Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/d29730-515a-4bfb-ad55-e038d81b3f97/1/STRpVEIDCC0sPB3fDwu9kL3FaUE.mft
File: STRpVEIDCC0sPB3fDwu9kL3FaUE.mft (raw, json)
Hash identifier: dhy39q9XVmR2afYQyZMIey8TYL2N6abR5+BAhocmdTM=
Subject key identifier: B2:D5:9E:FB:16:56:52:A6:D2:51:99:53:75:DF:8E:A7:77:76:87:2C
Authority key identifier: 49:34:69:54:42:03:08:2D:2C:3C:1D:DF:0F:0B:BD:90:BD:C5:69:41
Certificate issuer: /CN=493469544203082d2c3c1ddf0f0bbd90bdc56941
Certificate serial: 0199FEEC2AA92281E46A21D6277A1B26FA68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/STRpVEIDCC0sPB3fDwu9kL3FaUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/d29730-515a-4bfb-ad55-e038d81b3f97/1/STRpVEIDCC0sPB3fDwu9kL3FaUE.mft
Manifest number: 15D3
Signing time: Mon 20 Oct 2025 00:01:54 +0000
Manifest this update: Mon 20 Oct 2025 00:01:54 +0000
Manifest next update: Tue 21 Oct 2025 00:01:54 +0000
Files and hashes: 1: STRpVEIDCC0sPB3fDwu9kL3FaUE.crl (hash: VTYjJveVWEJO59c2M8LP0g79QE/HVJ+foEvZt5p95cI=)
2: j2dUbB-NK5CfnidiqDMKydgI8YE.roa (hash: ZUxAxryB168omhb8dlNaslAttNVaqi4+cbp8ns+rOL0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/d29730-515a-4bfb-ad55-e038d81b3f97/1/STRpVEIDCC0sPB3fDwu9kL3FaUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/d29730-515a-4bfb-ad55-e038d81b3f97/1/STRpVEIDCC0sPB3fDwu9kL3FaUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/STRpVEIDCC0sPB3fDwu9kL3FaUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:ec:2a:a9:22:81:e4:6a:21:d6:27:7a:1b:26:fa:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=493469544203082d2c3c1ddf0f0bbd90bdc56941
Validity
Not Before: Oct 20 00:01:54 2025 GMT
Not After : Oct 21 00:01:54 2025 GMT
Subject: CN=b2d59efb165652a6d251995375df8ea77776872c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:34:5f:07:dd:82:5a:f7:43:96:a6:27:8c:41:
f6:53:1f:a5:8f:65:62:78:68:4a:fe:f8:38:d7:4a:
e9:bd:a6:28:5a:a6:d5:dc:28:20:77:02:1c:e1:d8:
73:c3:df:97:70:6c:e2:9e:52:77:30:cf:e9:30:db:
de:44:66:39:a0:1a:85:f5:ba:65:36:38:75:86:cb:
99:67:fc:49:c0:48:dd:f2:54:d4:60:7e:c7:6a:a0:
03:47:50:0b:1f:f2:b2:a7:40:0a:3e:03:f3:c5:da:
78:57:ae:a5:e4:1a:46:77:55:be:d2:e0:c1:0a:a9:
fb:ce:01:5a:13:fb:e0:d1:5f:14:8d:2d:e6:d7:bb:
35:ad:cd:a6:ee:20:f2:1a:13:bf:f4:fc:e6:12:97:
64:a3:61:28:c8:36:02:b1:9a:1d:18:e3:bf:d1:fd:
9f:d0:84:72:0e:6a:bf:71:6a:5e:09:52:39:b0:c8:
0e:3b:08:f6:ad:26:07:67:22:0f:50:ea:3c:57:4f:
ea:ef:f3:32:2f:24:59:7e:76:61:55:85:2a:89:52:
f6:1b:6a:a4:0e:35:8a:ec:dc:18:81:08:5e:0b:01:
19:18:a5:a5:e5:4e:ba:49:91:1b:9f:84:d7:d2:c3:
4f:e5:45:b5:fd:76:0f:f8:63:03:3c:52:83:57:f2:
f3:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:D5:9E:FB:16:56:52:A6:D2:51:99:53:75:DF:8E:A7:77:76:87:2C
X509v3 Authority Key Identifier:
keyid:49:34:69:54:42:03:08:2D:2C:3C:1D:DF:0F:0B:BD:90:BD:C5:69:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/STRpVEIDCC0sPB3fDwu9kL3FaUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/d29730-515a-4bfb-ad55-e038d81b3f97/1/STRpVEIDCC0sPB3fDwu9kL3FaUE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/d29730-515a-4bfb-ad55-e038d81b3f97/1/STRpVEIDCC0sPB3fDwu9kL3FaUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:63:cb:73:41:e6:14:87:f3:96:6a:ac:a2:06:8c:0a:cb:a9:
12:18:fe:b3:91:6c:8d:a4:05:20:79:03:79:64:9b:26:99:82:
4f:2b:7b:8c:a1:cc:e0:b3:22:3c:13:b0:5e:bb:25:66:54:b7:
c9:fb:2c:fe:e1:e5:ef:4d:2a:76:8f:47:06:a8:f6:58:f0:4d:
ae:f0:2e:28:6e:d3:6c:c4:59:e4:02:11:78:80:ab:ac:b4:f2:
e2:2a:48:c5:7c:c4:09:0d:fc:c5:77:14:ef:b5:75:7e:76:d2:
01:ff:63:38:f9:6a:4c:51:e1:a5:c7:71:e7:15:17:93:86:a4:
29:3e:27:96:f1:83:ed:59:d3:bd:39:1c:d5:9e:0c:5b:7a:98:
d6:b5:56:7e:c3:74:dd:63:74:5d:96:b3:d8:b3:e7:62:47:09:
d0:84:e5:c6:4d:4b:0a:16:c7:4d:ec:53:6f:09:74:fb:b3:e0:
b5:d6:53:18:a6:d5:fb:1f:71:45:57:41:eb:ca:0d:6d:86:ae:
74:fc:12:fd:7a:f2:03:d8:e1:ca:7b:01:8d:3e:90:88:db:2a:
29:d2:51:34:df:9c:41:6f:5f:99:65:d1:5f:c7:37:50:03:3f:
4e:8b:ea:83:ea:29:41:7c:c3:04:5e:cc:77:ec:a3:c0:20:6f:
8f:d2:85:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:45:23 2025 by rpki-client