Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/7ae133-d0b6-4b68-8f61-d4d9a2e60e64/1/STKJJW4ziHd9leTVMVZ842cqFJo.mft
File: STKJJW4ziHd9leTVMVZ842cqFJo.mft (raw, json)
Hash identifier: 2IILbdWuXmZWJAQ96+SS3Fk3y7E81nFSTEl+pHr12Go=
Subject key identifier: 3E:3C:90:28:E3:43:B7:39:B0:84:72:03:DB:C8:33:55:6D:9E:F4:AA
Authority key identifier: 49:32:89:25:6E:33:88:77:7D:95:E4:D5:31:56:7C:E3:67:2A:14:9A
Certificate issuer: /CN=493289256e3388777d95e4d531567ce3672a149a
Certificate serial: 01992F6C2579E65C3BC2828B8AA5BF045AD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/STKJJW4ziHd9leTVMVZ842cqFJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/7ae133-d0b6-4b68-8f61-d4d9a2e60e64/1/STKJJW4ziHd9leTVMVZ842cqFJo.mft
Manifest number: 1678
Signing time: Tue 09 Sep 2025 17:00:40 +0000
Manifest this update: Tue 09 Sep 2025 17:00:40 +0000
Manifest next update: Wed 10 Sep 2025 17:00:40 +0000
Files and hashes: 1: PDkI417cWn_abbXt0o9HD-0vD6g.roa (hash: mxVaLWpnhSe1agkXL4xYhLyldi4/weSHgH61n+a6Rqk=)
2: STKJJW4ziHd9leTVMVZ842cqFJo.crl (hash: h6fQ0brtw9pe1YZM8E0BRX6Sumil3vbmgvpd2ISeMSA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/7ae133-d0b6-4b68-8f61-d4d9a2e60e64/1/STKJJW4ziHd9leTVMVZ842cqFJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/7ae133-d0b6-4b68-8f61-d4d9a2e60e64/1/STKJJW4ziHd9leTVMVZ842cqFJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/STKJJW4ziHd9leTVMVZ842cqFJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 15:12:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2f:6c:25:79:e6:5c:3b:c2:82:8b:8a:a5:bf:04:5a:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=493289256e3388777d95e4d531567ce3672a149a
Validity
Not Before: Sep 9 17:00:40 2025 GMT
Not After : Sep 10 17:00:40 2025 GMT
Subject: CN=3e3c9028e343b739b0847203dbc833556d9ef4aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a6:70:45:9d:ac:e0:a3:dd:36:95:8b:d3:e6:
3e:b4:51:44:7d:0c:5b:df:a4:f5:ee:ad:05:b6:82:
4d:bb:77:64:19:93:62:47:e7:0c:10:f9:d9:9b:07:
3c:98:c4:36:3a:94:7d:9b:1c:15:4b:42:9b:a2:67:
52:20:4c:73:1b:cb:70:f1:38:39:01:a1:a0:e9:df:
8a:3d:0b:30:b1:80:ae:9c:b7:b0:82:b2:f1:ef:a9:
95:1f:84:a5:4a:d3:46:a4:ff:39:ff:30:05:22:97:
a4:60:bd:04:c5:35:c8:bd:7c:0f:96:80:5f:c1:7d:
10:eb:58:c0:26:11:43:62:c3:16:06:78:5b:3d:ad:
84:29:7d:35:69:7e:80:36:b9:b4:0d:8d:37:a4:70:
de:c5:6e:87:02:b3:fe:a1:66:80:6f:6d:15:91:c2:
75:e3:2a:cc:19:7a:7c:96:a0:a9:4c:28:03:4b:1e:
be:c6:d3:12:00:09:c5:d0:f4:8a:92:25:a2:2d:5d:
f7:33:d6:e5:7e:ab:1e:fd:ce:c3:d2:a4:2c:42:9a:
b7:54:89:43:8c:49:0e:95:01:10:7e:71:cd:58:33:
d2:a2:7a:f6:b2:63:44:57:34:8c:01:e3:ef:16:a9:
d0:dd:b2:cb:b9:e1:cc:92:ec:0b:21:63:a9:3d:f9:
14:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:3C:90:28:E3:43:B7:39:B0:84:72:03:DB:C8:33:55:6D:9E:F4:AA
X509v3 Authority Key Identifier:
keyid:49:32:89:25:6E:33:88:77:7D:95:E4:D5:31:56:7C:E3:67:2A:14:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/STKJJW4ziHd9leTVMVZ842cqFJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/7ae133-d0b6-4b68-8f61-d4d9a2e60e64/1/STKJJW4ziHd9leTVMVZ842cqFJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/7ae133-d0b6-4b68-8f61-d4d9a2e60e64/1/STKJJW4ziHd9leTVMVZ842cqFJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:d7:f3:74:ad:f6:84:0a:06:98:10:c3:01:ba:10:11:d3:2d:
77:f2:dd:2a:d3:6d:45:8e:ca:a2:d1:87:b7:69:50:ec:5d:5f:
10:1e:ea:26:77:d9:e4:86:5a:43:16:67:5f:2f:d7:39:81:21:
d1:12:19:48:c0:22:86:d1:9a:38:4e:1d:aa:d9:59:e0:5f:92:
47:95:32:3f:5e:a9:c3:76:09:39:1d:32:9d:66:7e:e3:8c:1c:
d7:64:70:e7:b9:b0:da:76:dd:37:84:be:bf:1b:a0:13:ad:ee:
2a:df:06:a1:35:ba:ca:1c:25:11:92:f5:c0:ff:66:7e:48:8f:
65:57:aa:18:d4:bd:0d:fe:ac:ce:35:bc:3b:7c:de:03:bc:a1:
51:31:09:42:44:f4:5c:48:4b:cc:fa:6a:70:5d:7e:66:14:4d:
63:b2:46:50:1b:15:a3:2f:37:1c:7e:52:a2:db:07:44:9a:22:
d4:c6:11:56:12:46:e1:1a:df:bf:db:69:0a:14:d2:52:88:b0:
50:f8:ee:cf:91:ed:be:be:29:24:cb:2a:9b:de:4c:7f:e8:27:
92:10:c8:84:ee:a0:5f:95:c4:c0:5b:1b:7c:aa:d0:ee:0a:5a:
8d:03:e4:26:cd:db:4e:5a:1d:19:95:09:ad:35:29:29:98:76:
57:97:c8:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 19:02:39 2025 by rpki-client