Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/39db6c-f23b-4c9b-9f79-734994c52c1f/1/stsr_PWdmcpwgzcI_TADLyP-9IU.mft
File: stsr_PWdmcpwgzcI_TADLyP-9IU.mft (raw, json)
Hash identifier: 8ZCiBKj3wYYzgsmQFCtn28twOyRePDSpB1dQzoJIU20=
Subject key identifier: 29:7B:F2:13:B9:BD:6A:30:A1:F6:31:78:4E:C9:AF:01:E5:BC:5C:28
Authority key identifier: B2:DB:2B:FC:F5:9D:99:CA:70:83:37:08:FD:30:03:2F:23:FE:F4:85
Certificate issuer: /CN=b2db2bfcf59d99ca70833708fd30032f23fef485
Certificate serial: 01976FD15FF70A00F259690BCB68EFBF1F7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/stsr_PWdmcpwgzcI_TADLyP-9IU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/39db6c-f23b-4c9b-9f79-734994c52c1f/1/stsr_PWdmcpwgzcI_TADLyP-9IU.mft
Manifest number: 155C
Signing time: Sat 14 Jun 2025 19:01:21 +0000
Manifest this update: Sat 14 Jun 2025 19:01:21 +0000
Manifest next update: Sun 15 Jun 2025 19:01:21 +0000
Files and hashes: 1: 8OSq_me_piuY9aTEESBxQ_Nz1Zc.roa (hash: jli/f4rA8lzODNLo/sC1h2DAhvEwSPZMgYQGoXMtAvM=)
2: stsr_PWdmcpwgzcI_TADLyP-9IU.crl (hash: I3JK5zar+CpIhyYpyvEwf4FY05M3fol1FYhbLuz8L4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/39db6c-f23b-4c9b-9f79-734994c52c1f/1/stsr_PWdmcpwgzcI_TADLyP-9IU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/39db6c-f23b-4c9b-9f79-734994c52c1f/1/stsr_PWdmcpwgzcI_TADLyP-9IU.mft
rsync://rpki.ripe.net/repository/DEFAULT/stsr_PWdmcpwgzcI_TADLyP-9IU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:d1:5f:f7:0a:00:f2:59:69:0b:cb:68:ef:bf:1f:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2db2bfcf59d99ca70833708fd30032f23fef485
Validity
Not Before: Jun 14 19:01:21 2025 GMT
Not After : Jun 15 19:01:21 2025 GMT
Subject: CN=297bf213b9bd6a30a1f631784ec9af01e5bc5c28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:39:20:92:a0:95:8c:3b:29:f3:49:7c:15:67:
f7:5d:ae:b8:8b:d1:b8:be:0d:eb:38:1c:63:44:0f:
69:44:87:58:7c:ff:49:e6:fd:d0:76:32:24:7b:33:
64:5d:51:11:ac:81:3b:b8:c5:a6:9f:20:f8:8c:57:
78:df:92:7a:c6:04:31:e6:6d:8f:77:85:13:b0:c5:
30:b7:ed:d3:f5:84:d4:2e:1b:4f:56:2a:b7:7d:f6:
03:2d:26:b2:c3:2d:a0:da:f7:5d:8a:1f:11:d7:7c:
0a:8d:de:1e:25:d1:fc:15:82:9e:08:ac:bd:da:6a:
4f:7b:07:12:f4:6c:f6:bf:07:10:51:7b:d8:99:55:
d4:af:9e:bc:ea:8c:23:50:9e:9a:4b:cb:3a:82:10:
e4:7d:24:ef:a4:0f:7d:af:62:74:7e:07:6d:ef:0f:
42:78:73:1b:ca:6c:cf:c2:34:ab:88:10:eb:64:1b:
15:b3:50:71:8f:d1:ad:2f:e0:9a:a8:4e:89:ef:b3:
56:0e:ee:5e:97:3d:69:9e:87:35:9e:ad:03:59:92:
5a:a1:57:5e:68:62:6b:ef:24:5c:85:97:1a:49:e3:
a0:bd:e1:36:97:8e:2e:58:82:e9:63:fe:7f:6c:a0:
0f:3c:0a:11:19:33:6b:10:59:b1:12:32:d3:7c:39:
fd:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:7B:F2:13:B9:BD:6A:30:A1:F6:31:78:4E:C9:AF:01:E5:BC:5C:28
X509v3 Authority Key Identifier:
keyid:B2:DB:2B:FC:F5:9D:99:CA:70:83:37:08:FD:30:03:2F:23:FE:F4:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/stsr_PWdmcpwgzcI_TADLyP-9IU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/39db6c-f23b-4c9b-9f79-734994c52c1f/1/stsr_PWdmcpwgzcI_TADLyP-9IU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/39db6c-f23b-4c9b-9f79-734994c52c1f/1/stsr_PWdmcpwgzcI_TADLyP-9IU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:9f:2e:95:11:93:54:39:eb:e4:53:eb:0a:63:54:7e:5d:b9:
f9:dd:1e:14:cf:42:89:75:d4:1c:e8:c8:2e:41:a4:24:fa:67:
1b:3c:1f:6f:28:71:96:c6:86:dd:ec:c3:25:50:b3:8e:14:fa:
b8:47:d8:d5:b7:3f:bc:55:75:a3:68:fd:b4:29:15:f9:b6:49:
84:ec:06:21:e5:9d:ab:13:3f:b4:f9:a6:29:ec:34:84:9e:bb:
a0:c9:db:3f:27:bd:eb:5b:ac:9d:50:78:45:c1:23:93:44:6f:
eb:8b:81:95:4f:bd:83:f3:29:c5:b1:b4:9e:49:47:c7:22:46:
1e:28:67:a3:3e:fc:ef:ce:d2:35:68:e1:ac:54:65:a2:46:26:
5a:4a:da:3a:dd:b7:22:27:f8:7c:f9:57:b5:13:74:9f:0a:d4:
bf:73:ac:6b:5c:42:b5:33:1c:b6:6a:ab:ed:eb:b0:3d:74:5c:
2a:72:4d:05:83:4c:29:8a:61:0d:11:85:0f:bc:f7:61:81:d1:
eb:3a:c0:57:7c:ee:af:8e:87:98:81:55:42:56:0b:da:71:22:
ba:51:a5:88:fb:22:d6:1f:76:4c:4b:6b:87:7e:64:0b:97:da:
da:4a:5d:51:47:48:e6:82:12:01:13:16:c2:d6:f6:90:48:c8:
0c:4d:8e:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 00:01:21 2025 by rpki-client