Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/2d2eb6-05d5-47a0-8fed-ebf32a0469c7/1/StzxlnKWX1GxbYevqxsUkILmw-4.mft
File: StzxlnKWX1GxbYevqxsUkILmw-4.mft (raw, json)
Hash identifier: oFRgykpsVImLnh32WsC3oF4fr95AgvqrfUnjebJm0Z0=
Subject key identifier: AF:BE:03:D3:5A:8C:D6:41:C7:5D:F4:1E:97:77:AA:8B:75:2C:3A:76
Authority key identifier: 4A:DC:F1:96:72:96:5F:51:B1:6D:87:AF:AB:1B:14:90:82:E6:C3:EE
Certificate issuer: /CN=4adcf19672965f51b16d87afab1b149082e6c3ee
Certificate serial: 0199FCC611A60B9B2196F9F198DCBC108DDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/StzxlnKWX1GxbYevqxsUkILmw-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/2d2eb6-05d5-47a0-8fed-ebf32a0469c7/1/StzxlnKWX1GxbYevqxsUkILmw-4.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 14:01:03 +0000
Manifest this update: Sun 19 Oct 2025 14:01:03 +0000
Manifest next update: Mon 20 Oct 2025 14:01:03 +0000
Files and hashes: 1: StzxlnKWX1GxbYevqxsUkILmw-4.crl (hash: oq+eiwH99JgmClYPtDSyVS8nDrCgn6WopWNH4P3gp8A=)
2: rGUQbl63n9K0Wn_57q9XL0tQAuA.roa (hash: vyvu3YaIjRy8oAh1PUr3JRdMW+KlCqlVTwrvF8kfQF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/2d2eb6-05d5-47a0-8fed-ebf32a0469c7/1/StzxlnKWX1GxbYevqxsUkILmw-4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/2d2eb6-05d5-47a0-8fed-ebf32a0469c7/1/StzxlnKWX1GxbYevqxsUkILmw-4.mft
rsync://rpki.ripe.net/repository/DEFAULT/StzxlnKWX1GxbYevqxsUkILmw-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:11:a6:0b:9b:21:96:f9:f1:98:dc:bc:10:8d:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4adcf19672965f51b16d87afab1b149082e6c3ee
Validity
Not Before: Oct 19 14:01:03 2025 GMT
Not After : Oct 20 14:01:03 2025 GMT
Subject: CN=afbe03d35a8cd641c75df41e9777aa8b752c3a76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:82:9b:d5:3d:aa:86:ec:12:52:36:1b:15:f8:
88:be:88:b5:10:4c:31:48:e3:91:a7:d5:e9:05:1c:
d1:f1:75:aa:be:30:46:f6:ab:a8:31:7f:98:bd:42:
30:0a:62:56:56:ca:45:66:4b:08:c6:07:d4:ba:14:
0d:a4:8b:b4:c7:70:46:a0:1a:1f:e5:7e:19:d9:28:
07:85:e1:11:0f:2e:cf:1b:61:e2:f2:af:47:75:f8:
09:6c:d0:fb:17:96:67:02:ef:d6:5e:00:00:48:f6:
1e:5b:b4:5f:e9:8c:e0:17:3d:61:b8:57:83:a9:0f:
62:c4:0e:80:a0:77:d1:fc:d7:c2:cb:99:bc:82:5c:
00:da:92:ec:5e:5f:42:51:93:6a:9c:c7:e2:d2:d3:
18:46:42:9e:17:c5:e4:cd:1f:81:70:84:80:35:1f:
90:7c:fc:55:70:73:4c:eb:c0:8e:3d:12:fb:82:c8:
dd:dd:c8:c5:31:bf:2e:39:73:be:78:0d:25:1e:19:
de:63:7b:99:4d:aa:5e:84:d8:f8:26:07:8f:06:bc:
b0:6f:2d:47:e7:4c:a7:5f:1f:9c:d8:58:48:d6:21:
37:11:83:50:d3:31:95:d6:46:d0:03:43:48:b3:20:
bf:51:96:f2:c8:be:12:db:22:10:7d:30:d1:d3:65:
ab:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:BE:03:D3:5A:8C:D6:41:C7:5D:F4:1E:97:77:AA:8B:75:2C:3A:76
X509v3 Authority Key Identifier:
keyid:4A:DC:F1:96:72:96:5F:51:B1:6D:87:AF:AB:1B:14:90:82:E6:C3:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/StzxlnKWX1GxbYevqxsUkILmw-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/2d2eb6-05d5-47a0-8fed-ebf32a0469c7/1/StzxlnKWX1GxbYevqxsUkILmw-4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/2d2eb6-05d5-47a0-8fed-ebf32a0469c7/1/StzxlnKWX1GxbYevqxsUkILmw-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:2a:e5:80:69:a9:8e:08:79:ce:fb:bb:c7:eb:86:53:41:12:
58:dd:ee:f6:ca:2d:af:55:d6:ab:a0:da:9b:3f:c5:0f:cf:18:
2e:ff:ea:7f:63:02:a2:7d:97:16:e4:01:96:87:9c:d3:15:e1:
68:6a:f9:c6:06:31:aa:b1:33:55:3f:d1:a1:f8:e8:6b:c5:bb:
25:e0:6e:b6:90:27:74:83:c3:62:70:14:94:f3:53:fa:b4:89:
50:5b:01:f4:7f:93:bd:64:18:8f:4a:9c:1a:e5:b9:69:16:e5:
50:bd:28:d7:96:a1:ad:c2:ca:ab:4d:f6:97:a4:d1:02:99:d3:
eb:89:c3:2c:aa:d8:f3:e9:c3:0c:c2:a2:af:53:e9:13:12:7e:
36:13:da:15:5f:3d:0c:91:ac:0a:45:8b:31:ca:24:f3:bf:3d:
53:af:68:75:75:b3:16:f1:eb:b6:f8:58:9f:16:ac:86:cf:ed:
ff:3c:5e:24:4d:6b:ed:3a:15:10:58:02:3c:0e:04:c1:b5:66:
f5:fd:8a:fb:d7:cf:42:5d:a8:c6:e2:bd:6b:a9:40:10:c7:50:
93:a7:4c:b2:49:85:e0:8e:88:d5:7e:03:b3:e8:24:51:fe:6e:
d5:49:c4:a3:ac:9e:5a:82:85:7e:e9:46:06:72:e9:1d:b4:71:
29:c1:5c:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:42:11 2025 by rpki-client