Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/706fa8-52a2-4ed2-a2e1-04e4e4dc5fba/1/st8A84zO2SGXmTB2yzaFvzK8Xmk.mft
File: st8A84zO2SGXmTB2yzaFvzK8Xmk.mft (raw, json)
Hash identifier: V4Ck1+ZZLmwMLM7QMm8NKptLUTo/AM/daV/Ce6DbLL4=
Subject key identifier: EB:DB:B0:E9:8F:EA:7E:C2:1B:88:3C:1C:CD:3C:4D:65:B1:38:41:71
Authority key identifier: B2:DF:00:F3:8C:CE:D9:21:97:99:30:76:CB:36:85:BF:32:BC:5E:69
Certificate issuer: /CN=b2df00f38cced92197993076cb3685bf32bc5e69
Certificate serial: 019A725C9C56732B956E7E2F3EA03925DA3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/st8A84zO2SGXmTB2yzaFvzK8Xmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/706fa8-52a2-4ed2-a2e1-04e4e4dc5fba/1/st8A84zO2SGXmTB2yzaFvzK8Xmk.mft
Manifest number: 1288
Signing time: Tue 11 Nov 2025 10:01:03 +0000
Manifest this update: Tue 11 Nov 2025 10:01:03 +0000
Manifest next update: Wed 12 Nov 2025 10:01:03 +0000
Files and hashes: 1: gbTQ5TFLqYdv3bxMQXRQSRcMIoc.roa (hash: rJ5djAjgxTYzs8j0EQsFjkKUrs3CGg0sgiibLKW68Ck=)
2: st8A84zO2SGXmTB2yzaFvzK8Xmk.crl (hash: FyuaRQezx0qN+yhAHwjzsFdMiQMDQObP9dnoCTFtwoE=)
3: wu3L_A3dWSKUeaU4lbLH5tQFGhs.roa (hash: QMvHM8N7K9OdWcNx9rJFFp+Z7jXiktM21WFlvU4ZxMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/706fa8-52a2-4ed2-a2e1-04e4e4dc5fba/1/st8A84zO2SGXmTB2yzaFvzK8Xmk.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/706fa8-52a2-4ed2-a2e1-04e4e4dc5fba/1/st8A84zO2SGXmTB2yzaFvzK8Xmk.mft
rsync://rpki.ripe.net/repository/DEFAULT/st8A84zO2SGXmTB2yzaFvzK8Xmk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:9c:56:73:2b:95:6e:7e:2f:3e:a0:39:25:da:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2df00f38cced92197993076cb3685bf32bc5e69
Validity
Not Before: Nov 11 10:01:03 2025 GMT
Not After : Nov 12 10:01:03 2025 GMT
Subject: CN=ebdbb0e98fea7ec21b883c1ccd3c4d65b1384171
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0b:02:09:e9:28:c9:54:a1:a2:85:83:99:55:
ce:8f:a0:69:b3:cb:4a:3a:61:be:8a:93:b9:df:86:
ba:58:fc:51:3b:dd:00:f8:4c:67:fc:be:42:2b:cf:
b9:c6:1c:b6:6f:26:f0:ae:f8:ef:7f:db:cd:29:1d:
58:af:84:df:fa:bd:1e:8b:71:e3:83:5b:c3:f3:20:
9d:fd:74:7a:b2:ce:b3:33:70:6c:9f:4c:b2:69:b5:
4c:85:10:bb:51:34:ea:9f:c1:62:16:f7:a3:7a:3a:
4b:0e:46:ec:5c:c2:07:24:71:72:27:38:b3:18:02:
a4:84:d7:4b:b2:01:3c:93:36:04:15:32:78:17:7f:
67:9b:9d:40:b4:45:a6:a7:fb:16:61:60:b5:95:cd:
a3:26:f0:d7:3c:95:98:47:86:c1:0f:a7:76:6f:db:
9c:81:b9:aa:bf:f5:f9:41:24:23:fc:9c:96:e4:71:
79:44:a5:68:1c:78:f8:0c:e7:85:5d:e7:a3:fa:86:
26:40:5d:78:45:0c:72:52:8e:cc:56:34:d3:b0:d3:
2f:39:0e:b7:4f:b5:21:ed:72:65:a6:b1:10:f1:d4:
02:e1:9d:11:a3:df:e1:38:35:db:2c:fe:bc:c7:1a:
45:2f:58:3b:6b:70:91:20:03:25:30:d0:17:13:a5:
c5:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:DB:B0:E9:8F:EA:7E:C2:1B:88:3C:1C:CD:3C:4D:65:B1:38:41:71
X509v3 Authority Key Identifier:
keyid:B2:DF:00:F3:8C:CE:D9:21:97:99:30:76:CB:36:85:BF:32:BC:5E:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/st8A84zO2SGXmTB2yzaFvzK8Xmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/706fa8-52a2-4ed2-a2e1-04e4e4dc5fba/1/st8A84zO2SGXmTB2yzaFvzK8Xmk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/706fa8-52a2-4ed2-a2e1-04e4e4dc5fba/1/st8A84zO2SGXmTB2yzaFvzK8Xmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:9e:0f:9d:d4:a6:ce:d9:f8:5f:59:29:81:83:a6:c2:f5:1e:
ba:1a:c4:ab:25:10:d9:4b:ce:da:18:7f:f9:18:ea:f8:06:b2:
7b:a4:cc:f5:b5:c0:73:95:5b:ec:68:d0:04:d2:a9:cd:ff:05:
07:06:9c:86:ba:47:9e:a0:50:1b:53:6e:5f:2f:a6:8a:21:ba:
19:fd:d2:01:85:ee:9f:e6:90:a0:ca:7a:11:dc:ee:4b:e2:79:
33:74:ba:7a:a8:e4:69:8f:28:03:48:43:13:c2:ad:32:01:8a:
a0:c2:51:95:8b:1d:35:61:a8:75:b6:02:08:1b:0f:7e:d8:19:
18:d9:c7:61:43:26:23:8e:3f:f9:1b:a9:8e:6c:21:0a:2c:72:
18:94:ac:31:cc:7a:84:6f:2b:15:db:96:5e:2b:6e:e2:52:17:
4d:91:a1:ef:15:38:69:f3:28:21:00:b3:2d:c3:d4:92:ab:a6:
33:b1:87:39:22:d2:1d:0c:5e:11:dc:87:1b:1e:df:8f:5c:b6:
82:31:f7:ea:82:d8:35:6f:78:17:5f:4a:70:1e:7d:22:bd:b3:
4a:80:8f:18:0f:9a:e3:32:55:7e:e3:cd:3c:40:3b:56:8c:51:
0a:49:f9:cc:a5:3e:ae:e2:79:6c:3f:56:7a:2c:90:2e:48:0d:
a8:55:d9:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:45 2025 by rpki-client