Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/338605-4db4-4ede-a310-5642353d431a/1/StRn8W0JUeQwcTgyxsdZVh52BB8.mft
File: StRn8W0JUeQwcTgyxsdZVh52BB8.mft (raw, json)
Hash identifier: 3srnYNJjo0ZfhiU4C3Tx/gQRPSDhsR6FEy1zvRSnotA=
Subject key identifier: 54:FF:F7:02:A9:70:97:B2:9D:54:76:66:B0:56:1D:85:E4:69:26:3F
Authority key identifier: 4A:D4:67:F1:6D:09:51:E4:30:71:38:32:C6:C7:59:56:1E:76:04:1F
Certificate issuer: /CN=4ad467f16d0951e430713832c6c759561e76041f
Certificate serial: 019890D9A5942F6BB070DE275914D30F74EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/StRn8W0JUeQwcTgyxsdZVh52BB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/338605-4db4-4ede-a310-5642353d431a/1/StRn8W0JUeQwcTgyxsdZVh52BB8.mft
Manifest number: 1626
Signing time: Sat 09 Aug 2025 22:00:39 +0000
Manifest this update: Sat 09 Aug 2025 22:00:39 +0000
Manifest next update: Sun 10 Aug 2025 22:00:39 +0000
Files and hashes: 1: 0qO4O1iuPzCMlLlUt1HamKiYOoA.roa (hash: cgE/JK3sVjQnbjv1N0QFg9l7ug/Hstmhscf6qZhJ3xA=)
2: StRn8W0JUeQwcTgyxsdZVh52BB8.crl (hash: I5jNE1IuRphO3b5dWkDgVHlH2VPJFRbhnpcy23Qenas=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/338605-4db4-4ede-a310-5642353d431a/1/StRn8W0JUeQwcTgyxsdZVh52BB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/338605-4db4-4ede-a310-5642353d431a/1/StRn8W0JUeQwcTgyxsdZVh52BB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/StRn8W0JUeQwcTgyxsdZVh52BB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 18:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:90:d9:a5:94:2f:6b:b0:70:de:27:59:14:d3:0f:74:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ad467f16d0951e430713832c6c759561e76041f
Validity
Not Before: Aug 9 22:00:39 2025 GMT
Not After : Aug 10 22:00:39 2025 GMT
Subject: CN=54fff702a97097b29d547666b0561d85e469263f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:fc:d3:95:33:67:62:21:c7:8f:88:0d:1d:40:
bc:f1:3e:2f:b6:2c:80:7b:d1:50:36:e8:3f:60:60:
07:ed:67:5c:24:17:05:46:cc:9b:1a:76:62:9c:0e:
70:29:0c:7a:ca:99:76:e5:96:23:47:72:ee:15:cd:
36:ce:72:25:87:01:a9:db:bd:41:4d:1d:13:06:35:
86:8e:e4:5d:af:88:c4:98:82:76:f9:a9:82:4a:00:
59:ed:94:d2:b8:55:38:6c:4b:4d:f6:42:f7:54:52:
f0:4a:d8:7c:ed:77:cd:d5:4b:b1:c6:4f:ca:fa:f4:
95:cf:76:e1:6e:ec:df:9c:01:87:c9:3e:0f:e9:c2:
37:46:a5:d9:9b:e3:13:49:41:b0:aa:67:eb:c0:b0:
51:a9:e1:c4:24:26:a7:c7:17:fa:4a:f8:40:5f:ba:
34:7e:1e:22:ed:57:93:b3:81:e7:1e:35:ca:f6:82:
75:21:2a:6b:11:1c:ae:d2:17:54:ed:ea:f7:63:4f:
a4:45:30:e6:bb:f2:77:7a:3e:98:1a:d0:78:70:46:
89:08:ed:8b:89:94:cd:22:54:bf:3e:b4:a8:50:99:
c4:29:49:65:ca:15:20:9d:10:ba:49:87:9a:55:3f:
22:0d:e5:0c:55:d2:a4:71:97:b0:f7:63:ed:2d:c0:
72:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:FF:F7:02:A9:70:97:B2:9D:54:76:66:B0:56:1D:85:E4:69:26:3F
X509v3 Authority Key Identifier:
keyid:4A:D4:67:F1:6D:09:51:E4:30:71:38:32:C6:C7:59:56:1E:76:04:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/StRn8W0JUeQwcTgyxsdZVh52BB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/338605-4db4-4ede-a310-5642353d431a/1/StRn8W0JUeQwcTgyxsdZVh52BB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/338605-4db4-4ede-a310-5642353d431a/1/StRn8W0JUeQwcTgyxsdZVh52BB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:a1:c4:be:a0:cb:b7:9c:14:c6:c0:b3:bb:05:32:13:6b:3d:
6e:29:f3:20:62:20:0d:2d:4d:72:83:b8:7c:dc:69:f6:dc:9f:
e4:17:be:fa:7a:30:5f:ec:8a:fc:3a:a4:22:35:05:ce:27:87:
71:55:fd:1a:79:c8:da:aa:bf:22:79:f5:64:00:02:fe:5f:67:
91:68:3e:b5:dd:d3:bf:3a:f1:11:27:86:c9:a7:5d:06:78:0f:
6d:4a:f3:26:f1:47:45:4a:ab:27:b6:9e:d6:5d:e1:da:3a:c4:
68:aa:c5:e0:e3:d3:70:78:8e:b6:79:f8:31:8d:56:eb:93:32:
de:6c:d5:79:8c:2d:69:25:df:4e:ec:4c:ff:ce:58:f3:3d:80:
d5:04:02:ff:33:73:68:30:67:2c:08:5f:81:19:1c:1e:f7:2a:
73:1d:11:17:95:fb:5e:9b:0f:24:f7:16:3e:d6:7a:32:91:df:
db:c9:5e:f3:0c:53:8f:e9:f2:51:a2:dd:aa:b4:84:95:7b:81:
7c:97:c0:d8:7e:c9:75:be:96:fd:f8:cb:ca:7c:af:e5:f6:e8:
2d:36:af:6c:af:92:63:d8:f4:ec:5d:46:c0:a7:dd:41:ed:ed:
eb:a7:2b:e9:95:91:76:00:84:e3:9a:d7:3f:c1:fa:f0:5a:37:
f2:41:23:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 04:54:19 2025 by rpki-client