Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/bbf773-67f9-4be5-95cb-70d7f8f4925a/1/stNBgAdlZtcr7mHzoybFbgq7gEo.mft
File: stNBgAdlZtcr7mHzoybFbgq7gEo.mft (raw, json)
Hash identifier: nOe4gRMUJKQ1n7VF9uqf0bI7TRAncrGoiQPlB65ANIM=
Subject key identifier: F4:18:A5:D9:66:D7:3E:71:1E:34:8D:70:CA:E9:0F:3E:C1:2A:24:73
Authority key identifier: B2:D3:41:80:07:65:66:D7:2B:EE:61:F3:A3:26:C5:6E:0A:BB:80:4A
Certificate issuer: /CN=b2d34180076566d72bee61f3a326c56e0abb804a
Certificate serial: 0199FBEC4DDC4EDD06179878F77E8E312DF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/stNBgAdlZtcr7mHzoybFbgq7gEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/bbf773-67f9-4be5-95cb-70d7f8f4925a/1/stNBgAdlZtcr7mHzoybFbgq7gEo.mft
Manifest number: 0FBB
Signing time: Sun 19 Oct 2025 10:03:11 +0000
Manifest this update: Sun 19 Oct 2025 10:03:11 +0000
Manifest next update: Mon 20 Oct 2025 10:03:11 +0000
Files and hashes: 1: stNBgAdlZtcr7mHzoybFbgq7gEo.crl (hash: aNtl5RKTR6MiYLEbgXIobfnNepSk3oLgXwl9H4yXt6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/bbf773-67f9-4be5-95cb-70d7f8f4925a/1/stNBgAdlZtcr7mHzoybFbgq7gEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/bbf773-67f9-4be5-95cb-70d7f8f4925a/1/stNBgAdlZtcr7mHzoybFbgq7gEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/stNBgAdlZtcr7mHzoybFbgq7gEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:4d:dc:4e:dd:06:17:98:78:f7:7e:8e:31:2d:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2d34180076566d72bee61f3a326c56e0abb804a
Validity
Not Before: Oct 19 10:03:11 2025 GMT
Not After : Oct 20 10:03:11 2025 GMT
Subject: CN=f418a5d966d73e711e348d70cae90f3ec12a2473
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:38:a0:24:14:eb:ae:91:75:12:1e:58:44:bf:
59:bb:6f:40:5f:a4:0c:de:9c:ce:38:df:ce:7d:a8:
c4:af:75:92:16:6d:dc:12:e5:ac:9b:07:2f:7b:ef:
b1:02:09:c9:59:11:a0:45:f8:e8:a6:df:2a:c6:86:
43:c5:df:86:75:13:72:00:39:55:2c:92:ba:f7:79:
a0:05:9a:66:90:03:33:df:c9:45:96:5c:e2:ed:0f:
18:a6:27:6d:98:0b:36:43:97:27:10:69:bd:35:fa:
d4:25:64:0e:92:e5:97:82:a2:dd:cb:a3:40:f8:35:
67:0b:71:78:21:ae:57:68:5b:a5:82:f0:64:70:01:
8d:77:5b:cb:a0:ce:22:9b:40:b1:db:dd:22:23:87:
09:d4:e0:77:9c:1b:19:1b:1a:25:3b:94:a5:81:12:
a7:fa:9d:f2:5a:aa:c0:73:84:23:77:24:3e:63:ab:
ad:17:a1:ea:9f:5c:1e:91:a8:2c:51:ef:1d:6c:bf:
b8:5e:5e:c5:35:d2:b3:3c:ab:c5:ca:d7:18:29:8a:
3e:6c:89:13:8b:20:57:b8:32:20:8a:7a:96:89:4d:
c5:16:e9:74:3f:01:89:09:a9:0d:54:8f:c6:fd:6b:
80:9f:6c:f7:e2:18:88:e8:ed:44:7c:90:54:0b:f7:
33:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:18:A5:D9:66:D7:3E:71:1E:34:8D:70:CA:E9:0F:3E:C1:2A:24:73
X509v3 Authority Key Identifier:
keyid:B2:D3:41:80:07:65:66:D7:2B:EE:61:F3:A3:26:C5:6E:0A:BB:80:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/stNBgAdlZtcr7mHzoybFbgq7gEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bbf773-67f9-4be5-95cb-70d7f8f4925a/1/stNBgAdlZtcr7mHzoybFbgq7gEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bbf773-67f9-4be5-95cb-70d7f8f4925a/1/stNBgAdlZtcr7mHzoybFbgq7gEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:6d:29:31:e1:56:da:6a:7e:a9:44:66:8a:c6:a7:26:de:e6:
4b:dd:6f:0d:8a:00:7b:43:e0:e5:25:aa:4b:2d:21:95:90:11:
6f:8a:82:4c:af:7c:9e:a6:37:7f:57:0b:81:5c:e2:16:80:31:
02:44:6f:ce:f5:57:98:87:e9:cc:ac:1f:1c:76:91:54:5e:45:
b1:30:51:f2:71:60:1c:60:74:17:62:1c:ba:e1:ff:ab:12:7c:
fd:fe:e8:cb:f2:1b:ce:98:fc:bf:5f:95:0b:d2:b8:a3:0b:53:
d8:9f:b5:9d:67:15:f5:81:0c:eb:d5:cc:5d:14:f6:4a:b7:19:
77:0b:3e:ce:f0:ad:4f:cf:27:2c:ef:21:40:d5:72:0d:13:91:
cf:4d:60:37:e2:02:29:ca:7f:fa:dd:48:72:4f:ab:fe:a5:5e:
3b:82:e2:c2:bb:37:9f:08:48:0d:39:4f:60:ed:34:3a:d1:b2:
0b:f3:d4:a4:8c:6f:6b:03:0d:e6:05:db:88:fe:24:f0:f7:43:
35:52:65:c0:d4:ef:0b:7c:21:03:67:6e:bf:86:d9:ad:b0:41:
8e:2f:f8:53:44:69:2a:90:fd:1b:9f:a0:55:0e:7e:82:fe:88:
17:52:4d:d3:3e:8b:4a:5a:b9:f5:fe:66:7e:1f:f3:7a:cd:4f:
bd:10:7e:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:22 2025 by rpki-client