Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/bbf773-67f9-4be5-95cb-70d7f8f4925a/1/stNBgAdlZtcr7mHzoybFbgq7gEo.mft
File: stNBgAdlZtcr7mHzoybFbgq7gEo.mft (raw, json)
Hash identifier: cFtK6szwk87iy1rn24u3zbAgPDmpVZZiHNlJrA2ZcwQ=
Subject key identifier: B5:68:85:37:00:B8:CE:88:22:9E:95:FF:35:2F:AD:79:6E:A6:29:6C
Authority key identifier: B2:D3:41:80:07:65:66:D7:2B:EE:61:F3:A3:26:C5:6E:0A:BB:80:4A
Certificate issuer: /CN=b2d34180076566d72bee61f3a326c56e0abb804a
Certificate serial: 019A4EF5671CF01089A325FBDAFFC7FBD54E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/stNBgAdlZtcr7mHzoybFbgq7gEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/bbf773-67f9-4be5-95cb-70d7f8f4925a/1/stNBgAdlZtcr7mHzoybFbgq7gEo.mft
Manifest number: 0FE6
Signing time: Tue 04 Nov 2025 13:01:36 +0000
Manifest this update: Tue 04 Nov 2025 13:01:36 +0000
Manifest next update: Wed 05 Nov 2025 13:01:36 +0000
Files and hashes: 1: stNBgAdlZtcr7mHzoybFbgq7gEo.crl (hash: lff7Ftp47yhW7O3V4QZ5go5Afcrc/rIcwAD9eqSbXZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/bbf773-67f9-4be5-95cb-70d7f8f4925a/1/stNBgAdlZtcr7mHzoybFbgq7gEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/bbf773-67f9-4be5-95cb-70d7f8f4925a/1/stNBgAdlZtcr7mHzoybFbgq7gEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/stNBgAdlZtcr7mHzoybFbgq7gEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:67:1c:f0:10:89:a3:25:fb:da:ff:c7:fb:d5:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2d34180076566d72bee61f3a326c56e0abb804a
Validity
Not Before: Nov 4 13:01:36 2025 GMT
Not After : Nov 5 13:01:36 2025 GMT
Subject: CN=b568853700b8ce88229e95ff352fad796ea6296c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:75:0b:3c:fc:9c:86:34:81:4b:c0:78:24:e9:
ad:ca:46:01:f8:31:36:8a:57:60:43:39:77:86:2f:
f3:59:f9:01:dc:20:40:ce:64:be:7b:37:af:a5:b9:
f6:25:75:25:4a:02:c1:70:95:16:0c:c2:62:fb:d7:
d7:71:9c:17:5b:c7:6b:9f:cc:38:d5:cd:d1:c1:01:
80:4a:6e:ae:22:47:b3:8f:38:80:f1:f1:2c:51:2d:
77:ae:60:5a:f1:bc:60:9c:20:50:b9:ee:71:45:f5:
ce:49:f6:ca:03:98:6e:11:60:68:f7:74:45:33:97:
c4:04:36:a5:2d:58:91:fa:79:c8:ec:27:15:98:56:
70:45:36:0e:83:31:3f:62:f0:af:f0:11:52:2a:72:
09:1f:15:b4:5d:17:b6:57:9e:57:f9:9d:e6:e1:12:
8f:95:6a:6c:eb:50:5e:36:2a:cf:54:9b:e5:ba:90:
e2:fa:7c:c9:0b:89:ff:3e:b4:cd:1d:69:fd:e4:9e:
86:5b:e1:81:6f:b3:a3:69:7c:90:fe:3b:32:21:90:
52:e1:8b:c7:1a:53:15:bd:eb:03:22:2c:cb:99:be:
b2:6e:ea:83:24:fa:c8:0b:ba:36:19:04:c0:2b:78:
ef:52:40:fa:f6:2c:62:d9:87:2f:e3:22:80:f1:29:
f6:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:68:85:37:00:B8:CE:88:22:9E:95:FF:35:2F:AD:79:6E:A6:29:6C
X509v3 Authority Key Identifier:
