Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/a08STJHKoMyRw7m7T4rbBjJiJKE.mft
File: a08STJHKoMyRw7m7T4rbBjJiJKE.mft (raw, json)
Hash identifier: hX+LQ4Umt5Tb5+XF0P3B1V9zMuNT9ByFbb3H5koMtIE=
Subject key identifier: D4:29:59:AA:DE:79:DC:4C:9C:18:2D:F9:BF:0A:9A:68:39:A2:8F:20
Authority key identifier: 6B:4F:12:4C:91:CA:A0:CC:91:C3:B9:BB:4F:8A:DB:06:32:62:24:A1
Certificate issuer: /CN=6b4f124c91caa0cc91c3b9bb4f8adb06326224a1
Certificate serial: 0199FAD84712AD145026A733D8A8E48E190D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a08STJHKoMyRw7m7T4rbBjJiJKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/a08STJHKoMyRw7m7T4rbBjJiJKE.mft
Manifest number: 0C3A
Signing time: Sun 19 Oct 2025 05:01:41 +0000
Manifest this update: Sun 19 Oct 2025 05:01:41 +0000
Manifest next update: Mon 20 Oct 2025 05:01:41 +0000
Files and hashes: 1: a08STJHKoMyRw7m7T4rbBjJiJKE.crl (hash: bbOlVkJa/sKa2q22e4wkCmZFp5evvnuZRZGCqR1D5hY=)
2: ww5W_AzyvORyhz7R6e4M2kGu004.roa (hash: h+p5BWiNgVQT+Ps96Xby3wyi4OgT8Zpuq9hDEAln8lQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/a08STJHKoMyRw7m7T4rbBjJiJKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/a08STJHKoMyRw7m7T4rbBjJiJKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/a08STJHKoMyRw7m7T4rbBjJiJKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d8:47:12:ad:14:50:26:a7:33:d8:a8:e4:8e:19:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b4f124c91caa0cc91c3b9bb4f8adb06326224a1
Validity
Not Before: Oct 19 05:01:41 2025 GMT
Not After : Oct 20 05:01:41 2025 GMT
Subject: CN=d42959aade79dc4c9c182df9bf0a9a6839a28f20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5e:c9:6f:b8:d1:f0:0a:70:94:46:c4:aa:7b:
1d:56:26:07:f1:38:f3:df:83:7b:f0:58:dc:c1:72:
43:48:36:40:b7:79:0e:18:a5:36:3d:eb:73:f9:c4:
3e:6d:a3:0d:0a:c2:9c:02:73:cf:2d:73:c9:74:5a:
b8:39:4c:a0:74:37:b1:1f:1b:02:d7:b3:28:a5:2e:
71:f3:3b:9a:f7:92:20:5f:e3:93:7e:6c:06:6f:4a:
c3:1e:24:6c:a5:73:a7:31:63:64:34:53:3c:33:06:
55:d5:da:ce:db:3f:b9:d8:17:43:87:a0:35:f3:0e:
2a:77:5b:d3:af:c6:72:a3:0e:4f:18:5d:45:0e:ab:
ed:0a:c1:df:aa:2a:a7:81:77:03:d4:37:16:05:36:
e4:ef:d3:63:b5:b9:89:14:eb:5a:de:5c:af:bc:c2:
a2:7c:76:07:4d:f3:b2:84:bf:07:67:3a:3d:a2:f5:
92:32:02:fd:98:50:df:0b:00:36:39:7b:66:48:fb:
42:7c:0d:9c:db:77:62:20:fd:33:b7:4b:1d:b4:f2:
5f:b5:b9:90:8f:7f:e3:f4:dc:8d:a5:c4:f7:6d:14:
8c:58:40:cd:fc:e9:97:5e:68:9e:af:b8:1a:1e:e6:
2f:e1:cd:37:e8:77:b4:38:57:7c:7c:47:fd:21:46:
21:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:29:59:AA:DE:79:DC:4C:9C:18:2D:F9:BF:0A:9A:68:39:A2:8F:20
X509v3 Authority Key Identifier:
keyid:6B:4F:12:4C:91:CA:A0:CC:91:C3:B9:BB:4F:8A:DB:06:32:62:24:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a08STJHKoMyRw7m7T4rbBjJiJKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/a08STJHKoMyRw7m7T4rbBjJiJKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/a08STJHKoMyRw7m7T4rbBjJiJKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:73:db:ee:52:4a:3c:61:c1:72:bd:91:4e:fd:e8:1b:a9:0b:
ff:b8:63:55:01:8e:45:1f:98:1e:cf:0e:39:62:a4:29:87:7a:
74:32:4d:9b:5c:92:87:5d:eb:c8:60:e4:76:a2:1e:09:2f:7c:
fd:7c:03:84:07:a8:a2:46:fd:0e:18:3c:5b:11:6e:3d:5d:ce:
a0:55:6a:bd:da:dd:95:f9:16:e3:cc:bc:0d:26:d2:30:8f:df:
10:8d:e0:9d:9c:35:55:79:b9:f1:17:3f:ef:97:71:ad:24:59:
d7:24:26:84:e5:b1:84:42:64:4c:bf:38:c7:13:d6:66:07:2b:
6d:05:e9:16:f2:d5:06:ff:b0:26:2f:47:f8:db:18:88:68:e8:
9c:8b:47:f3:bf:58:67:aa:c5:94:9d:0c:9b:fc:51:5f:0a:fb:
15:6c:d6:6f:d0:2d:01:b7:33:9c:83:9a:01:73:77:b4:59:f3:
81:eb:90:2c:d7:7d:3f:ff:69:5c:a4:12:3a:b8:45:f6:97:d7:
36:16:60:ea:b2:98:ca:6c:86:70:93:7c:19:4f:01:f2:f6:20:
6a:90:2b:a6:cd:b1:ea:ba:e2:51:25:ce:c1:32:9b:e7:fb:15:
05:5a:05:a6:50:19:17:09:d2:af:15:f7:77:eb:12:93:ce:5d:
3d:8a:6f:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:29:01 2025 by rpki-client