Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/07cdcf-8875-4770-8c75-41b745bf53db/1/STeGYPXwGSOUbDXZS-XM19K3EFE.mft
File: STeGYPXwGSOUbDXZS-XM19K3EFE.mft (raw, json)
Hash identifier: /a8eVq6uW6oWzHKLXjRl/g354Z/jBFpL24P5c8BYev4=
Subject key identifier: 58:2C:E6:7B:08:E5:A8:F6:80:E3:0F:E7:B5:64:34:86:EA:27:D3:2D
Authority key identifier: 49:37:86:60:F5:F0:19:23:94:6C:35:D9:4B:E5:CC:D7:D2:B7:10:51
Certificate issuer: /CN=49378660f5f01923946c35d94be5ccd7d2b71051
Certificate serial: 019616FE2B5A014BC2A66225E5F99F8D1985
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/STeGYPXwGSOUbDXZS-XM19K3EFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/07cdcf-8875-4770-8c75-41b745bf53db/1/STeGYPXwGSOUbDXZS-XM19K3EFE.mft
Manifest number: 0A6B
Signing time: Tue 08 Apr 2025 20:01:17 +0000
Manifest this update: Tue 08 Apr 2025 20:01:17 +0000
Manifest next update: Wed 09 Apr 2025 20:01:17 +0000
Files and hashes: 1: 2ZvpZ0sZ6P6ydTiCDEFolKMvfh0.roa (hash: 1DssY9QtTEut1NYlrrYk3dvjYOvc/xqpRvFLT8I4S4E=)
2: STeGYPXwGSOUbDXZS-XM19K3EFE.crl (hash: 1/7+/cj/+/ejLRLQj4M34fcTWzdQCNEOqNEkteh73DY=)
3: xHpXDv6E_1YUNoDN2LC9vwG7R2M.roa (hash: iKgnd8chs/jWQOV3iRdSagUM//dORmkxw4iMfLfQ7Gg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/07cdcf-8875-4770-8c75-41b745bf53db/1/STeGYPXwGSOUbDXZS-XM19K3EFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/07cdcf-8875-4770-8c75-41b745bf53db/1/STeGYPXwGSOUbDXZS-XM19K3EFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/STeGYPXwGSOUbDXZS-XM19K3EFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 20:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:16:fe:2b:5a:01:4b:c2:a6:62:25:e5:f9:9f:8d:19:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49378660f5f01923946c35d94be5ccd7d2b71051
Validity
Not Before: Apr 8 20:01:17 2025 GMT
Not After : Apr 9 20:01:17 2025 GMT
Subject: CN=582ce67b08e5a8f680e30fe7b5643486ea27d32d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:5d:8a:96:04:46:a5:6e:1c:98:ba:2e:66:dc:
1a:11:eb:de:8e:1d:df:5a:f8:b6:58:27:eb:c4:c0:
75:88:4f:2c:f7:2d:b3:e9:fa:83:17:d8:ac:c4:7d:
b9:95:4c:39:ba:d9:fe:60:32:15:88:c9:8a:a6:f0:
c5:87:ba:9b:b8:cf:e9:73:dc:b6:7b:6f:a1:c8:8f:
5b:92:bf:01:2e:7d:70:aa:0e:a4:c6:d6:0c:25:7e:
87:a0:e6:a6:71:9d:51:cf:87:8a:ec:85:98:20:38:
60:ef:5f:13:2c:86:06:a2:a9:b0:66:d3:79:a1:35:
03:a8:01:ee:7e:cc:de:a5:f6:c7:76:15:7d:6e:11:
08:97:49:b5:92:f7:82:9e:b4:bc:4b:d8:d5:c0:85:
84:46:ec:72:b5:82:5e:7d:49:d7:d2:66:da:9a:a0:
b5:fb:d9:a0:dd:0c:4a:49:53:bd:df:3e:db:e0:14:
24:d5:75:3b:91:e3:4b:9f:73:3c:93:b5:ff:e6:b3:
47:28:10:c7:52:ff:fe:ca:10:a2:9a:cc:c5:4d:e5:
71:c0:a6:fe:80:4a:af:e9:28:a4:db:ad:92:19:49:
fa:97:55:b5:28:fc:a9:da:2d:95:94:a0:37:ab:7e:
e1:4f:d1:30:16:fd:a5:95:ba:71:9c:0c:a9:62:a4:
68:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:2C:E6:7B:08:E5:A8:F6:80:E3:0F:E7:B5:64:34:86:EA:27:D3:2D
X509v3 Authority Key Identifier:
keyid:49:37:86:60:F5:F0:19:23:94:6C:35:D9:4B:E5:CC:D7:D2:B7:10:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/STeGYPXwGSOUbDXZS-XM19K3EFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/07cdcf-8875-4770-8c75-41b745bf53db/1/STeGYPXwGSOUbDXZS-XM19K3EFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/07cdcf-8875-4770-8c75-41b745bf53db/1/STeGYPXwGSOUbDXZS-XM19K3EFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:8a:ff:b0:97:9d:2e:14:35:c8:63:07:d3:7a:77:d3:c0:65:
98:bb:c4:a5:af:d1:3c:e9:34:18:42:af:6d:af:6b:84:dd:23:
ea:ee:01:1c:dc:8d:2a:0e:54:a3:c1:be:08:c8:42:18:f1:3e:
55:97:61:61:4f:bb:30:89:76:81:ac:90:59:37:fc:5e:29:b6:
dd:c8:ee:85:3f:cc:10:84:a6:4c:49:88:97:7a:4f:c9:cf:dc:
98:53:dc:59:71:e0:e5:7f:8e:33:6e:18:11:1c:f5:0c:a1:26:
30:2d:34:34:83:68:4c:ce:21:70:8f:10:b9:56:48:9b:48:a0:
5e:1b:3c:c1:1c:9b:4e:74:cc:03:a4:a6:03:bc:20:70:87:3f:
a9:76:2c:2b:3b:1d:c5:3d:75:1f:a7:bc:4a:89:97:03:79:06:
07:03:77:0c:12:42:d4:a3:4d:c7:f5:03:e6:2e:31:8f:22:e9:
50:0a:34:2f:7c:2c:65:10:2e:e5:cf:06:eb:68:9b:90:18:a9:
e0:62:c0:2b:42:ff:3f:0e:ce:c2:fa:ce:67:a8:04:05:96:03:
bf:37:3b:46:28:b9:f6:51:9f:c6:aa:e3:5f:2b:ae:34:f5:57:
35:50:05:d5:b3:4e:01:d5:90:fb:ae:14:0c:cc:ca:54:65:10:
38:2d:65:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:50:25 2025 by rpki-client