Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/3f0083-59d7-433a-905a-47b1bdf8d530/1/sTlxv-p41qpbSe1aw1x3tqMKCJQ.mft
File: sTlxv-p41qpbSe1aw1x3tqMKCJQ.mft (raw, json)
Hash identifier: xSYeFuFeZW0lZTPNRIznnQn/m4Z7wkPHJinoF+kbY4o=
Subject key identifier: 57:1C:71:A4:A9:B1:EF:32:9D:88:49:A5:29:13:63:41:D3:10:BB:DC
Authority key identifier: B1:39:71:BF:EA:78:D6:AA:5B:49:ED:5A:C3:5C:77:B6:A3:0A:08:94
Certificate issuer: /CN=b13971bfea78d6aa5b49ed5ac35c77b6a30a0894
Certificate serial: 0199FBEBC9DCB73FD13D3B83FCBBF04F6272
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sTlxv-p41qpbSe1aw1x3tqMKCJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/3f0083-59d7-433a-905a-47b1bdf8d530/1/sTlxv-p41qpbSe1aw1x3tqMKCJQ.mft
Manifest number: 0BC6
Signing time: Sun 19 Oct 2025 10:02:37 +0000
Manifest this update: Sun 19 Oct 2025 10:02:37 +0000
Manifest next update: Mon 20 Oct 2025 10:02:37 +0000
Files and hashes: 1: Ewu_L9NGAMIn9J1bD2mKPYHfLN0.roa (hash: MPg//qxTuFJeVfIte2bOUUVJ5G8w+mQ6T68mV0V7xWY=)
2: sTlxv-p41qpbSe1aw1x3tqMKCJQ.crl (hash: 21MNoR+j+oAkgIkGiefz3yAkt2JjxfSi5WOFKoSD60A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/3f0083-59d7-433a-905a-47b1bdf8d530/1/sTlxv-p41qpbSe1aw1x3tqMKCJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/3f0083-59d7-433a-905a-47b1bdf8d530/1/sTlxv-p41qpbSe1aw1x3tqMKCJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sTlxv-p41qpbSe1aw1x3tqMKCJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:c9:dc:b7:3f:d1:3d:3b:83:fc:bb:f0:4f:62:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b13971bfea78d6aa5b49ed5ac35c77b6a30a0894
Validity
Not Before: Oct 19 10:02:37 2025 GMT
Not After : Oct 20 10:02:37 2025 GMT
Subject: CN=571c71a4a9b1ef329d8849a529136341d310bbdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:d7:34:f8:42:d2:1c:42:f1:2f:21:d0:44:81:
d6:f4:7c:c2:3a:4a:43:cf:c6:b1:68:f6:da:02:e0:
40:03:18:28:05:33:47:5d:22:65:cb:32:e2:b2:95:
09:7b:c2:8c:b3:6b:65:55:26:82:28:31:1a:57:6e:
13:61:6e:24:f0:28:dc:e7:11:20:a7:3e:d5:b9:a8:
2d:9d:bd:64:ca:a9:7a:48:32:88:85:a0:8d:54:b3:
11:e2:90:1d:0c:7a:eb:3b:98:05:93:06:e6:5f:e7:
81:f9:93:80:79:cf:79:33:0e:d4:e9:8a:ee:03:53:
1a:e3:5f:82:ac:b9:71:f8:58:61:f4:29:6c:c7:a8:
3f:ae:99:01:55:e2:57:93:56:e2:64:20:bd:3c:f2:
e8:95:e9:c0:76:a4:65:f6:31:8e:6b:7a:91:cc:fb:
8a:ed:9d:ce:8d:93:4b:5b:1f:06:30:46:52:36:ac:
3f:63:3f:ef:c8:db:b7:15:1b:d6:35:d8:ee:fe:b1:
0b:0c:ce:f4:a2:83:6a:d8:04:ed:d3:a7:03:d6:24:
12:7d:38:95:84:76:b3:b1:18:a4:47:88:72:de:57:
01:40:ba:5b:92:d3:70:24:4a:51:8d:fb:49:a7:1e:
04:35:28:08:a7:83:e6:65:69:62:df:56:10:75:f6:
6f:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:1C:71:A4:A9:B1:EF:32:9D:88:49:A5:29:13:63:41:D3:10:BB:DC
X509v3 Authority Key Identifier:
keyid:B1:39:71:BF:EA:78:D6:AA:5B:49:ED:5A:C3:5C:77:B6:A3:0A:08:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sTlxv-p41qpbSe1aw1x3tqMKCJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/3f0083-59d7-433a-905a-47b1bdf8d530/1/sTlxv-p41qpbSe1aw1x3tqMKCJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/3f0083-59d7-433a-905a-47b1bdf8d530/1/sTlxv-p41qpbSe1aw1x3tqMKCJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:57:82:da:b4:6a:3f:54:95:2d:46:c4:df:a3:94:28:30:e3:
95:0c:25:b3:64:af:e1:02:50:1a:85:70:60:f0:b2:e0:ad:d1:
00:b5:75:ff:8f:ac:31:07:fe:c2:a4:74:1f:0c:44:f9:9c:b3:
2a:c4:e0:e0:9c:e9:52:c2:67:8b:8a:45:ed:05:32:ca:c2:61:
b8:86:30:b4:8a:04:89:e4:aa:28:88:37:82:23:d6:bf:ad:9a:
da:3a:6d:5d:03:24:1d:a0:6c:48:cd:38:73:1a:64:80:5c:9c:
c6:70:f4:aa:9a:4a:6b:0e:96:7a:d5:fd:8e:06:04:24:5d:76:
0e:a0:59:52:1c:1d:c7:75:26:be:c6:06:f2:f3:48:5a:bc:b6:
e9:ad:23:a4:90:9d:b2:d5:f7:02:07:18:f7:4b:75:3c:82:a1:
98:dc:6a:a1:01:5a:a5:07:9e:27:a7:af:c3:3e:b9:82:93:69:
a9:8d:ee:bf:e7:51:64:c0:34:59:c2:7d:e9:00:70:b3:86:ea:
1c:ea:0c:f5:8b:bf:0b:13:23:63:9d:eb:bd:97:35:58:73:87:
2e:e6:75:05:d7:04:fa:5e:33:a9:e0:c9:b7:50:36:4d:7a:cd:
fa:d3:77:cf:64:11:f2:b3:4f:be:3f:8e:00:9b:e5:de:80:83:
48:19:f8:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:40:41 2025 by rpki-client