Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/698efb-c6b4-4d2c-9368-7cec2d5345b4/1/stf5mYOKoWO_NE_GmRe7YNEv38M.mft
File: stf5mYOKoWO_NE_GmRe7YNEv38M.mft (raw, json)
Hash identifier: /drgI0NmtH23MCd6/qMYZxrtfY7FJcoZ5bh86gznkyI=
Subject key identifier: 53:AF:FD:B5:37:78:04:16:CE:3C:13:71:F4:12:C5:1D:3A:03:3F:5B
Authority key identifier: B2:D7:F9:99:83:8A:A1:63:BF:34:4F:C6:99:17:BB:60:D1:2F:DF:C3
Certificate issuer: /CN=b2d7f999838aa163bf344fc69917bb60d12fdfc3
Certificate serial: 019921E7E7EAF3F84E5A23BC156B3A2FBF6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/stf5mYOKoWO_NE_GmRe7YNEv38M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/698efb-c6b4-4d2c-9368-7cec2d5345b4/1/stf5mYOKoWO_NE_GmRe7YNEv38M.mft
Manifest number: 1160
Signing time: Sun 07 Sep 2025 02:01:10 +0000
Manifest this update: Sun 07 Sep 2025 02:01:10 +0000
Manifest next update: Mon 08 Sep 2025 02:01:10 +0000
Files and hashes: 1: i-DPtzOhX1UrAwvJvp6e_VFBpfU.roa (hash: b0DJ4Ik9RBvNDvd/V/+wWQQR6BcIK0SHDpRuzhlzJ6o=)
2: stf5mYOKoWO_NE_GmRe7YNEv38M.crl (hash: OaqRteDqYoOWk6jhOdNoAQ8OEIC/NJO9NTOFXdE95q8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/698efb-c6b4-4d2c-9368-7cec2d5345b4/1/stf5mYOKoWO_NE_GmRe7YNEv38M.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/698efb-c6b4-4d2c-9368-7cec2d5345b4/1/stf5mYOKoWO_NE_GmRe7YNEv38M.mft
rsync://rpki.ripe.net/repository/DEFAULT/stf5mYOKoWO_NE_GmRe7YNEv38M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:e7:ea:f3:f8:4e:5a:23:bc:15:6b:3a:2f:bf:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2d7f999838aa163bf344fc69917bb60d12fdfc3
Validity
Not Before: Sep 7 02:01:10 2025 GMT
Not After : Sep 8 02:01:10 2025 GMT
Subject: CN=53affdb537780416ce3c1371f412c51d3a033f5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ed:c2:13:27:d2:78:38:10:3a:1c:cf:01:9b:
a2:0a:0c:cf:c6:00:f1:34:06:89:12:ee:d6:d7:6c:
bc:0c:b4:39:9e:ad:dd:3d:fb:41:d7:e0:14:8f:71:
2e:89:f7:d6:86:fd:9d:cb:3c:26:9c:ca:75:33:8e:
a8:1a:e0:2f:30:09:ce:a6:be:1d:c9:f5:b6:5c:df:
b5:45:15:70:61:4c:25:24:3d:fa:b6:37:64:c8:14:
23:86:f6:50:c5:99:35:d9:dc:eb:a8:b4:22:18:7b:
12:38:0c:cd:6b:41:ad:af:58:d8:d1:ef:a2:cc:ba:
b5:a1:cc:11:91:47:6d:fc:b8:22:56:2f:d5:00:ad:
88:8f:5c:0e:30:b9:2b:0d:64:10:d9:e0:60:e6:2e:
f4:8c:0e:38:37:c8:5c:49:aa:53:65:08:81:a1:38:
cb:ea:6c:69:2e:ce:1d:25:28:a5:db:ac:d6:8e:ed:
13:d1:45:f0:90:b4:65:9a:f8:19:08:92:e2:d6:0f:
5d:54:b7:9f:90:e0:5e:2c:3f:52:ff:ea:69:62:03:
30:62:4c:12:6f:6f:8c:d3:3f:2e:f6:d0:10:c0:3b:
07:51:73:b7:cc:22:40:38:b6:f5:8f:f9:67:66:69:
6b:be:d1:b7:ca:06:a2:fa:91:09:b0:93:06:da:51:
04:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:AF:FD:B5:37:78:04:16:CE:3C:13:71:F4:12:C5:1D:3A:03:3F:5B
X509v3 Authority Key Identifier:
