Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/88c9d7-e377-4874-9868-715247c3dcdc/1/stitAnqWdO3JNueMXU0bZJZNhEA.mft
File: stitAnqWdO3JNueMXU0bZJZNhEA.mft (raw, json)
Hash identifier: AUZ6g/pfQL6A3j2Pe2v69UEsrMd6o5KKO4oY1At0k54=
Subject key identifier: 25:99:1A:B9:7C:35:45:0B:AF:8A:2C:F4:C5:DA:00:D6:EE:1F:C9:AB
Authority key identifier: B2:D8:AD:02:7A:96:74:ED:C9:36:E7:8C:5D:4D:1B:64:96:4D:84:40
Certificate issuer: /CN=b2d8ad027a9674edc936e78c5d4d1b64964d8440
Certificate serial: 01987E65E8530B922D24657894F7BD9B2958
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/stitAnqWdO3JNueMXU0bZJZNhEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/88c9d7-e377-4874-9868-715247c3dcdc/1/stitAnqWdO3JNueMXU0bZJZNhEA.mft
Manifest number: 0B45
Signing time: Wed 06 Aug 2025 08:01:04 +0000
Manifest this update: Wed 06 Aug 2025 08:01:04 +0000
Manifest next update: Thu 07 Aug 2025 08:01:04 +0000
Files and hashes: 1: j7tAtkU7X16dxo0q2axkpmgR2Jg.roa (hash: ee9X5e2Gsq7S7vtFMXjQ62kSEkjJdHkxbRMmxnYqFY4=)
2: stitAnqWdO3JNueMXU0bZJZNhEA.crl (hash: Z1vqZK4lEYK0HMofzsidEE97zFR9tKBVunIr4ekTiqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/88c9d7-e377-4874-9868-715247c3dcdc/1/stitAnqWdO3JNueMXU0bZJZNhEA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/88c9d7-e377-4874-9868-715247c3dcdc/1/stitAnqWdO3JNueMXU0bZJZNhEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/stitAnqWdO3JNueMXU0bZJZNhEA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:65:e8:53:0b:92:2d:24:65:78:94:f7:bd:9b:29:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2d8ad027a9674edc936e78c5d4d1b64964d8440
Validity
Not Before: Aug 6 08:01:04 2025 GMT
Not After : Aug 7 08:01:04 2025 GMT
Subject: CN=25991ab97c35450baf8a2cf4c5da00d6ee1fc9ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6a:86:dc:55:96:8d:f1:72:6a:79:7c:2c:64:
b9:ff:d1:e7:c9:d1:08:2d:ac:b1:bc:95:10:f5:e0:
e4:81:04:8a:f7:f6:eb:02:42:52:5c:21:34:02:9d:
64:17:8a:81:65:b2:06:73:91:e0:36:c9:f0:ba:df:
b6:41:20:93:e1:8a:f7:ff:28:71:40:5c:f8:1d:55:
03:7f:d3:5b:04:2f:1b:7b:2f:b5:e4:d2:97:6a:95:
ba:43:95:fb:ae:5e:97:fe:1c:1a:9f:4d:b0:73:6f:
b9:0f:21:1f:4f:b5:7a:f8:33:f6:16:66:cf:c8:d9:
bf:5c:f2:f9:56:9d:96:e5:0c:e6:07:7a:03:1a:09:
7e:05:8c:fd:4d:4c:50:c3:bf:e7:e1:50:3d:1d:06:
ec:c3:26:cb:66:3a:7e:7b:20:d3:b4:f3:89:41:b6:
2e:91:8c:9c:f7:56:1d:56:7c:ca:2e:17:50:e5:d3:
d8:b5:c5:c0:d3:19:57:b2:d7:94:7f:e5:53:d4:b1:
fa:3a:7c:a3:2d:69:7b:b9:9a:1f:0a:fa:82:31:66:
d6:24:66:a2:7f:33:26:89:c2:57:0d:c2:37:8d:8d:
a3:c8:26:10:3c:2c:fb:02:cf:5d:3c:b9:92:61:fa:
26:61:ff:d1:96:75:9e:7d:3a:b5:82:8d:8f:01:2c:
a2:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:99:1A:B9:7C:35:45:0B:AF:8A:2C:F4:C5:DA:00:D6:EE:1F:C9:AB
X509v3 Authority Key Identifier:
keyid:B2:D8:AD:02:7A:96:74:ED:C9:36:E7:8C:5D:4D:1B:64:96:4D:84:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/stitAnqWdO3JNueMXU0bZJZNhEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/88c9d7-e377-4874-9868-715247c3dcdc/1/stitAnqWdO3JNueMXU0bZJZNhEA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/88c9d7-e377-4874-9868-715247c3dcdc/1/stitAnqWdO3JNueMXU0bZJZNhEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:5d:b0:d9:8a:d9:a7:ea:0a:a5:94:2d:2e:91:60:0e:b7:41:
5f:e4:41:11:cd:b5:be:4d:bb:d3:b7:4f:28:a6:f2:18:50:c8:
e0:1d:47:9e:47:da:bb:4a:88:ff:e5:21:33:dd:92:e7:91:a0:
7c:6e:a0:49:31:f3:c5:91:4f:04:71:fe:c4:59:5b:e3:1d:b4:
d3:75:0d:b0:a5:d9:71:28:a5:2d:1a:5e:bf:e5:01:6f:77:bb:
4d:08:be:5d:56:63:91:12:14:a6:ce:1d:42:4b:9c:55:f5:27:
bc:c8:d8:9b:ad:78:e4:88:a7:a6:2a:eb:c4:29:21:d7:5d:d2:
12:7b:c7:2b:71:fa:c7:bf:1c:ab:9c:d1:1d:6c:24:95:ee:6d:
84:54:7e:f8:20:c1:91:bf:bc:52:59:29:5a:b5:c4:40:c8:f9:
33:72:74:15:d3:0c:f4:db:92:55:8b:19:33:a2:d0:a0:ae:0c:
18:02:af:fd:e4:6e:51:c5:0f:c2:da:fb:bb:5c:75:a9:66:67:
3f:b2:87:a4:d6:81:66:e7:44:12:9c:ff:be:08:85:32:19:65:
6d:33:0c:a6:f9:bc:20:b3:66:44:10:bf:0d:be:32:b4:77:28:
88:64:99:a8:24:a2:d1:fe:fe:15:03:4f:af:61:c5:a8:a0:12:
fb:d0:78:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:10:08 2025 by rpki-client