Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/8c6395-646a-47a2-b4b6-c6f6e3f28956/1/st6zdl9Tnx7D8AIT_4NAhbfIx28.mft
File: st6zdl9Tnx7D8AIT_4NAhbfIx28.mft (raw, json)
Hash identifier: DgRokY0qGLlYogO2i5ehgJl+gmJAqgBh6ZU8o+l0+ow=
Subject key identifier: 16:F9:4D:8F:64:4C:85:F6:0A:C8:C1:D8:E4:7B:7B:EB:13:BF:03:6C
Authority key identifier: B2:DE:B3:76:5F:53:9F:1E:C3:F0:02:13:FF:83:40:85:B7:C8:C7:6F
Certificate issuer: /CN=b2deb3765f539f1ec3f00213ff834085b7c8c76f
Certificate serial: 019A4EF4F9C448E354CA2C04D58485075918
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/st6zdl9Tnx7D8AIT_4NAhbfIx28.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/8c6395-646a-47a2-b4b6-c6f6e3f28956/1/st6zdl9Tnx7D8AIT_4NAhbfIx28.mft
Manifest number: 0673
Signing time: Tue 04 Nov 2025 13:01:08 +0000
Manifest this update: Tue 04 Nov 2025 13:01:08 +0000
Manifest next update: Wed 05 Nov 2025 13:01:08 +0000
Files and hashes: 1: TSugCU0pqUpliat_toqMDIoNIEc.roa (hash: wndd5eFIU8yCHwaZ5EgfwtAvzQXellC4WrfhfkeDZ9U=)
2: st6zdl9Tnx7D8AIT_4NAhbfIx28.crl (hash: WxvmaghOH/o5lC9wPvhoNoQ1G7vnh/Qyxrx/PqLpZRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/8c6395-646a-47a2-b4b6-c6f6e3f28956/1/st6zdl9Tnx7D8AIT_4NAhbfIx28.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/8c6395-646a-47a2-b4b6-c6f6e3f28956/1/st6zdl9Tnx7D8AIT_4NAhbfIx28.mft
rsync://rpki.ripe.net/repository/DEFAULT/st6zdl9Tnx7D8AIT_4NAhbfIx28.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:f9:c4:48:e3:54:ca:2c:04:d5:84:85:07:59:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2deb3765f539f1ec3f00213ff834085b7c8c76f
Validity
Not Before: Nov 4 13:01:08 2025 GMT
Not After : Nov 5 13:01:08 2025 GMT
Subject: CN=16f94d8f644c85f60ac8c1d8e47b7beb13bf036c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:ea:98:94:92:ab:50:a8:44:76:e4:ce:13:50:
03:92:f0:34:bf:1d:a6:83:ac:91:31:ae:26:d4:8c:
69:01:0e:3b:11:40:26:d7:46:71:d0:37:2c:5f:ba:
4c:e6:ca:a1:b4:a5:fd:f3:f0:b2:0e:d0:5e:d8:5d:
c4:37:d4:44:c6:8a:ef:a8:68:06:2c:1e:64:b6:10:
f6:af:d4:1c:12:d3:03:ff:a9:18:6d:87:f2:43:79:
25:13:c5:54:01:54:3f:e3:7f:b5:fd:6b:2d:3b:4d:
48:c8:47:60:7b:4e:02:c0:5a:95:ef:40:d5:98:20:
35:7b:e3:03:78:ce:e9:7d:2b:4e:79:79:40:a0:9f:
fd:8d:01:2d:67:81:3c:2e:8e:3b:b4:c4:4d:c3:21:
ff:f0:f8:5a:64:51:15:70:10:86:5a:60:86:6c:f1:
38:cc:9f:fe:14:ae:dc:4a:28:63:ab:3b:26:f0:6d:
60:34:a7:e7:0f:1d:97:5f:8a:e6:22:86:ab:82:9e:
45:06:b6:a1:db:1b:e1:9e:0a:f8:a0:9c:59:f0:e6:
a0:4a:24:83:d6:ee:e7:d7:7b:5e:52:0d:51:9b:9e:
99:d0:54:12:0d:4d:cd:34:85:c2:85:bb:48:f8:85:
38:fa:29:f0:17:d5:fb:b7:b5:20:ae:bb:29:6d:e8:
57:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:F9:4D:8F:64:4C:85:F6:0A:C8:C1:D8:E4:7B:7B:EB:13:BF:03:6C
X509v3 Authority Key Identifier:
keyid:B2:DE:B3:76:5F:53:9F:1E:C3:F0:02:13:FF:83:40:85:B7:C8:C7:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/st6zdl9Tnx7D8AIT_4NAhbfIx28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/8c6395-646a-47a2-b4b6-c6f6e3f28956/1/st6zdl9Tnx7D8AIT_4NAhbfIx28.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/8c6395-646a-47a2-b4b6-c6f6e3f28956/1/st6zdl9Tnx7D8AIT_4NAhbfIx28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:29:68:ef:10:60:52:29:42:74:3d:ae:4f:f9:aa:fc:8c:d0:
c7:c8:e0:64:2c:2f:40:17:48:b3:34:fa:23:59:9f:f7:c3:32:
72:bd:fd:ea:c1:23:be:d4:bf:0c:2e:19:a2:89:4c:49:1f:f1:
1d:96:28:b7:e6:fc:5a:c4:1f:dd:5c:37:66:3a:b4:63:3e:ac:
e2:4a:9a:b6:e0:b9:15:56:87:79:76:0e:52:10:d8:d0:db:3d:
7c:47:08:6f:53:d3:f0:42:2c:6f:3e:df:2a:cf:7b:1c:8c:e4:
6a:20:05:b4:3e:72:f2:ae:fc:c9:fc:82:ba:3a:6e:fb:da:77:
b9:cb:ad:91:36:46:da:d9:7b:5d:25:a4:86:8e:12:d1:e6:e9:
ad:9b:e4:a4:95:c3:5e:99:32:46:5e:48:98:d0:37:7a:26:49:
8c:39:d2:49:b6:20:e4:28:13:f3:6a:98:30:cc:a7:dc:10:7d:
d6:cf:39:b0:c4:93:b0:f8:f1:d0:c4:df:a6:9b:85:b9:30:a9:
7c:df:26:20:cc:44:25:da:d2:b1:04:6c:47:b4:7e:8a:93:87:
27:48:af:c1:e4:f5:de:31:e7:8e:9d:75:da:b1:aa:b1:b2:68:
8a:bd:bf:e0:f5:de:0c:d5:d1:11:54:02:35:e0:a5:38:09:fa:
16:94:eb:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:48:18 2025 by rpki-client