Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/07cdcf-8875-4770-8c75-41b745bf53db/1/STeGYPXwGSOUbDXZS-XM19K3EFE.mft
File: STeGYPXwGSOUbDXZS-XM19K3EFE.mft (raw, json)
Hash identifier: cln47Ug/xUBAu1KRCTFxpxqi/FOAVHzStR7ORrxzMdw=
Subject key identifier: A5:2A:4E:B0:26:C6:B9:36:25:40:AE:DE:BE:FA:D7:DB:C6:59:9C:02
Authority key identifier: 49:37:86:60:F5:F0:19:23:94:6C:35:D9:4B:E5:CC:D7:D2:B7:10:51
Certificate issuer: /CN=49378660f5f01923946c35d94be5ccd7d2b71051
Certificate serial: 019A003551DA002ED5B79D7B9A2D46F68CC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/STeGYPXwGSOUbDXZS-XM19K3EFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/07cdcf-8875-4770-8c75-41b745bf53db/1/STeGYPXwGSOUbDXZS-XM19K3EFE.mft
Manifest number: 0C79
Signing time: Mon 20 Oct 2025 06:01:25 +0000
Manifest this update: Mon 20 Oct 2025 06:01:25 +0000
Manifest next update: Tue 21 Oct 2025 06:01:25 +0000
Files and hashes: 1: 2ZvpZ0sZ6P6ydTiCDEFolKMvfh0.roa (hash: 1DssY9QtTEut1NYlrrYk3dvjYOvc/xqpRvFLT8I4S4E=)
2: NjASS9Fcywmz2PQGC289Z6czZDw.roa (hash: HSbgUfk0PK7NcRU0i0FIegZSv4Qc7DSpvzCcUEz+mx0=)
3: STeGYPXwGSOUbDXZS-XM19K3EFE.crl (hash: EbpuR8wEmufkvDCt5m++u46Nd5X5F1MWM56ySEt3zXM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/07cdcf-8875-4770-8c75-41b745bf53db/1/STeGYPXwGSOUbDXZS-XM19K3EFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/07cdcf-8875-4770-8c75-41b745bf53db/1/STeGYPXwGSOUbDXZS-XM19K3EFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/STeGYPXwGSOUbDXZS-XM19K3EFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:51:da:00:2e:d5:b7:9d:7b:9a:2d:46:f6:8c:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49378660f5f01923946c35d94be5ccd7d2b71051
Validity
Not Before: Oct 20 06:01:25 2025 GMT
Not After : Oct 21 06:01:25 2025 GMT
Subject: CN=a52a4eb026c6b9362540aedebefad7dbc6599c02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:29:a1:db:65:20:91:cf:d3:16:2a:55:41:5f:
a9:38:fd:38:06:9e:bd:43:d8:c5:8b:a1:e2:7e:07:
9a:78:57:88:7e:ea:91:51:81:0d:3f:16:f5:3a:f8:
b2:d3:77:94:8e:f1:3f:a2:97:fc:8c:5a:1b:1d:8d:
f3:55:1b:d3:16:e8:be:9b:17:7d:0c:c3:8c:8d:89:
c3:81:c5:72:5d:b0:b4:ad:29:f2:37:ec:96:0e:1b:
39:b7:56:a1:cc:dc:5e:cf:ad:1c:3d:ea:0e:a0:49:
97:4e:90:54:3b:3d:24:84:fb:e7:50:0b:a6:47:74:
b6:49:23:e3:5e:46:28:c6:20:a8:50:a3:95:f0:df:
c0:17:a8:4a:a3:56:8a:a7:b4:a9:d3:1a:a5:19:8c:
a0:81:1a:3f:30:da:19:bf:b2:d0:78:a7:8c:43:61:
b2:c5:46:ef:ce:04:a4:51:0c:13:f0:00:7e:a4:07:
5f:6f:f6:2e:4b:38:25:19:82:f3:77:53:86:6d:e4:
2e:56:ee:3c:4a:25:90:e2:05:3a:0d:fd:e4:0b:ca:
62:4f:40:14:3d:d9:18:f4:cc:dd:04:91:2f:2b:53:
df:ae:da:76:4b:21:28:ec:0b:61:06:d8:33:42:da:
d2:eb:06:b6:e3:dd:db:d9:da:e0:b3:c6:4c:48:c4:
e6:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:2A:4E:B0:26:C6:B9:36:25:40:AE:DE:BE:FA:D7:DB:C6:59:9C:02
X509v3 Authority Key Identifier:
