Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/698efb-c6b4-4d2c-9368-7cec2d5345b4/1/stf5mYOKoWO_NE_GmRe7YNEv38M.mft
File: stf5mYOKoWO_NE_GmRe7YNEv38M.mft (raw, json)
Hash identifier: 1hlyQ73oZ9Vt2DfuZ+fjhvxnY6CmI9rUWCzifmPzzy4=
Subject key identifier: D4:24:16:C9:4E:C3:1D:A2:F9:21:4C:91:4D:70:18:C9:32:B2:4A:40
Authority key identifier: B2:D7:F9:99:83:8A:A1:63:BF:34:4F:C6:99:17:BB:60:D1:2F:DF:C3
Certificate issuer: /CN=b2d7f999838aa163bf344fc69917bb60d12fdfc3
Certificate serial: 01965D2851B2B26C620EFF40CE181F4AFB2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/stf5mYOKoWO_NE_GmRe7YNEv38M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/698efb-c6b4-4d2c-9368-7cec2d5345b4/1/stf5mYOKoWO_NE_GmRe7YNEv38M.mft
Manifest number: 0FF1
Signing time: Tue 22 Apr 2025 11:00:45 +0000
Manifest this update: Tue 22 Apr 2025 11:00:45 +0000
Manifest next update: Wed 23 Apr 2025 11:00:45 +0000
Files and hashes: 1: i-DPtzOhX1UrAwvJvp6e_VFBpfU.roa (hash: b0DJ4Ik9RBvNDvd/V/+wWQQR6BcIK0SHDpRuzhlzJ6o=)
2: stf5mYOKoWO_NE_GmRe7YNEv38M.crl (hash: kUhKnZA1ZTuRSjzgkhE8up6YHhkTJU8hqGDiT5JFpX4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/698efb-c6b4-4d2c-9368-7cec2d5345b4/1/stf5mYOKoWO_NE_GmRe7YNEv38M.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/698efb-c6b4-4d2c-9368-7cec2d5345b4/1/stf5mYOKoWO_NE_GmRe7YNEv38M.mft
rsync://rpki.ripe.net/repository/DEFAULT/stf5mYOKoWO_NE_GmRe7YNEv38M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 11:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5d:28:51:b2:b2:6c:62:0e:ff:40:ce:18:1f:4a:fb:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2d7f999838aa163bf344fc69917bb60d12fdfc3
Validity
Not Before: Apr 22 11:00:45 2025 GMT
Not After : Apr 23 11:00:45 2025 GMT
Subject: CN=d42416c94ec31da2f9214c914d7018c932b24a40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:72:1f:43:a4:8f:19:ae:6f:76:75:f2:d0:9b:
6c:d8:6d:ac:e3:7b:a8:85:32:ef:c8:b2:a9:2f:17:
84:ef:5d:f9:b6:a2:97:f5:27:bb:55:2c:b8:97:ef:
e7:bb:49:7d:c6:e3:51:55:3a:94:99:8a:11:96:8f:
f0:d9:e7:32:ab:3a:e8:2d:3f:bb:4a:cd:0b:4d:78:
22:57:71:e8:cc:c1:58:63:d8:3e:9b:7f:52:76:fe:
9b:aa:ea:09:6f:30:d0:87:1f:8f:e8:41:a7:ff:5b:
9b:8c:3e:f7:24:0d:31:af:58:0d:d7:63:79:67:e7:
f9:9d:89:36:c3:e9:d5:4f:62:95:ad:f7:a3:74:26:
ae:88:ff:f2:95:7c:5e:60:8e:78:ee:56:64:b7:c2:
41:51:fb:cf:be:f9:3d:84:f7:9b:99:f4:45:b4:87:
9b:be:e8:4c:2c:07:98:69:33:e7:bd:52:b4:dc:2e:
d9:ec:e3:be:85:6a:d8:59:cd:a0:a6:a3:7d:9a:a1:
ae:75:9a:ba:16:c5:9a:4c:02:73:26:e5:91:ac:ac:
f9:20:f3:a2:bd:2e:08:af:8f:e2:f1:f9:6e:1a:e5:
ee:dd:ad:16:7f:51:84:4d:87:bc:b8:b8:e9:30:4d:
6f:39:fb:b7:72:b1:ce:c4:fa:be:d5:f8:02:92:d8:
60:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:24:16:C9:4E:C3:1D:A2:F9:21:4C:91:4D:70:18:C9:32:B2:4A:40
X509v3 Authority Key Identifier:
keyid:B2:D7:F9:99:83:8A:A1:63:BF:34:4F:C6:99:17:BB:60:D1:2F:DF:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/stf5mYOKoWO_NE_GmRe7YNEv38M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/698efb-c6b4-4d2c-9368-7cec2d5345b4/1/stf5mYOKoWO_NE_GmRe7YNEv38M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/698efb-c6b4-4d2c-9368-7cec2d5345b4/1/stf5mYOKoWO_NE_GmRe7YNEv38M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:79:f9:9a:82:93:56:22:89:a9:3f:9c:3b:ce:7e:d1:1f:31:
8c:48:f3:1d:5f:98:7d:90:c8:af:54:2f:98:b8:67:fd:45:26:
5d:1c:7c:49:e4:67:15:d3:7d:4e:66:67:37:29:94:f1:18:7c:
58:fb:9c:d4:1b:3c:e0:5c:2f:5b:11:fe:c8:ed:3e:f4:5b:4b:
e6:3b:df:c0:0e:d8:60:aa:08:6b:47:34:8d:ae:5d:10:f9:65:
6b:4b:25:9d:45:ac:38:bc:c6:22:ce:fd:e0:c6:d5:a4:32:99:
ca:50:a6:fd:c7:a8:7c:6d:98:fa:da:0e:8a:f4:8e:67:b7:40:
5b:6a:59:1a:62:76:1d:80:7f:45:85:9f:85:d7:d8:96:c3:0f:
b8:b3:f4:92:4f:99:cb:f1:4b:87:cb:5a:c9:10:05:97:7a:08:
f2:90:50:f2:48:8d:d3:14:c2:13:29:c2:88:4e:6d:69:72:67:
b8:7a:e3:4d:f5:6d:57:69:f6:af:55:c1:5f:06:3e:f5:f0:ef:
39:fb:b1:94:43:e1:ac:34:64:41:87:58:2b:9e:69:1b:69:1f:
7a:a2:3d:a9:f1:ef:b0:a8:21:c5:11:59:6b:58:93:41:e5:8b:
67:62:ef:6b:b4:22:e1:6d:a5:45:69:65:07:f7:43:e5:d9:27:
0a:d3:f8:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 20:49:29 2025 by rpki-client