Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/d29730-515a-4bfb-ad55-e038d81b3f97/1/STRpVEIDCC0sPB3fDwu9kL3FaUE.mft
File: STRpVEIDCC0sPB3fDwu9kL3FaUE.mft (raw, json)
Hash identifier: n7PNTB6GCZvrEYRSIlksZFnvo1BaIts3gS3mVg7XjRo=
Subject key identifier: 86:DC:F2:29:6B:84:47:F9:D2:7F:E2:06:B2:A6:08:71:76:0E:92:F2
Authority key identifier: 49:34:69:54:42:03:08:2D:2C:3C:1D:DF:0F:0B:BD:90:BD:C5:69:41
Certificate issuer: /CN=493469544203082d2c3c1ddf0f0bbd90bdc56941
Certificate serial: 0198D5840393739FFE3829A872C02F96A9E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/STRpVEIDCC0sPB3fDwu9kL3FaUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/d29730-515a-4bfb-ad55-e038d81b3f97/1/STRpVEIDCC0sPB3fDwu9kL3FaUE.mft
Manifest number: 1539
Signing time: Sat 23 Aug 2025 06:00:55 +0000
Manifest this update: Sat 23 Aug 2025 06:00:55 +0000
Manifest next update: Sun 24 Aug 2025 06:00:55 +0000
Files and hashes: 1: STRpVEIDCC0sPB3fDwu9kL3FaUE.crl (hash: abtAOGJWjIT8Lm13JpnRniuQ9b9ga+GSo+GVoTgb/qk=)
2: j2dUbB-NK5CfnidiqDMKydgI8YE.roa (hash: ZUxAxryB168omhb8dlNaslAttNVaqi4+cbp8ns+rOL0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/d29730-515a-4bfb-ad55-e038d81b3f97/1/STRpVEIDCC0sPB3fDwu9kL3FaUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/d29730-515a-4bfb-ad55-e038d81b3f97/1/STRpVEIDCC0sPB3fDwu9kL3FaUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/STRpVEIDCC0sPB3fDwu9kL3FaUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:84:03:93:73:9f:fe:38:29:a8:72:c0:2f:96:a9:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=493469544203082d2c3c1ddf0f0bbd90bdc56941
Validity
Not Before: Aug 23 06:00:55 2025 GMT
Not After : Aug 24 06:00:55 2025 GMT
Subject: CN=86dcf2296b8447f9d27fe206b2a60871760e92f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:44:28:bf:53:68:c4:5a:8b:8a:bc:2c:75:bf:
0f:56:a1:dc:20:45:26:b3:70:87:56:f9:21:33:3e:
ce:99:5e:4b:bd:3b:4f:3e:e8:ac:9d:d6:2a:7c:d3:
25:d2:a5:10:60:2d:fd:5f:d3:7f:c2:94:e9:74:84:
2d:a9:26:e9:7a:56:0b:1d:38:b1:e7:84:f8:cd:b0:
a1:3c:5d:b4:d1:c4:3f:49:96:83:bd:da:29:70:54:
b9:84:d9:b9:74:3a:92:6c:c6:d6:dd:96:44:ac:89:
63:3e:79:45:28:96:fd:e1:8c:14:f2:ba:a8:91:fe:
d2:db:64:9e:68:e0:10:ac:4d:48:22:c0:55:d0:89:
3d:e0:95:b9:c3:f6:fe:88:a8:09:25:1c:e6:a3:f2:
e6:d7:44:be:bb:66:fc:b5:8a:35:86:f4:82:1d:de:
65:be:2a:43:71:0b:2e:dd:b7:fa:21:54:6f:82:f4:
18:6f:3d:bd:a6:8e:0d:3d:11:08:9a:5e:48:da:30:
0b:78:e7:da:9c:bc:0f:6a:92:1e:27:42:46:7a:b4:
7a:c8:41:5e:ba:9a:dd:31:e9:31:22:6c:92:4d:ff:
9f:76:bd:b9:26:bc:ef:f8:e2:35:ef:b1:6c:89:9b:
67:44:14:df:15:eb:f6:e1:07:de:2f:e2:37:50:12:
63:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:DC:F2:29:6B:84:47:F9:D2:7F:E2:06:B2:A6:08:71:76:0E:92:F2
X509v3 Authority Key Identifier:
