Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/8273b5-279c-4323-82dc-c257607317f3/1/_stf432FEfZ6YFMW6wlTU4_P6ec.mft
File: _stf432FEfZ6YFMW6wlTU4_P6ec.mft (raw, json)
Hash identifier: L0wEwg4rmHiU71JHJyYFMO8OrEaMnZ4qtOv0GHubU0k=
Subject key identifier: D4:50:F1:A1:A6:BB:96:23:9D:A2:1F:BC:E1:F0:DC:34:6E:C6:49:8F
Authority key identifier: FE:CB:5F:E3:7D:85:11:F6:7A:60:53:16:EB:09:53:53:8F:CF:E9:E7
Certificate issuer: /CN=fecb5fe37d8511f67a605316eb0953538fcfe9e7
Certificate serial: 0198733D19AE486989D1FF1C211EC162A067
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_stf432FEfZ6YFMW6wlTU4_P6ec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/8273b5-279c-4323-82dc-c257607317f3/1/_stf432FEfZ6YFMW6wlTU4_P6ec.mft
Manifest number: 0FF1
Signing time: Mon 04 Aug 2025 04:00:40 +0000
Manifest this update: Mon 04 Aug 2025 04:00:40 +0000
Manifest next update: Tue 05 Aug 2025 04:00:40 +0000
Files and hashes: 1: _stf432FEfZ6YFMW6wlTU4_P6ec.crl (hash: Yf7SKyvpI0vpX9A5amkSXhl4krh2M4nl14opJrpBSRw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/8273b5-279c-4323-82dc-c257607317f3/1/_stf432FEfZ6YFMW6wlTU4_P6ec.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/8273b5-279c-4323-82dc-c257607317f3/1/_stf432FEfZ6YFMW6wlTU4_P6ec.mft
rsync://rpki.ripe.net/repository/DEFAULT/_stf432FEfZ6YFMW6wlTU4_P6ec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:19:ae:48:69:89:d1:ff:1c:21:1e:c1:62:a0:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fecb5fe37d8511f67a605316eb0953538fcfe9e7
Validity
Not Before: Aug 4 04:00:40 2025 GMT
Not After : Aug 5 04:00:40 2025 GMT
Subject: CN=d450f1a1a6bb96239da21fbce1f0dc346ec6498f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8d:1d:ee:48:89:09:24:41:72:a2:ed:3b:82:
5b:6c:1e:70:fb:71:1c:46:f7:63:e0:fc:2b:62:c1:
d9:bd:6f:ff:32:c3:35:80:7d:c2:80:b5:4e:91:18:
0f:2c:a9:c3:1e:b1:a3:7c:ba:9e:1c:82:a0:87:0e:
66:40:19:01:c9:3b:6b:c3:9b:70:0d:8f:9d:0f:d6:
06:ee:6e:43:3c:87:54:ef:27:84:f6:5b:87:5d:4c:
3e:b1:18:62:6b:86:2d:99:1b:41:b9:a7:3a:0d:f4:
4b:c5:ce:3f:5a:6e:ad:29:35:18:67:5b:79:78:8f:
7e:02:df:ff:48:5e:2f:4c:79:76:a8:bf:ac:7b:e1:
dd:f4:1b:93:71:6a:2f:f2:fe:56:8d:45:a0:2e:67:
55:0c:b5:e1:c0:4c:48:7b:a9:bd:70:2f:25:1b:39:
81:24:59:72:c1:9c:4c:44:c7:55:94:59:07:55:13:
f2:ae:55:d7:3b:f6:cd:24:e4:b6:9c:ae:24:30:cd:
54:28:3f:d2:83:03:b1:29:32:be:11:14:e6:8c:46:
13:ed:13:95:f6:95:63:71:5c:e8:66:e4:14:63:0d:
67:da:96:e2:01:ad:5a:c0:35:65:f9:0a:b2:51:f9:
14:e8:07:c7:80:00:bb:4f:bc:19:62:ab:94:7a:60:
8d:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:50:F1:A1:A6:BB:96:23:9D:A2:1F:BC:E1:F0:DC:34:6E:C6:49:8F
X509v3 Authority Key Identifier:
keyid:FE:CB:5F:E3:7D:85:11:F6:7A:60:53:16:EB:09:53:53:8F:CF:E9:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_stf432FEfZ6YFMW6wlTU4_P6ec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/8273b5-279c-4323-82dc-c257607317f3/1/_stf432FEfZ6YFMW6wlTU4_P6ec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/8273b5-279c-4323-82dc-c257607317f3/1/_stf432FEfZ6YFMW6wlTU4_P6ec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:35:19:e4:f0:9a:ee:d8:65:85:16:e4:8f:02:4a:a6:62:66:
eb:f1:2d:09:30:11:56:c2:68:f6:6e:c4:57:fb:82:ff:ba:a2:
64:6a:08:b3:a1:13:52:8c:b1:8f:a0:3a:ee:cf:1f:5b:c1:41:
39:ad:13:a8:83:60:f7:df:b0:61:a0:15:aa:a7:76:36:11:b8:
e7:9e:e9:a3:10:4e:d2:3a:f5:2f:ea:bd:86:7e:d8:39:3c:8e:
2b:3d:81:6c:ee:f6:00:58:4c:77:f8:7b:f2:48:0c:e5:ec:40:
5c:b4:78:02:c8:93:cf:87:dc:93:f7:54:21:fa:1d:5a:49:56:
c7:29:84:c8:2a:4a:b5:59:24:b6:08:35:54:0f:cc:f1:1e:a5:
7b:2d:a8:a4:95:cd:e3:ac:3f:46:b5:8b:b7:95:c2:4f:f8:35:
27:20:97:5a:65:0a:2b:58:55:35:e4:34:89:c0:47:d3:07:b8:
93:18:63:f6:e3:aa:3e:b4:05:77:3f:0d:39:a6:aa:78:f8:8b:
0f:7c:cc:d9:b4:a3:56:5c:47:8f:2a:3d:36:d7:4e:02:21:fd:
7c:19:ec:03:20:b1:83:b2:26:7a:e4:c1:f9:23:3c:8e:85:00:
d9:d4:6b:2c:4e:cb:e2:36:06:27:cb:de:92:96:77:16:f4:55:
22:24:e4:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:21:09 2025 by rpki-client