Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/8273b5-279c-4323-82dc-c257607317f3/1/_stf432FEfZ6YFMW6wlTU4_P6ec.mft
File: _stf432FEfZ6YFMW6wlTU4_P6ec.mft (raw, json)
Hash identifier: OOqZrfrUX3epSux3gnBKFLF2UQfi+isf4vi8LLlmRKs=
Subject key identifier: F8:E9:82:FA:B1:BE:49:25:7A:70:1C:1D:10:61:40:20:BA:02:2E:7F
Authority key identifier: FE:CB:5F:E3:7D:85:11:F6:7A:60:53:16:EB:09:53:53:8F:CF:E9:E7
Certificate issuer: /CN=fecb5fe37d8511f67a605316eb0953538fcfe9e7
Certificate serial: 0198D5BB97C75AD23890AA339EA93E51BEB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_stf432FEfZ6YFMW6wlTU4_P6ec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/8273b5-279c-4323-82dc-c257607317f3/1/_stf432FEfZ6YFMW6wlTU4_P6ec.mft
Manifest number: 1024
Signing time: Sat 23 Aug 2025 07:01:37 +0000
Manifest this update: Sat 23 Aug 2025 07:01:37 +0000
Manifest next update: Sun 24 Aug 2025 07:01:37 +0000
Files and hashes: 1: _stf432FEfZ6YFMW6wlTU4_P6ec.crl (hash: ObUrNXaYvLd8UhIJI3LdNzNYov4TTHa3xEDGiztrPK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/8273b5-279c-4323-82dc-c257607317f3/1/_stf432FEfZ6YFMW6wlTU4_P6ec.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/8273b5-279c-4323-82dc-c257607317f3/1/_stf432FEfZ6YFMW6wlTU4_P6ec.mft
rsync://rpki.ripe.net/repository/DEFAULT/_stf432FEfZ6YFMW6wlTU4_P6ec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:97:c7:5a:d2:38:90:aa:33:9e:a9:3e:51:be:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fecb5fe37d8511f67a605316eb0953538fcfe9e7
Validity
Not Before: Aug 23 07:01:37 2025 GMT
Not After : Aug 24 07:01:37 2025 GMT
Subject: CN=f8e982fab1be49257a701c1d10614020ba022e7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:be:5d:8f:ba:f8:b5:72:a8:36:1c:f4:f1:a8:
2c:f9:48:29:33:1d:74:52:d5:f4:90:8a:16:51:02:
d3:ba:02:cb:32:d0:f4:26:44:5b:74:6d:c9:0b:33:
9f:71:03:86:9e:1b:32:7f:fc:54:5d:82:10:05:81:
95:cc:29:cc:47:40:6b:69:10:f4:70:ad:a0:55:52:
9f:b7:fb:c6:53:5f:35:ce:2b:4d:d0:06:3f:41:ff:
45:86:88:08:36:e3:c4:2a:81:89:ae:38:d0:e1:f4:
9d:a5:27:83:1a:23:63:fd:b9:cb:e5:4d:b7:f5:dc:
f8:85:5b:7a:85:0a:c9:ee:6b:2c:0b:ee:36:07:77:
1f:0d:4d:26:c2:84:2f:a4:70:d4:d4:ab:07:d1:49:
79:5a:6f:bf:cf:56:95:8a:db:e2:3a:a8:c5:55:90:
47:7a:30:62:b8:bb:06:16:d9:4e:b1:3f:85:df:04:
15:3a:25:fd:6f:28:19:9f:b8:56:05:9a:b3:d9:09:
ca:a1:f8:44:b1:6e:a3:d5:6e:3b:3c:8f:e6:b3:ad:
98:ff:dd:ee:17:de:57:2e:7e:09:5e:7e:a5:a2:01:
ba:7c:10:31:b3:c7:b8:83:ab:e5:88:a9:42:8a:32:
42:0a:ec:31:0a:d5:6e:84:b8:82:63:e1:bd:0c:49:
24:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:E9:82:FA:B1:BE:49:25:7A:70:1C:1D:10:61:40:20:BA:02:2E:7F
X509v3 Authority Key Identifier:
keyid:FE:CB:5F:E3:7D:85:11:F6:7A:60:53:16:EB:09:53:53:8F:CF:E9:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_stf432FEfZ6YFMW6wlTU4_P6ec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/8273b5-279c-4323-82dc-c257607317f3/1/_stf432FEfZ6YFMW6wlTU4_P6ec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/8273b5-279c-4323-82dc-c257607317f3/1/_stf432FEfZ6YFMW6wlTU4_P6ec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:55:db:e0:6b:f7:b0:e6:81:e4:ed:0e:5a:ce:d8:7e:56:96:
83:77:88:d9:35:79:b0:4b:82:85:4d:b2:34:87:43:25:23:ab:
ef:85:47:b6:51:ba:fd:ef:35:76:d4:be:50:b1:74:5d:9f:26:
ab:ab:0c:a1:bf:db:8b:b0:52:21:47:ee:86:b7:2c:b4:05:3f:
7e:5f:ca:50:89:da:4d:fa:a8:a4:f2:f3:c8:85:fd:ac:2e:04:
1b:22:e4:85:4a:b1:e6:93:f7:dc:80:4e:a4:f8:8e:cd:dc:6a:
69:7c:0d:61:1e:31:4b:5f:67:c4:ac:4f:ed:25:7b:13:f2:bc:
4b:f7:a5:bb:a2:a7:55:c9:79:07:41:97:b2:73:c3:79:f5:1f:
ad:13:b5:80:4d:a3:70:62:55:18:22:3b:ff:b5:07:d9:67:6c:
2a:25:af:69:63:91:b8:a2:b0:2c:7b:2b:de:71:b5:30:5f:11:
82:3e:cd:2b:3f:02:83:e5:74:38:7b:f5:78:bd:e8:66:4b:67:
3f:a8:70:18:c9:95:91:70:14:90:4a:dd:60:65:27:c9:f1:a8:
04:86:bb:a5:84:89:63:63:29:8c:3a:c4:c6:b7:57:01:3d:5d:
dd:64:47:10:35:fe:ed:6d:d6:5f:3b:a7:e0:a4:5e:be:91:91:
7d:3a:e5:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:18:33 2025 by rpki-client