Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/13da12-e553-4714-9618-4ce506cf7a2c/1/STGaFtGrBlzvNlhRkqfv-H-VFV8.mft
File: STGaFtGrBlzvNlhRkqfv-H-VFV8.mft (raw, json)
Hash identifier: 8wsQzXoAz5BoWuuYB8r8/UP/iIlwHr8qP/j0hWsoxsw=
Subject key identifier: 69:15:43:84:DB:CC:76:5C:52:E4:22:3A:01:ED:00:7C:F2:93:76:6D
Authority key identifier: 49:31:9A:16:D1:AB:06:5C:EF:36:58:51:92:A7:EF:F8:7F:95:15:5F
Certificate issuer: /CN=49319a16d1ab065cef36585192a7eff87f95155f
Certificate serial: 0198A04D36F4F75FAC28CDD8E425EC7BCEB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/STGaFtGrBlzvNlhRkqfv-H-VFV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/13da12-e553-4714-9618-4ce506cf7a2c/1/STGaFtGrBlzvNlhRkqfv-H-VFV8.mft
Manifest number: 04F0
Signing time: Tue 12 Aug 2025 22:01:11 +0000
Manifest this update: Tue 12 Aug 2025 22:01:11 +0000
Manifest next update: Wed 13 Aug 2025 22:01:11 +0000
Files and hashes: 1: STGaFtGrBlzvNlhRkqfv-H-VFV8.crl (hash: oJFHRoqi8fign36s0ulbFf7ksG6BDSp9wJse5i84rgc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/13da12-e553-4714-9618-4ce506cf7a2c/1/STGaFtGrBlzvNlhRkqfv-H-VFV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/13da12-e553-4714-9618-4ce506cf7a2c/1/STGaFtGrBlzvNlhRkqfv-H-VFV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/STGaFtGrBlzvNlhRkqfv-H-VFV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:4d:36:f4:f7:5f:ac:28:cd:d8:e4:25:ec:7b:ce:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49319a16d1ab065cef36585192a7eff87f95155f
Validity
Not Before: Aug 12 22:01:11 2025 GMT
Not After : Aug 13 22:01:11 2025 GMT
Subject: CN=69154384dbcc765c52e4223a01ed007cf293766d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:23:f3:ad:d1:db:3a:d7:e2:4b:b6:f4:51:47:
df:56:39:46:ac:14:46:e6:da:22:0a:a4:e4:4e:d0:
2b:64:ea:3b:49:44:ef:5b:19:e7:b5:76:2c:98:ae:
b3:ac:2b:da:95:1e:d9:9a:08:13:69:0a:2b:86:3a:
cd:e5:e0:67:14:70:3f:3f:c0:47:94:88:3b:c4:1e:
97:53:6d:2a:8d:cb:5f:21:7f:95:3c:a5:9c:38:3e:
7e:9b:64:a6:d5:f1:62:84:69:f3:21:4f:ef:2a:3c:
41:2a:3d:c6:c3:64:4e:d1:c7:5f:80:d6:3f:16:32:
b5:05:a1:89:0e:e7:03:f7:48:0a:a9:79:b5:0e:e9:
d1:98:55:e9:02:ed:11:cf:91:72:62:6f:da:68:19:
cc:c8:e1:31:17:7d:6b:4f:a9:4b:a6:52:3a:11:86:
3f:83:97:cf:3a:bc:58:d0:c0:46:ca:8a:ba:92:eb:
d4:00:fd:7b:7d:80:39:e3:8d:63:5d:84:94:6c:a6:
05:0d:d3:b9:3c:ae:ae:2b:14:31:35:bf:26:6b:dc:
ed:c1:fc:df:88:12:cf:2e:8e:61:19:f9:25:03:84:
80:3c:fd:80:6c:5f:4c:43:af:c7:51:72:4c:1d:e5:
29:c8:7a:2d:88:33:07:32:e1:6d:a8:0d:16:f1:aa:
42:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:15:43:84:DB:CC:76:5C:52:E4:22:3A:01:ED:00:7C:F2:93:76:6D
X509v3 Authority Key Identifier:
keyid:49:31:9A:16:D1:AB:06:5C:EF:36:58:51:92:A7:EF:F8:7F:95:15:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/STGaFtGrBlzvNlhRkqfv-H-VFV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/13da12-e553-4714-9618-4ce506cf7a2c/1/STGaFtGrBlzvNlhRkqfv-H-VFV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/13da12-e553-4714-9618-4ce506cf7a2c/1/STGaFtGrBlzvNlhRkqfv-H-VFV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:5d:14:e3:da:b3:6e:88:17:e9:3f:1e:fd:0c:c5:cd:01:00:
b1:23:9b:2d:cb:61:6c:ad:6d:56:59:c9:35:0a:9c:a9:1e:64:
3d:c3:71:8d:c2:2b:be:34:a3:c5:c6:bc:52:76:53:af:a9:ac:
92:94:87:be:f0:06:d2:e6:f0:24:a4:b2:e8:d4:82:9b:a2:16:
bd:77:28:aa:25:e0:20:5f:83:ca:51:4e:bd:03:3b:e7:a6:b6:
39:57:52:85:74:6b:47:3a:f5:7a:e9:de:28:ec:44:00:44:b7:
e1:ad:84:50:9d:e7:44:8a:e3:ed:38:ee:f9:40:66:23:02:a0:
da:31:94:49:5f:a8:5d:b1:48:74:ed:f1:e6:88:a1:65:04:fa:
46:5d:80:7c:ef:6b:07:b4:a4:db:e1:02:a7:ec:55:05:9e:d0:
9b:f7:01:d8:4b:db:6c:99:a0:a2:8c:77:cf:9b:cd:98:82:f2:
7d:a7:6e:df:f6:99:64:11:cd:a3:d6:73:1a:91:dd:ba:1e:ef:
51:2e:6f:17:7d:1a:fb:a4:72:d1:0f:36:54:ee:cd:b9:1d:b6:
cc:1e:23:70:f5:13:2a:73:b5:36:fb:98:d6:07:ee:ce:dc:05:
b2:48:03:7e:29:34:9a:4b:82:a9:1c:ad:e2:3f:9e:b3:24:71:
12:c6:54:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:53:44 2025 by rpki-client