Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/88c9d7-e377-4874-9868-715247c3dcdc/1/stitAnqWdO3JNueMXU0bZJZNhEA.mft
File: stitAnqWdO3JNueMXU0bZJZNhEA.mft (raw, json)
Hash identifier: yI/MoYQoK2zBj1NiT11vFFMqDhaVHb1na+f5n8KYdn0=
Subject key identifier: 79:5C:EC:D7:4D:12:B0:7E:EE:35:88:58:8A:D0:97:43:8B:DF:44:21
Authority key identifier: B2:D8:AD:02:7A:96:74:ED:C9:36:E7:8C:5D:4D:1B:64:96:4D:84:40
Certificate issuer: /CN=b2d8ad027a9674edc936e78c5d4d1b64964d8440
Certificate serial: 0198D54DD5AF846E1CB2B660B11E26719491
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/stitAnqWdO3JNueMXU0bZJZNhEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/88c9d7-e377-4874-9868-715247c3dcdc/1/stitAnqWdO3JNueMXU0bZJZNhEA.mft
Manifest number: 0B72
Signing time: Sat 23 Aug 2025 05:01:44 +0000
Manifest this update: Sat 23 Aug 2025 05:01:44 +0000
Manifest next update: Sun 24 Aug 2025 05:01:44 +0000
Files and hashes: 1: j7tAtkU7X16dxo0q2axkpmgR2Jg.roa (hash: ee9X5e2Gsq7S7vtFMXjQ62kSEkjJdHkxbRMmxnYqFY4=)
2: stitAnqWdO3JNueMXU0bZJZNhEA.crl (hash: ucJ8uWljHalbD0TPGEeHZyxNng8hAlqRli7zFF6BMjk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/88c9d7-e377-4874-9868-715247c3dcdc/1/stitAnqWdO3JNueMXU0bZJZNhEA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/88c9d7-e377-4874-9868-715247c3dcdc/1/stitAnqWdO3JNueMXU0bZJZNhEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/stitAnqWdO3JNueMXU0bZJZNhEA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:d5:af:84:6e:1c:b2:b6:60:b1:1e:26:71:94:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2d8ad027a9674edc936e78c5d4d1b64964d8440
Validity
Not Before: Aug 23 05:01:44 2025 GMT
Not After : Aug 24 05:01:44 2025 GMT
Subject: CN=795cecd74d12b07eee3588588ad097438bdf4421
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:28:27:63:70:0b:4a:e4:6b:e9:e0:b2:c9:41:
1e:81:b9:6b:f3:4f:00:37:c6:17:1b:70:0d:82:af:
52:52:c8:33:ca:a8:9d:af:8f:80:5b:51:89:c8:bd:
5c:b6:8a:11:5b:fb:1b:9d:11:6b:2f:0c:42:77:c6:
20:e8:f4:d7:d0:a1:4d:52:e8:e2:4d:5d:64:6e:95:
11:28:fd:b3:ed:68:9a:b5:b0:4d:94:81:9e:44:94:
e6:51:1f:28:bd:93:1a:bc:08:69:80:86:e5:18:ad:
a1:ab:17:b6:2d:02:8e:94:f6:a5:28:b1:7e:46:c0:
02:0b:3f:a4:58:a9:e4:b4:54:b4:44:1c:cd:6a:10:
03:0d:83:76:53:2b:28:9f:67:5f:90:c0:94:d9:65:
e5:ed:0b:c0:fc:0e:e9:e6:97:d2:f1:37:38:51:ac:
30:76:f0:fa:0e:75:67:62:9c:f0:ae:ca:bb:e5:ee:
44:0b:51:fa:97:6e:48:8a:47:58:51:e1:aa:c4:c3:
d2:16:ad:09:84:94:dd:7a:b0:a1:cf:60:15:be:fd:
21:e5:9c:06:80:42:8d:34:da:b2:8e:ec:35:dd:18:
29:58:a2:a1:b9:42:b1:eb:ff:36:d5:d0:ef:a9:51:
89:db:d0:6d:bc:41:74:4b:db:20:ff:59:85:96:e0:
53:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:5C:EC:D7:4D:12:B0:7E:EE:35:88:58:8A:D0:97:43:8B:DF:44:21
X509v3 Authority Key Identifier:
keyid:B2:D8:AD:02:7A:96:74:ED:C9:36:E7:8C:5D:4D:1B:64:96:4D:84:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/stitAnqWdO3JNueMXU0bZJZNhEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/88c9d7-e377-4874-9868-715247c3dcdc/1/stitAnqWdO3JNueMXU0bZJZNhEA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/88c9d7-e377-4874-9868-715247c3dcdc/1/stitAnqWdO3JNueMXU0bZJZNhEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:19:cc:c5:08:e5:33:94:02:e3:e7:49:f5:b6:67:e3:3b:d6:
0d:5e:c8:a0:99:a2:d4:7d:f2:77:f7:bb:52:87:55:1e:e0:63:
f4:9d:90:bf:e4:88:f2:35:7a:2e:c6:e3:d4:b8:2a:33:7c:3d:
2c:e6:99:a8:74:60:fd:26:ab:cf:0c:f9:cf:9d:13:5f:c7:e8:
55:47:18:af:00:6a:e4:4a:44:30:75:e6:7d:14:0a:a5:23:72:
41:a1:74:fc:c4:0e:25:b4:23:b9:32:f5:54:ee:11:0f:e2:af:
59:63:94:eb:c7:53:e2:82:6c:f0:cc:a2:17:81:0f:36:9d:25:
16:7f:d8:c1:2b:c9:ae:c3:4b:79:61:a1:69:98:0d:4d:2d:bb:
22:39:eb:ed:5e:78:5f:13:e5:c4:11:6e:98:f9:9f:87:f1:b3:
31:0e:e5:95:dd:95:f4:7e:04:12:e0:74:6f:98:db:c7:2f:e5:
8d:81:5d:4e:cd:2e:07:df:b7:46:58:ff:27:e0:88:74:7f:9a:
d5:e9:e9:c1:2c:02:9b:4f:38:73:e9:a7:98:7f:fd:df:f3:19:
ac:83:1a:cd:96:c6:4f:96:e7:2b:2c:ed:62:0c:f0:45:25:d9:
a4:17:97:2b:72:fe:ec:c3:c1:aa:57:30:a3:be:e9:09:ff:21:
0a:65:13:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:37:47 2025 by rpki-client