Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/8273b5-279c-4323-82dc-c257607317f3/1/_stf432FEfZ6YFMW6wlTU4_P6ec.mft
File: _stf432FEfZ6YFMW6wlTU4_P6ec.mft (raw, json)
Hash identifier: FNhF0ox7Li0DA7cnwZ27+WqH5U6iS48U1YZbPUUhDKo=
Subject key identifier: EE:6D:4C:BE:EF:A4:5F:5B:4C:D1:20:4C:B9:0B:70:9A:EB:70:F7:88
Authority key identifier: FE:CB:5F:E3:7D:85:11:F6:7A:60:53:16:EB:09:53:53:8F:CF:E9:E7
Certificate issuer: /CN=fecb5fe37d8511f67a605316eb0953538fcfe9e7
Certificate serial: 019A21E47373FF2FE7120D4B952AF2BB0ABD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_stf432FEfZ6YFMW6wlTU4_P6ec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/8273b5-279c-4323-82dc-c257607317f3/1/_stf432FEfZ6YFMW6wlTU4_P6ec.mft
Manifest number: 10D0
Signing time: Sun 26 Oct 2025 19:00:11 +0000
Manifest this update: Sun 26 Oct 2025 19:00:11 +0000
Manifest next update: Mon 27 Oct 2025 19:00:11 +0000
Files and hashes: 1: _stf432FEfZ6YFMW6wlTU4_P6ec.crl (hash: p4+7EKQonMNmV2MBqZfMzAiUHVKt/lRpc6GBaFerq80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/8273b5-279c-4323-82dc-c257607317f3/1/_stf432FEfZ6YFMW6wlTU4_P6ec.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/8273b5-279c-4323-82dc-c257607317f3/1/_stf432FEfZ6YFMW6wlTU4_P6ec.mft
rsync://rpki.ripe.net/repository/DEFAULT/_stf432FEfZ6YFMW6wlTU4_P6ec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:e4:73:73:ff:2f:e7:12:0d:4b:95:2a:f2:bb:0a:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fecb5fe37d8511f67a605316eb0953538fcfe9e7
Validity
Not Before: Oct 26 19:00:11 2025 GMT
Not After : Oct 27 19:00:11 2025 GMT
Subject: CN=ee6d4cbeefa45f5b4cd1204cb90b709aeb70f788
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a5:74:8a:93:87:a2:45:9c:4f:66:06:81:3e:
b4:99:8b:1e:fd:ea:0d:2a:c6:68:c2:45:c8:9f:03:
f2:90:0b:ec:a3:aa:8c:ae:53:0a:68:ea:05:25:3c:
45:c0:c7:ab:29:53:05:40:b1:bf:9f:6b:69:60:35:
5f:19:2f:bd:35:74:b3:e4:cc:84:b3:d1:71:e5:03:
90:88:2d:b2:b3:e7:25:9d:63:1e:23:19:1c:9f:64:
bf:b0:85:aa:88:a6:ab:49:dc:68:3a:66:a9:e1:92:
dc:2d:2a:9b:2e:57:0e:5c:4d:6b:31:ea:ba:97:be:
bd:ec:5e:ec:77:85:ee:15:d9:2d:23:9c:9d:4f:bb:
0e:40:4e:5c:36:cb:62:b1:b1:42:15:53:9b:86:14:
4e:e9:0d:a3:d2:7d:bd:c5:26:80:c7:e0:1f:06:d2:
51:d6:b2:29:dd:ce:b9:ef:a1:3b:5f:c7:60:4a:99:
35:83:ec:ae:85:dc:27:e0:50:d7:30:fa:15:fb:a2:
9e:f6:dd:17:c8:b4:8b:80:db:ba:d8:62:b9:ba:03:
83:47:50:ce:dc:70:5d:5c:d9:75:94:94:a8:6d:67:
30:36:bd:2a:0b:0a:32:58:cf:10:52:f0:77:7f:c2:
45:f1:ef:83:b8:3f:16:a4:2a:37:fb:17:c7:89:5a:
43:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:6D:4C:BE:EF:A4:5F:5B:4C:D1:20:4C:B9:0B:70:9A:EB:70:F7:88
X509v3 Authority Key Identifier:
keyid:FE:CB:5F:E3:7D:85:11:F6:7A:60:53:16:EB:09:53:53:8F:CF:E9:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_stf432FEfZ6YFMW6wlTU4_P6ec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/8273b5-279c-4323-82dc-c257607317f3/1/_stf432FEfZ6YFMW6wlTU4_P6ec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/8273b5-279c-4323-82dc-c257607317f3/1/_stf432FEfZ6YFMW6wlTU4_P6ec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:dd:ab:09:e5:5c:bc:d4:be:fe:dd:64:e2:21:44:ed:9b:de:
c8:ad:96:43:cd:39:5f:42:fc:89:55:49:06:a6:5f:db:34:6b:
cf:0c:63:6a:87:a7:34:f3:b6:9a:27:a1:a1:e6:32:d1:67:b3:
d0:a3:02:fc:e6:c6:8c:6b:e5:ab:11:ff:6d:14:1d:a6:2f:3c:
74:70:d4:a4:07:57:c1:72:e4:22:48:85:3d:0b:fc:46:8e:9f:
f9:db:4a:7a:76:2a:e8:66:98:41:30:41:b0:95:3b:59:bf:0c:
8d:74:6a:bc:53:6f:a5:34:f0:3f:fa:3f:fd:d4:1a:43:68:44:
60:b4:b6:48:ac:1e:ce:28:00:32:09:60:31:5a:50:38:88:46:
aa:63:ce:75:8b:5b:c1:cd:3e:da:4e:bd:c2:d2:d3:33:22:92:
9f:4d:ea:bc:66:e4:93:2b:68:ef:e2:9f:b9:07:90:f0:14:64:
f6:06:f2:86:02:1a:f2:fa:5a:f3:b0:09:45:31:4a:21:25:98:
75:38:6f:55:64:51:9b:c1:41:e5:cd:ec:3d:ec:d1:78:e6:e0:
64:81:8d:14:16:18:d4:f6:42:4d:c4:d3:4a:fc:01:df:e8:a0:
d0:1c:8d:06:22:20:49:61:fa:c7:ec:2c:73:63:3e:64:7c:93:
38:2e:84:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:21:56 2025 by rpki-client