Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/7ae133-d0b6-4b68-8f61-d4d9a2e60e64/1/STKJJW4ziHd9leTVMVZ842cqFJo.mft
File: STKJJW4ziHd9leTVMVZ842cqFJo.mft (raw, json)
Hash identifier: YXcJZqDaw1Z7wNznE8+kuVk4Ago98AIzk0bX/M2IM9U=
Subject key identifier: 2B:F0:AC:A7:83:55:85:B8:BB:99:90:3B:C4:96:62:AD:A4:CC:5B:99
Authority key identifier: 49:32:89:25:6E:33:88:77:7D:95:E4:D5:31:56:7C:E3:67:2A:14:9A
Certificate issuer: /CN=493289256e3388777d95e4d531567ce3672a149a
Certificate serial: 019746D507C7650C438DC2759352DF200F77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/STKJJW4ziHd9leTVMVZ842cqFJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/7ae133-d0b6-4b68-8f61-d4d9a2e60e64/1/STKJJW4ziHd9leTVMVZ842cqFJo.mft
Manifest number: 157B
Signing time: Fri 06 Jun 2025 20:00:55 +0000
Manifest this update: Fri 06 Jun 2025 20:00:55 +0000
Manifest next update: Sat 07 Jun 2025 20:00:55 +0000
Files and hashes: 1: PDkI417cWn_abbXt0o9HD-0vD6g.roa (hash: mxVaLWpnhSe1agkXL4xYhLyldi4/weSHgH61n+a6Rqk=)
2: STKJJW4ziHd9leTVMVZ842cqFJo.crl (hash: OmcgQiVZ1DPlDdbNr753NMRy/T1R37oVVwDrmrA/VAE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/7ae133-d0b6-4b68-8f61-d4d9a2e60e64/1/STKJJW4ziHd9leTVMVZ842cqFJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/7ae133-d0b6-4b68-8f61-d4d9a2e60e64/1/STKJJW4ziHd9leTVMVZ842cqFJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/STKJJW4ziHd9leTVMVZ842cqFJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:d5:07:c7:65:0c:43:8d:c2:75:93:52:df:20:0f:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=493289256e3388777d95e4d531567ce3672a149a
Validity
Not Before: Jun 6 20:00:55 2025 GMT
Not After : Jun 7 20:00:55 2025 GMT
Subject: CN=2bf0aca7835585b8bb99903bc49662ada4cc5b99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ef:d1:a0:ec:85:ca:73:9b:7c:57:9a:23:18:
d7:45:c6:cd:bb:87:b0:bb:37:3b:92:fb:65:1a:d4:
fd:24:92:17:78:8c:fd:ff:f8:49:f4:8a:e4:46:9b:
c8:ac:f1:da:48:5e:15:7f:8d:5e:93:a3:43:70:2d:
2b:00:5d:6d:42:b0:f7:25:a0:da:30:8d:da:66:0a:
17:c6:e1:12:0c:da:f4:be:36:a3:1e:35:fd:93:06:
74:c6:f1:af:83:a4:3a:ca:e9:d7:ba:fe:54:4a:56:
3c:69:99:d5:f6:34:14:c4:c2:87:7b:87:ac:97:3d:
e1:80:36:0b:da:46:18:c3:70:b8:ab:da:e2:30:e3:
cb:e1:ef:c1:11:f5:5e:9e:e4:01:dd:d0:4e:c8:4f:
d4:6d:f3:19:fa:1e:30:43:f7:1c:60:d6:c9:35:ba:
f2:d9:6b:c7:c3:35:5f:ac:e6:8b:ba:f3:09:46:e2:
35:ef:ec:79:32:e7:55:03:1a:17:04:27:b2:57:eb:
7e:6d:3f:8b:31:b5:56:f6:c9:41:be:c9:5d:dc:a9:
a5:1b:4c:49:6f:d0:b6:19:b8:98:0d:83:24:93:07:
70:a1:b9:0e:07:64:27:d0:9e:ed:af:de:a2:ae:08:
32:b4:37:11:14:aa:b4:31:2d:28:6a:de:ed:99:2d:
3d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:F0:AC:A7:83:55:85:B8:BB:99:90:3B:C4:96:62:AD:A4:CC:5B:99
X509v3 Authority Key Identifier:
