Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/8c6395-646a-47a2-b4b6-c6f6e3f28956/1/st6zdl9Tnx7D8AIT_4NAhbfIx28.mft
File: st6zdl9Tnx7D8AIT_4NAhbfIx28.mft (raw, json)
Hash identifier: bDZHac+S9yF8leyH6tl25VzTC4HkxFPCCttgTJjJydI=
Subject key identifier: 9D:7A:F7:82:EF:3E:12:C0:70:07:76:92:76:58:DF:7A:0A:C6:AD:DE
Authority key identifier: B2:DE:B3:76:5F:53:9F:1E:C3:F0:02:13:FF:83:40:85:B7:C8:C7:6F
Certificate issuer: /CN=b2deb3765f539f1ec3f00213ff834085b7c8c76f
Certificate serial: 019A71B7C611B1E0DD9FAEE03D269C6FC3E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/st6zdl9Tnx7D8AIT_4NAhbfIx28.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/8c6395-646a-47a2-b4b6-c6f6e3f28956/1/st6zdl9Tnx7D8AIT_4NAhbfIx28.mft
Manifest number: 0685
Signing time: Tue 11 Nov 2025 07:01:00 +0000
Manifest this update: Tue 11 Nov 2025 07:01:00 +0000
Manifest next update: Wed 12 Nov 2025 07:01:00 +0000
Files and hashes: 1: TSugCU0pqUpliat_toqMDIoNIEc.roa (hash: wndd5eFIU8yCHwaZ5EgfwtAvzQXellC4WrfhfkeDZ9U=)
2: st6zdl9Tnx7D8AIT_4NAhbfIx28.crl (hash: iYv/uxW4qWP3m2Kpep2dWolLZ+CtNOLKLSHGMMoXt2w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/8c6395-646a-47a2-b4b6-c6f6e3f28956/1/st6zdl9Tnx7D8AIT_4NAhbfIx28.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/8c6395-646a-47a2-b4b6-c6f6e3f28956/1/st6zdl9Tnx7D8AIT_4NAhbfIx28.mft
rsync://rpki.ripe.net/repository/DEFAULT/st6zdl9Tnx7D8AIT_4NAhbfIx28.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:c6:11:b1:e0:dd:9f:ae:e0:3d:26:9c:6f:c3:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2deb3765f539f1ec3f00213ff834085b7c8c76f
Validity
Not Before: Nov 11 07:01:00 2025 GMT
Not After : Nov 12 07:01:00 2025 GMT
Subject: CN=9d7af782ef3e12c0700776927658df7a0ac6adde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:be:4a:c5:b6:95:6b:f2:74:9e:ef:90:e0:63:
36:6d:e1:47:2f:b5:78:5f:3b:dc:e0:ae:b1:70:45:
4c:8b:33:5a:61:17:94:50:13:8a:51:c3:48:89:8d:
f6:da:fb:8a:43:72:38:5f:fd:9e:10:53:d4:02:0c:
35:56:27:fd:1a:f2:1f:9d:44:0c:21:0d:54:85:c2:
f7:a4:d2:21:74:ff:c1:52:79:7d:a4:12:58:83:aa:
cd:9b:1f:c2:b3:3e:85:04:99:35:06:95:07:1f:24:
17:89:8d:dc:b2:63:23:31:f6:7b:6d:e0:53:81:a2:
e8:0e:40:7d:74:bf:3b:69:35:d1:50:c1:b6:48:f9:
11:23:97:1a:da:96:6c:7b:d5:bd:f7:08:39:71:f7:
ed:8f:0a:0d:fc:ac:58:70:bd:34:ce:18:e8:23:30:
53:4f:df:c1:12:fe:9a:05:d0:30:5a:c1:7e:d9:16:
67:0b:23:ad:f1:27:0d:2a:24:07:df:45:af:7a:40:
ad:46:5b:16:e2:27:6b:8c:dc:f6:19:dc:70:0c:e3:
5a:30:12:53:ee:d7:24:1b:2c:3d:3f:62:f1:59:4b:
2f:70:0f:b5:d6:00:13:39:19:de:28:13:36:a5:70:
9c:9e:9a:39:9d:4d:ce:03:2f:a8:54:2d:bd:3e:bc:
58:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:7A:F7:82:EF:3E:12:C0:70:07:76:92:76:58:DF:7A:0A:C6:AD:DE
X509v3 Authority Key Identifier:
keyid:B2:DE:B3:76:5F:53:9F:1E:C3:F0:02:13:FF:83:40:85:B7:C8:C7:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/st6zdl9Tnx7D8AIT_4NAhbfIx28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/8c6395-646a-47a2-b4b6-c6f6e3f28956/1/st6zdl9Tnx7D8AIT_4NAhbfIx28.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/8c6395-646a-47a2-b4b6-c6f6e3f28956/1/st6zdl9Tnx7D8AIT_4NAhbfIx28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:c4:c3:9e:28:fb:f1:37:08:8e:d9:55:ad:d2:81:4c:e0:b4:
2a:e8:00:b0:52:f3:49:b6:b7:89:28:42:40:b5:5d:4c:18:68:
07:24:b4:dc:a8:ce:65:92:bc:a2:8c:b0:61:32:5b:14:ba:b5:
d4:0d:10:b6:72:3e:0e:b1:4b:2c:2d:73:f2:f8:7d:93:e3:e0:
2a:10:c9:f7:d0:53:54:bb:f0:77:30:27:94:e6:f7:a0:52:9d:
f2:f9:8e:24:e8:f0:fa:3b:78:89:72:03:99:22:b6:f3:7f:78:
be:3c:37:c8:e0:7d:7e:fb:10:ab:24:cb:7a:a8:d3:01:a3:86:
78:dd:0a:b8:d2:ec:f8:07:d9:69:5b:62:75:1d:03:0f:4b:03:
13:a7:4d:1a:90:65:89:d2:33:45:87:bd:4f:1d:a5:d8:1e:9b:
20:1e:ae:f5:cc:22:58:f5:dd:e2:bc:27:c7:da:b2:04:51:c3:
95:11:88:df:a0:d2:72:50:c3:5e:20:fd:70:8e:d5:3d:5f:23:
55:08:55:a9:e3:a7:29:f9:a9:68:ec:a2:21:18:1b:3c:65:55:
39:a4:f9:12:f1:22:6b:ab:e4:2e:fc:03:92:c9:8a:42:39:e8:
5a:8d:1c:8b:91:74:14:5d:a8:e9:46:48:85:95:3d:6e:8c:8f:
60:cb:e0:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:53:06 2025 by rpki-client