Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/d765a4-54eb-410d-8f3d-689ba4d33c4b/1/STotSDdjMKWC-vPjAy73sLzKM-g.mft
File: STotSDdjMKWC-vPjAy73sLzKM-g.mft (raw, json)
Hash identifier: V3qqeQCEtokyIZvvQOibTKRVNB58OFfnpY/Boof/ptM=
Subject key identifier: D4:A4:1B:8B:CC:1F:A2:F6:E1:11:B9:77:FF:50:2B:FF:BB:73:BF:06
Authority key identifier: 49:3A:2D:48:37:63:30:A5:82:FA:F3:E3:03:2E:F7:B0:BC:CA:33:E8
Certificate issuer: /CN=493a2d48376330a582faf3e3032ef7b0bcca33e8
Certificate serial: 0199FC8F579AB915D3165872455AB30C7D8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/STotSDdjMKWC-vPjAy73sLzKM-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/d765a4-54eb-410d-8f3d-689ba4d33c4b/1/STotSDdjMKWC-vPjAy73sLzKM-g.mft
Manifest number: 050A
Signing time: Sun 19 Oct 2025 13:01:16 +0000
Manifest this update: Sun 19 Oct 2025 13:01:16 +0000
Manifest next update: Mon 20 Oct 2025 13:01:16 +0000
Files and hashes: 1: 1eZlwD4fnzVx_ZuiX-KY-unzRYA.roa (hash: FfjJukJvNSQzT9n6wjLCsM9xDWFdpCKe+CsdvwMwZRs=)
2: GXnQPnuqnvBWk7kpONau-2u0RoQ.roa (hash: uxonlVe7DqVs73Mq5GsJwlXeQ95X/yFAybekoDtId+I=)
3: KyYmqZA206kErzPtR2YQzPU--WY.roa (hash: fQeQLftranJsCVjcRRs8kVttSYkJPcfUSHb9P69BPM8=)
4: STotSDdjMKWC-vPjAy73sLzKM-g.crl (hash: ge+hlhBjizpmIdS5qesNBfB9cca+ufs/vG8DVLlZNqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/d765a4-54eb-410d-8f3d-689ba4d33c4b/1/STotSDdjMKWC-vPjAy73sLzKM-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/d765a4-54eb-410d-8f3d-689ba4d33c4b/1/STotSDdjMKWC-vPjAy73sLzKM-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/STotSDdjMKWC-vPjAy73sLzKM-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:57:9a:b9:15:d3:16:58:72:45:5a:b3:0c:7d:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=493a2d48376330a582faf3e3032ef7b0bcca33e8
Validity
Not Before: Oct 19 13:01:16 2025 GMT
Not After : Oct 20 13:01:16 2025 GMT
Subject: CN=d4a41b8bcc1fa2f6e111b977ff502bffbb73bf06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:df:47:5a:8f:1a:cb:a2:69:27:75:11:75:01:
48:f1:c1:29:b4:1c:5e:3c:32:e1:de:d1:38:5f:50:
05:d6:08:a4:c6:db:57:2f:6e:cc:02:a7:9c:33:ac:
a7:bc:9f:d4:de:52:87:b0:f0:81:15:03:49:59:fa:
e2:9e:d7:c8:c1:85:ff:71:22:de:ff:01:5a:db:cd:
0d:7b:11:fa:c3:8b:e4:25:f7:71:10:04:a4:fd:0b:
db:1f:f7:b1:63:b6:7e:b1:1b:82:7c:7c:c1:00:cc:
60:38:86:bf:59:58:ff:a9:08:ce:a1:f0:bd:e1:fb:
43:9b:df:ec:a6:84:43:24:a0:5d:30:ad:55:3b:f6:
ac:e9:7a:8d:9b:de:5f:9b:ea:93:f1:b9:d2:88:f7:
ac:87:a3:c9:f1:6a:65:3f:0e:c7:cd:b2:c7:83:a7:
de:2d:4a:ba:33:94:1b:e9:17:b1:27:b4:df:20:f0:
41:be:46:72:9e:80:05:ea:46:1d:6d:21:b1:89:71:
7b:0d:8e:08:64:99:79:e8:0c:d7:2a:c8:8d:91:0b:
ae:f8:c9:f6:c1:c4:54:a7:bf:0e:e2:9b:1e:d3:39:
2e:92:83:14:a7:9e:34:c5:85:34:2b:17:a1:fd:01:
10:2c:08:2f:ee:b0:eb:50:99:12:8d:5a:7e:58:2c:
ae:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:A4:1B:8B:CC:1F:A2:F6:E1:11:B9:77:FF:50:2B:FF:BB:73:BF:06
X509v3 Authority Key Identifier:
keyid:49:3A:2D:48:37:63:30:A5:82:FA:F3:E3:03:2E:F7:B0:BC:CA:33:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/STotSDdjMKWC-vPjAy73sLzKM-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d765a4-54eb-410d-8f3d-689ba4d33c4b/1/STotSDdjMKWC-vPjAy73sLzKM-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d765a4-54eb-410d-8f3d-689ba4d33c4b/1/STotSDdjMKWC-vPjAy73sLzKM-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:b2:86:bb:7e:c9:9a:6c:0b:0e:c7:28:e3:7b:12:29:d6:be:
b8:fe:76:a4:56:7a:6f:73:18:96:f8:9c:b4:a1:d7:b1:d3:ae:
f8:83:55:8d:fe:b2:0a:01:20:bf:32:f7:2a:45:99:b6:1e:44:
48:b4:c0:37:3f:45:cc:93:1c:e2:3b:77:dd:29:96:08:ae:27:
ef:f6:02:3f:70:f7:d4:cc:1e:2f:24:49:85:fb:a9:cb:81:3e:
27:01:11:dd:f9:0e:eb:01:ed:4d:a4:11:9a:8a:39:d1:50:3f:
53:85:52:46:d7:8e:4e:d8:95:a9:0d:74:19:49:40:76:0d:68:
e9:89:61:6f:01:12:14:b1:e2:20:ed:bf:94:9b:5d:53:55:0f:
fd:14:d9:50:bf:bf:33:8c:11:46:f3:33:d0:22:59:f8:e8:81:
b8:ee:4b:6e:54:c3:02:33:71:68:4a:3b:d3:6d:d2:7e:5f:ff:
53:4c:c0:26:c1:6e:e5:9f:6f:31:ea:6f:09:c4:62:81:e2:5f:
62:17:db:ce:39:ca:22:1a:88:31:18:d4:c9:3b:87:f8:7c:11:
c7:08:af:04:a5:88:27:0a:6c:e7:6c:49:e6:10:50:77:41:d9:
91:7e:a5:4a:22:19:2c:72:61:e9:c0:a1:2d:98:27:cf:fd:ec:
6f:e1:7e:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:07:44 2025 by rpki-client