Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/592cf0-03df-4886-b061-284f7c9622b5/1/sTCZw4tkd6aMmAGf9uAECAgHi5A.mft
File: sTCZw4tkd6aMmAGf9uAECAgHi5A.mft (raw, json)
Hash identifier: Dr2zwohO2g3zEgwAZSmCqMx79eRP5/BOIxExu34+2HQ=
Subject key identifier: 76:BB:01:88:F5:C9:D8:30:CC:D7:29:17:4E:DD:5F:ED:CE:44:F4:09
Authority key identifier: B1:30:99:C3:8B:64:77:A6:8C:98:01:9F:F6:E0:04:08:08:07:8B:90
Certificate issuer: /CN=b13099c38b6477a68c98019ff6e0040808078b90
Certificate serial: 019A4EF45C197A057D00D1E668F083F5FF4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sTCZw4tkd6aMmAGf9uAECAgHi5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/592cf0-03df-4886-b061-284f7c9622b5/1/sTCZw4tkd6aMmAGf9uAECAgHi5A.mft
Manifest number: 1710
Signing time: Tue 04 Nov 2025 13:00:28 +0000
Manifest this update: Tue 04 Nov 2025 13:00:28 +0000
Manifest next update: Wed 05 Nov 2025 13:00:28 +0000
Files and hashes: 1: gF7OF-sH3XFh2hq8KjpdxJgt63g.roa (hash: EpA0qsYa3m/WYOamet70LyZkiEfTFAk3SQEWKz+UC8w=)
2: sTCZw4tkd6aMmAGf9uAECAgHi5A.crl (hash: jPdM04wEsE3oQuLHZIefWKQHS9bolVVKAXElexiciAg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/592cf0-03df-4886-b061-284f7c9622b5/1/sTCZw4tkd6aMmAGf9uAECAgHi5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/592cf0-03df-4886-b061-284f7c9622b5/1/sTCZw4tkd6aMmAGf9uAECAgHi5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/sTCZw4tkd6aMmAGf9uAECAgHi5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:5c:19:7a:05:7d:00:d1:e6:68:f0:83:f5:ff:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b13099c38b6477a68c98019ff6e0040808078b90
Validity
Not Before: Nov 4 13:00:28 2025 GMT
Not After : Nov 5 13:00:28 2025 GMT
Subject: CN=76bb0188f5c9d830ccd729174edd5fedce44f409
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8b:f3:f1:32:1e:91:ac:c2:11:00:61:5f:6d:
7b:68:34:92:62:8f:56:9d:65:ae:0b:0e:64:54:c9:
b1:de:52:a2:c3:c2:62:f4:a3:7d:d3:31:f0:e8:f4:
92:0f:46:c6:f3:94:4e:8c:c6:03:85:a0:43:4a:12:
58:4c:56:88:50:51:7a:77:86:c8:a5:6e:8d:2d:c4:
58:27:10:a1:8a:45:a5:f0:af:c8:0f:92:27:18:f3:
63:85:e4:11:b6:3c:b4:f0:7e:ef:d3:df:58:ba:72:
b2:ce:7b:b5:a0:87:2b:0a:ed:27:50:a5:e6:d4:6b:
9d:dd:b4:69:44:08:b8:bc:18:97:7c:81:7d:44:3c:
29:c6:04:ba:71:11:d3:03:9a:f7:46:dc:4e:50:ce:
29:8a:7e:37:22:2b:95:39:36:ce:ce:00:bd:2c:1e:
2d:ff:e3:7c:0d:05:2c:46:29:e8:67:15:30:33:49:
2d:3d:6d:08:7a:23:6a:7c:ce:99:75:e1:47:69:c7:
ee:73:b7:f8:20:c7:59:cc:76:cc:88:37:9e:67:35:
0b:79:b3:1b:a8:9b:a6:f3:a1:36:3f:dd:12:24:fa:
56:8d:c4:52:3a:ee:20:90:d7:77:f8:08:60:f1:b0:
a7:78:94:54:71:37:da:9c:1b:33:fc:b8:1f:46:c5:
56:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:BB:01:88:F5:C9:D8:30:CC:D7:29:17:4E:DD:5F:ED:CE:44:F4:09
X509v3 Authority Key Identifier:
keyid:B1:30:99:C3:8B:64:77:A6:8C:98:01:9F:F6:E0:04:08:08:07:8B:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sTCZw4tkd6aMmAGf9uAECAgHi5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/592cf0-03df-4886-b061-284f7c9622b5/1/sTCZw4tkd6aMmAGf9uAECAgHi5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/592cf0-03df-4886-b061-284f7c9622b5/1/sTCZw4tkd6aMmAGf9uAECAgHi5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:3f:33:fc:6a:98:df:e5:4a:d5:26:50:c5:8e:13:0b:73:22:
0c:43:ed:af:4f:f3:d0:c0:71:ec:b9:a1:95:5b:f1:0d:94:88:
9b:73:5a:ab:fb:7d:a4:32:68:a7:cd:18:1d:a6:b5:4a:67:b9:
24:26:bf:d4:ab:62:27:a7:0b:39:e6:e7:a3:b7:d8:85:b4:b1:
d4:e9:2d:b2:4d:5e:b6:52:ec:dd:6c:4b:92:0a:a1:ee:dd:36:
45:64:ee:4f:85:a4:ba:57:61:ba:9f:52:6f:51:4f:35:13:89:
d6:c4:17:1a:e2:51:80:f2:74:9b:d5:86:85:18:09:37:22:20:
54:36:d7:75:f3:cd:41:a3:16:d7:76:c2:c5:c6:ea:3b:3b:5c:
4c:0d:7b:be:aa:f5:43:08:96:82:d5:ae:b4:47:08:3c:9d:74:
82:ee:99:31:e1:19:59:ec:71:bb:c8:5c:bf:55:1f:2e:1e:e7:
6d:8c:5e:4b:35:de:76:42:62:af:34:e0:59:a5:b6:d1:db:b7:
89:39:bd:ab:89:ca:a4:04:80:61:59:96:2b:f0:dd:59:47:1b:
ac:8a:e8:d6:84:c2:6c:a4:51:35:95:7f:05:05:fc:08:48:e7:
2b:9c:f5:e7:40:2e:6c:6b:ff:19:3b:bd:81:62:2f:37:9e:b0:
a0:2a:66:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:56:47 2025 by rpki-client