Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/b06956-e733-4564-9781-d0c4c86bb5fe/1/st8cE314lMzbp2jOuXHE099Z_pY.mft
File: st8cE314lMzbp2jOuXHE099Z_pY.mft (raw, json)
Hash identifier: QZFmg4+y5nJkAp2qOJ4Y5KNRWIsdtR+Lrra1a1js9c4=
Subject key identifier: 6D:B5:74:69:FC:19:42:E9:89:34:C9:7C:C1:54:B7:54:85:28:04:0F
Authority key identifier: B2:DF:1C:13:7D:78:94:CC:DB:A7:68:CE:B9:71:C4:D3:DF:59:FE:96
Certificate issuer: /CN=b2df1c137d7894ccdba768ceb971c4d3df59fe96
Certificate serial: 019A4E1888DB786B0DF945783552A858576D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/st8cE314lMzbp2jOuXHE099Z_pY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/b06956-e733-4564-9781-d0c4c86bb5fe/1/st8cE314lMzbp2jOuXHE099Z_pY.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 09:00:22 +0000
Manifest this update: Tue 04 Nov 2025 09:00:22 +0000
Manifest next update: Wed 05 Nov 2025 09:00:22 +0000
Files and hashes: 1: st8cE314lMzbp2jOuXHE099Z_pY.crl (hash: deVhEOq1rQECHKe0vC79IgPld9O4dMf1PJN5b3YtvR4=)
2: utentqqy5GUX6xjOO70Zx55fsK0.roa (hash: Z4JeWyzB0L9+u00qmx46AQ9h8ajUGAFCIAhK67ja97c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/b06956-e733-4564-9781-d0c4c86bb5fe/1/st8cE314lMzbp2jOuXHE099Z_pY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/b06956-e733-4564-9781-d0c4c86bb5fe/1/st8cE314lMzbp2jOuXHE099Z_pY.mft
rsync://rpki.ripe.net/repository/DEFAULT/st8cE314lMzbp2jOuXHE099Z_pY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:88:db:78:6b:0d:f9:45:78:35:52:a8:58:57:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2df1c137d7894ccdba768ceb971c4d3df59fe96
Validity
Not Before: Nov 4 09:00:22 2025 GMT
Not After : Nov 5 09:00:22 2025 GMT
Subject: CN=6db57469fc1942e98934c97cc154b7548528040f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:8f:f6:42:df:53:f5:73:1d:f2:a2:28:f8:03:
9d:85:33:39:32:1b:cc:9d:b3:d7:0b:aa:6d:4a:b2:
56:4f:d6:e9:05:9f:7f:26:8c:29:cc:b4:e4:6a:46:
19:4d:ac:4e:49:8d:cb:43:fc:ad:46:b8:ab:f8:56:
7d:07:49:18:fe:e0:86:22:0c:df:58:50:39:e0:7b:
a8:9c:ec:9b:bf:b0:2f:fc:2e:61:a0:1a:27:94:86:
bb:21:d6:8c:3e:b1:08:f1:75:49:fe:e0:3c:99:6d:
eb:92:8e:cc:f4:b7:2b:c7:54:2f:26:89:58:da:21:
aa:ca:2d:05:df:ec:ef:2f:37:3d:76:27:d2:6a:e5:
a8:9a:21:e3:a9:d9:ac:ce:50:aa:eb:7b:94:04:03:
21:52:18:fc:28:d3:2d:29:17:ad:51:25:08:eb:ac:
03:77:4d:05:76:a5:37:87:80:d8:33:6e:ed:af:17:
9d:4f:96:9c:0f:90:c4:17:23:f4:d1:0a:cc:40:17:
5c:81:9b:71:ec:5f:87:57:bd:0d:c9:b9:75:bb:29:
7d:72:22:6e:89:c9:61:10:88:af:ff:dd:14:4b:23:
ff:8d:eb:8c:63:57:01:d5:1b:f6:2f:91:a5:49:d2:
5c:26:fa:87:44:26:76:31:29:2e:e9:6a:90:ca:62:
5e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:B5:74:69:FC:19:42:E9:89:34:C9:7C:C1:54:B7:54:85:28:04:0F
X509v3 Authority Key Identifier:
keyid:B2:DF:1C:13:7D:78:94:CC:DB:A7:68:CE:B9:71:C4:D3:DF:59:FE:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/st8cE314lMzbp2jOuXHE099Z_pY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b06956-e733-4564-9781-d0c4c86bb5fe/1/st8cE314lMzbp2jOuXHE099Z_pY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b06956-e733-4564-9781-d0c4c86bb5fe/1/st8cE314lMzbp2jOuXHE099Z_pY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:bd:6d:bb:21:2e:e9:c6:f8:3b:c8:48:b4:c1:c7:bd:4a:d1:
00:cb:6c:f1:db:ba:51:19:f7:5b:01:62:68:2b:5e:a0:8d:d6:
1a:02:7c:be:c6:ac:78:b3:16:97:26:4f:b8:0d:50:49:95:b3:
65:7f:b5:ac:18:0b:a0:9b:25:2c:5f:b2:6a:b6:6a:d4:c3:78:
3b:2a:4a:53:ca:80:7a:a9:b0:1b:14:25:e0:bc:95:cd:49:0c:
18:52:21:24:80:c4:58:5f:5d:eb:56:a7:ec:ae:a2:f8:0b:ed:
45:2b:e1:94:62:cf:85:fc:9d:4c:c6:d5:cd:fc:c3:a7:57:af:
36:ac:68:f8:74:88:9b:eb:2e:40:02:b6:a3:b5:3d:b4:6c:f8:
3d:b6:e8:09:4b:14:3d:5d:77:0e:e4:ec:ad:f5:66:1c:c6:6c:
0b:fb:5f:8e:f0:bb:cf:55:b4:89:9d:01:28:f1:3f:fb:46:95:
ba:02:b8:ce:91:5c:fb:12:19:f6:d2:eb:4b:b1:86:a3:5d:0e:
6f:e2:5b:b1:3b:cf:fd:75:06:03:8d:bc:d7:7f:3f:e7:73:14:
26:42:50:93:e1:c4:64:2b:a9:e5:e8:c9:4a:73:eb:74:a1:e0:
6f:2c:16:d4:86:b3:3b:d9:9a:f2:aa:05:2f:0b:26:2f:e7:b2:
23:72:1e:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:00:10 2025 by rpki-client