Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/bbf773-67f9-4be5-95cb-70d7f8f4925a/1/stNBgAdlZtcr7mHzoybFbgq7gEo.mft
File: stNBgAdlZtcr7mHzoybFbgq7gEo.mft (raw, json)
Hash identifier: QnmRBkb9SGhlONndDpAQ4VP7bYZwU1DVQzShsTDneAg=
Subject key identifier: 8C:30:B7:B4:75:C9:68:65:2B:BF:CE:59:92:73:5A:FF:F6:0B:49:87
Authority key identifier: B2:D3:41:80:07:65:66:D7:2B:EE:61:F3:A3:26:C5:6E:0A:BB:80:4A
Certificate issuer: /CN=b2d34180076566d72bee61f3a326c56e0abb804a
Certificate serial: 0197BC6C17615A84AD9D21A5604F6FE7583C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/stNBgAdlZtcr7mHzoybFbgq7gEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/bbf773-67f9-4be5-95cb-70d7f8f4925a/1/stNBgAdlZtcr7mHzoybFbgq7gEo.mft
Manifest number: 0E91
Signing time: Sun 29 Jun 2025 16:01:29 +0000
Manifest this update: Sun 29 Jun 2025 16:01:29 +0000
Manifest next update: Mon 30 Jun 2025 16:01:29 +0000
Files and hashes: 1: stNBgAdlZtcr7mHzoybFbgq7gEo.crl (hash: d3tUKHnwDsshWGQrz9xAdXTdfpvCiLzUnOmeiPbRFRk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/bbf773-67f9-4be5-95cb-70d7f8f4925a/1/stNBgAdlZtcr7mHzoybFbgq7gEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/bbf773-67f9-4be5-95cb-70d7f8f4925a/1/stNBgAdlZtcr7mHzoybFbgq7gEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/stNBgAdlZtcr7mHzoybFbgq7gEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 13:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bc:6c:17:61:5a:84:ad:9d:21:a5:60:4f:6f:e7:58:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2d34180076566d72bee61f3a326c56e0abb804a
Validity
Not Before: Jun 29 16:01:29 2025 GMT
Not After : Jun 30 16:01:29 2025 GMT
Subject: CN=8c30b7b475c968652bbfce5992735afff60b4987
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:60:5b:2b:09:b4:b0:88:7a:56:90:1d:09:77:
0f:11:c1:2f:16:a9:81:d7:4a:1b:5e:76:eb:f2:b3:
d0:64:70:41:95:5b:07:73:5f:bd:32:89:53:50:11:
04:b4:db:88:a9:34:99:59:79:4c:4d:49:47:a3:cc:
aa:46:aa:3d:4c:c4:5c:58:25:96:59:c2:ec:82:88:
ef:e5:03:1a:98:e1:ca:e2:c6:c9:d7:e5:86:33:55:
ab:37:fa:4c:4a:18:8c:2c:f7:68:77:e7:1a:72:f9:
ed:01:86:ce:c7:89:51:ca:98:6d:3d:59:1c:4e:bb:
19:64:fe:ea:33:c9:19:1d:01:ae:89:81:27:6d:94:
e6:81:98:0c:91:74:6a:61:98:bd:b9:81:32:58:62:
1b:5d:78:7e:40:0e:89:7e:37:8d:eb:5c:36:93:55:
2b:d1:39:f7:3f:c0:eb:28:0c:dc:69:56:24:bc:63:
38:6a:b6:af:67:ce:ae:b5:f9:bc:0b:16:e3:e4:df:
8f:25:a4:09:65:41:2a:a7:e2:4d:a8:37:2c:1a:f8:
da:5e:67:b8:c7:49:77:88:71:60:28:68:fc:a8:a7:
ed:22:75:48:30:6b:c7:a4:b5:95:e7:fb:48:b8:87:
a8:c6:b6:58:5d:c0:59:77:a8:44:b3:ee:f9:14:ef:
5f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:30:B7:B4:75:C9:68:65:2B:BF:CE:59:92:73:5A:FF:F6:0B:49:87
X509v3 Authority Key Identifier:
keyid:B2:D3:41:80:07:65:66:D7:2B:EE:61:F3:A3:26:C5:6E:0A:BB:80:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/stNBgAdlZtcr7mHzoybFbgq7gEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bbf773-67f9-4be5-95cb-70d7f8f4925a/1/stNBgAdlZtcr7mHzoybFbgq7gEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bbf773-67f9-4be5-95cb-70d7f8f4925a/1/stNBgAdlZtcr7mHzoybFbgq7gEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:d7:4f:25:91:e6:be:c3:1f:28:f7:1b:96:38:62:f0:0d:f1:
ec:32:79:fc:8e:ed:f2:84:f4:40:24:87:aa:9d:25:eb:ae:b2:
81:4d:25:d8:9c:ce:2f:46:25:67:3b:f4:cc:5f:44:de:7e:c9:
7d:82:6a:1d:b8:77:4f:05:9d:95:e2:be:33:a3:42:81:a9:51:
94:8f:1d:e5:32:ac:96:ef:0b:82:dc:73:b7:b3:d1:5d:fe:c9:
85:a8:d4:90:7e:e4:11:35:c9:82:13:7a:bd:70:07:f1:53:ce:
a9:f7:ed:00:fa:68:49:ce:02:97:f3:cd:18:11:9c:86:eb:b5:
48:a4:15:c2:c7:d6:45:70:aa:05:fa:90:1f:36:38:18:60:93:
98:1b:af:f5:e0:3a:e9:cf:4c:5f:61:7a:3a:27:ad:b0:1c:92:
30:b6:0f:c4:69:9f:d4:b5:0b:f3:b2:4f:b8:9c:4a:f9:46:27:
75:55:97:c1:6a:c0:f6:43:4f:3c:c9:be:3b:a4:0c:3c:b3:6c:
e1:24:da:b8:b0:95:de:3e:b1:1e:c1:9c:3f:4f:b9:7d:c1:fb:
c1:3d:00:cd:98:f1:ed:57:d4:98:0e:d5:f5:54:53:9d:d9:47:
12:c0:a1:45:53:87:17:8c:40:1b:a8:97:d6:5a:56:0f:81:50:
56:0f:4d:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 20:55:33 2025 by rpki-client