Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/8c6395-646a-47a2-b4b6-c6f6e3f28956/1/st6zdl9Tnx7D8AIT_4NAhbfIx28.mft
File: st6zdl9Tnx7D8AIT_4NAhbfIx28.mft (raw, json)
Hash identifier: dYW/lF3YyrDjUvppAqK+Mgc+B46YjDzqyOxKVl9xlYQ=
Subject key identifier: B6:0F:EC:54:75:A4:4B:11:62:34:6C:29:11:1B:12:7C:FC:5D:46:7D
Authority key identifier: B2:DE:B3:76:5F:53:9F:1E:C3:F0:02:13:FF:83:40:85:B7:C8:C7:6F
Certificate issuer: /CN=b2deb3765f539f1ec3f00213ff834085b7c8c76f
Certificate serial: 019881671059B15690D13BE1C9EA7FEB10D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/st6zdl9Tnx7D8AIT_4NAhbfIx28.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/8c6395-646a-47a2-b4b6-c6f6e3f28956/1/st6zdl9Tnx7D8AIT_4NAhbfIx28.mft
Manifest number: 0584
Signing time: Wed 06 Aug 2025 22:01:11 +0000
Manifest this update: Wed 06 Aug 2025 22:01:11 +0000
Manifest next update: Thu 07 Aug 2025 22:01:11 +0000
Files and hashes: 1: TSugCU0pqUpliat_toqMDIoNIEc.roa (hash: wndd5eFIU8yCHwaZ5EgfwtAvzQXellC4WrfhfkeDZ9U=)
2: st6zdl9Tnx7D8AIT_4NAhbfIx28.crl (hash: CD0fh/7YQzSzp6wNCOueSXLfJ5Pbaz/pgqCbnmP77Wo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/8c6395-646a-47a2-b4b6-c6f6e3f28956/1/st6zdl9Tnx7D8AIT_4NAhbfIx28.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/8c6395-646a-47a2-b4b6-c6f6e3f28956/1/st6zdl9Tnx7D8AIT_4NAhbfIx28.mft
rsync://rpki.ripe.net/repository/DEFAULT/st6zdl9Tnx7D8AIT_4NAhbfIx28.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:67:10:59:b1:56:90:d1:3b:e1:c9:ea:7f:eb:10:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2deb3765f539f1ec3f00213ff834085b7c8c76f
Validity
Not Before: Aug 6 22:01:11 2025 GMT
Not After : Aug 7 22:01:11 2025 GMT
Subject: CN=b60fec5475a44b1162346c29111b127cfc5d467d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ff:67:73:6c:8e:b7:5e:92:cf:ba:51:cd:3c:
6e:69:0e:97:f1:77:b5:0d:b8:a2:ae:26:7a:77:f5:
af:0d:84:1b:ba:cf:71:cf:f7:02:72:5f:9c:67:f4:
65:0d:bc:f9:f0:cc:b2:82:82:28:86:63:39:03:22:
75:7c:7e:34:11:5b:f5:1a:21:e5:3c:98:2a:0e:ae:
13:22:ad:76:38:da:59:d0:8a:65:36:1d:55:cc:f6:
e1:45:39:bd:10:86:5b:5e:4c:4c:e0:f8:e9:26:2d:
6d:0b:d2:c9:23:4e:40:64:88:75:cf:da:bc:0f:fb:
c9:18:e8:ca:79:34:3c:0b:96:fd:88:0a:a5:99:95:
2c:d0:1a:8d:c2:13:64:75:34:77:5b:46:1e:9a:b3:
bc:a2:5e:90:fb:b3:02:1e:74:cf:e2:42:05:70:ed:
23:1e:b2:a7:e5:73:f4:90:f3:c6:c1:88:e0:d1:61:
87:37:ff:ad:d0:98:05:98:0e:59:82:cb:36:42:4a:
de:8a:5e:be:12:14:d9:6c:31:56:ab:37:47:c2:fd:
4c:2a:3b:c2:5c:76:c3:54:9a:b1:4c:01:c5:64:56:
6e:11:44:53:b4:a2:16:0d:3a:fa:c8:c8:e2:04:8b:
fa:53:59:77:23:e2:01:a6:a3:86:18:4a:09:64:0b:
91:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:0F:EC:54:75:A4:4B:11:62:34:6C:29:11:1B:12:7C:FC:5D:46:7D
X509v3 Authority Key Identifier:
