Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/07cdcf-8875-4770-8c75-41b745bf53db/1/STeGYPXwGSOUbDXZS-XM19K3EFE.mft
File: STeGYPXwGSOUbDXZS-XM19K3EFE.mft (raw, json)
Hash identifier: ZsV0z3qGoevjc1g90u5iBoC1J88LqvU+RvlKKjiI08M=
Subject key identifier: 13:7E:1B:27:47:8B:3A:1B:FC:06:22:4D:59:AC:3E:E4:8B:A2:87:C4
Authority key identifier: 49:37:86:60:F5:F0:19:23:94:6C:35:D9:4B:E5:CC:D7:D2:B7:10:51
Certificate issuer: /CN=49378660f5f01923946c35d94be5ccd7d2b71051
Certificate serial: 019A1D2CBD23B39B2C4D64057EBB95D45B67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/STeGYPXwGSOUbDXZS-XM19K3EFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/07cdcf-8875-4770-8c75-41b745bf53db/1/STeGYPXwGSOUbDXZS-XM19K3EFE.mft
Manifest number: 0C88
Signing time: Sat 25 Oct 2025 21:01:02 +0000
Manifest this update: Sat 25 Oct 2025 21:01:02 +0000
Manifest next update: Sun 26 Oct 2025 21:01:02 +0000
Files and hashes: 1: 2ZvpZ0sZ6P6ydTiCDEFolKMvfh0.roa (hash: 1DssY9QtTEut1NYlrrYk3dvjYOvc/xqpRvFLT8I4S4E=)
2: NjASS9Fcywmz2PQGC289Z6czZDw.roa (hash: HSbgUfk0PK7NcRU0i0FIegZSv4Qc7DSpvzCcUEz+mx0=)
3: STeGYPXwGSOUbDXZS-XM19K3EFE.crl (hash: fZmFLV91SrjgVO30M9ivOKzIchonnqmnYmSc2LooMIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/07cdcf-8875-4770-8c75-41b745bf53db/1/STeGYPXwGSOUbDXZS-XM19K3EFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/07cdcf-8875-4770-8c75-41b745bf53db/1/STeGYPXwGSOUbDXZS-XM19K3EFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/STeGYPXwGSOUbDXZS-XM19K3EFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 20:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1d:2c:bd:23:b3:9b:2c:4d:64:05:7e:bb:95:d4:5b:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49378660f5f01923946c35d94be5ccd7d2b71051
Validity
Not Before: Oct 25 21:01:02 2025 GMT
Not After : Oct 26 21:01:02 2025 GMT
Subject: CN=137e1b27478b3a1bfc06224d59ac3ee48ba287c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:59:ec:ce:6c:8d:7f:08:d2:3a:56:30:66:90:
9f:a6:39:a1:a3:a9:34:60:68:d8:5a:a6:26:c8:7e:
bf:28:38:18:60:84:a1:cd:68:02:bf:fe:5d:f8:93:
44:57:15:83:68:41:44:af:bd:97:12:b5:7d:1d:4d:
88:63:3a:8d:ff:34:93:b5:54:18:15:5b:b6:b0:15:
cf:8a:4b:e2:bf:1a:88:90:8d:af:66:5a:44:2d:04:
dc:8b:1c:09:98:9f:21:b6:07:93:25:36:a0:6a:cd:
2d:47:b7:81:a3:8f:34:be:0c:9b:6e:ac:6e:37:bf:
32:4f:6e:7e:e6:7c:92:01:7d:b7:c7:50:43:ef:51:
ca:58:c6:9b:9d:d2:84:3c:2c:d8:5f:51:f8:38:46:
d4:0b:77:11:35:1c:1f:6f:6d:5b:a0:65:6f:3c:2c:
04:66:fd:39:32:22:69:5a:01:f4:50:48:85:78:ac:
b0:c8:c5:0c:82:11:96:4f:81:1c:a0:ce:7c:0c:1d:
9f:04:f9:dc:05:d5:5a:1b:14:47:0d:49:60:46:fc:
f9:47:1d:14:70:bb:7e:2f:7d:c2:91:30:01:71:81:
80:42:52:c3:75:d6:34:61:07:e8:3d:78:d0:ef:29:
80:dd:dc:ce:aa:d8:b5:16:cc:35:f4:d1:43:4f:03:
e5:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:7E:1B:27:47:8B:3A:1B:FC:06:22:4D:59:AC:3E:E4:8B:A2:87:C4
X509v3 Authority Key Identifier:
keyid:49:37:86:60:F5:F0:19:23:94:6C:35:D9:4B:E5:CC:D7:D2:B7:10:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/STeGYPXwGSOUbDXZS-XM19K3EFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/07cdcf-8875-4770-8c75-41b745bf53db/1/STeGYPXwGSOUbDXZS-XM19K3EFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/07cdcf-8875-4770-8c75-41b745bf53db/1/STeGYPXwGSOUbDXZS-XM19K3EFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:74:86:aa:08:8c:49:a8:4e:4e:f1:9f:9b:0f:a3:f9:82:89:
04:04:7a:57:33:e9:74:1b:7f:1c:65:23:4a:7c:b6:4b:43:54:
84:27:35:2c:a4:7b:e9:90:e1:98:01:d2:75:b0:1e:89:ad:73:
97:9f:de:27:14:96:48:76:71:cf:f6:24:44:c5:84:e7:a3:d2:
2b:44:4e:01:c1:9c:f7:5f:aa:78:e1:46:1e:a6:76:a4:40:b6:
2a:1d:7a:39:be:d9:45:a8:c5:ea:31:bf:30:df:db:8a:f9:6a:
11:cb:8c:2e:20:2f:68:0e:9f:b4:88:71:ed:35:5f:06:83:b3:
1a:0b:db:2a:41:39:dc:b1:97:7e:f6:ae:7e:81:d7:46:71:a7:
0a:50:4b:e4:cf:a7:51:9a:1e:20:ee:75:4d:95:50:73:d5:ba:
38:f1:cd:bb:da:4e:15:77:54:6e:b1:d0:06:af:ae:ed:d1:15:
49:f4:5d:bc:b0:2d:42:e2:db:31:b1:09:9d:6d:ee:d5:11:fe:
16:19:5e:b1:fb:2d:b4:d2:d9:23:f7:40:ad:c0:57:a0:e6:8b:
3b:e6:03:6c:7e:e4:b0:41:3e:69:27:70:a5:e5:2b:f5:8d:8c:
1c:a2:44:bd:80:9a:10:7e:40:08:ce:c3:a6:77:68:f9:fc:b4:
09:5f:32:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZodLL0js5ssTWQFfruV1FtnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5Mzc4NjYwZjVmMDE5MjM5NDZjMzVkOTRiZTVjY2Q3ZDJi
NzEwNTEwHhcNMjUxMDI1MjEwMTAyWhcNMjUxMDI2MjEwMTAyWjAzMTEwLwYDVQQD
EygxMzdlMWIyNzQ3OGIzYTFiZmMwNjIyNGQ1OWFjM2VlNDhiYTI4N2M0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFnszmyNfwjSOlYwZpCfpjmho6k0
YGjYWqYmyH6/KDgYYIShzWgCv/5d+JNEVxWDaEFEr72XErV9HU2IYzqN/zSTtVQY
FVu2sBXPikvivxqIkI2vZlpELQTcixwJmJ8htgeTJTagas0tR7eBo480vgybbqxu
N78yT25+5nySAX23x1BD71HKWMabndKEPCzYX1H4OEbUC3cRNRwfb21boGVvPCwE
Zv05MiJpWgH0UEiFeKywyMUMghGWT4EcoM58DB2fBPncBdVaGxRHDUlgRvz5Rx0U
cLt+L33CkTABcYGAQlLDddY0YQfoPXjQ7ymA3dzOqti1Fsw19NFDTwPlPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBN+GydHizob/AYiTVmsPuSLoofEMB8GA1UdIwQY
MBaAFEk3hmD18BkjlGw12UvlzNfStxBRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1RlR1lQWHdHU09VYkRYWlMtWE0xOUszRUZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC8wN2NkY2YtODg3NS00NzcwLThjNzUt
NDFiNzQ1YmY1M2RiLzEvU1RlR1lQWHdHU09VYkRYWlMtWE0xOUszRUZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC8wN2NkY2YtODg3NS00NzcwLThjNzUtNDFiNzQ1YmY1M2Ri
LzEvU1RlR1lQWHdHU09VYkRYWlMtWE0xOUszRUZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgXSGqgiM
SahOTvGfmw+j+YKJBAR6VzPpdBt/HGUjSny2S0NUhCc1LKR76ZDhmAHSdbAeia1z
l5/eJxSWSHZxz/YkRMWE56PSK0ROAcGc91+qeOFGHqZ2pEC2Kh16Ob7ZRajF6jG/
MN/bivlqEcuMLiAvaA6ftIhx7TVfBoOzGgvbKkE53LGXfvaufoHXRnGnClBL5M+n
UZoeIO51TZVQc9W6OPHNu9pOFXdUbrHQBq+u7dEVSfRdvLAtQuLbMbEJnW3u1RH+
FhlesfsttNLZI/dArcBXoOaLO+YDbH7ksEE+aSdwpeUr9Y2MHKJEvYCaEH5ACM7D
pndo+fy0CV8ymw==
-----END CERTIFICATE-----
Generated at Sun Oct 26 06:10:34 2025 by rpki-client