Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/d765a4-54eb-410d-8f3d-689ba4d33c4b/1/STotSDdjMKWC-vPjAy73sLzKM-g.mft
File: STotSDdjMKWC-vPjAy73sLzKM-g.mft (raw, json)
Hash identifier: KoRS/DCnuNBChVZgVmTN71/BQgKfky/YGCc8Zrsc9Qo=
Subject key identifier: C4:04:E4:CD:34:DB:CB:70:D6:91:3D:13:CF:2D:48:59:5B:51:20:9A
Authority key identifier: 49:3A:2D:48:37:63:30:A5:82:FA:F3:E3:03:2E:F7:B0:BC:CA:33:E8
Certificate issuer: /CN=493a2d48376330a582faf3e3032ef7b0bcca33e8
Certificate serial: 019A7301ADFAD3BF3C16B940AA31DD4E9B97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/STotSDdjMKWC-vPjAy73sLzKM-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/d765a4-54eb-410d-8f3d-689ba4d33c4b/1/STotSDdjMKWC-vPjAy73sLzKM-g.mft
Manifest number: 0549
Signing time: Tue 11 Nov 2025 13:01:21 +0000
Manifest this update: Tue 11 Nov 2025 13:01:21 +0000
Manifest next update: Wed 12 Nov 2025 13:01:21 +0000
Files and hashes: 1: GXnQPnuqnvBWk7kpONau-2u0RoQ.roa (hash: uxonlVe7DqVs73Mq5GsJwlXeQ95X/yFAybekoDtId+I=)
2: K4xCdnhBZ_LTp1EUPDVlQMfBXVU.roa (hash: 0SSaEOqC5lcPOFsmccHT1RA1HgUBIU0mV5Hq5IzISvU=)
3: STotSDdjMKWC-vPjAy73sLzKM-g.crl (hash: vB39VemeQA735vsc12Flp9viS3jYCcjyj1wW0DOSoZc=)
4: mR4Z2n-oSu5nW_s21Ev5X8B6AA0.roa (hash: Nu48O4pf7RyMZs46bJTZ1eHTnLF16hGHEGVie8zVALM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/d765a4-54eb-410d-8f3d-689ba4d33c4b/1/STotSDdjMKWC-vPjAy73sLzKM-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/d765a4-54eb-410d-8f3d-689ba4d33c4b/1/STotSDdjMKWC-vPjAy73sLzKM-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/STotSDdjMKWC-vPjAy73sLzKM-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:ad:fa:d3:bf:3c:16:b9:40:aa:31:dd:4e:9b:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=493a2d48376330a582faf3e3032ef7b0bcca33e8
Validity
Not Before: Nov 11 13:01:21 2025 GMT
Not After : Nov 12 13:01:21 2025 GMT
Subject: CN=c404e4cd34dbcb70d6913d13cf2d48595b51209a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:7d:43:25:cb:aa:4b:f5:b3:d4:60:c7:82:dd:
60:01:2f:7d:05:c7:e2:d6:37:d4:8f:ed:16:62:9e:
4a:e0:63:66:6f:23:0b:14:d1:6a:72:54:94:50:6c:
a1:07:47:90:3e:91:b6:93:1e:22:9d:b1:aa:97:72:
ac:b8:d8:df:7e:7a:23:34:e2:6a:de:01:3f:5a:cc:
cc:d0:9d:54:50:80:0b:d9:c2:20:c5:29:45:9e:5c:
a2:d8:35:d4:47:97:8d:17:89:5e:4e:6b:5b:32:41:
12:53:e6:ba:5c:03:b6:fd:a7:ea:b2:1c:ff:24:b6:
86:32:f8:55:90:d8:84:61:9a:a5:d1:b2:dc:dc:47:
fa:63:94:97:fd:ad:1b:a5:c3:92:f8:88:22:ae:4b:
1a:8a:e0:8a:8f:14:55:3f:f9:64:d0:c6:01:30:05:
36:a3:1b:4f:1a:bd:e2:a8:a8:c7:2a:29:cb:2e:eb:
4a:fb:ed:e5:b6:7f:05:8d:a7:61:34:8e:e4:23:4a:
37:0a:f2:36:62:bd:ab:62:95:9f:4a:34:0c:32:9f:
67:81:ac:57:dc:15:fd:91:26:fd:ea:86:6c:8d:ad:
04:c9:ab:eb:95:26:9c:1d:67:8d:94:d3:9c:e4:ec:
50:9b:f3:4a:8f:3a:40:75:40:e3:2c:ce:7a:6e:70:
ea:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:04:E4:CD:34:DB:CB:70:D6:91:3D:13:CF:2D:48:59:5B:51:20:9A
X509v3 Authority Key Identifier:
keyid:49:3A:2D:48:37:63:30:A5:82:FA:F3:E3:03:2E:F7:B0:BC:CA:33:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/STotSDdjMKWC-vPjAy73sLzKM-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d765a4-54eb-410d-8f3d-689ba4d33c4b/1/STotSDdjMKWC-vPjAy73sLzKM-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d765a4-54eb-410d-8f3d-689ba4d33c4b/1/STotSDdjMKWC-vPjAy73sLzKM-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:0b:5f:a6:58:0b:ab:d4:99:02:a4:55:91:88:45:0e:5c:df:
0b:06:2d:b1:a9:30:b0:55:b1:3a:55:13:da:a5:3c:98:27:77:
33:ed:4f:82:c8:6e:26:7c:b7:d5:fb:01:5d:a8:d7:56:87:cd:
c3:f3:d4:a1:f2:7d:6c:37:f8:4d:8b:13:29:fa:8a:19:c4:ee:
80:19:0c:01:97:5d:a1:d6:23:66:de:86:d5:cd:85:ce:63:b7:
93:ff:1e:9e:63:4e:ae:80:9e:85:48:52:74:e0:8b:92:60:8a:
5c:82:bb:4e:18:d8:53:59:bb:21:ca:db:a6:d8:ce:40:0b:d3:
a7:6f:70:e1:2f:74:2c:f0:b8:f5:0d:60:24:6d:ef:62:cc:34:
3b:a4:47:20:db:f4:91:06:ee:ba:6a:ca:a6:90:ca:94:41:94:
fb:a5:d2:00:3a:93:e8:e8:68:20:ea:38:fd:81:b5:ad:b9:28:
53:7d:c1:41:66:82:05:8c:e9:56:31:92:09:b0:84:56:a5:07:
6e:4a:40:00:0e:29:de:96:ba:30:76:94:40:f7:2d:c9:ee:a6:
20:e3:ae:ab:69:93:4a:ff:e0:a0:2c:ac:84:c7:2a:e9:91:44:
23:80:1d:81:ae:dd:66:d4:b6:23:0d:93:72:96:16:76:fc:c1:
89:13:57:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:09:48 2025 by rpki-client