Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/b06956-e733-4564-9781-d0c4c86bb5fe/1/st8cE314lMzbp2jOuXHE099Z_pY.mft
File: st8cE314lMzbp2jOuXHE099Z_pY.mft (raw, json)
Hash identifier: 5nqZLf53IDNdb6QTy2TTp05wsjI4RgpnbFWWo9vvtC8=
Subject key identifier: 8C:7B:C6:AB:9A:37:3D:22:87:9B:61:49:BC:92:A0:B5:F6:1F:9D:9C
Authority key identifier: B2:DF:1C:13:7D:78:94:CC:DB:A7:68:CE:B9:71:C4:D3:DF:59:FE:96
Certificate issuer: /CN=b2df1c137d7894ccdba768ceb971c4d3df59fe96
Certificate serial: 019A70DC04F482DAE663D08BFCB866B1CAEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/st8cE314lMzbp2jOuXHE099Z_pY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/b06956-e733-4564-9781-d0c4c86bb5fe/1/st8cE314lMzbp2jOuXHE099Z_pY.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 03:00:58 +0000
Manifest this update: Tue 11 Nov 2025 03:00:58 +0000
Manifest next update: Wed 12 Nov 2025 03:00:58 +0000
Files and hashes: 1: st8cE314lMzbp2jOuXHE099Z_pY.crl (hash: 7As/ADdFGUKpdxxboIR6Ny1AMFHazjwXJ0dlk3AXmGk=)
2: utentqqy5GUX6xjOO70Zx55fsK0.roa (hash: Z4JeWyzB0L9+u00qmx46AQ9h8ajUGAFCIAhK67ja97c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/b06956-e733-4564-9781-d0c4c86bb5fe/1/st8cE314lMzbp2jOuXHE099Z_pY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/b06956-e733-4564-9781-d0c4c86bb5fe/1/st8cE314lMzbp2jOuXHE099Z_pY.mft
rsync://rpki.ripe.net/repository/DEFAULT/st8cE314lMzbp2jOuXHE099Z_pY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:04:f4:82:da:e6:63:d0:8b:fc:b8:66:b1:ca:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2df1c137d7894ccdba768ceb971c4d3df59fe96
Validity
Not Before: Nov 11 03:00:58 2025 GMT
Not After : Nov 12 03:00:58 2025 GMT
Subject: CN=8c7bc6ab9a373d22879b6149bc92a0b5f61f9d9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:38:93:3e:cd:98:ea:7b:a6:ec:36:66:04:cb:
9b:e0:af:2d:1e:73:d5:d1:d5:3f:5b:45:ce:5c:f0:
00:bc:11:43:4e:88:da:2b:f7:49:c7:df:05:5b:57:
fb:c5:b3:39:f6:c5:96:45:e9:e0:8f:11:aa:5a:22:
b9:04:fe:c5:37:16:eb:06:ba:a5:eb:07:70:cd:fb:
af:6e:7a:b2:79:11:9c:6d:bf:35:92:89:7b:1d:68:
50:ff:01:9b:29:e0:1c:9d:84:60:c9:cd:11:57:b6:
94:37:02:cc:42:d2:b6:58:d0:ab:e9:dd:c9:0b:3c:
5d:8b:66:dc:56:31:1e:f5:87:d2:68:df:74:f8:98:
66:39:65:63:06:14:de:f2:a6:fd:c5:18:fa:9e:fb:
c5:11:a2:ef:0f:c5:c7:7c:6a:b4:1d:1f:fc:9d:0b:
b1:fe:b7:6c:5b:2e:ab:f5:e8:f6:33:f1:ae:ea:17:
21:dd:d3:38:2f:eb:fa:d2:9c:18:53:87:ea:8a:30:
c5:d1:25:de:57:7b:4e:a4:95:14:18:60:3e:e6:c5:
95:f5:fa:d6:8d:ae:f8:be:61:af:56:de:78:cc:50:
db:52:2b:f6:90:5b:05:99:42:4d:6f:6c:07:d0:56:
f2:e7:69:69:3a:37:66:b5:b0:74:bb:80:1a:6d:49:
5a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:7B:C6:AB:9A:37:3D:22:87:9B:61:49:BC:92:A0:B5:F6:1F:9D:9C
X509v3 Authority Key Identifier:
keyid:B2:DF:1C:13:7D:78:94:CC:DB:A7:68:CE:B9:71:C4:D3:DF:59:FE:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/st8cE314lMzbp2jOuXHE099Z_pY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b06956-e733-4564-9781-d0c4c86bb5fe/1/st8cE314lMzbp2jOuXHE099Z_pY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b06956-e733-4564-9781-d0c4c86bb5fe/1/st8cE314lMzbp2jOuXHE099Z_pY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:16:8b:bd:17:40:1e:e1:9f:f2:bb:5d:ed:8d:ee:24:9a:a4:
95:a9:ef:86:22:45:04:26:48:7a:b6:38:10:c0:93:8b:ef:98:
13:99:e7:01:13:0d:f1:25:39:3b:29:a5:3a:8c:d7:0a:fd:64:
f4:6d:88:98:d1:61:1f:bb:d5:17:77:6d:84:14:71:8e:b5:6f:
fd:08:58:7f:e0:4c:df:01:64:3b:46:6a:0b:02:fe:19:a3:af:
4e:10:d3:dd:79:6d:a3:57:5c:2b:cb:e4:65:d2:a5:ed:b5:4d:
58:22:55:a3:b9:c2:db:a5:a4:08:b0:d0:15:0d:af:76:15:4e:
fb:6e:7d:00:44:d8:ff:d7:5a:a8:32:27:4d:9d:7e:b3:15:77:
ce:4a:42:e2:07:30:fc:49:ac:f6:fb:ad:f7:db:47:67:f1:a3:
cd:e6:e1:f0:fe:b4:2a:a3:af:c6:a9:93:4a:dd:b2:90:bb:7f:
b4:a1:2b:f2:e9:96:0c:8e:24:17:68:a2:b6:45:35:31:8c:c8:
14:a5:c5:d8:2a:ec:68:77:2a:10:e1:96:f2:f6:2c:07:99:4f:
95:58:81:1a:27:b2:de:57:c0:68:3e:3f:a5:22:51:fa:f8:21:
ac:eb:d8:a8:ac:b4:fa:74:59:e7:37:a3:65:6d:35:26:89:9f:
7e:42:88:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:08 2025 by rpki-client