Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/283d32-380a-4e6e-a957-c5baea3f1729/1/stLBGv8HK-w3pYJiEU4cBr7bSUI.mft
File: stLBGv8HK-w3pYJiEU4cBr7bSUI.mft (raw, json)
Hash identifier: ziRwx+pOAhRBMkcBZJIvfleg5iig8Nblx4CG0UH2nyQ=
Subject key identifier: 65:14:7A:E6:7C:DA:01:99:5B:BE:11:83:DF:10:DA:95:86:49:D1:92
Authority key identifier: B2:D2:C1:1A:FF:07:2B:EC:37:A5:82:62:11:4E:1C:06:BE:DB:49:42
Certificate issuer: /CN=b2d2c11aff072bec37a58262114e1c06bedb4942
Certificate serial: 019A5752BA93E91B0E3DD7E826E503470ED8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/stLBGv8HK-w3pYJiEU4cBr7bSUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/283d32-380a-4e6e-a957-c5baea3f1729/1/stLBGv8HK-w3pYJiEU4cBr7bSUI.mft
Manifest number: AC
Signing time: Thu 06 Nov 2025 04:00:30 +0000
Manifest this update: Thu 06 Nov 2025 04:00:30 +0000
Manifest next update: Fri 07 Nov 2025 04:00:30 +0000
Files and hashes: 1: stLBGv8HK-w3pYJiEU4cBr7bSUI.crl (hash: CwYKRFaZJqDlqYElAk4nLXjjQqY4kQduUUWTS3KDnJI=)
2: u0k0ZcdUu0HWts_QzMnRtt7idjE.roa (hash: gQ41j+zd/N93xs0pAJ6I2F+Zc4DvWJ1HscP8bcl0MW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/283d32-380a-4e6e-a957-c5baea3f1729/1/stLBGv8HK-w3pYJiEU4cBr7bSUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/283d32-380a-4e6e-a957-c5baea3f1729/1/stLBGv8HK-w3pYJiEU4cBr7bSUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/stLBGv8HK-w3pYJiEU4cBr7bSUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 21:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:57:52:ba:93:e9:1b:0e:3d:d7:e8:26:e5:03:47:0e:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2d2c11aff072bec37a58262114e1c06bedb4942
Validity
Not Before: Nov 6 04:00:30 2025 GMT
Not After : Nov 7 04:00:30 2025 GMT
Subject: CN=65147ae67cda01995bbe1183df10da958649d192
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:01:5b:9c:c3:5b:01:ff:e9:3a:d6:50:61:6b:
60:6c:17:e1:c0:56:12:2d:88:37:f5:43:c1:9d:76:
29:2c:04:de:27:a7:0b:4c:ac:02:0b:df:62:8c:4a:
d4:cb:b9:d3:ea:fb:d7:a7:9f:ee:93:89:f7:b0:a7:
cd:3d:50:f0:7d:54:02:40:e5:8c:6a:1f:13:58:27:
0e:77:ad:b3:31:89:76:13:76:89:3f:8b:a3:83:8c:
f1:66:2f:b6:d2:20:68:ad:4e:c7:9a:b8:3b:6f:8d:
35:9d:92:d4:86:5e:e1:ce:5d:27:01:c0:86:56:3f:
54:b5:7b:2e:10:01:5e:17:8d:19:7a:a2:7f:84:62:
d2:5d:8d:a6:cd:82:2d:2e:cc:26:50:14:6e:74:77:
43:b9:7a:85:e9:63:3f:43:18:13:57:7b:1a:d3:ac:
f5:d5:8a:3b:1f:56:e2:7d:89:9f:59:41:fb:db:b1:
f5:1e:b4:9c:6e:e1:f4:be:45:e6:6d:ac:f3:7e:dc:
69:bf:a5:c9:a5:99:c1:8a:10:76:94:e0:6f:c5:2f:
74:69:9c:9e:fc:48:9b:c9:7e:67:98:70:a9:1f:5f:
4c:fe:7e:4b:14:28:a3:df:71:bf:bd:5b:22:b5:44:
85:f1:d6:79:d2:84:3f:51:42:46:d6:29:2d:df:ef:
3b:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:14:7A:E6:7C:DA:01:99:5B:BE:11:83:DF:10:DA:95:86:49:D1:92
X509v3 Authority Key Identifier:
keyid:B2:D2:C1:1A:FF:07:2B:EC:37:A5:82:62:11:4E:1C:06:BE:DB:49:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/stLBGv8HK-w3pYJiEU4cBr7bSUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/283d32-380a-4e6e-a957-c5baea3f1729/1/stLBGv8HK-w3pYJiEU4cBr7bSUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/283d32-380a-4e6e-a957-c5baea3f1729/1/stLBGv8HK-w3pYJiEU4cBr7bSUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:18:72:74:22:92:c5:b1:02:7b:de:85:f7:d3:c1:52:c5:f6:
46:43:a0:48:26:8a:aa:3d:61:c3:8a:92:f8:55:49:6b:1c:5e:
aa:85:de:06:7f:5d:ec:0e:e9:6f:c1:3c:6d:17:49:4b:41:a4:
07:49:cb:72:95:a0:e5:49:7e:dd:8b:49:f2:cb:17:8a:51:c0:
59:20:31:6d:ce:e5:b1:98:6b:44:83:c6:54:54:43:a2:36:1a:
10:7e:99:87:5d:1e:6f:f9:9f:7f:d8:99:42:5b:f1:d3:e0:14:
3a:22:5a:ec:d5:73:46:b2:55:71:d3:ec:2b:c7:41:9e:90:c7:
ee:3f:d7:4a:f1:62:d5:61:b9:30:9f:e8:9d:b3:6d:59:f9:01:
a5:58:24:05:be:1e:fb:ee:b3:a9:8b:86:b1:9f:85:f7:d4:da:
eb:61:8f:3b:e7:a6:ad:7e:49:ff:de:c1:69:7e:79:cc:1b:db:
df:5c:09:b8:43:68:d1:c0:ba:16:e9:64:cc:cc:48:bc:22:54:
b2:f1:0b:ec:46:68:93:b7:be:28:d6:1d:22:a0:1b:c7:b7:dc:
d1:5a:d5:9c:6a:b4:a1:3a:76:e0:58:bc:c2:47:cc:2e:6d:cf:
e9:a1:27:e1:3f:e1:1d:53:f4:43:6d:f4:10:d4:75:9d:0b:d6:
8d:e7:d5:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 05:47:21 2025 by rpki-client