Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/39db6c-f23b-4c9b-9f79-734994c52c1f/1/stsr_PWdmcpwgzcI_TADLyP-9IU.mft
File: stsr_PWdmcpwgzcI_TADLyP-9IU.mft (raw, json)
Hash identifier: xfbtIBydNMds2oLOJtXPT4IzYV1/iz3N+WOZf2Hk/O4=
Subject key identifier: 4D:2C:7E:72:AF:CD:2A:7E:61:26:B0:0B:BC:CD:B2:E8:96:64:2B:20
Authority key identifier: B2:DB:2B:FC:F5:9D:99:CA:70:83:37:08:FD:30:03:2F:23:FE:F4:85
Certificate issuer: /CN=b2db2bfcf59d99ca70833708fd30032f23fef485
Certificate serial: 019674C29915FA088C9706DA0105B06CC272
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/stsr_PWdmcpwgzcI_TADLyP-9IU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/39db6c-f23b-4c9b-9f79-734994c52c1f/1/stsr_PWdmcpwgzcI_TADLyP-9IU.mft
Manifest number: 14DA
Signing time: Sun 27 Apr 2025 01:00:32 +0000
Manifest this update: Sun 27 Apr 2025 01:00:32 +0000
Manifest next update: Mon 28 Apr 2025 01:00:32 +0000
Files and hashes: 1: 8OSq_me_piuY9aTEESBxQ_Nz1Zc.roa (hash: jli/f4rA8lzODNLo/sC1h2DAhvEwSPZMgYQGoXMtAvM=)
2: stsr_PWdmcpwgzcI_TADLyP-9IU.crl (hash: YGwgJJ+/L1pLXzvyeONeRPxMwdZ+3zLqeizmdKZi0Tg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/39db6c-f23b-4c9b-9f79-734994c52c1f/1/stsr_PWdmcpwgzcI_TADLyP-9IU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/39db6c-f23b-4c9b-9f79-734994c52c1f/1/stsr_PWdmcpwgzcI_TADLyP-9IU.mft
rsync://rpki.ripe.net/repository/DEFAULT/stsr_PWdmcpwgzcI_TADLyP-9IU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 01:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:c2:99:15:fa:08:8c:97:06:da:01:05:b0:6c:c2:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2db2bfcf59d99ca70833708fd30032f23fef485
Validity
Not Before: Apr 27 01:00:32 2025 GMT
Not After : Apr 28 01:00:32 2025 GMT
Subject: CN=4d2c7e72afcd2a7e6126b00bbccdb2e896642b20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b8:f0:49:ad:00:1c:06:43:35:58:6f:3b:7b:
1c:5c:65:4e:b8:3a:0f:ca:86:68:5f:dd:6c:e0:0e:
b4:92:cf:aa:7c:eb:bb:7e:a1:01:1d:49:a5:83:3c:
b1:ce:36:33:bd:7b:de:86:bd:53:e5:e7:cf:09:d5:
d9:68:d2:c9:cc:ab:67:32:05:97:73:1f:52:a0:44:
c3:93:14:2b:5f:fe:ab:d6:5b:3b:a5:ac:f7:b6:74:
47:c3:a5:af:f3:de:da:5e:59:de:fe:86:da:ec:1a:
32:ce:92:33:74:f3:4c:35:e7:fa:61:d2:d3:43:02:
97:37:51:06:9b:73:b3:00:2a:70:b0:4c:f3:f4:c6:
53:92:26:bd:52:9c:bb:90:5e:14:89:47:bb:62:ac:
1d:9c:4d:fe:01:88:44:5e:5c:57:9a:9e:c5:98:65:
55:26:4f:f8:19:f4:90:80:ad:7f:a5:c4:c3:11:0b:
b3:80:37:77:c0:fc:78:cb:05:ae:45:95:80:3c:5e:
a7:ce:86:37:33:22:93:a7:45:f5:49:a6:f3:e4:b4:
43:e2:bf:78:64:ca:d7:cf:94:79:38:97:52:8f:22:
57:4c:15:7e:dc:e9:9e:20:22:12:dd:6e:56:6c:fb:
25:4b:e1:52:bc:83:bb:be:68:c4:ac:28:3d:5d:ad:
c2:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:2C:7E:72:AF:CD:2A:7E:61:26:B0:0B:BC:CD:B2:E8:96:64:2B:20
X509v3 Authority Key Identifier:
