Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/88c9d7-e377-4874-9868-715247c3dcdc/1/stitAnqWdO3JNueMXU0bZJZNhEA.mft
File: stitAnqWdO3JNueMXU0bZJZNhEA.mft (raw, json)
Hash identifier: XVE0pSH+drcpNW+gYkw7mDeUXyMMJGZxGQ2jxPgzX5s=
Subject key identifier: 9C:7F:4B:E1:36:BA:AA:95:FD:60:EC:B5:D1:41:E9:C1:93:CA:63:15
Authority key identifier: B2:D8:AD:02:7A:96:74:ED:C9:36:E7:8C:5D:4D:1B:64:96:4D:84:40
Certificate issuer: /CN=b2d8ad027a9674edc936e78c5d4d1b64964d8440
Certificate serial: 019777C169BA2AEFB1D02DE84A8D4C478060
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/stitAnqWdO3JNueMXU0bZJZNhEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/88c9d7-e377-4874-9868-715247c3dcdc/1/stitAnqWdO3JNueMXU0bZJZNhEA.mft
Manifest number: 0ABD
Signing time: Mon 16 Jun 2025 08:00:53 +0000
Manifest this update: Mon 16 Jun 2025 08:00:53 +0000
Manifest next update: Tue 17 Jun 2025 08:00:53 +0000
Files and hashes: 1: j7tAtkU7X16dxo0q2axkpmgR2Jg.roa (hash: ee9X5e2Gsq7S7vtFMXjQ62kSEkjJdHkxbRMmxnYqFY4=)
2: stitAnqWdO3JNueMXU0bZJZNhEA.crl (hash: eoviwMDWExR1DYkN4WolkCz2WLY52WGz/M5Enipymts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/88c9d7-e377-4874-9868-715247c3dcdc/1/stitAnqWdO3JNueMXU0bZJZNhEA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/88c9d7-e377-4874-9868-715247c3dcdc/1/stitAnqWdO3JNueMXU0bZJZNhEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/stitAnqWdO3JNueMXU0bZJZNhEA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:77:c1:69:ba:2a:ef:b1:d0:2d:e8:4a:8d:4c:47:80:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2d8ad027a9674edc936e78c5d4d1b64964d8440
Validity
Not Before: Jun 16 08:00:53 2025 GMT
Not After : Jun 17 08:00:53 2025 GMT
Subject: CN=9c7f4be136baaa95fd60ecb5d141e9c193ca6315
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:4c:bb:ad:e4:94:1c:3b:9f:93:46:73:f0:49:
09:9e:a3:18:19:28:3d:73:06:9c:c7:ea:22:d1:ed:
f6:7b:fa:e9:54:9e:fc:d1:36:ef:62:16:90:25:14:
a1:9e:4f:c5:5b:e5:9f:a4:94:7f:ef:80:2a:46:08:
64:da:1d:79:2e:e3:d2:55:82:a3:af:db:fb:d2:0d:
9c:d0:9d:20:3a:08:59:20:87:6b:64:55:df:fc:a7:
4d:24:9e:28:b6:68:56:11:b2:f1:a3:66:78:77:0e:
c2:31:0e:63:45:3d:46:fa:2d:ac:13:10:72:1a:de:
e2:05:16:c2:4d:47:07:50:a9:e6:1a:bd:ca:45:49:
e7:8a:36:74:c9:7a:4e:28:b1:fc:ad:ad:11:9e:b1:
79:41:3f:da:75:d5:59:3d:ea:e3:6e:00:4a:19:6a:
59:4f:83:01:a0:53:50:05:18:a2:8b:05:7d:24:3d:
0f:d0:87:1c:12:18:5d:d0:c1:c4:51:70:a7:80:29:
5f:87:86:63:47:d6:81:44:35:ed:8f:69:c6:16:1b:
2d:3a:8c:2e:e3:a5:ad:be:6b:bc:3d:de:34:25:71:
1f:7d:93:ad:b4:71:82:c2:2d:d7:79:d4:0d:8d:7a:
2c:22:45:27:2e:fb:72:6a:60:cb:00:b4:50:17:fd:
8c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:7F:4B:E1:36:BA:AA:95:FD:60:EC:B5:D1:41:E9:C1:93:CA:63:15
X509v3 Authority Key Identifier:
keyid:B2:D8:AD:02:7A:96:74:ED:C9:36:E7:8C:5D:4D:1B:64:96:4D:84:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/stitAnqWdO3JNueMXU0bZJZNhEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/88c9d7-e377-4874-9868-715247c3dcdc/1/stitAnqWdO3JNueMXU0bZJZNhEA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/88c9d7-e377-4874-9868-715247c3dcdc/1/stitAnqWdO3JNueMXU0bZJZNhEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:a8:16:8f:82:6a:1e:2a:88:77:e3:66:53:fc:66:3b:09:9f:
4b:43:a2:80:fa:bc:78:88:02:48:81:46:a0:64:e5:f4:92:3c:
74:e8:32:30:c2:d4:c3:47:3c:6b:3d:db:fc:01:56:dc:0b:c7:
40:34:fd:19:36:f4:5a:bd:2b:cb:2c:7b:49:12:5f:c1:71:2b:
75:ce:fc:ae:0d:5e:de:71:2b:90:60:bd:fc:bc:c3:13:c6:7c:
c7:f4:d0:47:8b:bb:50:99:11:2a:f9:14:56:63:2c:c0:2d:19:
9b:61:70:ff:38:65:9a:ab:21:17:e9:3b:1d:3d:ed:ce:e7:b6:
eb:f6:d6:a8:5d:bc:f5:6d:df:c4:35:90:a3:d2:d7:d3:21:a7:
e8:f3:a3:5a:4e:93:7d:80:03:2c:ba:18:bb:52:9b:46:0f:8b:
37:f2:fb:13:5b:e9:f9:51:13:e4:48:ee:f1:99:67:33:b1:76:
79:92:5b:f9:cf:84:13:4a:13:2b:30:f1:b7:05:21:33:8f:ab:
fd:65:d2:1a:33:83:d9:fd:e0:2d:1c:6a:8f:69:12:c9:24:8c:
0c:e7:b0:e8:46:e2:e8:12:5b:05:38:ec:4c:a6:e2:96:65:f7:
aa:47:e4:b6:57:1e:67:4d:2e:e3:bf:5d:26:d8:3c:8d:b8:52:
d2:95:8c:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 14:51:57 2025 by rpki-client