keyid:49:37:86:60:F5:F0:19:23:94:6C:35:D9:4B:E5:CC:D7:D2:B7:10:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/STeGYPXwGSOUbDXZS-XM19K3EFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/07cdcf-8875-4770-8c75-41b745bf53db/1/STeGYPXwGSOUbDXZS-XM19K3EFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/07cdcf-8875-4770-8c75-41b745bf53db/1/STeGYPXwGSOUbDXZS-XM19K3EFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:9f:70:d8:af:db:f2:73:5e:d3:aa:61:9a:7a:81:4d:e1:ad:
af:b1:3d:ef:dd:20:64:5d:4e:d8:94:f2:06:00:e1:25:36:06:
de:0e:40:cd:21:70:67:58:0b:7a:41:85:4f:b6:41:99:7e:bf:
e4:92:5e:eb:15:49:76:55:a0:00:1d:c7:c1:6a:7d:84:f7:04:
5c:4d:39:8b:25:7b:b8:b0:7e:c7:d9:05:4b:5b:fa:0e:ee:6a:
4d:a4:fb:6a:19:a5:e9:75:70:d7:e7:ee:89:96:9f:60:44:24:
1a:11:b1:10:c3:d6:b0:8e:9e:af:c8:0f:08:a9:81:4d:98:d8:
fd:21:82:c0:77:62:c7:be:0e:05:e4:d8:fa:e7:53:b5:26:74:
20:b3:33:2a:7f:df:9b:fa:fe:1e:a7:7f:ff:6d:0b:04:e2:4e:
2d:49:22:f6:f6:c8:af:a4:fe:bd:c1:64:11:0c:d1:a4:7d:f9:
34:8d:e3:7b:25:ef:80:fa:0a:8c:d7:d9:03:ba:eb:24:9f:41:
f3:6e:24:2e:f9:91:1d:02:e5:b5:3e:5e:06:33:ff:40:1e:88:
ad:89:4d:be:d5:42:b0:a6:fa:a6:ea:ef:d7:27:71:68:4d:21:
7d:d0:f6:47:2f:0f:ad:45:b8:09:9d:8f:15:7a:1e:d2:4b:8d:
d5:0e:d1:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoANVHaAC7Vt517mi1G9ozCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5Mzc4NjYwZjVmMDE5MjM5NDZjMzVkOTRiZTVjY2Q3ZDJi
NzEwNTEwHhcNMjUxMDIwMDYwMTI1WhcNMjUxMDIxMDYwMTI1WjAzMTEwLwYDVQQD
EyhhNTJhNGViMDI2YzZiOTM2MjU0MGFlZGViZWZhZDdkYmM2NTk5YzAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ymh22Ugkc/TFipVQV+pOP04Bp69
Q9jFi6HifgeaeFeIfuqRUYENPxb1Oviy03eUjvE/opf8jFobHY3zVRvTFui+mxd9
DMOMjYnDgcVyXbC0rSnyN+yWDhs5t1ahzNxez60cPeoOoEmXTpBUOz0khPvnUAum
R3S2SSPjXkYoxiCoUKOV8N/AF6hKo1aKp7Sp0xqlGYyggRo/MNoZv7LQeKeMQ2Gy
xUbvzgSkUQwT8AB+pAdfb/YuSzglGYLzd1OGbeQuVu48SiWQ4gU6Df3kC8piT0AU
PdkY9MzdBJEvK1Pfrtp2SyEo7AthBtgzQtrS6wa2493b2drgs8ZMSMTmIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKUqTrAmxrk2JUCu3r7619vGWZwCMB8GA1UdIwQY
MBaAFEk3hmD18BkjlGw12UvlzNfStxBRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1RlR1lQWHdHU09VYkRYWlMtWE0xOUszRUZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC8wN2NkY2YtODg3NS00NzcwLThjNzUt
NDFiNzQ1YmY1M2RiLzEvU1RlR1lQWHdHU09VYkRYWlMtWE0xOUszRUZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC8wN2NkY2YtODg3NS00NzcwLThjNzUtNDFiNzQ1YmY1M2Ri
LzEvU1RlR1lQWHdHU09VYkRYWlMtWE0xOUszRUZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABZ9w2K/b
8nNe06phmnqBTeGtr7E9790gZF1O2JTyBgDhJTYG3g5AzSFwZ1gLekGFT7ZBmX6/
5JJe6xVJdlWgAB3HwWp9hPcEXE05iyV7uLB+x9kFS1v6Du5qTaT7ahml6XVw1+fu
iZafYEQkGhGxEMPWsI6er8gPCKmBTZjY/SGCwHdix74OBeTY+udTtSZ0ILMzKn/f
m/r+Hqd//20LBOJOLUki9vbIr6T+vcFkEQzRpH35NI3jeyXvgPoKjNfZA7rrJJ9B
824kLvmRHQLltT5eBjP/QB6IrYlNvtVCsKb6purv1ydxaE0hfdD2Ry8PrUW4CZ2P
FXoe0kuN1Q7R6g==
-----END CERTIFICATE-----
Generated at Mon Oct 20 09:46:26 2025 by rpki-client