keyid:B2:D7:F9:99:83:8A:A1:63:BF:34:4F:C6:99:17:BB:60:D1:2F:DF:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/stf5mYOKoWO_NE_GmRe7YNEv38M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/698efb-c6b4-4d2c-9368-7cec2d5345b4/1/stf5mYOKoWO_NE_GmRe7YNEv38M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/698efb-c6b4-4d2c-9368-7cec2d5345b4/1/stf5mYOKoWO_NE_GmRe7YNEv38M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:85:b1:be:57:8e:99:28:e4:27:8f:f2:11:a9:5b:a9:da:0e:
04:4d:a5:86:a8:76:75:4c:04:74:97:ee:07:4e:3a:35:23:68:
86:68:d9:ca:29:0e:60:47:52:55:05:d6:2b:25:56:aa:28:2e:
ea:41:84:78:86:f5:0b:7a:93:28:fb:83:44:0e:da:2f:15:d5:
a2:7c:3f:36:3a:f0:af:7f:6b:ff:7e:73:ff:46:1a:95:f4:54:
4c:5b:11:f8:33:4f:d2:46:ec:73:9a:60:59:fe:88:56:93:c6:
dd:c7:b9:7e:a5:90:ed:e6:7a:da:ee:d5:b3:ee:98:19:fd:d1:
02:e3:f7:96:7d:0f:9b:60:e3:39:4f:e2:3c:2f:14:53:11:a2:
05:d8:f0:8d:3b:07:7b:d7:f0:36:6e:24:60:c4:37:ae:c6:d6:
7e:91:46:e2:a2:e1:bc:b2:36:98:cd:e3:60:09:b4:0e:ac:0b:
68:7d:29:46:a0:c1:9e:eb:b6:4f:a1:02:c3:b0:c6:0a:df:b7:
46:8a:9f:bf:be:1e:98:e4:00:05:f7:6f:be:cd:95:0a:6a:6f:
f6:92:1e:96:57:a0:3a:ba:d1:1f:d0:52:24:46:e0:b6:22:a5:
16:4e:94:82:84:b1:80:de:26:e8:34:58:8d:ff:b8:bb:2c:a8:
03:60:b3:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkh5+fq8/hOWiO8FWs6L79rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyZDdmOTk5ODM4YWExNjNiZjM0NGZjNjk5MTdiYjYwZDEy
ZmRmYzMwHhcNMjUwOTA3MDIwMTEwWhcNMjUwOTA4MDIwMTEwWjAzMTEwLwYDVQQD
Eyg1M2FmZmRiNTM3NzgwNDE2Y2UzYzEzNzFmNDEyYzUxZDNhMDMzZjViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAue3CEyfSeDgQOhzPAZuiCgzPxgDx
NAaJEu7W12y8DLQ5nq3dPftB1+AUj3EuiffWhv2dyzwmnMp1M46oGuAvMAnOpr4d
yfW2XN+1RRVwYUwlJD36tjdkyBQjhvZQxZk12dzrqLQiGHsSOAzNa0Gtr1jY0e+i
zLq1ocwRkUdt/LgiVi/VAK2Ij1wOMLkrDWQQ2eBg5i70jA44N8hcSapTZQiBoTjL
6mxpLs4dJSil26zWju0T0UXwkLRlmvgZCJLi1g9dVLefkOBeLD9S/+ppYgMwYkwS
b2+M0z8u9tAQwDsHUXO3zCJAOLb1j/lnZmlrvtG3ygai+pEJsJMG2lEElwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFOv/bU3eAQWzjwTcfQSxR06Az9bMB8GA1UdIwQY
MBaAFLLX+ZmDiqFjvzRPxpkXu2DRL9/DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3RmNW1ZT0tvV09fTkVfR21SZTdZTkV2MzhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My82OThlZmItYzZiNC00ZDJjLTkzNjgt
N2NlYzJkNTM0NWI0LzEvc3RmNW1ZT0tvV09fTkVfR21SZTdZTkV2MzhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My82OThlZmItYzZiNC00ZDJjLTkzNjgtN2NlYzJkNTM0NWI0
LzEvc3RmNW1ZT0tvV09fTkVfR21SZTdZTkV2MzhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYIWxvleO
mSjkJ4/yEalbqdoOBE2lhqh2dUwEdJfuB046NSNohmjZyikOYEdSVQXWKyVWqigu
6kGEeIb1C3qTKPuDRA7aLxXVonw/Njrwr39r/35z/0YalfRUTFsR+DNP0kbsc5pg
Wf6IVpPG3ce5fqWQ7eZ62u7Vs+6YGf3RAuP3ln0Pm2DjOU/iPC8UUxGiBdjwjTsH
e9fwNm4kYMQ3rsbWfpFG4qLhvLI2mM3jYAm0DqwLaH0pRqDBnuu2T6ECw7DGCt+3
Roqfv74emOQABfdvvs2VCmpv9pIellegOrrRH9BSJEbgtiKlFk6UgoSxgN4m6DRY
jf+4uyyoA2CzTA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:34:00 2025 by rpki-client