Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/8c6395-646a-47a2-b4b6-c6f6e3f28956/1/st6zdl9Tnx7D8AIT_4NAhbfIx28.mft
File: st6zdl9Tnx7D8AIT_4NAhbfIx28.mft (raw, json)
Hash identifier: LsEk8WD8nHd1X/JAl+Sq8dN81J/WXrTq2rVBo01jV9c=
Subject key identifier: 9B:DB:6C:BF:3C:53:DF:A1:80:6C:6C:56:76:48:23:CD:BA:FC:4B:36
Authority key identifier: B2:DE:B3:76:5F:53:9F:1E:C3:F0:02:13:FF:83:40:85:B7:C8:C7:6F
Certificate issuer: /CN=b2deb3765f539f1ec3f00213ff834085b7c8c76f
Certificate serial: 0199161A8C2E74415B4D10F61DF3A639060A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/st6zdl9Tnx7D8AIT_4NAhbfIx28.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/8c6395-646a-47a2-b4b6-c6f6e3f28956/1/st6zdl9Tnx7D8AIT_4NAhbfIx28.mft
Manifest number: 05D1
Signing time: Thu 04 Sep 2025 19:01:02 +0000
Manifest this update: Thu 04 Sep 2025 19:01:02 +0000
Manifest next update: Fri 05 Sep 2025 19:01:02 +0000
Files and hashes: 1: TSugCU0pqUpliat_toqMDIoNIEc.roa (hash: wndd5eFIU8yCHwaZ5EgfwtAvzQXellC4WrfhfkeDZ9U=)
2: st6zdl9Tnx7D8AIT_4NAhbfIx28.crl (hash: PjG81noOsc4wZKDouAr2SkLUhmk/CwJCMzwGDeeKiRo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/8c6395-646a-47a2-b4b6-c6f6e3f28956/1/st6zdl9Tnx7D8AIT_4NAhbfIx28.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/8c6395-646a-47a2-b4b6-c6f6e3f28956/1/st6zdl9Tnx7D8AIT_4NAhbfIx28.mft
rsync://rpki.ripe.net/repository/DEFAULT/st6zdl9Tnx7D8AIT_4NAhbfIx28.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 19:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:16:1a:8c:2e:74:41:5b:4d:10:f6:1d:f3:a6:39:06:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2deb3765f539f1ec3f00213ff834085b7c8c76f
Validity
Not Before: Sep 4 19:01:02 2025 GMT
Not After : Sep 5 19:01:02 2025 GMT
Subject: CN=9bdb6cbf3c53dfa1806c6c56764823cdbafc4b36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:73:74:16:88:49:67:12:56:81:69:d1:ee:d4:
a8:48:e5:f5:61:1a:d2:d3:45:df:fd:68:60:42:3b:
c8:dd:f6:c5:ac:83:6e:cd:44:69:9f:da:d2:19:92:
e7:e5:11:25:77:fc:99:e8:e0:b7:7f:16:ef:27:a2:
e6:0a:b7:ac:75:d0:b2:fb:ab:3b:b1:d7:71:52:fa:
f8:2e:c2:f8:85:22:f4:ee:f1:f1:6f:32:cd:ac:b9:
13:93:76:f0:84:64:1c:e7:dc:3b:fd:f0:ea:e9:71:
c5:98:59:7b:79:4d:b0:c2:d5:4e:9f:ff:d7:f2:02:
a1:05:5a:c2:ed:50:15:d0:09:f8:90:74:40:a1:9f:
6b:3a:16:d0:30:94:06:e3:12:bf:23:7b:11:54:9c:
d2:84:63:ef:30:e5:0c:71:ae:89:c4:02:84:91:af:
b8:89:a2:80:2f:db:35:3f:12:88:6a:66:54:22:71:
b4:0c:93:27:00:57:83:5e:84:55:77:52:a0:69:32:
95:17:a5:d8:1a:3a:b7:2b:ef:b7:5a:f1:35:24:51:
24:bd:82:49:b5:4f:fe:c8:b5:dc:16:59:39:98:97:
ef:60:64:d4:60:c9:1a:6b:33:7e:21:e5:bf:02:08:
f7:f4:f0:f7:5d:3a:13:6f:92:2d:cc:65:1f:bb:6f:
ba:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:DB:6C:BF:3C:53:DF:A1:80:6C:6C:56:76:48:23:CD:BA:FC:4B:36
X509v3 Authority Key Identifier:
keyid:B2:DE:B3:76:5F:53:9F:1E:C3:F0:02:13:FF:83:40:85:B7:C8:C7:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/st6zdl9Tnx7D8AIT_4NAhbfIx28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/8c6395-646a-47a2-b4b6-c6f6e3f28956/1/st6zdl9Tnx7D8AIT_4NAhbfIx28.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/8c6395-646a-47a2-b4b6-c6f6e3f28956/1/st6zdl9Tnx7D8AIT_4NAhbfIx28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:19:b5:74:13:00:22:36:48:8b:3e:bf:c7:df:33:db:c9:a7:
3c:11:c0:36:ae:88:5f:c1:ae:c7:4c:41:f1:05:93:07:7e:6b:
f8:56:d1:64:80:82:75:58:09:01:38:46:a2:14:23:f3:f2:d5:
f5:03:ea:97:26:35:3a:7a:53:d7:e1:55:51:5f:aa:29:ea:88:
8f:8e:67:17:63:f6:9d:87:6f:bb:82:b2:00:17:3a:01:aa:fc:
e0:6f:80:fd:ad:a2:74:3b:fb:f7:a6:f3:4a:94:14:c8:a3:b4:
2e:93:83:9c:42:25:e6:14:dd:1a:15:ed:12:68:12:f4:ad:73:
33:db:cf:bb:7a:6c:27:d7:e1:f6:bc:4f:94:6c:d8:b1:c5:4f:
40:e1:c3:6d:68:61:c4:69:a8:f9:d1:a1:6e:c5:f4:a0:aa:90:
81:85:a3:b9:06:30:44:b7:e5:a3:74:6d:e7:e1:61:42:34:b7:
15:b1:fb:89:49:e0:ae:8d:1e:02:c7:17:c3:51:52:7b:27:eb:
1a:43:c6:3e:5f:23:a5:41:13:57:a6:01:d3:22:30:43:5f:a6:
de:27:7c:28:06:f7:57:68:01:f0:bb:a3:01:7f:38:f6:7a:b8:
59:0e:ce:a4:37:0e:73:49:07:0f:ee:53:c7:be:2e:c8:8f:23:
24:f8:03:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 04:27:20 2025 by rpki-client