Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/5a3cd1-8109-4c66-8324-4828d65104e1/1/StFxca6oV2xDHGN0GGkcnB9VdRY.mft
File: StFxca6oV2xDHGN0GGkcnB9VdRY.mft (raw, json)
Hash identifier: +qjcVeB5x4xd+8XRZvXwnXv5XzJ2DWPse7zIJJXu1hA=
Subject key identifier: 14:A9:A6:6E:30:2D:E0:57:E0:16:B2:61:02:E4:FA:06:93:46:F2:79
Authority key identifier: 4A:D1:71:71:AE:A8:57:6C:43:1C:63:74:18:69:1C:9C:1F:55:75:16
Certificate issuer: /CN=4ad17171aea8576c431c637418691c9c1f557516
Certificate serial: 01987CE51BA825F2269A5B8BE17A9F2DF866
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/StFxca6oV2xDHGN0GGkcnB9VdRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/5a3cd1-8109-4c66-8324-4828d65104e1/1/StFxca6oV2xDHGN0GGkcnB9VdRY.mft
Manifest number: 12C8
Signing time: Wed 06 Aug 2025 01:00:46 +0000
Manifest this update: Wed 06 Aug 2025 01:00:46 +0000
Manifest next update: Thu 07 Aug 2025 01:00:46 +0000
Files and hashes: 1: SHXTlexCU640W6zbYxhCmQn8Cw4.roa (hash: k2ku6jDV9cI0tnwN43DyJg87QMwSJe7N2AG8yOiDsPE=)
2: StFxca6oV2xDHGN0GGkcnB9VdRY.crl (hash: uOzeMnt9pKLfB8D8inmQd3xCI1CD+F+9/w/5cRibXh8=)
3: TPLmVhwEw6jgrdMtUuhmz_0dBbo.roa (hash: wGkqaR7oIjPHLb7cXn0PbtIJ1WFfuKuRjd0OcbETY00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/5a3cd1-8109-4c66-8324-4828d65104e1/1/StFxca6oV2xDHGN0GGkcnB9VdRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/5a3cd1-8109-4c66-8324-4828d65104e1/1/StFxca6oV2xDHGN0GGkcnB9VdRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/StFxca6oV2xDHGN0GGkcnB9VdRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:e5:1b:a8:25:f2:26:9a:5b:8b:e1:7a:9f:2d:f8:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ad17171aea8576c431c637418691c9c1f557516
Validity
Not Before: Aug 6 01:00:46 2025 GMT
Not After : Aug 7 01:00:46 2025 GMT
Subject: CN=14a9a66e302de057e016b26102e4fa069346f279
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:40:d8:93:86:64:f7:9b:9c:0d:2b:dd:58:e6:
8d:41:c9:d0:c8:73:c6:83:90:97:1b:f9:48:85:ac:
aa:49:b5:b9:b3:4e:5b:7a:ab:6a:2e:4d:14:2f:b1:
2f:9d:c1:08:86:7f:ff:73:65:c1:3b:19:b9:b3:7e:
13:30:a5:78:cc:6e:0d:78:0b:90:3f:27:76:01:d5:
dd:43:32:cb:27:20:94:1b:49:68:9c:72:a8:fc:16:
cb:e5:0b:5b:f8:06:c6:25:e0:57:58:dd:72:42:5e:
a1:ce:1c:d6:a2:eb:fe:01:c0:eb:4e:d2:57:c9:c5:
aa:27:36:12:a6:da:dd:e9:3e:87:55:3c:52:7a:8a:
b3:0d:78:5c:23:40:e7:7e:b2:a4:6b:e8:71:4a:d2:
db:db:41:e2:fe:55:55:50:33:92:2a:07:f2:0d:79:
36:36:4e:01:44:00:e7:3d:cb:a4:dc:cd:0b:31:9c:
09:49:76:ab:02:14:c4:53:cb:3a:bd:4c:dc:fd:4d:
3e:0c:0a:df:75:21:b6:73:50:2c:03:c5:e8:79:36:
0b:dc:15:e5:b9:cb:20:e6:1a:9a:3c:5a:43:6e:15:
ec:fb:05:c8:de:8a:08:46:4b:1d:ef:65:8a:be:46:
91:49:0c:18:92:5c:6e:c9:00:0d:e1:f7:2a:30:e4:
94:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:A9:A6:6E:30:2D:E0:57:E0:16:B2:61:02:E4:FA:06:93:46:F2:79
X509v3 Authority Key Identifier:
keyid:4A:D1:71:71:AE:A8:57:6C:43:1C:63:74:18:69:1C:9C:1F:55:75:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/StFxca6oV2xDHGN0GGkcnB9VdRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5a3cd1-8109-4c66-8324-4828d65104e1/1/StFxca6oV2xDHGN0GGkcnB9VdRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5a3cd1-8109-4c66-8324-4828d65104e1/1/StFxca6oV2xDHGN0GGkcnB9VdRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:ab:d5:9c:e9:00:c6:5f:7f:30:99:18:40:17:97:bc:3c:e8:
35:41:28:49:ff:e5:37:1c:81:0f:fc:72:b1:12:fd:40:a4:ae:
8f:70:c9:95:cb:1c:42:8f:36:76:92:d4:69:6f:39:e0:2a:04:
e7:44:dd:b8:58:74:06:bf:9b:50:7d:1d:3a:58:87:24:40:cc:
10:22:21:7e:07:02:c3:8f:ab:7e:64:06:bc:56:3c:8d:ef:b2:
26:64:30:f2:f2:0d:41:55:e5:14:ee:17:62:8f:25:8b:5f:e2:
3b:ef:f6:33:6d:f4:9f:1e:0f:1e:b5:b5:2a:b6:cd:ec:11:fc:
a3:67:5b:de:b7:a8:88:20:38:7c:e9:49:36:37:1b:ad:66:23:
81:2e:b8:27:2d:af:d2:b6:d1:a5:30:3c:b4:78:ea:3f:bc:98:
9a:4c:fe:03:5c:ad:48:f7:f9:53:c3:b0:8c:e6:ef:41:c1:85:
31:d1:26:07:03:e4:6a:78:a1:19:54:50:31:1a:a8:ea:f0:ee:
99:13:cf:6e:6d:d2:0d:d1:bb:c6:f4:22:5f:dd:38:15:5b:87:
c6:5e:44:5b:04:fb:ec:7b:c4:4e:60:2e:a9:42:4a:df:64:56:
a7:f1:6e:9c:62:c3:86:2a:ef:c8:02:65:d1:aa:5a:d3:ca:22:
67:5b:50:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:23:46 2025 by rpki-client