Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/07cdcf-8875-4770-8c75-41b745bf53db/1/STeGYPXwGSOUbDXZS-XM19K3EFE.mft
File: STeGYPXwGSOUbDXZS-XM19K3EFE.mft (raw, json)
Hash identifier: E8IDQMfDeQ3Xpjezsxqr6IVhBmVztG14+qHbRwhOZW4=
Subject key identifier: CB:4B:B1:F5:6D:A4:84:2E:D2:06:7B:57:40:A4:6A:CC:A0:A6:44:8E
Authority key identifier: 49:37:86:60:F5:F0:19:23:94:6C:35:D9:4B:E5:CC:D7:D2:B7:10:51
Certificate issuer: /CN=49378660f5f01923946c35d94be5ccd7d2b71051
Certificate serial: 019745F8E99263626C65F4E8BD59B90624AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/STeGYPXwGSOUbDXZS-XM19K3EFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/07cdcf-8875-4770-8c75-41b745bf53db/1/STeGYPXwGSOUbDXZS-XM19K3EFE.mft
Manifest number: 0B08
Signing time: Fri 06 Jun 2025 16:00:29 +0000
Manifest this update: Fri 06 Jun 2025 16:00:29 +0000
Manifest next update: Sat 07 Jun 2025 16:00:29 +0000
Files and hashes: 1: 2ZvpZ0sZ6P6ydTiCDEFolKMvfh0.roa (hash: 1DssY9QtTEut1NYlrrYk3dvjYOvc/xqpRvFLT8I4S4E=)
2: Nd7RiM9HcPfJG0Luml6fbQP8Ccc.roa (hash: 12HrzEJgqYZZKVYzptFAFjEBlvrDx+MP7ZbjX9byhIE=)
3: STeGYPXwGSOUbDXZS-XM19K3EFE.crl (hash: KfoYjgrWkKEpKkQ2xMTnef91sjyIGOYiGDS2DcwQxjA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/07cdcf-8875-4770-8c75-41b745bf53db/1/STeGYPXwGSOUbDXZS-XM19K3EFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/07cdcf-8875-4770-8c75-41b745bf53db/1/STeGYPXwGSOUbDXZS-XM19K3EFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/STeGYPXwGSOUbDXZS-XM19K3EFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:45:f8:e9:92:63:62:6c:65:f4:e8:bd:59:b9:06:24:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49378660f5f01923946c35d94be5ccd7d2b71051
Validity
Not Before: Jun 6 16:00:29 2025 GMT
Not After : Jun 7 16:00:29 2025 GMT
Subject: CN=cb4bb1f56da4842ed2067b5740a46acca0a6448e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:74:3d:09:2d:6f:43:f1:62:3a:95:fd:15:ba:
22:d9:54:14:de:be:ef:a5:b8:71:19:29:54:b3:10:
96:eb:2d:69:e1:64:b4:ee:3c:2f:33:bc:43:aa:34:
9f:40:43:90:fb:7d:8c:08:2a:20:66:27:1e:d7:3f:
c3:b3:ad:a3:db:04:59:16:95:77:d4:7d:17:61:a3:
19:8a:7b:a1:81:b0:b3:c5:ab:e9:51:25:a9:a3:b2:
7a:d3:42:28:40:e9:27:b2:90:70:d2:69:19:37:af:
0c:1d:e5:77:08:b1:ee:2c:73:b6:43:06:7d:0b:50:
00:ff:57:9d:87:63:15:28:a4:66:78:f9:27:b3:0f:
71:e9:c1:0e:85:10:b1:c6:83:9b:c2:75:88:63:5a:
4a:ce:82:a1:c5:ca:61:88:04:34:e4:84:ce:0f:4a:
68:16:4e:b5:81:47:1d:6d:a6:5e:b3:ee:f5:19:67:
45:c5:59:cc:65:79:9d:7c:67:3a:4b:ab:c0:a0:21:
e5:3e:4c:19:3d:2f:9b:49:a2:13:8f:2d:70:be:97:
94:50:37:99:f0:0b:59:5b:28:55:36:6f:9b:f6:76:
4c:0d:e6:4a:83:e6:7a:b6:5f:61:35:a8:8c:bd:0c:
33:21:1c:d8:1b:72:f5:41:01:bc:12:68:7d:a6:62:
6b:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:4B:B1:F5:6D:A4:84:2E:D2:06:7B:57:40:A4:6A:CC:A0:A6:44:8E
X509v3 Authority Key Identifier:
keyid:49:37:86:60:F5:F0:19:23:94:6C:35:D9:4B:E5:CC:D7:D2:B7:10:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/STeGYPXwGSOUbDXZS-XM19K3EFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/07cdcf-8875-4770-8c75-41b745bf53db/1/STeGYPXwGSOUbDXZS-XM19K3EFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/07cdcf-8875-4770-8c75-41b745bf53db/1/STeGYPXwGSOUbDXZS-XM19K3EFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:f9:6d:ae:dc:4e:19:6a:e4:9f:99:d1:a0:4f:b6:6c:3b:a9:
a1:54:8c:87:fc:cf:8d:3b:49:ce:24:64:fc:81:55:ec:02:05:
f3:0b:73:f6:42:79:33:23:33:6d:9d:cb:5f:12:91:00:e1:87:
85:62:24:8a:b9:5e:fb:79:fc:bf:c5:4b:90:e4:f6:77:8a:86:
13:4a:99:24:f4:d4:5b:d3:6b:46:f9:48:0a:ec:0e:c9:08:da:
e3:93:44:b0:31:c5:9a:25:9a:69:00:c7:36:e8:3a:18:58:69:
9f:f4:f9:ec:ed:79:86:df:74:56:5d:c1:f2:58:17:2a:6a:d3:
0e:fc:d5:08:74:30:56:67:84:1b:1e:32:53:89:e6:72:13:36:
46:71:47:bc:5b:48:93:7a:05:a9:39:6b:01:2e:f1:77:53:13:
88:55:85:bc:01:88:f5:37:64:b1:0b:24:84:8c:b8:94:6e:87:
a6:bc:aa:96:82:6e:a5:20:bc:00:4e:21:83:37:a9:64:c5:18:
a0:ff:15:80:df:89:d9:52:a3:7a:20:1e:26:46:ce:3f:27:c3:
6b:3e:17:c9:57:8f:d7:20:85:ca:2a:9b:ec:18:ba:a9:ec:52:
0d:b3:ab:2c:6c:55:4c:2b:95:d2:3d:be:df:5f:b5:74:f5:49:
c3:55:8a:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:00:29 2025 by rpki-client