Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/57542a-e1ac-4014-86fe-12e5e8173201/1/St2XYC4ZGOerwfYtz9TaynNJmz4.mft
File: St2XYC4ZGOerwfYtz9TaynNJmz4.mft (raw, json)
Hash identifier: Yp2CJSH36lwWEvK17cERo/3GWs6gKgiSfIRRXcUiXwc=
Subject key identifier: 91:BC:E0:45:63:49:7F:60:7C:02:DA:92:29:7F:51:A6:30:EE:05:A3
Authority key identifier: 4A:DD:97:60:2E:19:18:E7:AB:C1:F6:2D:CF:D4:DA:CA:73:49:9B:3E
Certificate issuer: /CN=4add97602e1918e7abc1f62dcfd4daca73499b3e
Certificate serial: 0198D6CDFBA90078B2FC4A99E1BF248565D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/St2XYC4ZGOerwfYtz9TaynNJmz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/57542a-e1ac-4014-86fe-12e5e8173201/1/St2XYC4ZGOerwfYtz9TaynNJmz4.mft
Manifest number: 01B6
Signing time: Sat 23 Aug 2025 12:01:20 +0000
Manifest this update: Sat 23 Aug 2025 12:01:20 +0000
Manifest next update: Sun 24 Aug 2025 12:01:20 +0000
Files and hashes: 1: St2XYC4ZGOerwfYtz9TaynNJmz4.crl (hash: o6wCSd+fuxawR/545O7oE2/3Ut8EO8QmUP1oX4sn5Z0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/57542a-e1ac-4014-86fe-12e5e8173201/1/St2XYC4ZGOerwfYtz9TaynNJmz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/57542a-e1ac-4014-86fe-12e5e8173201/1/St2XYC4ZGOerwfYtz9TaynNJmz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/St2XYC4ZGOerwfYtz9TaynNJmz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:fb:a9:00:78:b2:fc:4a:99:e1:bf:24:85:65:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4add97602e1918e7abc1f62dcfd4daca73499b3e
Validity
Not Before: Aug 23 12:01:20 2025 GMT
Not After : Aug 24 12:01:20 2025 GMT
Subject: CN=91bce04563497f607c02da92297f51a630ee05a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:e5:b6:65:6a:8e:34:8a:35:87:6e:ab:7f:5b:
86:a1:e7:4d:0c:10:a0:59:1d:c0:c0:26:f2:9c:47:
37:a3:08:b3:fa:af:6c:99:a4:a1:d4:ab:4c:76:ef:
0a:f5:3a:c6:64:8d:39:49:7e:ac:e7:a9:ac:b5:5d:
24:15:18:ac:de:ef:12:66:c5:9c:b7:f1:03:94:92:
7a:a0:a6:b2:ae:49:c8:0d:f9:0a:f9:0b:da:c1:80:
6c:a9:6b:a3:c3:34:8a:e8:50:bf:82:8a:bc:e7:2e:
34:44:d3:4f:57:95:7e:2f:3a:ec:52:b9:ac:59:d2:
5d:5f:08:17:4a:a1:84:1b:47:a0:df:e4:5b:f0:0d:
6d:15:d4:79:e9:c8:c3:fc:7b:1c:10:12:fc:9f:1a:
6c:d0:03:b4:22:09:07:c3:52:4a:4d:79:bb:f4:17:
3b:cc:2e:ba:a8:ba:3d:da:d3:2e:16:ad:87:bf:79:
2f:da:92:38:e8:d4:9b:b8:a2:78:df:b4:e7:e8:93:
d4:d2:0c:ad:e9:ae:f7:0a:c4:8b:86:38:55:7d:42:
c0:75:24:a1:df:d2:3d:6e:9b:a5:2f:72:0e:c2:22:
15:80:d6:28:f5:1c:40:a0:d4:c3:41:e2:23:70:37:
56:11:ff:09:9a:15:c5:07:3a:7d:95:d2:81:d6:bc:
c7:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:BC:E0:45:63:49:7F:60:7C:02:DA:92:29:7F:51:A6:30:EE:05:A3
X509v3 Authority Key Identifier:
keyid:4A:DD:97:60:2E:19:18:E7:AB:C1:F6:2D:CF:D4:DA:CA:73:49:9B:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/St2XYC4ZGOerwfYtz9TaynNJmz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/57542a-e1ac-4014-86fe-12e5e8173201/1/St2XYC4ZGOerwfYtz9TaynNJmz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/57542a-e1ac-4014-86fe-12e5e8173201/1/St2XYC4ZGOerwfYtz9TaynNJmz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:7b:65:6b:a8:1b:d1:5e:7e:38:e5:9b:49:c4:b0:0e:77:94:
9b:39:46:de:a5:37:1b:2f:37:d9:ec:ab:fb:39:dc:04:62:b5:
c6:ac:84:49:b1:5d:59:3f:6e:e1:f2:c3:6d:67:a3:70:ec:d4:
51:47:8b:a2:0e:0f:40:b5:c9:02:0b:98:34:b1:84:73:1a:05:
4f:09:d7:5c:9d:b9:c2:49:37:99:1c:7f:21:0a:c9:83:41:12:
e8:2c:91:7c:6d:ae:1c:75:12:56:48:4f:6c:5c:18:37:00:03:
5d:82:98:78:48:66:1d:54:f1:3a:91:18:7e:4a:1a:8b:a3:35:
79:37:ef:ad:df:fb:97:79:5d:2e:41:3f:37:fb:90:ef:29:14:
4d:9c:9c:1f:9d:3e:75:a1:70:d8:ad:76:f6:27:9d:d0:2d:dd:
17:96:21:0a:48:d5:8b:90:93:eb:97:13:27:9a:93:6e:8f:5f:
84:3e:c5:ce:65:70:66:e9:a8:0b:1b:d4:60:80:b3:05:38:d3:
df:3f:61:cc:7e:7a:a8:20:e0:6c:ac:82:97:12:a5:35:27:11:
19:40:cf:e9:72:3c:32:d3:32:45:62:9e:1b:88:ab:9a:52:25:
5c:a6:40:41:79:06:3c:ea:0c:ba:35:29:69:c4:92:de:fb:19:
70:fc:fe:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:54:25 2025 by rpki-client