Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/88c9d7-e377-4874-9868-715247c3dcdc/1/stitAnqWdO3JNueMXU0bZJZNhEA.mft
File: stitAnqWdO3JNueMXU0bZJZNhEA.mft (raw, json)
Hash identifier: XoBCaD1GENCAIZCLIaNg+3P4HJdTfZNqHUk8gmITrBw=
Subject key identifier: 8E:78:3D:47:7B:3B:8A:4B:A7:EE:08:C6:4F:9C:8F:B6:B9:8F:4E:26
Authority key identifier: B2:D8:AD:02:7A:96:74:ED:C9:36:E7:8C:5D:4D:1B:64:96:4D:84:40
Certificate issuer: /CN=b2d8ad027a9674edc936e78c5d4d1b64964d8440
Certificate serial: 0199FAD7B6DDDE96F4D636EE68F010464257
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/stitAnqWdO3JNueMXU0bZJZNhEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/88c9d7-e377-4874-9868-715247c3dcdc/1/stitAnqWdO3JNueMXU0bZJZNhEA.mft
Manifest number: 0C0A
Signing time: Sun 19 Oct 2025 05:01:04 +0000
Manifest this update: Sun 19 Oct 2025 05:01:04 +0000
Manifest next update: Mon 20 Oct 2025 05:01:04 +0000
Files and hashes: 1: j7tAtkU7X16dxo0q2axkpmgR2Jg.roa (hash: ee9X5e2Gsq7S7vtFMXjQ62kSEkjJdHkxbRMmxnYqFY4=)
2: stitAnqWdO3JNueMXU0bZJZNhEA.crl (hash: L2Spv1sECvjW3NX9jG1NDqUhtMitq03y65w57VpSqys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/88c9d7-e377-4874-9868-715247c3dcdc/1/stitAnqWdO3JNueMXU0bZJZNhEA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/88c9d7-e377-4874-9868-715247c3dcdc/1/stitAnqWdO3JNueMXU0bZJZNhEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/stitAnqWdO3JNueMXU0bZJZNhEA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d7:b6:dd:de:96:f4:d6:36:ee:68:f0:10:46:42:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2d8ad027a9674edc936e78c5d4d1b64964d8440
Validity
Not Before: Oct 19 05:01:04 2025 GMT
Not After : Oct 20 05:01:04 2025 GMT
Subject: CN=8e783d477b3b8a4ba7ee08c64f9c8fb6b98f4e26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:c7:96:3c:21:88:14:be:2c:26:6e:02:f7:ec:
2f:4b:39:b4:03:57:a4:1c:ee:44:51:9f:11:93:44:
d6:af:df:eb:87:e3:31:b1:4c:9b:31:f8:09:ec:6e:
d8:33:e9:8b:45:d9:51:b6:88:31:8b:1c:f2:bd:52:
87:8e:44:b3:9a:5e:9a:8e:e7:5f:d1:7a:86:25:ad:
b6:95:82:ad:27:e0:d5:75:72:0b:a4:b0:dc:e2:a4:
80:24:c5:57:25:05:2d:2e:5c:c2:00:a2:50:c1:97:
53:49:e0:d7:91:89:7d:bd:d3:7d:6f:c7:e2:74:56:
07:53:71:f9:3b:da:e6:83:51:33:1e:18:03:d5:c4:
9b:ff:5a:28:f2:65:56:b3:b3:55:69:10:2f:b8:80:
7e:46:03:e7:56:3c:6f:9a:90:27:c7:01:35:df:dd:
c0:8f:c3:bf:65:30:bf:e6:f6:eb:a1:d4:be:a7:5a:
85:1b:28:59:10:17:30:4d:ca:21:7b:c0:cd:42:e4:
5a:ce:62:b7:73:1c:57:82:40:58:0c:af:9b:d7:79:
f7:d4:e6:e2:c6:f4:28:4a:64:b1:50:c4:c3:23:f7:
13:5f:f1:92:1d:28:cb:54:e6:b7:6f:1e:e8:e0:61:
35:96:a6:51:f7:5d:fb:8d:46:9d:ba:3e:0b:72:b1:
b0:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:78:3D:47:7B:3B:8A:4B:A7:EE:08:C6:4F:9C:8F:B6:B9:8F:4E:26
X509v3 Authority Key Identifier:
keyid:B2:D8:AD:02:7A:96:74:ED:C9:36:E7:8C:5D:4D:1B:64:96:4D:84:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/stitAnqWdO3JNueMXU0bZJZNhEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/88c9d7-e377-4874-9868-715247c3dcdc/1/stitAnqWdO3JNueMXU0bZJZNhEA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/88c9d7-e377-4874-9868-715247c3dcdc/1/stitAnqWdO3JNueMXU0bZJZNhEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:2f:45:09:7d:28:10:85:7e:68:0c:a3:40:26:b0:e7:8a:af:
37:fa:a4:98:4e:1c:82:b8:5b:72:31:d3:c9:f0:ce:3c:4c:57:
90:80:88:6c:4f:6f:08:d0:a6:1b:8a:4f:ea:88:21:ad:a1:ea:
73:18:97:64:67:81:dd:e1:00:70:be:6d:9d:4b:d5:ce:a4:b2:
ab:5b:79:19:08:8e:22:52:41:0b:c7:70:5a:c8:8f:b8:23:1b:
21:ea:cf:5c:62:06:35:6d:4e:1a:ca:01:cd:32:d9:2f:31:6e:
8c:47:d9:1c:b4:17:c3:00:97:6d:5b:11:1d:8e:e0:43:ba:5a:
0a:1a:36:b1:88:03:8e:3a:d2:a7:95:d6:df:9c:67:64:6e:53:
29:c8:54:61:4e:3d:2b:4b:3b:e7:18:41:e9:01:e9:50:57:ae:
b6:5d:5d:2d:4c:0f:7f:1c:a1:45:10:46:4c:51:1b:1f:1f:e7:
0c:11:2c:6f:3a:0e:d7:8b:6e:a5:89:7d:18:bb:c5:08:46:f2:
4c:a0:b7:5f:36:01:8b:28:51:c6:d6:2c:97:18:be:c7:ec:8f:
39:9d:ff:34:a8:62:c6:21:55:c7:4c:7e:b8:74:68:9f:9a:84:
1c:56:ad:97:50:08:83:cc:52:6b:ad:88:6d:16:02:e7:d6:e6:
10:82:be:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:11:25 2025 by rpki-client