Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/07cdcf-8875-4770-8c75-41b745bf53db/1/STeGYPXwGSOUbDXZS-XM19K3EFE.mft
File: STeGYPXwGSOUbDXZS-XM19K3EFE.mft (raw, json)
Hash identifier: A1a9C9GedN8aX9cr3srkN+KFOfZFATKwkghSR3lT7Dg=
Subject key identifier: C3:7C:7E:23:F1:7B:D2:18:BD:27:0F:EC:87:36:CF:F1:A1:B6:0A:FF
Authority key identifier: 49:37:86:60:F5:F0:19:23:94:6C:35:D9:4B:E5:CC:D7:D2:B7:10:51
Certificate issuer: /CN=49378660f5f01923946c35d94be5ccd7d2b71051
Certificate serial: 019A4F62537A2E54EC660485C19E403DA5CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/STeGYPXwGSOUbDXZS-XM19K3EFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/07cdcf-8875-4770-8c75-41b745bf53db/1/STeGYPXwGSOUbDXZS-XM19K3EFE.mft
Manifest number: 0CA2
Signing time: Tue 04 Nov 2025 15:00:35 +0000
Manifest this update: Tue 04 Nov 2025 15:00:35 +0000
Manifest next update: Wed 05 Nov 2025 15:00:35 +0000
Files and hashes: 1: 2ZvpZ0sZ6P6ydTiCDEFolKMvfh0.roa (hash: 1DssY9QtTEut1NYlrrYk3dvjYOvc/xqpRvFLT8I4S4E=)
2: NjASS9Fcywmz2PQGC289Z6czZDw.roa (hash: HSbgUfk0PK7NcRU0i0FIegZSv4Qc7DSpvzCcUEz+mx0=)
3: STeGYPXwGSOUbDXZS-XM19K3EFE.crl (hash: wao+xoUpJL87ALb0tnUeTXinkIL900TmDSjzEvaMCzU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/07cdcf-8875-4770-8c75-41b745bf53db/1/STeGYPXwGSOUbDXZS-XM19K3EFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/07cdcf-8875-4770-8c75-41b745bf53db/1/STeGYPXwGSOUbDXZS-XM19K3EFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/STeGYPXwGSOUbDXZS-XM19K3EFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:53:7a:2e:54:ec:66:04:85:c1:9e:40:3d:a5:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49378660f5f01923946c35d94be5ccd7d2b71051
Validity
Not Before: Nov 4 15:00:35 2025 GMT
Not After : Nov 5 15:00:35 2025 GMT
Subject: CN=c37c7e23f17bd218bd270fec8736cff1a1b60aff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:5c:a7:96:b8:3d:21:95:09:06:43:ce:91:8e:
3d:0f:7b:43:b5:ca:e3:b1:0c:38:74:1d:b8:9a:e2:
2a:b9:ef:89:12:fb:8c:a8:0e:e5:22:da:e5:8d:26:
eb:46:39:28:96:97:b3:1a:07:e3:cf:a9:44:1e:8c:
70:f7:6e:23:0c:1d:76:f9:82:0c:83:ac:af:1a:67:
14:e9:8d:25:c4:80:a6:d9:87:b0:56:d3:e3:39:86:
40:3d:ec:0e:d1:20:d1:05:dd:2a:a8:1d:e4:c6:b5:
25:a5:05:b8:98:cf:e5:2e:58:98:cd:d4:9f:96:d2:
5f:4f:15:65:87:35:b0:59:d9:58:22:d0:eb:26:08:
d8:fa:7a:84:09:c3:0a:b8:05:7a:13:ed:62:02:62:
af:5a:3e:e6:a2:09:d7:8a:3d:28:e4:28:a1:d8:bf:
b8:1f:3f:fe:0d:05:06:b5:05:08:f1:3f:6c:11:b4:
d9:05:69:c4:ab:b2:8e:35:d5:de:7a:10:cf:14:48:
62:b9:ad:a8:d7:1c:fc:73:ae:ca:19:ef:84:37:24:
4f:f8:c7:bc:c8:01:b0:24:96:34:d7:39:29:7d:79:
6c:4c:09:a4:09:45:db:f7:53:38:31:a2:62:0a:a2:
d4:6f:c7:91:bd:d3:d7:f8:94:95:36:a8:55:0e:64:
4a:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:7C:7E:23:F1:7B:D2:18:BD:27:0F:EC:87:36:CF:F1:A1:B6:0A:FF
X509v3 Authority Key Identifier:
keyid:49:37:86:60:F5:F0:19:23:94:6C:35:D9:4B:E5:CC:D7:D2:B7:10:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/STeGYPXwGSOUbDXZS-XM19K3EFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/07cdcf-8875-4770-8c75-41b745bf53db/1/STeGYPXwGSOUbDXZS-XM19K3EFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/07cdcf-8875-4770-8c75-41b745bf53db/1/STeGYPXwGSOUbDXZS-XM19K3EFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:65:86:cf:31:e6:e5:5b:21:28:ab:56:c0:a3:3e:b2:66:ac:
00:5d:63:9e:71:cc:7a:31:f1:4c:33:b5:4f:38:71:cd:ba:9f:
0f:55:d4:4e:26:46:0a:7d:1e:aa:92:b4:26:5f:d5:21:16:c1:
3f:3b:e8:7e:53:0b:0b:d5:48:16:4d:38:81:86:60:52:f0:95:
3e:12:f9:a2:b3:71:8c:fc:07:7a:8e:72:50:99:b8:35:59:74:
03:a1:f8:f2:4c:0b:ec:4c:6e:76:82:40:48:d3:24:50:34:22:
71:48:db:36:ac:65:90:69:aa:6e:63:f9:21:35:58:01:b5:be:
23:69:df:c6:b0:c1:46:a4:89:29:b7:dd:1d:47:53:23:df:79:
2f:ec:6e:34:90:8a:90:16:d0:cb:24:f0:16:44:f5:ce:ac:54:
95:d8:6a:f7:2a:40:bb:95:98:35:7b:69:45:4b:d9:80:20:37:
cc:0e:97:d2:38:9e:cb:09:6e:20:6a:6d:1e:12:7b:75:36:67:
98:1c:dc:7a:a7:89:87:9d:5e:29:ec:3e:2f:eb:8e:59:dd:70:
c0:30:b5:7e:6f:0c:0d:1e:3c:6d:a6:68:de:6b:9a:fe:b9:c9:
5d:95:ed:08:3a:7c:cc:6b:62:fc:ce:c3:cd:2b:a3:f0:ee:81:
43:cd:99:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:01:04 2025 by rpki-client