
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/8273b5-279c-4323-82dc-c257607317f3/1/_stf432FEfZ6YFMW6wlTU4_P6ec.mft
File: _stf432FEfZ6YFMW6wlTU4_P6ec.mft (raw, json)
Hash identifier: DmMuDIW+bo1dU6wEgG91vwm0Ha8AYnNAPIe6dUipTPI=
Subject key identifier: 62:68:5C:B1:3D:2B:4B:35:CE:5A:D3:CD:F4:2E:A9:C2:2E:2B:72:95
Authority key identifier: FE:CB:5F:E3:7D:85:11:F6:7A:60:53:16:EB:09:53:53:8F:CF:E9:E7
Certificate issuer: /CN=fecb5fe37d8511f67a605316eb0953538fcfe9e7
Certificate serial: 0199FB462FB7EBDFFCD6388BF7E0D8F8A68A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_stf432FEfZ6YFMW6wlTU4_P6ec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/8273b5-279c-4323-82dc-c257607317f3/1/_stf432FEfZ6YFMW6wlTU4_P6ec.mft
Manifest number: 10BC
Signing time: Sun 19 Oct 2025 07:01:44 +0000
Manifest this update: Sun 19 Oct 2025 07:01:44 +0000
Manifest next update: Mon 20 Oct 2025 07:01:44 +0000
Files and hashes: 1: _stf432FEfZ6YFMW6wlTU4_P6ec.crl (hash: A3q4tssr09wNrP8U73InXlrMyDpg0aDGYQfmwU4MSLM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/8273b5-279c-4323-82dc-c257607317f3/1/_stf432FEfZ6YFMW6wlTU4_P6ec.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/8273b5-279c-4323-82dc-c257607317f3/1/_stf432FEfZ6YFMW6wlTU4_P6ec.mft
rsync://rpki.ripe.net/repository/DEFAULT/_stf432FEfZ6YFMW6wlTU4_P6ec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:46:2f:b7:eb:df:fc:d6:38:8b:f7:e0:d8:f8:a6:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fecb5fe37d8511f67a605316eb0953538fcfe9e7
Validity
Not Before: Oct 19 07:01:44 2025 GMT
Not After : Oct 20 07:01:44 2025 GMT
Subject: CN=62685cb13d2b4b35ce5ad3cdf42ea9c22e2b7295
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:6a:e5:49:89:1e:f1:32:58:89:a8:4f:f5:49:
75:9a:52:3e:b2:94:0f:f7:9c:28:7d:15:e3:cb:21:
1d:2f:e7:52:64:03:86:26:a9:57:79:84:a8:58:ca:
8c:c3:2b:46:e6:83:55:28:8d:cf:c5:15:5b:f6:d1:
f7:88:2a:c9:c4:2d:63:e4:92:92:10:17:5e:e8:72:
48:1e:ca:8e:7d:65:51:eb:cb:5d:85:61:d3:81:66:
ce:a6:d7:ec:af:54:8d:16:11:a2:8a:9b:89:75:ca:
bc:31:28:9d:80:aa:5c:0f:0a:01:27:6c:76:b5:fa:
0c:ee:8d:5d:52:fa:37:04:0d:e5:b1:fd:ba:06:1d:
c6:fe:39:9d:d8:da:4b:7d:83:02:9b:e0:ac:87:46:
6e:27:51:92:aa:7b:7b:4d:b9:34:60:82:ca:fd:c9:
16:4f:49:00:c1:33:f3:12:88:39:34:ea:c4:7e:a4:
87:af:98:cf:e8:75:41:27:15:74:2a:f1:fe:f5:75:
55:18:c3:0a:cd:18:4b:72:a1:7e:83:3d:86:c2:3b:
09:66:33:36:5d:fe:02:c7:10:bf:f1:a7:e3:e7:c2:
b2:e5:d0:b6:3f:e1:c8:f9:35:77:24:7e:71:9f:28:
35:d8:d5:ef:41:48:b5:19:b7:a9:e5:03:f5:40:cd:
59:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:68:5C:B1:3D:2B:4B:35:CE:5A:D3:CD:F4:2E:A9:C2:2E:2B:72:95
X509v3 Authority Key Identifier:
keyid:FE:CB:5F:E3:7D:85:11:F6:7A:60:53:16:EB:09:53:53:8F:CF:E9:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_stf432FEfZ6YFMW6wlTU4_P6ec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/8273b5-279c-4323-82dc-c257607317f3/1/_stf432FEfZ6YFMW6wlTU4_P6ec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/8273b5-279c-4323-82dc-c257607317f3/1/_stf432FEfZ6YFMW6wlTU4_P6ec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:2d:6b:8a:9b:88:4d:2c:e4:96:54:04:42:ea:ef:13:42:d0:
5c:0c:e1:09:88:50:72:2f:a8:04:bc:ad:78:6e:00:3f:97:d5:
a7:35:9d:6f:db:0d:d0:3e:0f:ef:96:5a:a9:68:6a:4d:6f:01:
b2:65:3b:37:5a:59:38:43:fc:de:1d:ad:03:50:b3:21:d7:c8:
b3:b0:da:16:69:05:52:fa:7e:4c:dc:3c:d6:da:29:0e:fc:0e:
b3:65:11:72:44:8f:93:1d:3e:d1:93:4e:a3:dc:ef:af:4d:9f:
8e:5c:03:f5:0b:97:58:1b:9d:68:97:5a:36:28:47:45:a9:63:
af:62:b9:d4:0d:41:1f:6a:82:d8:91:2d:c2:72:cc:ef:a1:ce:
da:8d:25:2c:72:8a:05:4c:69:6d:79:f7:47:cf:c9:00:ec:f7:
fc:10:1c:68:28:dc:78:bb:ea:3c:09:85:11:63:7f:43:d1:1e:
8d:a6:02:3e:7a:4f:f6:05:52:a0:85:09:8c:09:e0:4c:0f:c7:
9d:25:71:86:2f:ed:1a:a7:df:a3:fb:26:c6:b7:af:8e:bf:a4:
60:44:67:1f:c9:43:a6:f1:1b:10:6e:c8:cd:0b:6d:e4:8e:bd:
17:54:c1:aa:b9:1e:db:02:f8:8e:ad:2b:7d:14:b5:41:dd:81:
09:3e:ff:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:22:00 2025 by rpki-client