keyid:49:32:89:25:6E:33:88:77:7D:95:E4:D5:31:56:7C:E3:67:2A:14:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/STKJJW4ziHd9leTVMVZ842cqFJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/7ae133-d0b6-4b68-8f61-d4d9a2e60e64/1/STKJJW4ziHd9leTVMVZ842cqFJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/7ae133-d0b6-4b68-8f61-d4d9a2e60e64/1/STKJJW4ziHd9leTVMVZ842cqFJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:28:d3:2b:ca:fc:00:7c:90:c7:24:57:36:2e:ca:f8:31:a1:
41:81:49:32:bc:d3:8a:8e:ed:b8:5a:05:c6:50:77:d6:c4:ca:
1b:29:6f:2b:d2:bc:9c:1f:21:ce:50:6a:63:d4:8a:25:ae:c2:
36:78:a5:34:0d:2b:c6:ed:a1:7b:53:19:e2:8b:e5:25:d6:8a:
5e:bf:85:cf:a0:25:68:f1:45:74:b9:c0:69:84:65:3a:31:9b:
30:6b:63:0e:6b:d4:c5:a7:24:ac:47:43:c6:75:c5:53:83:49:
38:be:ef:49:c1:a7:4a:d0:66:0e:24:b4:a3:e7:c3:6f:88:be:
ee:ce:c6:4c:b8:d7:6b:3c:92:d3:06:4c:c5:83:c0:d6:e4:8b:
cc:6c:14:91:4a:c4:5c:23:53:77:fa:05:dc:32:7c:d6:c3:4c:
8c:c5:e0:5e:94:69:51:60:4a:2d:a9:18:7c:db:5d:53:66:12:
b0:1c:a5:53:97:cf:5c:bb:37:de:d9:a9:b6:b8:90:05:1c:41:
66:69:c4:8d:8b:47:7c:38:dd:b3:06:10:02:c0:a8:81:dc:59:
a5:39:d4:03:fa:ed:72:36:d3:50:e9:2e:58:37:26:47:f1:46:
92:ef:43:ba:1d:88:10:f5:0c:fb:e8:d2:e2:cf:29:b5:16:f5:
d3:23:fb:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdG1QfHZQxDjcJ1k1LfIA93MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5MzI4OTI1NmUzMzg4Nzc3ZDk1ZTRkNTMxNTY3Y2UzNjcy
YTE0OWEwHhcNMjUwNjA2MjAwMDU1WhcNMjUwNjA3MjAwMDU1WjAzMTEwLwYDVQQD
EygyYmYwYWNhNzgzNTU4NWI4YmI5OTkwM2JjNDk2NjJhZGE0Y2M1Yjk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvO/RoOyFynObfFeaIxjXRcbNu4ew
uzc7kvtlGtT9JJIXeIz9//hJ9IrkRpvIrPHaSF4Vf41ek6NDcC0rAF1tQrD3JaDa
MI3aZgoXxuESDNr0vjajHjX9kwZ0xvGvg6Q6yunXuv5USlY8aZnV9jQUxMKHe4es
lz3hgDYL2kYYw3C4q9riMOPL4e/BEfVenuQB3dBOyE/UbfMZ+h4wQ/ccYNbJNbry
2WvHwzVfrOaLuvMJRuI17+x5MudVAxoXBCeyV+t+bT+LMbVW9slBvsld3KmlG0xJ
b9C2GbiYDYMkkwdwobkOB2Qn0J7tr96irggytDcRFKq0MS0oat7tmS096QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCvwrKeDVYW4u5mQO8SWYq2kzFuZMB8GA1UdIwQY
MBaAFEkyiSVuM4h3fZXk1TFWfONnKhSaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1RLSkpXNHppSGQ5bGVUVk1WWjg0MmNxRkpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni83YWUxMzMtZDBiNi00YjY4LThmNjEt
ZDRkOWEyZTYwZTY0LzEvU1RLSkpXNHppSGQ5bGVUVk1WWjg0MmNxRkpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni83YWUxMzMtZDBiNi00YjY4LThmNjEtZDRkOWEyZTYwZTY0
LzEvU1RLSkpXNHppSGQ5bGVUVk1WWjg0MmNxRkpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAISjTK8r8
AHyQxyRXNi7K+DGhQYFJMrzTio7tuFoFxlB31sTKGylvK9K8nB8hzlBqY9SKJa7C
NnilNA0rxu2he1MZ4ovlJdaKXr+Fz6AlaPFFdLnAaYRlOjGbMGtjDmvUxackrEdD
xnXFU4NJOL7vScGnStBmDiS0o+fDb4i+7s7GTLjXazyS0wZMxYPA1uSLzGwUkUrE
XCNTd/oF3DJ81sNMjMXgXpRpUWBKLakYfNtdU2YSsBylU5fPXLs33tmptriQBRxB
ZmnEjYtHfDjdswYQAsCogdxZpTnUA/rtcjbTUOkuWDcmR/FGku9Duh2IEPUM++jS
4s8ptRb10yP7uQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 01:19:11 2025 by rpki-client