Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/bbf773-67f9-4be5-95cb-70d7f8f4925a/1/stNBgAdlZtcr7mHzoybFbgq7gEo.mft
File: stNBgAdlZtcr7mHzoybFbgq7gEo.mft (raw, json)
Hash identifier: A5Cin+yDNv6ud2FsTjt6K3OnRzVxzPY2LTvQcGtDvIs=
Subject key identifier: 7A:2D:3A:EF:3F:B7:FD:BF:63:D9:7D:AC:C9:3E:B8:C6:87:26:10:0F
Authority key identifier: B2:D3:41:80:07:65:66:D7:2B:EE:61:F3:A3:26:C5:6E:0A:BB:80:4A
Certificate issuer: /CN=b2d34180076566d72bee61f3a326c56e0abb804a
Certificate serial: 01988B0EA24F2999F2BC6242230F0A9971EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/stNBgAdlZtcr7mHzoybFbgq7gEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/bbf773-67f9-4be5-95cb-70d7f8f4925a/1/stNBgAdlZtcr7mHzoybFbgq7gEo.mft
Manifest number: 0EFC
Signing time: Fri 08 Aug 2025 19:00:48 +0000
Manifest this update: Fri 08 Aug 2025 19:00:48 +0000
Manifest next update: Sat 09 Aug 2025 19:00:48 +0000
Files and hashes: 1: stNBgAdlZtcr7mHzoybFbgq7gEo.crl (hash: a31/LIsSA1OcfhxXquI4cEVAtVaGPM1pyW0ri7kzYfs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/bbf773-67f9-4be5-95cb-70d7f8f4925a/1/stNBgAdlZtcr7mHzoybFbgq7gEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/bbf773-67f9-4be5-95cb-70d7f8f4925a/1/stNBgAdlZtcr7mHzoybFbgq7gEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/stNBgAdlZtcr7mHzoybFbgq7gEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 19:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:0e:a2:4f:29:99:f2:bc:62:42:23:0f:0a:99:71:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2d34180076566d72bee61f3a326c56e0abb804a
Validity
Not Before: Aug 8 19:00:48 2025 GMT
Not After : Aug 9 19:00:48 2025 GMT
Subject: CN=7a2d3aef3fb7fdbf63d97dacc93eb8c68726100f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:29:bf:6e:ea:34:d8:e1:da:34:78:bd:e4:72:
16:17:b5:88:74:e6:4a:2c:57:19:ca:16:f8:e8:2f:
f7:97:fa:91:7a:13:48:69:7f:8f:13:47:04:e4:4c:
95:fe:42:ba:76:69:10:d7:6f:0d:29:35:ac:41:e3:
13:a0:9d:97:aa:6e:3d:fe:7a:30:0f:d2:82:41:e9:
a3:cf:72:8f:42:36:81:9a:cf:04:60:ee:1d:2a:99:
8a:98:23:29:90:4b:46:a7:ef:4e:b7:d7:d3:51:4b:
4c:88:c8:94:7e:c2:e9:df:17:eb:b1:97:ea:9e:f9:
1b:5f:1f:e2:35:ca:3a:9f:85:8e:b5:72:e8:db:31:
f7:48:fe:bb:5b:c8:0d:17:79:a1:ec:2c:c8:9e:b5:
7d:2f:59:33:a5:40:24:74:a0:90:55:98:b5:2c:5f:
84:94:d6:3d:60:12:bd:94:aa:fd:42:07:be:73:29:
c3:05:0d:f5:b9:31:76:5e:7c:38:c4:ab:f9:91:72:
e5:42:2b:01:cd:b7:4d:e4:05:2e:1f:a6:49:76:9a:
80:49:4b:77:33:ad:53:2a:89:0f:a8:e9:69:21:52:
32:a7:f6:f9:ef:af:10:ae:a2:91:37:6b:bc:98:09:
5f:16:c2:6d:b8:c3:88:22:c2:72:cf:56:8b:61:83:
4c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:2D:3A:EF:3F:B7:FD:BF:63:D9:7D:AC:C9:3E:B8:C6:87:26:10:0F
X509v3 Authority Key Identifier:
keyid:B2:D3:41:80:07:65:66:D7:2B:EE:61:F3:A3:26:C5:6E:0A:BB:80:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/stNBgAdlZtcr7mHzoybFbgq7gEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bbf773-67f9-4be5-95cb-70d7f8f4925a/1/stNBgAdlZtcr7mHzoybFbgq7gEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bbf773-67f9-4be5-95cb-70d7f8f4925a/1/stNBgAdlZtcr7mHzoybFbgq7gEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:d5:8d:db:a8:49:81:89:51:9a:c7:88:90:7a:42:ca:57:f9:
41:85:1d:64:35:70:19:f1:97:9f:47:17:e4:0b:d4:66:7a:93:
4b:b0:4f:fc:6b:0b:a8:bc:e4:ec:5a:a6:dd:c9:27:64:98:21:
6b:d8:6c:33:4f:c1:df:47:48:22:45:9e:5f:01:9a:70:28:37:
a9:26:d3:41:cd:45:c0:de:b8:41:f3:be:5e:1e:85:a4:eb:81:
3f:6b:df:52:a2:f3:5e:6b:35:d3:a0:9e:e4:26:d8:b6:cf:61:
fd:4c:ff:14:94:1a:c6:57:2d:ed:8e:88:d3:83:3d:29:eb:68:
d4:85:8e:10:21:b6:e3:b4:05:74:9b:24:a4:d4:d3:a5:70:98:
58:10:cb:7f:58:29:4a:fc:eb:ad:28:b6:c2:69:78:c3:07:19:
11:b1:3a:20:13:9d:d1:82:8d:e3:ff:0d:92:28:89:62:b3:77:
82:10:c9:1d:5c:ff:b6:24:5c:12:63:f7:10:e0:3d:97:64:1e:
5c:18:6b:43:22:c1:52:e4:9c:2a:61:59:82:da:e0:e5:e0:0a:
4f:0b:97:d6:49:51:26:f8:e3:9b:30:93:b3:e5:9d:1a:4e:29:
b1:d9:fb:1b:01:30:e3:16:a8:5c:f2:43:fa:42:7a:89:14:37:
9e:ae:4b:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 00:59:48 2025 by rpki-client