keyid:B2:D3:41:80:07:65:66:D7:2B:EE:61:F3:A3:26:C5:6E:0A:BB:80:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/stNBgAdlZtcr7mHzoybFbgq7gEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bbf773-67f9-4be5-95cb-70d7f8f4925a/1/stNBgAdlZtcr7mHzoybFbgq7gEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bbf773-67f9-4be5-95cb-70d7f8f4925a/1/stNBgAdlZtcr7mHzoybFbgq7gEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:7c:a8:62:d3:c9:19:db:88:6d:f1:bd:00:8a:06:b8:da:39:
37:f2:36:3f:cd:e9:ae:22:3c:ce:85:e0:65:19:5f:6c:ab:1b:
3a:e1:91:89:c6:88:40:28:b8:fe:0e:7e:01:95:96:8f:c3:3d:
18:39:7a:24:99:fa:12:0b:b1:a3:12:4f:81:c6:a1:32:99:32:
36:96:9c:90:2b:4d:d6:22:ca:d1:fe:fc:ec:c2:73:e2:80:03:
e4:5e:3a:cf:11:6e:5f:91:a4:c9:c2:07:80:79:9f:f9:93:f1:
ef:b9:61:d4:c5:44:bc:7b:29:e6:05:80:90:1f:f1:60:35:1a:
24:b1:d4:98:87:3e:c8:23:5c:99:5b:27:29:1b:4d:fb:ef:95:
28:4c:71:16:a0:42:c1:05:b9:35:8e:cf:99:ff:94:c2:13:3d:
ae:ea:46:86:1e:17:18:48:2a:40:1a:36:38:77:2b:06:7d:57:
a4:67:32:b2:2c:f2:03:dc:5a:c3:ac:f9:d4:a8:89:d9:e6:30:
60:83:90:f4:b0:2a:a7:d9:75:2e:0b:51:0b:97:e3:0d:07:7a:
e7:e9:ad:6b:34:06:42:d9:f7:79:94:65:75:67:dc:11:e9:d2:
8f:d2:ab:2a:f7:7f:d0:ac:68:fb:b0:c4:6b:fd:17:96:51:4d:
9b:a8:91:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9Wcc8BCJoyX72v/H+9VOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyZDM0MTgwMDc2NTY2ZDcyYmVlNjFmM2EzMjZjNTZlMGFi
YjgwNGEwHhcNMjUxMTA0MTMwMTM2WhcNMjUxMTA1MTMwMTM2WjAzMTEwLwYDVQQD
EyhiNTY4ODUzNzAwYjhjZTg4MjI5ZTk1ZmYzNTJmYWQ3OTZlYTYyOTZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHULPPychjSBS8B4JOmtykYB+DE2
ildgQzl3hi/zWfkB3CBAzmS+ezevpbn2JXUlSgLBcJUWDMJi+9fXcZwXW8drn8w4
1c3RwQGASm6uIkezjziA8fEsUS13rmBa8bxgnCBQue5xRfXOSfbKA5huEWBo93RF
M5fEBDalLViR+nnI7CcVmFZwRTYOgzE/YvCv8BFSKnIJHxW0XRe2V55X+Z3m4RKP
lWps61BeNirPVJvlupDi+nzJC4n/PrTNHWn95J6GW+GBb7OjaXyQ/jsyIZBS4YvH
GlMVvesDIizLmb6ybuqDJPrIC7o2GQTAK3jvUkD69ixi2Ycv4yKA8Sn2VwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLVohTcAuM6IIp6V/zUvrXlupilsMB8GA1UdIwQY
MBaAFLLTQYAHZWbXK+5h86MmxW4Ku4BKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3ROQmdBZGxadGNyN21Iem95YkZiZ3E3Z0VvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9iYmY3NzMtNjdmOS00YmU1LTk1Y2It
NzBkN2Y4ZjQ5MjVhLzEvc3ROQmdBZGxadGNyN21Iem95YkZiZ3E3Z0VvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC9iYmY3NzMtNjdmOS00YmU1LTk1Y2ItNzBkN2Y4ZjQ5MjVh
LzEvc3ROQmdBZGxadGNyN21Iem95YkZiZ3E3Z0VvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfnyoYtPJ
GduIbfG9AIoGuNo5N/I2P83priI8zoXgZRlfbKsbOuGRicaIQCi4/g5+AZWWj8M9
GDl6JJn6EguxoxJPgcahMpkyNpackCtN1iLK0f787MJz4oAD5F46zxFuX5GkycIH
gHmf+ZPx77lh1MVEvHsp5gWAkB/xYDUaJLHUmIc+yCNcmVsnKRtN+++VKExxFqBC
wQW5NY7Pmf+UwhM9rupGhh4XGEgqQBo2OHcrBn1XpGcysizyA9xaw6z51KiJ2eYw
YIOQ9LAqp9l1LgtRC5fjDQd65+mtazQGQtn3eZRldWfcEenSj9KrKvd/0Kxo+7DE
a/0XllFNm6iRig==
-----END CERTIFICATE-----
Generated at Tue Nov 4 20:18:04 2025 by rpki-client