Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/592cf0-03df-4886-b061-284f7c9622b5/1/sTCZw4tkd6aMmAGf9uAECAgHi5A.mft
File: sTCZw4tkd6aMmAGf9uAECAgHi5A.mft (raw, json)
Hash identifier: cNx5gJbeW8hKw3gt6ylx2o3W5Hpj00QmWHeftwOsJtU=
Subject key identifier: 12:3E:6E:0C:D8:85:00:CB:CF:1E:AB:7D:5A:5C:1F:A1:6B:ED:E5:44
Authority key identifier: B1:30:99:C3:8B:64:77:A6:8C:98:01:9F:F6:E0:04:08:08:07:8B:90
Certificate issuer: /CN=b13099c38b6477a68c98019ff6e0040808078b90
Certificate serial: 0198D660925DE013B1C56A23698772E632D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sTCZw4tkd6aMmAGf9uAECAgHi5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/592cf0-03df-4886-b061-284f7c9622b5/1/sTCZw4tkd6aMmAGf9uAECAgHi5A.mft
Manifest number: 164D
Signing time: Sat 23 Aug 2025 10:01:49 +0000
Manifest this update: Sat 23 Aug 2025 10:01:49 +0000
Manifest next update: Sun 24 Aug 2025 10:01:49 +0000
Files and hashes: 1: gF7OF-sH3XFh2hq8KjpdxJgt63g.roa (hash: EpA0qsYa3m/WYOamet70LyZkiEfTFAk3SQEWKz+UC8w=)
2: sTCZw4tkd6aMmAGf9uAECAgHi5A.crl (hash: Fh85dDYDMiIGxTqRjHJYbm9t3OLdEFztdlcaSwEx9FY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/592cf0-03df-4886-b061-284f7c9622b5/1/sTCZw4tkd6aMmAGf9uAECAgHi5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/592cf0-03df-4886-b061-284f7c9622b5/1/sTCZw4tkd6aMmAGf9uAECAgHi5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/sTCZw4tkd6aMmAGf9uAECAgHi5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:92:5d:e0:13:b1:c5:6a:23:69:87:72:e6:32:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b13099c38b6477a68c98019ff6e0040808078b90
Validity
Not Before: Aug 23 10:01:49 2025 GMT
Not After : Aug 24 10:01:49 2025 GMT
Subject: CN=123e6e0cd88500cbcf1eab7d5a5c1fa16bede544
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:dc:45:cc:68:02:95:84:3d:c5:92:5f:38:69:
40:8c:88:07:fa:2b:ef:10:8c:fa:09:7e:95:11:fc:
f8:9c:fb:26:fc:ef:26:60:be:b8:88:b7:41:2f:66:
2c:8d:d5:c4:be:db:da:03:ee:a7:c4:37:f5:51:b7:
25:8e:20:eb:a6:de:ee:e2:91:2e:40:dd:6f:bc:ad:
b5:61:67:14:9e:e0:c7:06:e5:e0:37:4a:27:66:76:
c9:d4:bf:d7:f3:fc:18:5c:22:45:7c:24:45:63:65:
a3:26:c3:e2:ba:77:09:de:f7:54:d9:e8:46:d8:4a:
d4:ce:03:c1:44:b5:84:a9:df:d0:56:a2:cb:aa:d4:
e0:e2:59:b1:ea:85:da:43:63:53:92:e7:c9:d0:6f:
b5:11:12:a6:19:2a:ea:8a:c2:cb:96:0d:d2:15:b4:
71:53:f6:57:83:e2:23:ca:51:dc:2c:18:9f:5d:49:
37:a3:9e:3e:db:99:37:83:ad:67:45:37:e9:02:51:
c2:46:2f:57:64:31:bb:56:3a:30:8a:f4:eb:03:23:
f3:31:82:9a:8a:8c:a0:b4:c3:dc:dc:28:9c:18:7e:
3e:04:f5:69:de:ce:b7:fc:69:14:dc:46:f9:8a:b4:
e7:e5:e6:d4:52:b3:83:57:e5:34:f3:7d:80:b1:55:
35:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:3E:6E:0C:D8:85:00:CB:CF:1E:AB:7D:5A:5C:1F:A1:6B:ED:E5:44
X509v3 Authority Key Identifier:
keyid:B1:30:99:C3:8B:64:77:A6:8C:98:01:9F:F6:E0:04:08:08:07:8B:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sTCZw4tkd6aMmAGf9uAECAgHi5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/592cf0-03df-4886-b061-284f7c9622b5/1/sTCZw4tkd6aMmAGf9uAECAgHi5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/592cf0-03df-4886-b061-284f7c9622b5/1/sTCZw4tkd6aMmAGf9uAECAgHi5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:21:a0:62:7c:97:84:b6:3a:c6:66:76:7c:fc:65:2d:c9:c5:
40:ad:6a:f4:61:b8:57:23:d7:fe:4e:b9:49:91:f9:37:e3:0e:
f5:6a:64:fc:b9:cc:91:bf:96:17:b0:d1:1d:3d:ff:b9:a4:1a:
b0:e7:56:93:a9:82:45:f5:2b:5f:7a:3d:18:4a:f3:4e:3c:17:
55:a3:6e:57:b4:f6:e7:81:8c:41:64:49:f5:ef:08:eb:c7:32:
7f:a3:89:9b:ec:4d:6f:e9:54:76:d5:62:01:11:5f:13:67:67:
17:eb:77:ef:24:de:54:20:fa:0f:dc:8d:56:cc:c9:7c:ec:28:
06:80:7e:30:41:2d:cf:7e:d4:db:8b:6f:09:85:1e:47:26:c6:
83:9e:e3:bd:12:6f:ba:4f:cd:85:10:b5:3f:fc:52:88:4b:5a:
d9:25:c1:52:d5:d4:95:cd:7a:c8:61:bd:ea:ae:1e:8f:38:d2:
a7:40:d5:b6:5c:e3:04:b0:8d:92:83:35:67:95:68:d8:a6:17:
6b:76:d0:00:f3:c2:c8:85:a5:94:66:2c:db:84:b3:1d:b5:3a:
38:8f:03:73:8b:90:46:8c:f0:62:b0:ba:26:9c:ef:51:b3:d3:
fe:c8:d4:5d:b8:a9:d2:46:6a:36:4e:7b:be:5d:21:16:58:a8:
57:21:11:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:30:42 2025 by rpki-client