Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/3f0083-59d7-433a-905a-47b1bdf8d530/1/sTlxv-p41qpbSe1aw1x3tqMKCJQ.mft
File: sTlxv-p41qpbSe1aw1x3tqMKCJQ.mft (raw, json)
Hash identifier: szSptmUg4T/xwyzLQRz5GjpnMILP/BmJmPQjTp/Ugdw=
Subject key identifier: F0:29:2A:2A:1E:82:DD:68:20:86:8D:6A:75:2C:07:A2:78:BA:51:04
Authority key identifier: B1:39:71:BF:EA:78:D6:AA:5B:49:ED:5A:C3:5C:77:B6:A3:0A:08:94
Certificate issuer: /CN=b13971bfea78d6aa5b49ed5ac35c77b6a30a0894
Certificate serial: 019896A530C5BA139BC13B4976D8D938E2F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sTlxv-p41qpbSe1aw1x3tqMKCJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/3f0083-59d7-433a-905a-47b1bdf8d530/1/sTlxv-p41qpbSe1aw1x3tqMKCJQ.mft
Manifest number: 0B0D
Signing time: Mon 11 Aug 2025 01:01:04 +0000
Manifest this update: Mon 11 Aug 2025 01:01:04 +0000
Manifest next update: Tue 12 Aug 2025 01:01:04 +0000
Files and hashes: 1: Ewu_L9NGAMIn9J1bD2mKPYHfLN0.roa (hash: MPg//qxTuFJeVfIte2bOUUVJ5G8w+mQ6T68mV0V7xWY=)
2: sTlxv-p41qpbSe1aw1x3tqMKCJQ.crl (hash: hy/dwAnTb3lTk3UEewxN7GXmU+pcaZYJL8N5vAabm7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/3f0083-59d7-433a-905a-47b1bdf8d530/1/sTlxv-p41qpbSe1aw1x3tqMKCJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/3f0083-59d7-433a-905a-47b1bdf8d530/1/sTlxv-p41qpbSe1aw1x3tqMKCJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sTlxv-p41qpbSe1aw1x3tqMKCJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 01:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:a5:30:c5:ba:13:9b:c1:3b:49:76:d8:d9:38:e2:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b13971bfea78d6aa5b49ed5ac35c77b6a30a0894
Validity
Not Before: Aug 11 01:01:04 2025 GMT
Not After : Aug 12 01:01:04 2025 GMT
Subject: CN=f0292a2a1e82dd6820868d6a752c07a278ba5104
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:1f:49:29:e7:18:7c:0c:1e:80:a6:12:c2:23:
16:6c:d6:53:88:67:33:51:cf:c5:41:cf:0d:c4:fc:
a8:95:b8:bb:9a:8f:95:d8:98:e2:f9:71:82:88:0b:
22:3f:44:8a:c6:7c:1d:74:e7:c0:f6:0e:31:aa:8b:
a0:50:93:37:14:0c:94:a7:1b:87:16:b3:f7:b4:a3:
be:f6:4f:c6:bd:20:54:73:e8:43:51:39:6e:d1:f0:
aa:8f:99:79:d0:ba:14:06:19:a6:b8:0d:f8:39:b4:
b4:ff:04:f2:2c:f3:f0:9f:e0:f9:77:af:37:bf:4f:
19:de:aa:0f:fe:67:1b:41:15:5a:2c:3a:af:b0:1f:
de:9a:64:2e:1c:68:1d:c5:5b:60:62:15:1e:b1:d7:
8e:a0:61:d8:60:a1:87:92:27:b3:75:1f:72:4a:c1:
f7:67:4c:48:f1:e4:68:9d:25:11:da:57:eb:b5:82:
95:d2:0e:6a:bb:48:34:e4:46:e7:fe:25:7d:c7:b5:
1e:ba:5d:48:de:3a:c1:f0:cf:b5:65:3c:ab:c1:92:
ae:0a:cb:29:01:79:03:ed:91:a4:02:62:6d:c1:2f:
b1:7b:4e:bc:b5:8f:02:04:28:20:af:21:5e:fc:bb:
be:20:14:9e:5f:b0:50:dd:31:48:26:cf:10:02:f8:
e6:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:29:2A:2A:1E:82:DD:68:20:86:8D:6A:75:2C:07:A2:78:BA:51:04
X509v3 Authority Key Identifier:
keyid:B1:39:71:BF:EA:78:D6:AA:5B:49:ED:5A:C3:5C:77:B6:A3:0A:08:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sTlxv-p41qpbSe1aw1x3tqMKCJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/3f0083-59d7-433a-905a-47b1bdf8d530/1/sTlxv-p41qpbSe1aw1x3tqMKCJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/3f0083-59d7-433a-905a-47b1bdf8d530/1/sTlxv-p41qpbSe1aw1x3tqMKCJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:4e:8f:b4:bd:2a:96:50:7a:6e:69:4b:51:a9:43:76:37:f2:
86:bb:17:57:98:cf:c3:04:66:5e:df:37:ab:a1:7d:15:1a:8f:
7b:46:68:a8:dc:21:28:9e:b1:bf:e2:fb:4a:88:42:d9:36:63:
fb:35:84:58:8d:09:8a:06:0c:0f:65:c9:93:74:aa:f7:3f:7b:
ed:4c:93:75:e4:f2:df:dd:f1:b8:ea:f3:04:d3:70:14:d3:49:
5f:db:d5:53:cf:56:e2:0a:5b:06:af:89:55:ca:74:04:c1:9b:
cd:ae:b0:61:57:27:50:88:74:dc:34:bf:01:e3:a1:c1:cc:2f:
4d:fb:e4:cf:43:bf:8c:33:13:95:00:1d:21:9e:c3:dc:c7:40:
4f:fa:1a:4b:46:70:86:0d:6a:b3:b6:63:95:bf:46:3c:9d:4e:
93:8b:8d:6b:87:4c:c7:ea:7d:7b:ba:27:c4:98:62:ae:3d:97:
1d:6c:38:83:cf:05:4b:a1:55:aa:93:9a:32:8f:7b:c3:8a:58:
ec:e4:ed:12:dc:73:7a:35:7f:92:5e:40:b5:d0:1b:4c:3d:57:
8f:7a:11:8f:7a:c8:73:0a:0f:00:62:58:3d:04:45:59:8a:87:
66:65:14:a1:8c:5e:82:c8:b0:00:99:07:73:1d:a2:6e:f4:7c:
1f:21:10:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 08:47:08 2025 by rpki-client