Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/bbf773-67f9-4be5-95cb-70d7f8f4925a/1/stNBgAdlZtcr7mHzoybFbgq7gEo.mft
File: stNBgAdlZtcr7mHzoybFbgq7gEo.mft (raw, json)
Hash identifier: ZApTTLaER6jBTPaksivAKLwGGqb12WBeuRooi7Of6EQ=
Subject key identifier: CA:46:74:2E:98:7F:FC:56:86:F2:6B:C8:48:64:8E:D8:C4:6E:35:86
Authority key identifier: B2:D3:41:80:07:65:66:D7:2B:EE:61:F3:A3:26:C5:6E:0A:BB:80:4A
Certificate issuer: /CN=b2d34180076566d72bee61f3a326c56e0abb804a
Certificate serial: 019774F77157440B57EF240273FE9135EF2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/stNBgAdlZtcr7mHzoybFbgq7gEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/bbf773-67f9-4be5-95cb-70d7f8f4925a/1/stNBgAdlZtcr7mHzoybFbgq7gEo.mft
Manifest number: 0E6C
Signing time: Sun 15 Jun 2025 19:01:02 +0000
Manifest this update: Sun 15 Jun 2025 19:01:02 +0000
Manifest next update: Mon 16 Jun 2025 19:01:02 +0000
Files and hashes: 1: stNBgAdlZtcr7mHzoybFbgq7gEo.crl (hash: 6ZHuRUaKfT5ENB/TsqDw5/+jedHm1dZPdX+EjY25xF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/bbf773-67f9-4be5-95cb-70d7f8f4925a/1/stNBgAdlZtcr7mHzoybFbgq7gEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/bbf773-67f9-4be5-95cb-70d7f8f4925a/1/stNBgAdlZtcr7mHzoybFbgq7gEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/stNBgAdlZtcr7mHzoybFbgq7gEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:74:f7:71:57:44:0b:57:ef:24:02:73:fe:91:35:ef:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2d34180076566d72bee61f3a326c56e0abb804a
Validity
Not Before: Jun 15 19:01:02 2025 GMT
Not After : Jun 16 19:01:02 2025 GMT
Subject: CN=ca46742e987ffc5686f26bc848648ed8c46e3586
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:87:99:37:1b:f6:96:1e:dd:41:3a:75:f8:11:
af:30:29:83:ad:89:eb:64:6c:4b:eb:83:da:4d:8b:
dc:8c:81:0d:8f:09:53:f0:c8:f1:02:41:05:ee:e3:
c9:35:11:47:96:23:a5:62:d5:8f:85:37:08:79:ea:
99:77:df:bb:41:fc:a4:ff:88:15:ad:5c:76:6e:77:
97:6a:fd:30:1d:4b:f7:d7:da:49:f2:25:a7:f9:e2:
e2:4b:fd:5b:71:4b:12:a8:4a:25:b7:6f:3a:d9:2b:
59:6e:8d:64:d9:52:61:fc:4a:5e:02:b7:b1:21:cf:
c9:cd:0c:1a:4b:21:99:f3:c7:14:28:ef:5f:86:51:
da:1c:6b:6c:1e:ef:8d:e7:94:fb:5d:5f:1d:86:28:
6a:be:58:ac:dd:82:30:6e:9d:68:58:e3:87:0e:e3:
63:f8:67:5f:2f:4a:7a:0e:89:4d:aa:dc:16:f7:f3:
5f:ae:91:9e:79:f7:49:1b:08:57:be:3c:ff:3f:c0:
63:54:1f:0b:4f:5f:69:6d:98:7e:36:64:ff:6f:0f:
0f:c3:e2:ab:4c:4b:a2:2e:d3:37:1a:f0:36:85:49:
2d:73:e1:e2:39:5a:13:11:f5:33:0f:41:ea:e6:74:
68:1a:6c:9c:4f:2a:64:17:c5:88:a1:23:04:f1:58:
97:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:46:74:2E:98:7F:FC:56:86:F2:6B:C8:48:64:8E:D8:C4:6E:35:86
X509v3 Authority Key Identifier:
keyid:B2:D3:41:80:07:65:66:D7:2B:EE:61:F3:A3:26:C5:6E:0A:BB:80:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/stNBgAdlZtcr7mHzoybFbgq7gEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bbf773-67f9-4be5-95cb-70d7f8f4925a/1/stNBgAdlZtcr7mHzoybFbgq7gEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bbf773-67f9-4be5-95cb-70d7f8f4925a/1/stNBgAdlZtcr7mHzoybFbgq7gEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:e8:4c:1b:01:3d:08:18:9e:a9:1e:fc:87:5e:12:a0:b7:87:
9f:c9:92:b3:5e:77:bb:61:65:ef:53:81:e3:26:8e:a9:74:af:
b5:a3:58:b2:48:25:c8:bb:f7:ec:49:d8:d8:5c:9b:70:74:fc:
47:86:15:21:b6:99:0a:26:ff:bb:65:45:dd:af:09:6a:1d:f8:
ae:54:47:81:1f:82:e6:d1:a1:c5:77:61:43:c2:09:00:8e:10:
b9:54:18:e8:2f:b8:b6:7d:58:2c:67:11:33:78:c4:fd:51:a0:
b4:58:65:9f:dc:77:8a:d8:d5:a2:d8:93:ff:26:86:9e:db:cf:
e2:25:16:41:1c:0d:49:e4:7b:f5:2d:c6:7d:26:53:7c:f9:b5:
2e:35:df:4d:c6:9e:bf:6b:fd:a5:3a:94:0a:c5:90:46:0b:45:
70:05:f1:61:2a:68:fb:48:a5:9a:c8:a2:f3:2c:05:a6:e9:ca:
c4:7b:22:79:0b:73:14:0b:10:3a:06:95:72:63:fb:87:1f:5b:
49:a5:48:43:a1:14:fe:45:2e:bb:a7:c1:bb:7f:25:13:50:64:
a3:40:10:a5:65:74:e7:02:84:a5:ea:95:ca:b6:fc:8b:47:3b:
2f:11:dc:00:71:61:b1:46:01:19:70:12:c1:ff:22:13:bd:64:
5e:5d:2a:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 22:04:12 2025 by rpki-client