keyid:B2:DE:B3:76:5F:53:9F:1E:C3:F0:02:13:FF:83:40:85:B7:C8:C7:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/st6zdl9Tnx7D8AIT_4NAhbfIx28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/8c6395-646a-47a2-b4b6-c6f6e3f28956/1/st6zdl9Tnx7D8AIT_4NAhbfIx28.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/8c6395-646a-47a2-b4b6-c6f6e3f28956/1/st6zdl9Tnx7D8AIT_4NAhbfIx28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:a2:04:5b:58:ea:f1:39:34:30:74:f6:37:20:49:2c:e0:aa:
f4:d8:e0:c4:be:b5:32:f3:aa:03:e9:36:e3:cc:79:d0:27:89:
15:57:fe:89:c0:ae:0d:ac:f1:f6:4c:70:91:0e:31:cf:40:8d:
47:44:d5:d5:90:40:1c:1b:03:07:4c:23:d0:b0:05:a2:5c:55:
bb:a0:8a:e2:7b:6e:bb:cc:44:89:2f:8d:d9:9f:5c:66:be:ff:
f6:9e:23:bb:bd:ed:c8:b1:07:08:c5:91:29:a9:2e:fe:bd:ce:
be:48:cb:12:7d:69:3e:80:6e:e1:a6:0a:21:a8:19:67:e6:fc:
5d:a7:65:eb:8d:4e:22:0a:87:7c:0d:51:43:82:d9:d3:fa:ed:
2f:11:a2:50:a5:91:f2:b8:9f:52:e1:bd:d5:f0:26:18:52:5d:
d1:eb:bd:0f:25:65:57:62:2c:91:4f:75:71:88:cc:f4:90:1e:
20:71:b4:fd:87:d7:29:32:a5:45:c0:ac:7d:ea:33:34:e4:c5:
a8:46:91:4a:e8:11:21:9d:fe:9a:44:ed:22:70:c2:d4:e3:89:
f6:46:34:45:72:54:a8:e9:53:52:cf:ec:2f:d1:6c:15:3f:83:
34:d5:49:ce:b9:cf:ea:f3:68:ad:d9:89:f8:e8:a6:cf:bb:51:
dc:da:43:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiBZxBZsVaQ0Tvhyep/6xDYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyZGViMzc2NWY1MzlmMWVjM2YwMDIxM2ZmODM0MDg1Yjdj
OGM3NmYwHhcNMjUwODA2MjIwMTExWhcNMjUwODA3MjIwMTExWjAzMTEwLwYDVQQD
EyhiNjBmZWM1NDc1YTQ0YjExNjIzNDZjMjkxMTFiMTI3Y2ZjNWQ0NjdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlv9nc2yOt16Sz7pRzTxuaQ6X8Xe1
DbiiriZ6d/WvDYQbus9xz/cCcl+cZ/RlDbz58MyygoIohmM5AyJ1fH40EVv1GiHl
PJgqDq4TIq12ONpZ0IplNh1VzPbhRTm9EIZbXkxM4PjpJi1tC9LJI05AZIh1z9q8
D/vJGOjKeTQ8C5b9iAqlmZUs0BqNwhNkdTR3W0YemrO8ol6Q+7MCHnTP4kIFcO0j
HrKn5XP0kPPGwYjg0WGHN/+t0JgFmA5Zgss2Qkreil6+EhTZbDFWqzdHwv1MKjvC
XHbDVJqxTAHFZFZuEURTtKIWDTr6yMjiBIv6U1l3I+IBpqOGGEoJZAuR+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLYP7FR1pEsRYjRsKREbEnz8XUZ9MB8GA1UdIwQY
MBaAFLLes3ZfU58ew/ACE/+DQIW3yMdvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3Q2emRsOVRueDdEOEFJVF80TkFoYmZJeDI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC84YzYzOTUtNjQ2YS00N2EyLWI0YjYt
YzZmNmUzZjI4OTU2LzEvc3Q2emRsOVRueDdEOEFJVF80TkFoYmZJeDI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC84YzYzOTUtNjQ2YS00N2EyLWI0YjYtYzZmNmUzZjI4OTU2
LzEvc3Q2emRsOVRueDdEOEFJVF80TkFoYmZJeDI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADKIEW1jq
8Tk0MHT2NyBJLOCq9NjgxL61MvOqA+k248x50CeJFVf+icCuDazx9kxwkQ4xz0CN
R0TV1ZBAHBsDB0wj0LAFolxVu6CK4ntuu8xEiS+N2Z9cZr7/9p4ju73tyLEHCMWR
Kaku/r3OvkjLEn1pPoBu4aYKIagZZ+b8Xadl641OIgqHfA1RQ4LZ0/rtLxGiUKWR
8rifUuG91fAmGFJd0eu9DyVlV2IskU91cYjM9JAeIHG0/YfXKTKlRcCsfeozNOTF
qEaRSugRIZ3+mkTtInDC1OOJ9kY0RXJUqOlTUs/sL9FsFT+DNNVJzrnP6vNordmJ
+Oimz7tR3NpDbw==
-----END CERTIFICATE-----
Generated at Thu Aug 7 03:25:49 2025 by rpki-client