Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/338605-4db4-4ede-a310-5642353d431a/1/StRn8W0JUeQwcTgyxsdZVh52BB8.mft
File: StRn8W0JUeQwcTgyxsdZVh52BB8.mft (raw, json)
Hash identifier: oRzd8bB5D+B5txzTy2fqgK5SmeOR5okb7SGOeaH6eHw=
Subject key identifier: CD:CD:A5:EC:9C:0F:EA:08:C2:E7:C9:E4:BB:25:CB:44:B0:B4:DF:7E
Authority key identifier: 4A:D4:67:F1:6D:09:51:E4:30:71:38:32:C6:C7:59:56:1E:76:04:1F
Certificate issuer: /CN=4ad467f16d0951e430713832c6c759561e76041f
Certificate serial: 0199FBEB6D3B2E30C17235798EBE4690EB70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/StRn8W0JUeQwcTgyxsdZVh52BB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/338605-4db4-4ede-a310-5642353d431a/1/StRn8W0JUeQwcTgyxsdZVh52BB8.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 10:02:14 +0000
Manifest this update: Sun 19 Oct 2025 10:02:14 +0000
Manifest next update: Mon 20 Oct 2025 10:02:14 +0000
Files and hashes: 1: 0qO4O1iuPzCMlLlUt1HamKiYOoA.roa (hash: cgE/JK3sVjQnbjv1N0QFg9l7ug/Hstmhscf6qZhJ3xA=)
2: StRn8W0JUeQwcTgyxsdZVh52BB8.crl (hash: nxpj6qe3x/BROPvDtcHpJ5G8aX/YEI3ewTGjMQvmHVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/338605-4db4-4ede-a310-5642353d431a/1/StRn8W0JUeQwcTgyxsdZVh52BB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/338605-4db4-4ede-a310-5642353d431a/1/StRn8W0JUeQwcTgyxsdZVh52BB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/StRn8W0JUeQwcTgyxsdZVh52BB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:6d:3b:2e:30:c1:72:35:79:8e:be:46:90:eb:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ad467f16d0951e430713832c6c759561e76041f
Validity
Not Before: Oct 19 10:02:14 2025 GMT
Not After : Oct 20 10:02:14 2025 GMT
Subject: CN=cdcda5ec9c0fea08c2e7c9e4bb25cb44b0b4df7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c8:01:7e:36:60:cd:b8:09:9c:40:bd:82:f3:
22:da:cc:f1:c8:a8:db:0f:44:14:92:c9:0d:b5:c2:
20:61:f1:d3:95:b7:a8:be:95:11:b3:81:25:cb:f0:
bc:86:95:7a:e2:a0:fe:16:73:08:82:99:05:52:9f:
ef:dd:20:54:02:fe:20:db:89:39:da:11:e6:ae:18:
fd:3d:1f:58:54:8a:80:b3:2f:03:16:dc:e9:95:15:
e4:5e:65:7b:52:88:80:c9:79:73:e8:bc:02:7f:d4:
d5:27:12:49:5c:4e:67:9b:0f:59:20:68:ac:ef:d3:
e3:40:cb:5f:01:23:45:68:d0:ea:d7:33:54:77:d1:
2d:2c:c7:8c:75:1f:d7:54:5f:ad:10:d1:b1:38:25:
57:ab:ce:5f:2f:15:a0:47:e5:c8:59:2c:b8:81:a5:
1c:57:19:1d:aa:c6:61:8a:04:21:20:a6:d5:9c:aa:
1e:c7:c3:53:8b:f5:e8:62:a0:f3:54:4d:22:0f:ce:
8a:ed:35:68:a1:16:a9:26:0a:ca:25:92:7a:d1:aa:
e7:23:bd:3c:4d:e6:d2:b3:ae:ae:7f:da:e4:8f:25:
2a:b7:45:8b:3a:ab:0f:08:b0:60:72:21:4b:e3:2b:
2a:ab:4f:c6:21:2f:7a:9f:97:64:bc:a6:f7:7f:5b:
8e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:CD:A5:EC:9C:0F:EA:08:C2:E7:C9:E4:BB:25:CB:44:B0:B4:DF:7E
X509v3 Authority Key Identifier:
keyid:4A:D4:67:F1:6D:09:51:E4:30:71:38:32:C6:C7:59:56:1E:76:04:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/StRn8W0JUeQwcTgyxsdZVh52BB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/338605-4db4-4ede-a310-5642353d431a/1/StRn8W0JUeQwcTgyxsdZVh52BB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/338605-4db4-4ede-a310-5642353d431a/1/StRn8W0JUeQwcTgyxsdZVh52BB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:d0:c1:f5:83:d7:d6:32:c6:90:6e:d8:7c:ed:59:ab:3c:8f:
e7:d8:b2:91:55:01:79:f1:c2:37:00:b6:97:bb:5f:86:cc:6e:
3b:16:1f:21:e3:c3:13:47:60:4f:00:96:fb:f6:05:4e:6d:0d:
5a:24:b3:6e:8f:fc:a4:f8:bb:77:e1:7c:b8:3a:4f:3e:4f:26:
d2:23:fd:e5:a9:89:b8:22:fc:31:8c:c6:bf:20:10:0c:61:5e:
f0:13:fd:04:df:11:1d:d4:1a:b7:1a:60:55:35:3e:76:e0:a9:
e8:da:d3:be:ec:c5:30:3c:02:be:f0:f9:e7:4a:3c:31:74:2a:
15:da:c7:6a:ee:aa:98:1f:e2:89:68:92:bc:a9:e9:1c:17:98:
8c:5a:ad:3c:2c:59:51:1a:6d:d8:7f:5d:36:98:51:8a:52:75:
ec:3a:c8:86:16:c7:0a:e6:91:b6:9a:28:b6:39:44:86:43:94:
43:3b:eb:f3:5e:51:cd:a0:64:72:0f:ca:89:48:d7:03:84:2d:
7c:f1:cc:c5:f5:cd:88:74:fe:b7:72:51:18:5d:c2:c6:9c:da:
47:65:01:2d:ef:6e:b6:8c:ee:63:07:0d:44:22:67:4d:a6:c1:
fd:8b:28:58:19:3d:31:c2:a5:8a:6f:65:83:ca:ec:dd:5a:b5:
fb:25:87:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:23:37 2025 by rpki-client