Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/2d2eb6-05d5-47a0-8fed-ebf32a0469c7/1/StzxlnKWX1GxbYevqxsUkILmw-4.mft
File: StzxlnKWX1GxbYevqxsUkILmw-4.mft (raw, json)
Hash identifier: gqzjzAp8EWczRLBR6avJf+IeSwSsa5pgddtbLrhaGWs=
Subject key identifier: 3E:A7:4A:28:A2:05:E2:30:6C:06:FD:B6:E6:E3:D6:F6:9F:BE:84:AD
Authority key identifier: 4A:DC:F1:96:72:96:5F:51:B1:6D:87:AF:AB:1B:14:90:82:E6:C3:EE
Certificate issuer: /CN=4adcf19672965f51b16d87afab1b149082e6c3ee
Certificate serial: 0198D73BE143B7DA5EF81077134F94527328
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/StzxlnKWX1GxbYevqxsUkILmw-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/2d2eb6-05d5-47a0-8fed-ebf32a0469c7/1/StzxlnKWX1GxbYevqxsUkILmw-4.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 14:01:22 +0000
Manifest this update: Sat 23 Aug 2025 14:01:22 +0000
Manifest next update: Sun 24 Aug 2025 14:01:22 +0000
Files and hashes: 1: StzxlnKWX1GxbYevqxsUkILmw-4.crl (hash: CArK0bI74X7+HcKsbphDESKtGhmey3Dc3DxkSP1/fhI=)
2: rGUQbl63n9K0Wn_57q9XL0tQAuA.roa (hash: vyvu3YaIjRy8oAh1PUr3JRdMW+KlCqlVTwrvF8kfQF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/2d2eb6-05d5-47a0-8fed-ebf32a0469c7/1/StzxlnKWX1GxbYevqxsUkILmw-4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/2d2eb6-05d5-47a0-8fed-ebf32a0469c7/1/StzxlnKWX1GxbYevqxsUkILmw-4.mft
rsync://rpki.ripe.net/repository/DEFAULT/StzxlnKWX1GxbYevqxsUkILmw-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:e1:43:b7:da:5e:f8:10:77:13:4f:94:52:73:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4adcf19672965f51b16d87afab1b149082e6c3ee
Validity
Not Before: Aug 23 14:01:22 2025 GMT
Not After : Aug 24 14:01:22 2025 GMT
Subject: CN=3ea74a28a205e2306c06fdb6e6e3d6f69fbe84ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:70:ce:74:6a:c6:a0:af:13:2d:88:20:23:c9:
b8:f9:2b:7f:5d:e3:07:70:38:96:e1:ce:27:e9:1f:
2c:34:91:25:61:45:82:f6:d3:23:63:1c:e7:6e:29:
07:b5:ba:22:aa:1b:1d:0c:58:81:d1:52:54:c5:40:
a6:c8:f2:15:28:ca:04:b1:b5:6b:84:ad:bb:17:9d:
b0:8f:6e:cc:39:9b:bd:a7:28:d0:e8:4f:c5:63:f7:
53:44:5d:5e:32:99:04:7a:d0:a8:b0:c8:2b:0f:bf:
ed:30:92:54:ba:1d:ef:ae:c9:27:ef:55:cf:07:db:
89:8c:4f:8d:d7:18:af:a6:d8:27:0f:fa:67:01:59:
ff:68:b8:71:86:7c:5d:de:d6:f4:04:d3:39:c3:71:
86:d0:d1:8b:7f:bd:bf:93:54:c9:6f:1b:00:23:48:
25:9b:a8:0e:5d:ae:e1:eb:21:84:0e:74:1f:14:90:
62:73:15:cd:31:c2:11:b5:48:e3:51:51:d0:e8:b8:
3c:fd:2b:a8:29:6d:f3:bb:c1:2d:d2:53:64:59:52:
f6:98:13:70:99:29:f0:02:6a:8b:a7:90:6f:ce:ee:
8c:cb:83:c5:66:bf:7d:04:a0:31:fb:b9:13:c0:a6:
09:93:12:1a:64:c2:f2:d6:8b:2d:bf:9d:60:40:9f:
ad:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:A7:4A:28:A2:05:E2:30:6C:06:FD:B6:E6:E3:D6:F6:9F:BE:84:AD
X509v3 Authority Key Identifier:
keyid:4A:DC:F1:96:72:96:5F:51:B1:6D:87:AF:AB:1B:14:90:82:E6:C3:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/StzxlnKWX1GxbYevqxsUkILmw-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/2d2eb6-05d5-47a0-8fed-ebf32a0469c7/1/StzxlnKWX1GxbYevqxsUkILmw-4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/2d2eb6-05d5-47a0-8fed-ebf32a0469c7/1/StzxlnKWX1GxbYevqxsUkILmw-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:6e:91:35:7b:2c:5f:89:58:f0:2b:65:92:36:d5:8a:f3:03:
68:e3:ad:86:af:8e:9c:77:e9:66:38:54:83:a6:4b:10:ac:cc:
5e:c9:5b:af:d5:69:07:32:7b:b2:8a:ce:4c:db:e9:9f:cb:9e:
db:1e:cd:d0:1e:d7:3c:8b:78:72:64:50:15:a8:0d:4a:3e:51:
14:39:84:ea:33:10:1e:46:ee:48:e2:5a:bc:df:11:2b:c6:b0:
a9:20:d8:ec:e3:98:44:ca:d2:b1:f2:57:98:68:35:51:52:fa:
d3:34:11:2a:3f:36:54:7b:32:3d:35:7e:58:0b:57:07:80:a8:
29:9d:2d:f7:21:c7:24:8b:ee:22:05:de:0f:85:b8:4d:f2:1a:
0d:fb:7a:c9:30:eb:69:d1:d8:9a:b2:d4:5c:52:d0:12:b3:4a:
77:75:10:85:e0:bf:56:0a:9e:5f:a0:9c:6c:b4:e8:fa:18:48:
dd:55:08:4d:44:a1:1b:48:6b:eb:5b:ee:9f:4e:c0:0a:3a:a1:
b7:1a:af:fb:f2:60:86:a0:60:58:c4:8f:e0:bb:cc:22:1f:4e:
af:08:bd:24:68:be:6e:c1:66:49:cd:d2:1d:ba:83:28:2b:fc:
1b:ce:19:02:7d:b3:f2:12:a4:93:5f:ab:cb:b5:65:7c:d7:14:
9a:b3:7c:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:30:46 2025 by rpki-client