Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/88c9d7-e377-4874-9868-715247c3dcdc/1/stitAnqWdO3JNueMXU0bZJZNhEA.mft
File: stitAnqWdO3JNueMXU0bZJZNhEA.mft (raw, json)
Hash identifier: A+JxMfS3F6LK4Qrnp+qYAhd7Sd+B8/kbQLrbz856PEU=
Subject key identifier: 63:B8:51:28:FB:42:EB:4F:EA:B2:CC:B3:F0:7D:0A:9D:93:17:14:C3
Authority key identifier: B2:D8:AD:02:7A:96:74:ED:C9:36:E7:8C:5D:4D:1B:64:96:4D:84:40
Certificate issuer: /CN=b2d8ad027a9674edc936e78c5d4d1b64964d8440
Certificate serial: 0199228C4EBF8E02CA50BA646A508A0E6B1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/stitAnqWdO3JNueMXU0bZJZNhEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/88c9d7-e377-4874-9868-715247c3dcdc/1/stitAnqWdO3JNueMXU0bZJZNhEA.mft
Manifest number: 0B9A
Signing time: Sun 07 Sep 2025 05:00:44 +0000
Manifest this update: Sun 07 Sep 2025 05:00:44 +0000
Manifest next update: Mon 08 Sep 2025 05:00:44 +0000
Files and hashes: 1: j7tAtkU7X16dxo0q2axkpmgR2Jg.roa (hash: ee9X5e2Gsq7S7vtFMXjQ62kSEkjJdHkxbRMmxnYqFY4=)
2: stitAnqWdO3JNueMXU0bZJZNhEA.crl (hash: ft5Ebwee7r/pt+EwdAJLoWOBiW+c+kLyx8deOQX+e8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/88c9d7-e377-4874-9868-715247c3dcdc/1/stitAnqWdO3JNueMXU0bZJZNhEA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/88c9d7-e377-4874-9868-715247c3dcdc/1/stitAnqWdO3JNueMXU0bZJZNhEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/stitAnqWdO3JNueMXU0bZJZNhEA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:4e:bf:8e:02:ca:50:ba:64:6a:50:8a:0e:6b:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2d8ad027a9674edc936e78c5d4d1b64964d8440
Validity
Not Before: Sep 7 05:00:44 2025 GMT
Not After : Sep 8 05:00:44 2025 GMT
Subject: CN=63b85128fb42eb4feab2ccb3f07d0a9d931714c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:45:59:5b:ef:17:aa:4d:9e:ca:62:ba:70:54:
be:a9:5d:5e:8b:3f:24:41:38:81:0a:55:15:bd:64:
79:ef:52:1a:b9:53:a4:0e:c6:ff:ed:d7:f3:d6:4e:
87:33:95:e4:82:19:bc:f8:47:80:cc:7f:e4:4a:eb:
80:c4:ce:c3:58:09:0c:92:74:7c:21:0b:25:2a:1c:
0f:4b:a1:16:3b:ee:91:c1:1b:dc:c6:d3:2e:be:84:
44:66:3d:4d:2e:97:68:ab:f2:72:e0:cc:c6:78:c0:
b7:4d:83:4d:8b:d1:05:cd:ae:ab:79:e0:ef:f3:e0:
36:3d:6a:ae:d1:66:c2:9a:0a:2a:33:98:79:6f:f7:
38:ae:ba:ab:e1:d6:e0:8f:91:c9:2c:00:13:35:af:
c9:91:23:e3:ef:7d:f9:4a:b3:ea:3a:15:04:3c:78:
34:c3:96:4f:14:ff:29:2a:93:9f:48:5c:7a:d0:d2:
fe:4a:2e:d3:41:5b:de:bc:4c:16:cf:a4:e9:2b:67:
7c:e3:18:b5:92:b9:c5:6c:2c:44:7a:19:d5:71:74:
c2:90:c3:87:1d:77:63:a9:c3:c6:18:5e:2c:90:42:
c5:ff:70:3c:d6:28:a0:fb:7a:e9:69:5e:34:b5:fe:
dc:40:2d:1a:4e:92:ea:a3:1e:df:4d:a3:ad:06:0c:
5e:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:B8:51:28:FB:42:EB:4F:EA:B2:CC:B3:F0:7D:0A:9D:93:17:14:C3
X509v3 Authority Key Identifier:
keyid:B2:D8:AD:02:7A:96:74:ED:C9:36:E7:8C:5D:4D:1B:64:96:4D:84:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/stitAnqWdO3JNueMXU0bZJZNhEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/88c9d7-e377-4874-9868-715247c3dcdc/1/stitAnqWdO3JNueMXU0bZJZNhEA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/88c9d7-e377-4874-9868-715247c3dcdc/1/stitAnqWdO3JNueMXU0bZJZNhEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:46:21:4a:1f:26:86:c5:92:6b:be:8c:f9:26:30:e6:bb:67:
68:66:b8:03:97:69:d2:dd:bc:be:c7:2d:4f:0e:ee:3d:c1:ca:
f1:d8:4c:64:95:21:8d:04:08:39:bc:75:bb:c4:5a:a5:cd:f4:
dd:33:42:19:1f:34:37:be:b8:d8:cd:6e:a8:32:fb:35:e6:31:
91:3a:66:87:cb:c9:b8:90:17:7b:18:4d:3d:b5:a9:87:bc:f0:
64:ef:bb:a3:cb:be:9a:87:7d:c1:96:a0:01:78:cd:d1:56:a5:
28:d6:d1:ba:75:69:ee:c3:07:a1:9d:b5:4e:ec:55:eb:e2:e5:
0e:a7:b4:50:57:ed:8d:0d:7d:0d:c4:9e:50:d9:f0:6c:ad:be:
7e:a8:32:7d:2d:0a:cb:f1:11:89:f8:47:6d:1d:57:24:8a:69:
27:be:96:c8:69:81:36:1b:2a:e4:82:d0:1e:15:b1:b7:80:c5:
c8:da:f4:0a:35:a8:80:5a:ff:52:fb:e7:b7:66:54:1d:c0:fe:
9d:e6:83:38:b3:e5:0c:cf:50:00:93:e0:d3:6b:30:7d:c1:50:
ef:7f:4b:45:f4:96:f7:22:5e:38:2e:4a:93:0e:93:54:82:b7:
31:ae:86:5a:1b:03:ad:1f:d1:7c:41:32:b7:69:cc:dc:cd:f9:
eb:a2:e6:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:43:50 2025 by rpki-client