Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/88c9d7-e377-4874-9868-715247c3dcdc/1/stitAnqWdO3JNueMXU0bZJZNhEA.mft
File: stitAnqWdO3JNueMXU0bZJZNhEA.mft (raw, json)
Hash identifier: oMxZxj5w9R+jkyAp6RlEcHBhmIFfATiAOa3FkAzy8Y0=
Subject key identifier: 70:59:66:54:61:95:64:A5:81:7E:D4:23:2A:EA:4C:0E:24:50:A0:57
Authority key identifier: B2:D8:AD:02:7A:96:74:ED:C9:36:E7:8C:5D:4D:1B:64:96:4D:84:40
Certificate issuer: /CN=b2d8ad027a9674edc936e78c5d4d1b64964d8440
Certificate serial: 0197C312D3329E573E25F2E1F0EC453C324C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/stitAnqWdO3JNueMXU0bZJZNhEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/88c9d7-e377-4874-9868-715247c3dcdc/1/stitAnqWdO3JNueMXU0bZJZNhEA.mft
Manifest number: 0AE4
Signing time: Mon 30 Jun 2025 23:01:20 +0000
Manifest this update: Mon 30 Jun 2025 23:01:20 +0000
Manifest next update: Tue 01 Jul 2025 23:01:20 +0000
Files and hashes: 1: j7tAtkU7X16dxo0q2axkpmgR2Jg.roa (hash: ee9X5e2Gsq7S7vtFMXjQ62kSEkjJdHkxbRMmxnYqFY4=)
2: stitAnqWdO3JNueMXU0bZJZNhEA.crl (hash: i7/7S9ghU3/HaL75bKz0EKA9zMQ1fnx6bK8Bdu+SgAE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/88c9d7-e377-4874-9868-715247c3dcdc/1/stitAnqWdO3JNueMXU0bZJZNhEA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/88c9d7-e377-4874-9868-715247c3dcdc/1/stitAnqWdO3JNueMXU0bZJZNhEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/stitAnqWdO3JNueMXU0bZJZNhEA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c3:12:d3:32:9e:57:3e:25:f2:e1:f0:ec:45:3c:32:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2d8ad027a9674edc936e78c5d4d1b64964d8440
Validity
Not Before: Jun 30 23:01:20 2025 GMT
Not After : Jul 1 23:01:20 2025 GMT
Subject: CN=70596654619564a5817ed4232aea4c0e2450a057
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:48:e0:bd:61:f9:61:40:27:08:88:d0:0f:5d:
dd:68:99:6f:bb:d4:7e:e8:68:a2:9f:44:e3:e0:b6:
5b:85:63:92:fc:d5:6d:6c:21:18:17:13:10:52:29:
2d:f3:b8:63:e6:c3:38:a7:62:b0:11:a8:87:ae:03:
eb:ae:0d:b9:15:53:3b:f7:f0:1e:c6:5d:20:6e:ee:
6b:9f:d1:7e:9a:29:82:79:a8:94:f5:08:29:ca:39:
a8:d4:4e:88:24:80:96:44:c7:f9:19:0b:1d:bd:cd:
8d:7c:0c:8a:7b:b7:29:46:17:98:9a:32:a9:f9:c0:
6f:64:fd:28:93:06:b2:7c:c1:48:c2:87:31:f6:f5:
c0:da:81:5b:0e:2b:83:5c:1a:7a:dc:24:21:0e:7c:
db:fb:f1:ac:a4:b9:c6:ca:56:b2:6e:a6:2a:7f:1f:
e6:a5:e6:0b:13:91:91:41:a1:86:d7:59:4c:53:3d:
58:ed:a1:84:94:29:87:67:58:e8:55:16:9f:c9:c0:
d2:4d:3d:b8:d2:af:82:30:8f:b6:aa:dd:29:a2:48:
ee:4b:52:19:51:79:c8:48:22:de:b4:d8:b7:55:bc:
8f:ca:5f:2c:9c:68:f8:62:4b:19:66:8b:56:f5:77:
00:12:43:95:97:20:78:3f:63:23:1b:03:3b:1e:df:
da:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:59:66:54:61:95:64:A5:81:7E:D4:23:2A:EA:4C:0E:24:50:A0:57
X509v3 Authority Key Identifier:
