Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/338605-4db4-4ede-a310-5642353d431a/1/StRn8W0JUeQwcTgyxsdZVh52BB8.mft
File: StRn8W0JUeQwcTgyxsdZVh52BB8.mft (raw, json)
Hash identifier: JnFy0pXSqlf8Y4bectM9qkf/hMB86gcrm2rWTLFVInw=
Subject key identifier: 2F:91:12:FA:00:55:59:F6:51:4E:E9:5B:6F:58:9E:21:FA:24:FB:09
Authority key identifier: 4A:D4:67:F1:6D:09:51:E4:30:71:38:32:C6:C7:59:56:1E:76:04:1F
Certificate issuer: /CN=4ad467f16d0951e430713832c6c759561e76041f
Certificate serial: 019A4EF4E042403F220D6A58F224F4359189
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/StRn8W0JUeQwcTgyxsdZVh52BB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/338605-4db4-4ede-a310-5642353d431a/1/StRn8W0JUeQwcTgyxsdZVh52BB8.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 13:01:02 +0000
Manifest this update: Tue 04 Nov 2025 13:01:02 +0000
Manifest next update: Wed 05 Nov 2025 13:01:02 +0000
Files and hashes: 1: 0qO4O1iuPzCMlLlUt1HamKiYOoA.roa (hash: cgE/JK3sVjQnbjv1N0QFg9l7ug/Hstmhscf6qZhJ3xA=)
2: StRn8W0JUeQwcTgyxsdZVh52BB8.crl (hash: KI8toKQndSPq0eRNt/yg6dpgbVIT6Ir5wKAVOomS/+A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/338605-4db4-4ede-a310-5642353d431a/1/StRn8W0JUeQwcTgyxsdZVh52BB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/338605-4db4-4ede-a310-5642353d431a/1/StRn8W0JUeQwcTgyxsdZVh52BB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/StRn8W0JUeQwcTgyxsdZVh52BB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:e0:42:40:3f:22:0d:6a:58:f2:24:f4:35:91:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ad467f16d0951e430713832c6c759561e76041f
Validity
Not Before: Nov 4 13:01:02 2025 GMT
Not After : Nov 5 13:01:02 2025 GMT
Subject: CN=2f9112fa005559f6514ee95b6f589e21fa24fb09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c5:b4:2f:96:6d:d5:8c:a3:7e:1e:1a:38:4e:
45:57:e5:08:ad:80:14:2b:f8:66:cc:6f:2e:0e:c1:
a7:9a:26:88:c7:3a:52:e5:f2:10:d3:0e:6a:83:1a:
d8:58:44:f7:83:13:33:cc:42:da:14:23:f2:89:56:
2c:bf:d1:35:2f:49:56:ad:d8:bf:aa:8f:7a:06:72:
93:cd:8c:d1:46:85:b9:d7:69:26:85:4b:77:0c:b6:
c6:53:cc:f2:be:74:d6:54:0c:da:28:9a:fa:43:ca:
40:3b:e5:c9:0d:eb:55:8b:c2:94:a7:dd:a4:2f:90:
f6:e6:e5:e0:be:2a:f3:66:b9:82:c4:69:92:eb:90:
e5:c6:53:89:8e:06:54:8a:4c:6b:25:87:71:66:b6:
6e:2d:15:66:07:47:7d:3a:69:26:1d:3a:9a:4b:40:
46:86:07:03:fa:0d:e8:1b:1a:65:6a:f7:77:fb:67:
80:36:20:4d:e2:db:53:a6:1f:d1:e8:93:41:e2:50:
21:f2:e0:ec:41:b8:04:16:40:5c:c6:b8:96:fc:e1:
43:5a:f7:09:d8:1f:79:07:47:04:0b:de:df:70:c5:
a4:84:0b:34:56:e3:05:37:58:ad:2a:f9:3b:6d:3b:
23:39:58:2f:0d:9c:69:68:5e:da:80:21:44:c7:30:
73:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:91:12:FA:00:55:59:F6:51:4E:E9:5B:6F:58:9E:21:FA:24:FB:09
X509v3 Authority Key Identifier:
keyid:4A:D4:67:F1:6D:09:51:E4:30:71:38:32:C6:C7:59:56:1E:76:04:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/StRn8W0JUeQwcTgyxsdZVh52BB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/338605-4db4-4ede-a310-5642353d431a/1/StRn8W0JUeQwcTgyxsdZVh52BB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/338605-4db4-4ede-a310-5642353d431a/1/StRn8W0JUeQwcTgyxsdZVh52BB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:c0:e3:53:07:77:41:7d:20:4d:5e:cc:99:99:f8:4f:56:97:
06:ba:88:34:ea:e4:b5:62:54:6f:f4:da:cc:cb:9b:6c:a7:52:
26:15:83:ad:7e:cb:7c:59:bf:1a:eb:d8:64:37:b5:82:57:86:
02:aa:18:3c:06:a7:af:0c:4d:60:5d:47:a1:19:1e:49:b0:e4:
ae:69:aa:0f:b0:97:fa:7c:ca:14:6a:b9:e6:a3:b4:81:38:f6:
66:bf:6d:ac:a0:55:67:76:76:8d:2d:ef:8a:12:97:0b:b1:7e:
aa:f8:2a:33:42:b1:ad:48:31:37:1c:a0:1f:8a:bd:60:50:a9:
05:da:97:5d:10:c5:96:82:c4:74:46:26:90:62:17:bc:27:e8:
9e:77:2d:6f:03:37:ee:5d:a9:4e:85:3b:a8:ab:21:97:15:c7:
b8:78:ce:06:0d:f8:11:70:57:ca:38:34:b1:66:af:d5:65:67:
d5:07:53:6d:6b:a5:02:ec:31:06:e4:a2:0e:26:82:8b:1a:77:
92:23:d9:73:84:81:b1:19:21:51:f0:e9:0f:39:df:f1:c5:08:
fe:ac:a9:65:fe:a7:b1:95:8b:15:67:d0:da:f5:14:df:da:cf:
1d:71:d0:30:7c:74:bf:4b:9e:ec:0b:08:9d:cc:60:40:aa:91:
c5:e8:50:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:12:21 2025 by rpki-client