Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/8c6395-646a-47a2-b4b6-c6f6e3f28956/1/st6zdl9Tnx7D8AIT_4NAhbfIx28.mft
File: st6zdl9Tnx7D8AIT_4NAhbfIx28.mft (raw, json)
Hash identifier: 8Lnf2YW35xQPUFb9GHrU6XhMKdK4A42pLXH28m+cbmc=
Subject key identifier: A6:18:A6:23:00:74:E3:AB:B5:F4:CE:39:16:63:84:F6:AB:16:74:9C
Authority key identifier: B2:DE:B3:76:5F:53:9F:1E:C3:F0:02:13:FF:83:40:85:B7:C8:C7:6F
Certificate issuer: /CN=b2deb3765f539f1ec3f00213ff834085b7c8c76f
Certificate serial: 01974A7A773B62574F363B84FF0AC8EF6394
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/st6zdl9Tnx7D8AIT_4NAhbfIx28.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/8c6395-646a-47a2-b4b6-c6f6e3f28956/1/st6zdl9Tnx7D8AIT_4NAhbfIx28.mft
Manifest number: 04E3
Signing time: Sat 07 Jun 2025 13:00:29 +0000
Manifest this update: Sat 07 Jun 2025 13:00:29 +0000
Manifest next update: Sun 08 Jun 2025 13:00:29 +0000
Files and hashes: 1: TSugCU0pqUpliat_toqMDIoNIEc.roa (hash: wndd5eFIU8yCHwaZ5EgfwtAvzQXellC4WrfhfkeDZ9U=)
2: st6zdl9Tnx7D8AIT_4NAhbfIx28.crl (hash: 1fkGC48NvnA1zxxBtGLFYWF69UM7k2AMFyuY7uPX3Xw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/8c6395-646a-47a2-b4b6-c6f6e3f28956/1/st6zdl9Tnx7D8AIT_4NAhbfIx28.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/8c6395-646a-47a2-b4b6-c6f6e3f28956/1/st6zdl9Tnx7D8AIT_4NAhbfIx28.mft
rsync://rpki.ripe.net/repository/DEFAULT/st6zdl9Tnx7D8AIT_4NAhbfIx28.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7a:77:3b:62:57:4f:36:3b:84:ff:0a:c8:ef:63:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2deb3765f539f1ec3f00213ff834085b7c8c76f
Validity
Not Before: Jun 7 13:00:29 2025 GMT
Not After : Jun 8 13:00:29 2025 GMT
Subject: CN=a618a6230074e3abb5f4ce39166384f6ab16749c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:20:c5:c4:f5:32:2d:6c:2e:1b:5f:42:4c:2c:
0d:0e:ea:be:5d:b8:01:4e:15:59:0b:03:09:4c:7a:
98:ab:af:e9:2a:3c:52:74:29:79:3e:7f:63:16:8a:
20:1c:7d:ec:fc:04:8e:fb:6a:6b:ba:d8:f9:b9:b2:
75:fd:b4:b6:18:11:ba:d1:10:0a:1b:c7:64:fe:69:
c9:bd:29:0f:ab:04:0a:63:b0:d8:8f:90:37:19:99:
ca:d4:5b:af:ef:2a:d5:53:1a:27:2c:11:73:14:cc:
26:c5:44:9e:71:1d:74:dd:be:57:d0:15:0d:26:3d:
d3:7a:7d:8e:55:5a:da:7f:e9:55:90:51:78:34:64:
ec:44:48:79:71:a5:61:7f:59:cd:9b:8e:02:4c:e0:
d2:89:a8:45:aa:f6:41:8c:f8:66:c6:1b:37:b5:54:
92:fd:92:99:2f:68:a8:0d:c6:90:14:e3:54:94:e9:
c8:f6:b2:5b:d4:df:8d:3a:01:48:f2:64:39:31:cc:
20:c8:7b:7e:33:ea:6f:74:53:04:94:0a:c3:d5:da:
4f:c7:3f:db:99:62:84:ff:b6:5a:52:99:04:14:a7:
3d:16:48:96:26:fe:27:25:de:ef:c0:64:37:7d:e8:
8e:fc:6e:c2:70:d3:09:49:7c:1b:a8:e0:23:b2:79:
e0:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:18:A6:23:00:74:E3:AB:B5:F4:CE:39:16:63:84:F6:AB:16:74:9C
X509v3 Authority Key Identifier:
keyid:B2:DE:B3:76:5F:53:9F:1E:C3:F0:02:13:FF:83:40:85:B7:C8:C7:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/st6zdl9Tnx7D8AIT_4NAhbfIx28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/8c6395-646a-47a2-b4b6-c6f6e3f28956/1/st6zdl9Tnx7D8AIT_4NAhbfIx28.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/8c6395-646a-47a2-b4b6-c6f6e3f28956/1/st6zdl9Tnx7D8AIT_4NAhbfIx28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:a1:74:ec:86:f2:12:c6:c2:d6:b6:03:00:b6:bc:f2:a8:7c:
3b:06:29:f2:03:dd:f2:b0:be:c5:ab:98:bd:d7:6c:93:cc:ae:
9c:9a:81:2b:cd:63:c3:32:85:1a:40:4a:4d:81:3b:fc:88:c9:
ca:3e:94:9d:4b:64:30:ab:99:db:9c:d4:f8:9a:85:06:f3:24:
10:23:47:1d:65:67:05:4a:c1:47:5b:f7:87:a8:43:08:62:d7:
39:d7:13:b3:fd:7e:f2:ec:db:0d:8e:45:79:59:f1:c2:ff:0e:
64:4a:50:72:fc:29:27:27:ed:2b:14:9b:1b:f5:0e:cd:c4:39:
2d:26:6e:65:02:de:83:cb:af:2c:00:2b:4e:1a:38:a8:22:5d:
06:e8:8d:d1:84:1d:03:6d:51:cc:9d:73:10:52:47:f7:d9:fe:
bb:7a:d1:f0:5c:73:82:35:52:f4:f9:7b:4e:4d:1a:f3:3f:5b:
04:12:f3:e5:f4:2c:31:62:4d:1f:f8:33:2c:de:f2:5f:27:f2:
37:63:f4:d9:41:af:1b:7b:38:0f:70:7e:41:17:10:cb:22:36:
7c:3f:67:ed:00:61:90:53:ae:f1:34:b9:39:80:8f:d7:f1:20:
d1:12:a3:27:66:2f:0e:63:05:b0:c2:4a:cb:bd:d0:3d:2e:79:
17:72:8c:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:40:54 2025 by rpki-client