Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/8c6395-646a-47a2-b4b6-c6f6e3f28956/1/st6zdl9Tnx7D8AIT_4NAhbfIx28.mft
File: st6zdl9Tnx7D8AIT_4NAhbfIx28.mft (raw, json)
Hash identifier: mh3QYGAVDeRBF91LPF3hORGjiE3NzwqXm6tbS6yZmyQ=
Subject key identifier: E1:E4:DE:75:1D:74:93:AD:57:CE:20:0E:8A:D1:05:9D:F6:D2:0E:FA
Authority key identifier: B2:DE:B3:76:5F:53:9F:1E:C3:F0:02:13:FF:83:40:85:B7:C8:C7:6F
Certificate issuer: /CN=b2deb3765f539f1ec3f00213ff834085b7c8c76f
Certificate serial: 0199FFC862FFE4E4982F8B9579A53E8882CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/st6zdl9Tnx7D8AIT_4NAhbfIx28.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/8c6395-646a-47a2-b4b6-c6f6e3f28956/1/st6zdl9Tnx7D8AIT_4NAhbfIx28.mft
Manifest number: 064A
Signing time: Mon 20 Oct 2025 04:02:26 +0000
Manifest this update: Mon 20 Oct 2025 04:02:26 +0000
Manifest next update: Tue 21 Oct 2025 04:02:26 +0000
Files and hashes: 1: TSugCU0pqUpliat_toqMDIoNIEc.roa (hash: wndd5eFIU8yCHwaZ5EgfwtAvzQXellC4WrfhfkeDZ9U=)
2: st6zdl9Tnx7D8AIT_4NAhbfIx28.crl (hash: 6Eh0ez8p9VilZBsZmEIAfwoq0I/zdDVX0jgiIU36dCw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/8c6395-646a-47a2-b4b6-c6f6e3f28956/1/st6zdl9Tnx7D8AIT_4NAhbfIx28.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/8c6395-646a-47a2-b4b6-c6f6e3f28956/1/st6zdl9Tnx7D8AIT_4NAhbfIx28.mft
rsync://rpki.ripe.net/repository/DEFAULT/st6zdl9Tnx7D8AIT_4NAhbfIx28.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:62:ff:e4:e4:98:2f:8b:95:79:a5:3e:88:82:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2deb3765f539f1ec3f00213ff834085b7c8c76f
Validity
Not Before: Oct 20 04:02:26 2025 GMT
Not After : Oct 21 04:02:26 2025 GMT
Subject: CN=e1e4de751d7493ad57ce200e8ad1059df6d20efa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ab:1e:82:ea:de:9c:25:34:d7:fe:c0:6f:2e:
3c:4f:c1:17:b1:a5:98:9b:ed:04:c7:48:9e:7c:42:
0a:e6:9c:ff:b4:ef:b6:87:97:bb:82:a3:6c:78:60:
da:c1:ba:c9:dc:78:45:94:d2:48:ec:3d:c6:e7:4b:
81:b2:56:6b:88:5b:2c:95:f5:20:e6:c3:3b:51:16:
3c:34:bb:6e:19:0c:9e:8d:b8:d7:ba:4d:f4:f6:3a:
cd:d3:f2:c3:d3:0a:76:d9:af:86:e3:3b:66:3a:56:
4e:2a:2f:cd:e1:f8:fb:4b:46:37:0b:dd:b7:fb:1c:
09:31:67:68:73:50:54:2e:1f:44:7d:a9:57:1d:fa:
d6:1b:da:b3:11:85:2d:17:75:73:39:e4:b3:72:2d:
de:82:84:e3:45:e1:d9:fc:2c:ed:d8:13:70:4b:dc:
85:fa:91:39:1c:20:4f:7f:62:7b:84:00:7f:d3:c3:
39:7a:cb:f8:46:6f:73:25:fd:14:29:90:ff:48:b7:
3f:e3:e2:eb:0d:b3:5c:8e:18:d6:bd:69:16:6a:16:
b0:98:fb:50:55:c5:84:f0:29:67:a1:24:7e:01:65:
fd:06:2a:d8:5a:bf:35:83:2f:a9:61:c2:ca:0c:e8:
64:74:37:7f:9c:75:1b:a3:54:f0:58:6d:6f:c2:fb:
e9:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:E4:DE:75:1D:74:93:AD:57:CE:20:0E:8A:D1:05:9D:F6:D2:0E:FA
X509v3 Authority Key Identifier:
keyid:B2:DE:B3:76:5F:53:9F:1E:C3:F0:02:13:FF:83:40:85:B7:C8:C7:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/st6zdl9Tnx7D8AIT_4NAhbfIx28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/8c6395-646a-47a2-b4b6-c6f6e3f28956/1/st6zdl9Tnx7D8AIT_4NAhbfIx28.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/8c6395-646a-47a2-b4b6-c6f6e3f28956/1/st6zdl9Tnx7D8AIT_4NAhbfIx28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:41:62:0d:96:11:d6:29:77:34:21:90:a3:50:93:8e:92:cc:
7b:73:02:23:c2:21:e0:fa:fa:0e:fb:22:4e:05:34:2d:60:a9:
9b:04:ae:b6:36:8d:11:0c:21:f5:37:13:8e:c9:3e:3c:6a:88:
f0:e6:c7:c8:37:1f:27:0f:9e:41:0f:ec:5b:5e:84:cb:26:0a:
14:53:20:b0:cc:4e:4d:b6:42:5c:11:51:69:60:be:aa:75:4b:
65:f1:67:5b:5e:49:42:4b:e2:ca:0a:16:c5:50:04:b2:04:c4:
eb:e9:8a:86:7b:1f:18:24:fb:fb:c4:e6:c2:27:1f:e2:70:e3:
54:fc:ba:65:85:e3:db:03:4e:f7:86:f3:c0:4c:99:23:99:c3:
5d:47:9b:1d:63:67:f6:ad:ad:be:fa:68:a3:40:a7:01:7a:d3:
eb:76:2c:b0:a8:af:84:ef:33:5e:55:5d:58:fe:5e:54:a4:0e:
97:f5:a5:51:ed:53:f3:de:5d:ca:39:93:0f:72:b5:52:56:8a:
0b:16:6c:6b:5a:9f:1b:f9:e3:96:ae:80:a3:8d:6c:db:32:8f:
7b:d1:6f:5d:d7:1b:24:bf:90:60:f0:dd:75:c2:57:27:be:78:
32:27:3a:ed:57:69:b9:e6:f4:eb:e0:66:5d:09:1a:81:ec:c4:
0e:46:af:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:40:46 2025 by rpki-client