keyid:B2:D8:AD:02:7A:96:74:ED:C9:36:E7:8C:5D:4D:1B:64:96:4D:84:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/stitAnqWdO3JNueMXU0bZJZNhEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/88c9d7-e377-4874-9868-715247c3dcdc/1/stitAnqWdO3JNueMXU0bZJZNhEA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/88c9d7-e377-4874-9868-715247c3dcdc/1/stitAnqWdO3JNueMXU0bZJZNhEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:52:c8:d2:d6:a4:c0:d3:29:b8:b2:a8:3e:af:2c:57:11:f9:
2f:ed:a5:2b:c6:aa:7d:8f:86:ff:5e:31:f5:4c:3c:63:2f:14:
92:38:c6:4d:59:46:b4:56:d6:b1:a7:4d:23:91:ee:31:92:66:
7d:b3:b6:50:32:66:4a:c0:27:ff:0c:f9:51:f0:e9:a9:a3:b0:
ee:50:13:23:d0:2d:f4:00:2e:40:58:a6:eb:0e:5f:0b:a5:d6:
59:63:53:9d:90:eb:72:f3:d5:fe:b9:98:74:d4:73:e7:7b:93:
c2:14:b6:6b:80:83:cb:39:2f:8a:61:73:1b:d2:ad:c4:3a:ba:
d3:c5:78:cc:14:d3:7c:3d:8e:8c:44:7d:7b:93:fd:cd:0b:f2:
b3:2d:8d:9d:f1:be:a6:0c:c1:86:2d:42:92:43:84:73:15:7e:
bb:41:aa:50:20:de:11:dc:f5:5d:c4:ad:40:ee:3d:c8:79:df:
b3:19:3d:51:f5:f2:87:63:80:46:59:47:3a:80:24:8a:8f:0f:
7e:25:4b:07:33:6f:fa:0e:3a:45:fe:05:c2:86:d8:98:f2:74:
eb:5c:b7:f4:41:af:23:2b:d5:3e:c8:a2:be:f8:81:48:4f:bb:
56:40:20:fd:61:90:fc:56:ec:99:6e:84:61:e9:7d:fd:79:c1:
7c:09:63:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfDEtMynlc+JfLh8OxFPDJMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyZDhhZDAyN2E5Njc0ZWRjOTM2ZTc4YzVkNGQxYjY0OTY0
ZDg0NDAwHhcNMjUwNjMwMjMwMTIwWhcNMjUwNzAxMjMwMTIwWjAzMTEwLwYDVQQD
Eyg3MDU5NjY1NDYxOTU2NGE1ODE3ZWQ0MjMyYWVhNGMwZTI0NTBhMDU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA10jgvWH5YUAnCIjQD13daJlvu9R+
6Giin0Tj4LZbhWOS/NVtbCEYFxMQUikt87hj5sM4p2KwEaiHrgPrrg25FVM79/Ae
xl0gbu5rn9F+mimCeaiU9Qgpyjmo1E6IJICWRMf5GQsdvc2NfAyKe7cpRheYmjKp
+cBvZP0okwayfMFIwocx9vXA2oFbDiuDXBp63CQhDnzb+/GspLnGylaybqYqfx/m
peYLE5GRQaGG11lMUz1Y7aGElCmHZ1joVRafycDSTT240q+CMI+2qt0pokjuS1IZ
UXnISCLetNi3VbyPyl8snGj4YksZZotW9XcAEkOVlyB4P2MjGwM7Ht/a4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHBZZlRhlWSlgX7UIyrqTA4kUKBXMB8GA1UdIwQY
MBaAFLLYrQJ6lnTtyTbnjF1NG2SWTYRAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3RpdEFucVdkTzNKTnVlTVhVMGJaSlpOaEVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS84OGM5ZDctZTM3Ny00ODc0LTk4Njgt
NzE1MjQ3YzNkY2RjLzEvc3RpdEFucVdkTzNKTnVlTVhVMGJaSlpOaEVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS84OGM5ZDctZTM3Ny00ODc0LTk4NjgtNzE1MjQ3YzNkY2Rj
LzEvc3RpdEFucVdkTzNKTnVlTVhVMGJaSlpOaEVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo1LI0tak
wNMpuLKoPq8sVxH5L+2lK8aqfY+G/14x9Uw8Yy8UkjjGTVlGtFbWsadNI5HuMZJm
fbO2UDJmSsAn/wz5UfDpqaOw7lATI9At9AAuQFim6w5fC6XWWWNTnZDrcvPV/rmY
dNRz53uTwhS2a4CDyzkvimFzG9KtxDq608V4zBTTfD2OjER9e5P9zQvysy2NnfG+
pgzBhi1CkkOEcxV+u0GqUCDeEdz1XcStQO49yHnfsxk9UfXyh2OARllHOoAkio8P
fiVLBzNv+g46Rf4FwobYmPJ061y39EGvIyvVPsiivviBSE+7VkAg/WGQ/FbsmW6E
Yel9/XnBfAljQA==
-----END CERTIFICATE-----
Generated at Tue Jul 1 07:24:06 2025 by rpki-client