Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/7ae133-d0b6-4b68-8f61-d4d9a2e60e64/1/STKJJW4ziHd9leTVMVZ842cqFJo.mft
File: STKJJW4ziHd9leTVMVZ842cqFJo.mft (raw, json)
Hash identifier: 4UPdHN/l+dfMmhzzp3I60WTHZHrn03phdXUX9aqCj/4=
Subject key identifier: 4F:C5:4B:11:8B:57:4B:6F:2E:4A:23:6B:54:C0:42:FF:22:FB:89:B6
Authority key identifier: 49:32:89:25:6E:33:88:77:7D:95:E4:D5:31:56:7C:E3:67:2A:14:9A
Certificate issuer: /CN=493289256e3388777d95e4d531567ce3672a149a
Certificate serial: 01963C53BCA524273142161E4C5A42E36FA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/STKJJW4ziHd9leTVMVZ842cqFJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/7ae133-d0b6-4b68-8f61-d4d9a2e60e64/1/STKJJW4ziHd9leTVMVZ842cqFJo.mft
Manifest number: 14F1
Signing time: Wed 16 Apr 2025 02:00:42 +0000
Manifest this update: Wed 16 Apr 2025 02:00:42 +0000
Manifest next update: Thu 17 Apr 2025 02:00:42 +0000
Files and hashes: 1: PDkI417cWn_abbXt0o9HD-0vD6g.roa (hash: mxVaLWpnhSe1agkXL4xYhLyldi4/weSHgH61n+a6Rqk=)
2: STKJJW4ziHd9leTVMVZ842cqFJo.crl (hash: lVw/6W6U7o7eDeq54O6zuOJ+/F80KcSqJMYog7eawFA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/7ae133-d0b6-4b68-8f61-d4d9a2e60e64/1/STKJJW4ziHd9leTVMVZ842cqFJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/7ae133-d0b6-4b68-8f61-d4d9a2e60e64/1/STKJJW4ziHd9leTVMVZ842cqFJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/STKJJW4ziHd9leTVMVZ842cqFJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3c:53:bc:a5:24:27:31:42:16:1e:4c:5a:42:e3:6f:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=493289256e3388777d95e4d531567ce3672a149a
Validity
Not Before: Apr 16 02:00:42 2025 GMT
Not After : Apr 17 02:00:42 2025 GMT
Subject: CN=4fc54b118b574b6f2e4a236b54c042ff22fb89b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:db:48:87:7f:ea:ad:85:d0:d1:2e:3c:d6:bf:
80:95:d8:23:f4:33:83:63:72:9c:d7:28:cf:f1:c7:
70:99:c9:b0:82:2c:b1:2c:81:cf:6a:ad:5f:b9:a4:
8f:5a:0f:78:d1:d3:cf:fe:0b:74:c7:f1:df:1c:1a:
56:40:30:be:8a:cd:13:65:54:2d:a8:37:6f:76:e8:
e2:bd:9f:4a:8b:db:22:c5:ef:86:b1:ac:17:34:8a:
51:bb:f1:76:f7:dd:c7:b5:9c:50:96:e3:2a:5e:36:
b3:45:87:37:49:11:fc:70:ce:db:90:0f:92:7e:ea:
95:e1:4d:68:ba:44:31:f1:25:0f:f9:2c:cd:b1:e6:
70:2b:9f:4a:1c:14:09:25:70:8b:5a:4c:74:28:56:
1a:b7:b3:2d:a5:d2:45:d8:25:4b:f6:2c:39:78:58:
96:6c:74:1f:54:f6:19:5b:fd:95:11:68:f4:11:da:
d1:4a:3e:a6:b7:22:87:a6:1c:de:8b:48:da:5c:ad:
5d:75:7e:5d:a7:84:34:24:22:f7:61:eb:53:a6:b8:
15:35:3e:77:c2:69:2a:93:8c:40:7a:c2:a1:48:0f:
61:b9:a8:4f:f6:72:e2:3a:87:01:b0:f8:db:d6:85:
2e:e2:fe:27:dc:81:7d:47:67:46:bf:c2:44:3e:23:
4f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:C5:4B:11:8B:57:4B:6F:2E:4A:23:6B:54:C0:42:FF:22:FB:89:B6
X509v3 Authority Key Identifier:
keyid:49:32:89:25:6E:33:88:77:7D:95:E4:D5:31:56:7C:E3:67:2A:14:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/STKJJW4ziHd9leTVMVZ842cqFJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/7ae133-d0b6-4b68-8f61-d4d9a2e60e64/1/STKJJW4ziHd9leTVMVZ842cqFJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/7ae133-d0b6-4b68-8f61-d4d9a2e60e64/1/STKJJW4ziHd9leTVMVZ842cqFJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:be:56:7b:09:81:95:d9:bc:ed:a1:7b:26:90:e4:86:26:f3:
5c:e4:7d:e7:3c:17:35:db:e9:b9:ee:5f:d6:55:5f:40:0c:40:
d1:c1:84:4b:70:7c:86:b6:df:cb:5a:b7:28:76:7b:ef:7b:a4:
e6:61:15:75:0d:01:4b:d7:a2:f2:bd:ef:db:8b:af:24:48:39:
7a:af:d1:7d:c1:67:df:db:b2:b3:31:46:e4:11:16:93:80:ec:
ec:a2:6d:86:38:42:4d:1f:90:d4:66:c5:73:72:26:ea:07:25:
13:56:8b:06:81:e3:5a:4f:77:37:d8:a6:bd:c3:2c:1e:ed:ff:
9b:c7:9b:b0:d3:b4:45:3d:70:5f:70:1c:1a:7f:e2:20:15:4c:
6d:fb:94:25:f3:74:89:9a:cb:cd:af:16:8d:ad:14:f2:2e:53:
f4:31:0b:60:41:90:31:2d:78:8a:4f:3a:ca:55:cf:e1:df:a6:
31:f4:67:cb:c6:8f:2e:85:a5:b2:36:20:46:51:2c:2d:b1:70:
8c:95:70:07:68:1b:11:eb:65:f5:2d:22:53:50:1f:ec:41:bf:
dd:91:89:d5:ee:98:42:5d:10:d0:bb:1c:77:f6:ed:dc:fc:98:
92:62:0b:c6:4a:44:87:ee:f9:e0:ac:ff:b4:b1:40:eb:1b:1c:
ad:10:5f:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 09:24:17 2025 by rpki-client