Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/c05b86-6f16-4964-a503-5eccec8d93b4/1/_sTvIAvJ0n6e1_O8a1wFKS2EMro.mft
File: _sTvIAvJ0n6e1_O8a1wFKS2EMro.mft (raw, json)
Hash identifier: mnWru04Vqi7ue98KAAAMQDF4+miIjaEuWvlADJEEj90=
Subject key identifier: 50:25:83:02:34:50:22:DE:6F:1F:FD:F4:B8:07:6B:69:45:99:FA:B9
Authority key identifier: FE:C4:EF:20:0B:C9:D2:7E:9E:D7:F3:BC:6B:5C:05:29:2D:84:32:BA
Certificate issuer: /CN=fec4ef200bc9d27e9ed7f3bc6b5c05292d8432ba
Certificate serial: 0199225594BCD9A70921F2DED4026253431D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_sTvIAvJ0n6e1_O8a1wFKS2EMro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/c05b86-6f16-4964-a503-5eccec8d93b4/1/_sTvIAvJ0n6e1_O8a1wFKS2EMro.mft
Manifest number: 038F
Signing time: Sun 07 Sep 2025 04:00:57 +0000
Manifest this update: Sun 07 Sep 2025 04:00:57 +0000
Manifest next update: Mon 08 Sep 2025 04:00:57 +0000
Files and hashes: 1: A-WEqq-qnquQ-k-HUeyR2Ta7Ai0.roa (hash: ulBE+6XQU+CVKwFHEP6pOstPObSTz9LyM8DJtWKzepw=)
2: _sTvIAvJ0n6e1_O8a1wFKS2EMro.crl (hash: re5B6eTDnK5QSljAIt+Dhb5x0cBzDNtPZwZ/PUJuntQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/c05b86-6f16-4964-a503-5eccec8d93b4/1/_sTvIAvJ0n6e1_O8a1wFKS2EMro.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/c05b86-6f16-4964-a503-5eccec8d93b4/1/_sTvIAvJ0n6e1_O8a1wFKS2EMro.mft
rsync://rpki.ripe.net/repository/DEFAULT/_sTvIAvJ0n6e1_O8a1wFKS2EMro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:94:bc:d9:a7:09:21:f2:de:d4:02:62:53:43:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fec4ef200bc9d27e9ed7f3bc6b5c05292d8432ba
Validity
Not Before: Sep 7 04:00:57 2025 GMT
Not After : Sep 8 04:00:57 2025 GMT
Subject: CN=50258302345022de6f1ffdf4b8076b694599fab9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:3e:bb:55:13:2f:e3:f2:17:15:6d:b1:25:d1:
95:56:f7:5f:d5:92:27:73:ae:15:cb:e2:f7:17:e6:
c0:65:72:b8:09:45:93:f4:4c:93:3e:c6:2f:07:ae:
64:be:37:91:35:b7:c2:0d:77:f2:93:c5:86:fa:3b:
a8:4d:78:7a:9e:ae:9d:b7:d9:6e:fc:62:b6:a6:33:
44:7e:4f:75:39:28:c7:b7:f7:a3:0d:8f:b3:33:94:
15:03:84:a3:bc:67:df:c5:40:12:f7:9f:9d:63:49:
4b:1e:2a:dc:19:d9:55:73:cb:79:c3:b7:48:39:4c:
68:25:c7:b3:8c:35:43:2a:4d:02:9a:d1:41:7c:5f:
0d:e1:5f:f8:d2:27:cd:20:7b:b8:ef:a4:5c:2f:a4:
07:c4:f9:6f:14:2a:1e:84:8c:e5:92:e4:29:ff:f0:
53:78:24:22:ef:43:b6:b1:c9:2d:43:d8:07:ee:d5:
a7:f2:47:33:a1:07:46:5a:eb:de:e6:91:91:d8:d8:
e3:24:13:c2:59:d2:ef:ed:36:e3:e5:e4:df:9b:f8:
fc:cf:19:fe:aa:b8:a5:64:66:e5:e1:27:a4:87:0b:
f7:d6:54:8d:0b:75:85:33:8a:0c:e2:c8:0a:15:7d:
cc:88:44:14:3f:96:25:93:88:30:09:e5:41:a9:37:
8d:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:25:83:02:34:50:22:DE:6F:1F:FD:F4:B8:07:6B:69:45:99:FA:B9
X509v3 Authority Key Identifier:
keyid:FE:C4:EF:20:0B:C9:D2:7E:9E:D7:F3:BC:6B:5C:05:29:2D:84:32:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_sTvIAvJ0n6e1_O8a1wFKS2EMro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/c05b86-6f16-4964-a503-5eccec8d93b4/1/_sTvIAvJ0n6e1_O8a1wFKS2EMro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/c05b86-6f16-4964-a503-5eccec8d93b4/1/_sTvIAvJ0n6e1_O8a1wFKS2EMro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:cb:e7:25:92:05:5d:f0:47:14:eb:09:02:5b:16:47:87:8d:
01:0c:c7:31:11:d4:f0:ec:8b:70:b5:ce:71:72:f4:4c:e0:f7:
37:95:1e:ce:d9:f9:12:96:e6:e6:ab:69:33:3f:2e:15:cc:26:
0b:f7:46:b7:b4:74:56:98:3e:88:a7:d8:33:b9:34:85:61:1a:
fb:43:a1:35:6e:8e:80:1d:89:5b:0d:23:2f:76:a4:87:b3:9f:
de:47:c8:a3:cd:35:78:b1:a8:9f:46:90:57:43:0f:b7:25:68:
3e:84:ee:57:5c:85:b6:41:e4:cc:ab:62:18:a6:7a:9e:84:1d:
c0:c0:87:23:14:29:27:ad:03:ff:21:a1:3e:b8:2d:ea:eb:54:
8d:5d:b7:cb:1e:6d:4a:17:8a:8b:85:e2:f4:94:84:bf:22:77:
89:3d:fe:f3:a5:26:b8:ed:c6:db:cb:02:7a:1f:68:31:b7:b0:
3e:3d:53:2f:05:49:0f:cb:9d:b0:79:4e:6e:93:3e:47:84:d0:
1a:5b:c9:92:74:71:4f:fc:4d:6a:00:9d:cb:86:4f:1a:12:73:
73:79:ec:7c:1b:9b:61:82:46:ec:7a:2f:ee:9d:7f:1f:8b:eb:
a5:4f:f7:fa:22:6d:31:55:2b:85:fb:63:cf:ec:96:01:b8:45:
16:ae:41:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:41:10 2025 by rpki-client