Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/b38821-23f2-4e5e-941c-a8f0ee00b2ad/1/sTLpNaEPnOIW4Jk65BmclvUnOvQ.mft
File: sTLpNaEPnOIW4Jk65BmclvUnOvQ.mft (raw, json)
Hash identifier: MtmSRsM3mhTcJqAb+Yo5mYPKlSmt/oAP51i+vvTSANs=
Subject key identifier: 7A:A4:B0:65:D3:E2:B1:68:40:70:01:62:9B:EF:A2:98:DA:88:EB:4E
Authority key identifier: B1:32:E9:35:A1:0F:9C:E2:16:E0:99:3A:E4:19:9C:96:F5:27:3A:F4
Certificate issuer: /CN=b132e935a10f9ce216e0993ae4199c96f5273af4
Certificate serial: 019740650185523F892A3E5A4022C9B500F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sTLpNaEPnOIW4Jk65BmclvUnOvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/b38821-23f2-4e5e-941c-a8f0ee00b2ad/1/sTLpNaEPnOIW4Jk65BmclvUnOvQ.mft
Manifest number: 11B5
Signing time: Thu 05 Jun 2025 14:00:50 +0000
Manifest this update: Thu 05 Jun 2025 14:00:50 +0000
Manifest next update: Fri 06 Jun 2025 14:00:50 +0000
Files and hashes: 1: DLK7aUuoCrkixmfK1Tr6lgYywbs.roa (hash: P1mAikX7/iUCIq0Iyy8fvjfAyIPndaCCAY0oESDv+Qo=)
2: mxU7ZGuWRrVnoU7neP0ntyKL78s.roa (hash: X4Bp+WOWNCY8+u0/f19L8Y2SQKOHLXJCsrOK+p7unk8=)
3: sTLpNaEPnOIW4Jk65BmclvUnOvQ.crl (hash: Tirwsfh3r89ThDEhAOV6qKU6DFvzPPDlWBeVtfkA5hg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/b38821-23f2-4e5e-941c-a8f0ee00b2ad/1/sTLpNaEPnOIW4Jk65BmclvUnOvQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/b38821-23f2-4e5e-941c-a8f0ee00b2ad/1/sTLpNaEPnOIW4Jk65BmclvUnOvQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sTLpNaEPnOIW4Jk65BmclvUnOvQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:40:65:01:85:52:3f:89:2a:3e:5a:40:22:c9:b5:00:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b132e935a10f9ce216e0993ae4199c96f5273af4
Validity
Not Before: Jun 5 14:00:50 2025 GMT
Not After : Jun 6 14:00:50 2025 GMT
Subject: CN=7aa4b065d3e2b168407001629befa298da88eb4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:32:e4:29:4c:8a:ed:ac:1b:3c:24:8d:c6:81:
8e:8f:03:2c:77:ef:3c:f1:0d:ad:c3:e2:2b:60:31:
63:ba:e4:32:a3:63:f6:bd:7d:b0:3d:83:53:a5:13:
54:f9:8e:c2:88:f3:49:6a:94:2d:d2:d2:d4:79:83:
f1:ec:aa:54:6a:6e:db:0e:2e:6e:4a:33:ed:91:28:
97:1b:be:f1:6e:c6:be:79:20:25:9e:e8:bb:54:6c:
42:fe:74:ba:f3:dd:8a:a7:0d:cb:be:86:57:9c:b8:
a8:32:d0:fd:c4:8c:54:89:a7:47:e0:24:ae:62:a7:
6e:5b:70:b1:cd:bf:6e:c5:f2:a4:b7:ba:36:3e:3e:
ba:42:44:a8:d3:cb:9b:03:bc:e1:35:a4:57:16:a0:
72:96:8d:6e:c5:f9:bd:b4:11:c7:5c:b8:50:61:73:
e6:f8:ba:b6:71:37:a5:00:53:fa:da:87:0d:15:f2:
80:ca:66:47:29:95:0a:92:b3:30:54:16:37:70:4e:
ab:c4:ab:bb:8b:d8:3e:2b:15:26:86:d0:1d:ad:50:
cd:76:32:81:5c:7f:fc:eb:b4:43:a1:ab:92:4c:21:
a9:76:d6:3c:2f:c4:17:18:b7:8e:82:2f:64:69:1c:
13:e7:13:36:ba:94:85:47:5b:c6:9d:82:16:33:68:
a9:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:A4:B0:65:D3:E2:B1:68:40:70:01:62:9B:EF:A2:98:DA:88:EB:4E
X509v3 Authority Key Identifier:
keyid:B1:32:E9:35:A1:0F:9C:E2:16:E0:99:3A:E4:19:9C:96:F5:27:3A:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sTLpNaEPnOIW4Jk65BmclvUnOvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b38821-23f2-4e5e-941c-a8f0ee00b2ad/1/sTLpNaEPnOIW4Jk65BmclvUnOvQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b38821-23f2-4e5e-941c-a8f0ee00b2ad/1/sTLpNaEPnOIW4Jk65BmclvUnOvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:6d:4f:bf:d4:7d:9c:aa:53:51:26:e9:52:b3:f5:18:4d:12:
25:63:f9:d6:f0:1f:c5:bb:80:54:d0:4e:ce:e4:db:68:2c:3f:
51:aa:ea:0f:a0:3f:2a:b0:09:dd:e0:0e:f5:9e:dd:ae:0b:0e:
f3:1d:8d:07:73:77:03:b4:f5:8f:bb:89:de:ff:02:a6:5f:52:
d1:29:44:3c:32:41:ac:cc:10:33:fb:df:1b:c4:74:50:4c:dc:
cb:2e:f6:5c:b7:4d:06:0c:67:e5:28:4b:37:e0:51:c8:da:05:
92:07:bf:9b:99:99:a8:d6:47:b2:0c:fb:b7:a2:8f:e2:8e:22:
06:75:b2:7f:77:60:40:0e:0e:13:0f:e8:e9:62:18:72:94:f6:
45:c5:e3:c8:96:0c:ce:85:30:91:0e:bc:c4:f9:5d:64:ba:a6:
fa:21:61:f5:cb:94:71:19:e7:d3:82:27:10:ce:5a:90:14:92:
ff:7d:ee:9e:bb:84:6a:6c:0c:14:b4:d5:73:2d:cf:d6:09:cd:
30:82:73:c8:3a:51:38:76:f2:5c:16:92:de:66:9b:14:59:06:
e0:72:db:84:50:16:15:7f:00:8f:24:17:10:25:0c:6b:16:9f:
37:9b:3e:b9:83:6f:e6:93:29:39:6f:cb:b5:4f:e9:a1:00:b8:
2e:da:63:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:14:40 2025 by rpki-client