keyid:49:34:69:54:42:03:08:2D:2C:3C:1D:DF:0F:0B:BD:90:BD:C5:69:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/STRpVEIDCC0sPB3fDwu9kL3FaUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/d29730-515a-4bfb-ad55-e038d81b3f97/1/STRpVEIDCC0sPB3fDwu9kL3FaUE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/d29730-515a-4bfb-ad55-e038d81b3f97/1/STRpVEIDCC0sPB3fDwu9kL3FaUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:77:6c:08:28:8d:ad:64:bb:0d:d9:13:c0:d9:db:ce:01:62:
b4:e5:a9:9f:45:85:27:32:1d:52:26:76:6d:35:01:0b:e7:44:
83:3a:49:0d:59:77:ae:3b:9d:3d:b8:d6:cb:85:d0:01:cd:25:
a5:12:1b:85:13:1f:8e:ae:f0:b5:9d:3c:ad:96:04:c6:75:2b:
70:0e:20:a7:96:e9:9f:77:9e:5b:ce:2e:0b:1a:b0:35:2c:8d:
a9:ce:44:3b:8d:92:96:60:9d:cb:18:3f:9f:ca:13:69:a4:b8:
3d:a0:12:9d:ce:ae:7a:79:1a:e7:16:e4:0c:2b:a0:0b:ab:50:
57:c5:fe:14:e4:1e:82:2a:17:71:3d:27:34:4d:22:03:0d:df:
11:ae:4f:8c:ee:a1:a2:bf:f0:10:bd:3d:cf:ca:fc:f2:04:0c:
f0:20:d0:94:57:af:67:ef:73:75:cf:93:f0:d9:3a:18:0b:bd:
2b:89:86:ac:34:fb:b7:85:d1:40:73:b7:55:58:de:f1:ec:1f:
a3:d6:7f:5c:13:90:42:03:26:b7:c4:65:d4:0a:65:17:ee:b6:
48:66:1a:41:4e:0c:eb:5e:4a:4a:64:e6:b7:c7:79:e1:9c:fc:
3e:b8:aa:d0:d4:5b:76:38:5e:f4:61:de:99:19:3e:24:ba:db:
75:7d:39:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVhAOTc5/+OCmocsAvlqnjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5MzQ2OTU0NDIwMzA4MmQyYzNjMWRkZjBmMGJiZDkwYmRj
NTY5NDEwHhcNMjUwODIzMDYwMDU1WhcNMjUwODI0MDYwMDU1WjAzMTEwLwYDVQQD
Eyg4NmRjZjIyOTZiODQ0N2Y5ZDI3ZmUyMDZiMmE2MDg3MTc2MGU5MmYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxEQov1NoxFqLirwsdb8PVqHcIEUm
s3CHVvkhMz7OmV5LvTtPPuisndYqfNMl0qUQYC39X9N/wpTpdIQtqSbpelYLHTix
54T4zbChPF200cQ/SZaDvdopcFS5hNm5dDqSbMbW3ZZErIljPnlFKJb94YwU8rqo
kf7S22SeaOAQrE1IIsBV0Ik94JW5w/b+iKgJJRzmo/Lm10S+u2b8tYo1hvSCHd5l
vipDcQsu3bf6IVRvgvQYbz29po4NPREIml5I2jALeOfanLwPapIeJ0JGerR6yEFe
uprdMekxImySTf+fdr25Jrzv+OI177FsiZtnRBTfFev24QfeL+I3UBJjJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIbc8ilrhEf50n/iBrKmCHF2DpLyMB8GA1UdIwQY
MBaAFEk0aVRCAwgtLDwd3w8LvZC9xWlBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1RScFZFSURDQzBzUEIzZkR3dTlrTDNGYVVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9kMjk3MzAtNTE1YS00YmZiLWFkNTUt
ZTAzOGQ4MWIzZjk3LzEvU1RScFZFSURDQzBzUEIzZkR3dTlrTDNGYVVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS9kMjk3MzAtNTE1YS00YmZiLWFkNTUtZTAzOGQ4MWIzZjk3
LzEvU1RScFZFSURDQzBzUEIzZkR3dTlrTDNGYVVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAndsCCiN
rWS7DdkTwNnbzgFitOWpn0WFJzIdUiZ2bTUBC+dEgzpJDVl3rjudPbjWy4XQAc0l
pRIbhRMfjq7wtZ08rZYExnUrcA4gp5bpn3eeW84uCxqwNSyNqc5EO42SlmCdyxg/
n8oTaaS4PaASnc6uenka5xbkDCugC6tQV8X+FOQegioXcT0nNE0iAw3fEa5PjO6h
or/wEL09z8r88gQM8CDQlFevZ+9zdc+T8Nk6GAu9K4mGrDT7t4XRQHO3VVje8ewf
o9Z/XBOQQgMmt8Rl1AplF+62SGYaQU4M615KSmTmt8d54Zz8Priq0NRbdjhe9GHe
mRk+JLrbdX05cQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:28:46 2025 by rpki-client