Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/592cf0-03df-4886-b061-284f7c9622b5/1/sTCZw4tkd6aMmAGf9uAECAgHi5A.mft
File: sTCZw4tkd6aMmAGf9uAECAgHi5A.mft (raw, json)
Hash identifier: j46LZOxhp74ZjkJAVDNTU6oWw4Fnxsb0P5qIwOv/PAg=
Subject key identifier: C4:81:C2:01:93:C0:60:F4:5C:99:28:67:34:29:FB:0C:47:E7:87:80
Authority key identifier: B1:30:99:C3:8B:64:77:A6:8C:98:01:9F:F6:E0:04:08:08:07:8B:90
Certificate issuer: /CN=b13099c38b6477a68c98019ff6e0040808078b90
Certificate serial: 019873E1B9EDFFD5CDC4B7FEAF16142DE870
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sTCZw4tkd6aMmAGf9uAECAgHi5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/592cf0-03df-4886-b061-284f7c9622b5/1/sTCZw4tkd6aMmAGf9uAECAgHi5A.mft
Manifest number: 161A
Signing time: Mon 04 Aug 2025 07:00:29 +0000
Manifest this update: Mon 04 Aug 2025 07:00:29 +0000
Manifest next update: Tue 05 Aug 2025 07:00:29 +0000
Files and hashes: 1: gF7OF-sH3XFh2hq8KjpdxJgt63g.roa (hash: EpA0qsYa3m/WYOamet70LyZkiEfTFAk3SQEWKz+UC8w=)
2: sTCZw4tkd6aMmAGf9uAECAgHi5A.crl (hash: Xv45FKUEScQxfQjB5ODKp6QV5TsWTbjWizNuKu/rxnY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/592cf0-03df-4886-b061-284f7c9622b5/1/sTCZw4tkd6aMmAGf9uAECAgHi5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/592cf0-03df-4886-b061-284f7c9622b5/1/sTCZw4tkd6aMmAGf9uAECAgHi5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/sTCZw4tkd6aMmAGf9uAECAgHi5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e1:b9:ed:ff:d5:cd:c4:b7:fe:af:16:14:2d:e8:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b13099c38b6477a68c98019ff6e0040808078b90
Validity
Not Before: Aug 4 07:00:29 2025 GMT
Not After : Aug 5 07:00:29 2025 GMT
Subject: CN=c481c20193c060f45c9928673429fb0c47e78780
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:ff:75:f8:30:52:df:2c:25:e2:1f:cf:57:54:
fc:3a:52:d5:ff:b3:9a:dc:88:49:2f:90:92:f0:61:
df:8b:93:43:40:fd:43:93:0b:c1:4b:69:cc:50:ca:
ae:83:6a:91:0f:f7:f8:be:3d:6e:8a:c4:a8:a4:d2:
3a:ed:42:39:a6:d1:71:2d:2c:a3:e8:44:f4:6a:a1:
2c:a5:15:43:5a:9d:21:ff:e3:83:04:d2:b8:78:8d:
77:f2:25:c1:35:1a:d6:16:90:2e:1b:70:da:c0:b8:
4c:4d:5e:4b:55:80:64:dc:1f:a1:24:83:a3:e1:6c:
a7:74:84:e9:ec:bb:45:74:a4:d7:cc:c8:e8:22:fd:
78:1e:09:28:80:fb:96:47:b2:07:58:6f:ef:5b:35:
2d:fc:84:db:a2:bb:80:33:f9:a9:fb:30:93:c3:8b:
de:7b:f7:23:47:6d:46:e9:50:5f:f3:98:53:62:1c:
f5:9b:47:44:4a:7e:14:9f:88:67:14:35:4a:7b:4a:
63:84:21:7b:dc:18:4e:73:3f:da:ea:35:98:86:4c:
1c:3f:72:a0:e4:dd:63:6a:a7:32:74:c9:63:91:99:
ac:83:3b:2c:65:c9:f4:a6:44:23:27:42:f8:54:db:
1b:8a:97:f2:a9:d8:6a:ad:ad:f3:96:80:6e:a3:1d:
85:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:81:C2:01:93:C0:60:F4:5C:99:28:67:34:29:FB:0C:47:E7:87:80
X509v3 Authority Key Identifier:
keyid:B1:30:99:C3:8B:64:77:A6:8C:98:01:9F:F6:E0:04:08:08:07:8B:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sTCZw4tkd6aMmAGf9uAECAgHi5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/592cf0-03df-4886-b061-284f7c9622b5/1/sTCZw4tkd6aMmAGf9uAECAgHi5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/592cf0-03df-4886-b061-284f7c9622b5/1/sTCZw4tkd6aMmAGf9uAECAgHi5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:b0:46:81:9f:bb:2d:c8:4d:6c:8b:d9:bb:2a:da:e6:a3:bb:
d5:dc:9d:11:05:ad:7b:db:3c:84:a0:4b:89:ef:38:30:d5:9b:
4f:58:fb:db:c7:53:9b:43:e3:0b:78:17:92:95:4e:67:9f:f6:
c2:b1:99:cf:9e:db:0b:c0:03:16:eb:c6:e5:c8:b1:bd:a0:60:
f7:54:26:0e:7b:38:2a:0f:2a:56:40:f5:38:42:7b:bb:a3:5e:
ff:d6:d2:80:3a:ab:69:a6:1d:8b:a9:ab:e5:9c:75:83:ef:8b:
70:64:95:4d:9d:a3:fc:69:71:55:78:d0:d2:b3:e6:11:a6:b6:
44:4d:ab:15:79:b6:52:17:4d:cd:9d:99:f3:be:cd:4d:14:68:
e1:5b:b8:64:6d:ca:e5:a6:a4:ec:7e:8b:d1:d7:e5:a3:23:7e:
90:75:f9:54:86:7a:88:fc:b2:6e:97:8b:d2:00:f6:2b:38:d2:
b6:ab:29:9c:17:16:2d:d7:d7:05:ea:b5:65:2c:70:21:3b:bb:
06:97:8f:7d:c0:f8:43:db:9f:94:4d:7a:1d:43:b1:28:8a:86:
a4:e3:2d:dd:6f:2b:97:ae:a6:fa:68:a0:33:33:eb:26:15:e8:
6c:eb:37:4b:68:7f:1c:1e:d3:86:0f:2f:71:1a:49:dc:aa:57:
13:9a:b7:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:09:07 2025 by rpki-client