keyid:B2:DB:2B:FC:F5:9D:99:CA:70:83:37:08:FD:30:03:2F:23:FE:F4:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/stsr_PWdmcpwgzcI_TADLyP-9IU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/39db6c-f23b-4c9b-9f79-734994c52c1f/1/stsr_PWdmcpwgzcI_TADLyP-9IU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/39db6c-f23b-4c9b-9f79-734994c52c1f/1/stsr_PWdmcpwgzcI_TADLyP-9IU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:dc:33:eb:0a:20:26:5c:36:33:c7:a1:04:26:9f:fb:a2:0e:
c6:c6:4c:9e:f5:75:af:82:17:ac:fd:00:e9:c5:c6:06:92:2d:
61:80:12:91:92:90:0b:80:12:d5:ca:9c:b3:0b:8b:43:f6:06:
5f:dc:4c:8a:c3:83:18:ce:db:48:85:72:2f:fc:86:62:04:9a:
4f:25:77:46:60:86:5f:13:3b:5d:33:a7:4f:59:cb:e2:f6:16:
f9:2b:cc:63:4b:c5:a5:64:2f:16:81:e0:78:88:b9:0f:e7:98:
95:d9:b0:9a:fc:b8:f4:4d:f8:38:0b:64:d6:bb:01:72:4c:fe:
85:d5:af:3d:6b:06:e7:11:a6:b8:f1:20:5a:1e:fd:e6:95:94:
0a:03:a0:dc:e8:bc:d1:b9:fc:be:de:b7:ab:14:4f:8f:5f:3e:
5b:c3:90:8b:da:23:9a:19:fb:37:6d:82:1f:4a:c6:f1:56:16:
c2:e0:05:1b:50:c9:86:ba:eb:48:8c:39:6d:3f:7e:49:32:e2:
3b:5c:c5:50:b1:5c:6f:a4:93:32:96:70:0d:f4:dc:5f:87:58:
ba:1a:d5:fc:ba:dc:8d:9b:dc:5c:f0:61:69:8e:58:81:22:75:
e7:1e:50:b5:d6:7c:be:7b:c5:c1:a3:66:57:55:6b:a8:c5:df:
73:ba:42:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ0wpkV+giMlwbaAQWwbMJyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyZGIyYmZjZjU5ZDk5Y2E3MDgzMzcwOGZkMzAwMzJmMjNm
ZWY0ODUwHhcNMjUwNDI3MDEwMDMyWhcNMjUwNDI4MDEwMDMyWjAzMTEwLwYDVQQD
Eyg0ZDJjN2U3MmFmY2QyYTdlNjEyNmIwMGJiY2NkYjJlODk2NjQyYjIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAprjwSa0AHAZDNVhvO3scXGVOuDoP
yoZoX91s4A60ks+qfOu7fqEBHUmlgzyxzjYzvXvehr1T5efPCdXZaNLJzKtnMgWX
cx9SoETDkxQrX/6r1ls7paz3tnRHw6Wv897aXlne/oba7BoyzpIzdPNMNef6YdLT
QwKXN1EGm3OzACpwsEzz9MZTkia9Upy7kF4UiUe7YqwdnE3+AYhEXlxXmp7FmGVV
Jk/4GfSQgK1/pcTDEQuzgDd3wPx4ywWuRZWAPF6nzoY3MyKTp0X1Sabz5LRD4r94
ZMrXz5R5OJdSjyJXTBV+3OmeICIS3W5WbPslS+FSvIO7vmjErCg9Xa3CGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE0sfnKvzSp+YSawC7zNsuiWZCsgMB8GA1UdIwQY
MBaAFLLbK/z1nZnKcIM3CP0wAy8j/vSFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3Rzcl9QV2RtY3B3Z3pjSV9UQURMeVAtOUlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC8zOWRiNmMtZjIzYi00YzliLTlmNzkt
NzM0OTk0YzUyYzFmLzEvc3Rzcl9QV2RtY3B3Z3pjSV9UQURMeVAtOUlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC8zOWRiNmMtZjIzYi00YzliLTlmNzktNzM0OTk0YzUyYzFm
LzEvc3Rzcl9QV2RtY3B3Z3pjSV9UQURMeVAtOUlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVNwz6wog
Jlw2M8ehBCaf+6IOxsZMnvV1r4IXrP0A6cXGBpItYYASkZKQC4AS1cqcswuLQ/YG
X9xMisODGM7bSIVyL/yGYgSaTyV3RmCGXxM7XTOnT1nL4vYW+SvMY0vFpWQvFoHg
eIi5D+eYldmwmvy49E34OAtk1rsBckz+hdWvPWsG5xGmuPEgWh795pWUCgOg3Oi8
0bn8vt63qxRPj18+W8OQi9ojmhn7N22CH0rG8VYWwuAFG1DJhrrrSIw5bT9+STLi
O1zFULFcb6STMpZwDfTcX4dYuhrV/LrcjZvcXPBhaY5YgSJ15x5QtdZ8vnvFwaNm
V1VrqMXfc7pCWA==
-----END CERTIFICATE-----
Generated at Sun Apr 27 08:54:00 2025 by rpki-client