:4a:f5:60:e8:bb:16:f5:94:f0:57:
41:a5:62:54:22:d0:79:0d:c7:b4:30:57:97:40:aa:
80:6a:de:ac:91:9a:5f:18:14:4e:23:6b:36:50:16:
be:6d:5c:04:e4:0c:22:7c:ac:4e:45:1c:03:8d:96:
a6:50:6e:8a:8d:17:dc:28:f4:ab:77:0a:7e:50:a7:
78:9c:4a:1c:89:9a:dc:1c:be:9c:6e:6f:ff:ac:17:
b1:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:C5:58:E0:D5:69:25:46:89:E1:17:7E:FC:52:AB:6D:F0:3C:1C:90
X509v3 Authority Key Identifier:
keyid:B2:D7:F9:99:83:8A:A1:63:BF:34:4F:C6:99:17:BB:60:D1:2F:DF:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/stf5mYOKoWO_NE_GmRe7YNEv38M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/698efb-c6b4-4d2c-9368-7cec2d5345b4/1/stf5mYOKoWO_NE_GmRe7YNEv38M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/698efb-c6b4-4d2c-9368-7cec2d5345b4/1/stf5mYOKoWO_NE_GmRe7YNEv38M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:1e:90:e3:24:6a:74:c2:09:da:6b:e2:2a:f8:bd:6d:14:05:
6c:71:02:b8:b1:4a:59:de:66:5d:9c:c2:e7:3a:b8:ec:be:89:
0b:27:b7:94:24:ad:4a:38:18:f8:e5:73:11:f4:af:98:07:fa:
56:33:c2:58:20:13:ea:39:05:9b:5f:68:00:16:be:54:0d:18:
1c:aa:e4:c9:c6:59:9e:4f:c5:6c:c5:08:51:25:55:a0:c2:a6:
4a:18:87:6e:15:99:a7:f9:7a:09:71:af:c7:49:49:0d:e6:c5:
fb:0e:cc:63:2d:ea:24:8a:09:12:e3:2f:af:c6:7c:d3:07:17:
21:ad:52:57:02:f1:af:43:12:fe:8c:25:50:e7:47:fd:d3:be:
fa:07:02:17:6e:75:d2:3d:ab:ac:a0:cc:c7:d2:a2:f1:e3:a9:
02:c6:f9:1a:83:6d:af:3c:73:46:3e:f0:d6:bd:a5:bb:22:83:
3b:b9:72:82:5c:3e:fc:6d:99:24:55:4a:5c:95:5f:18:43:15:
92:8d:a4:6e:af:71:6c:e1:45:03:fc:85:70:a7:c0:19:d8:28:
80:f8:43:44:81:75:e9:69:9f:94:00:27:fe:54:e2:f3:c7:42:
33:4e:e1:17:03:71:a9:07:de:79:c9:2f:f7:81:b0:92:a8:45:
94:b0:ac:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 14:14:21 2025 by rpki-client