
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/d765a4-54eb-410d-8f3d-689ba4d33c4b/1/STotSDdjMKWC-vPjAy73sLzKM-g.mft
File: STotSDdjMKWC-vPjAy73sLzKM-g.mft (raw, json)
Hash identifier: vcgpjm3EMxDsVwsNLLJLlnA7ZFRvpWYijKw63HUxkA8=
Subject key identifier: 11:53:E7:BC:52:08:80:19:4F:BE:9B:B3:96:83:21:DB:EB:81:6F:20
Authority key identifier: 49:3A:2D:48:37:63:30:A5:82:FA:F3:E3:03:2E:F7:B0:BC:CA:33:E8
Certificate issuer: /CN=493a2d48376330a582faf3e3032ef7b0bcca33e8
Certificate serial: 01988BB3549282A8F277B276C800A965CFCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/STotSDdjMKWC-vPjAy73sLzKM-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/d765a4-54eb-410d-8f3d-689ba4d33c4b/1/STotSDdjMKWC-vPjAy73sLzKM-g.mft
Manifest number: 044B
Signing time: Fri 08 Aug 2025 22:00:42 +0000
Manifest this update: Fri 08 Aug 2025 22:00:42 +0000
Manifest next update: Sat 09 Aug 2025 22:00:42 +0000
Files and hashes: 1: 1eZlwD4fnzVx_ZuiX-KY-unzRYA.roa (hash: FfjJukJvNSQzT9n6wjLCsM9xDWFdpCKe+CsdvwMwZRs=)
2: GXnQPnuqnvBWk7kpONau-2u0RoQ.roa (hash: uxonlVe7DqVs73Mq5GsJwlXeQ95X/yFAybekoDtId+I=)
3: KyYmqZA206kErzPtR2YQzPU--WY.roa (hash: fQeQLftranJsCVjcRRs8kVttSYkJPcfUSHb9P69BPM8=)
4: STotSDdjMKWC-vPjAy73sLzKM-g.crl (hash: +xuPzphqj0CQANpX4n1QqDFzecHoB52FcXeZXBUVpH4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/d765a4-54eb-410d-8f3d-689ba4d33c4b/1/STotSDdjMKWC-vPjAy73sLzKM-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/d765a4-54eb-410d-8f3d-689ba4d33c4b/1/STotSDdjMKWC-vPjAy73sLzKM-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/STotSDdjMKWC-vPjAy73sLzKM-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:b3:54:92:82:a8:f2:77:b2:76:c8:00:a9:65:cf:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=493a2d48376330a582faf3e3032ef7b0bcca33e8
Validity
Not Before: Aug 8 22:00:42 2025 GMT
Not After : Aug 9 22:00:42 2025 GMT
Subject: CN=1153e7bc520880194fbe9bb3968321dbeb816f20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:64:82:96:58:91:07:b6:92:7c:e8:8b:61:4b:
8d:0b:2e:dd:02:3f:d3:dd:d2:a6:31:ef:6c:71:4b:
5d:8a:43:07:e7:5e:da:a7:94:2b:a5:f6:20:00:76:
1a:45:c5:ea:0f:de:19:53:b4:cc:c1:be:78:bc:5e:
9e:f9:66:44:aa:0f:97:0c:ed:80:0c:f6:ac:5b:e9:
ec:f1:aa:d1:a1:74:95:10:74:fd:0c:33:80:42:4e:
29:8d:e2:c7:e2:33:42:a1:0e:ec:08:58:5d:f4:d5:
1f:f4:ff:49:90:b8:97:df:14:17:ff:91:01:34:28:
f2:55:a5:37:39:00:92:96:b7:55:6e:32:df:0d:8f:
6f:d0:8c:1c:77:3a:02:7a:a3:59:a1:78:d2:2b:75:
66:83:85:74:56:ac:d9:c7:1c:79:1c:4d:b9:33:8c:
c2:84:74:2f:5b:8e:ae:1b:da:ba:8e:15:36:56:bb:
ed:48:66:da:28:5a:ce:c7:0c:92:e3:58:3c:aa:94:
59:58:4e:0f:02:c9:e9:39:c0:43:8d:49:79:70:cd:
97:a9:b7:7e:b2:5c:fc:96:c3:f0:5a:a1:88:0b:4e:
0e:ae:c3:db:47:7f:d1:e9:32:a4:33:b1:3c:89:1b:
cc:1d:02:76:04:93:e5:85:d8:bd:39:45:00:de:e4:
3c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:53:E7:BC:52:08:80:19:4F:BE:9B:B3:96:83:21:DB:EB:81:6F:20
X509v3 Authority Key Identifier:
keyid:49:3A:2D:48:37:63:30:A5:82:FA:F3:E3:03:2E:F7:B0:BC:CA:33:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/STotSDdjMKWC-vPjAy73sLzKM-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d765a4-54eb-410d-8f3d-689ba4d33c4b/1/STotSDdjMKWC-vPjAy73sLzKM-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d765a4-54eb-410d-8f3d-689ba4d33c4b/1/STotSDdjMKWC-vPjAy73sLzKM-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:3c:e6:87:88:96:61:d9:bf:8e:a3:ad:d7:6e:18:84:04:c7:
87:4e:55:26:5f:70:4d:89:ab:39:bc:cc:5e:6d:b0:1d:df:a9:
69:b4:ff:f4:0b:33:d4:9e:f4:1a:36:80:c0:ca:45:aa:4e:88:
69:3d:ee:c5:ae:b7:bc:bc:8f:b0:4a:36:1c:20:3d:4d:93:e2:
39:e9:ce:59:8f:5f:d2:ff:79:e0:4e:7a:ee:d7:3a:5d:bc:0f:
20:55:ed:7b:bc:a0:d9:6b:13:c2:62:5b:5c:17:82:72:ee:c5:
32:4d:82:b8:5a:6a:d5:ba:ff:ab:30:a6:32:e7:50:1f:7f:6f:
f2:04:70:b8:dc:63:bf:b8:89:58:41:03:58:d2:23:8d:90:b9:
47:71:7b:ee:09:64:fa:8e:97:c8:ef:8a:e1:fb:67:9c:a7:18:
96:70:7c:d4:d9:78:56:eb:49:f7:b9:63:2f:35:84:1b:6b:b3:
a4:8f:08:63:fc:eb:1b:af:ac:a8:71:0d:ac:67:81:97:e1:49:
00:0d:1a:a4:14:30:91:01:57:1c:23:ed:96:af:17:c6:dd:2b:
21:28:f6:92:f1:0b:e6:ca:6c:e7:bd:05:7d:42:80:3f:fc:e5:
8d:4e:b1:d5:c5:ac:bf:6d:3e:37:23:4c:05:db:ff:0c:4e:74:
bf:8b:46:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:50:50 2025 by rpki-client