Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/39db6c-f23b-4c9b-9f79-734994c52c1f/1/stsr_PWdmcpwgzcI_TADLyP-9IU.mft
File: stsr_PWdmcpwgzcI_TADLyP-9IU.mft (raw, json)
Hash identifier: cNjOwUclOsV+pMbkndtH5KwVYj/SrwFC5d7xBRnuqiU=
Subject key identifier: C7:7B:56:9A:7C:B8:54:CC:64:0B:CE:B0:B2:7E:09:E7:E8:ED:5D:6B
Authority key identifier: B2:DB:2B:FC:F5:9D:99:CA:70:83:37:08:FD:30:03:2F:23:FE:F4:85
Certificate issuer: /CN=b2db2bfcf59d99ca70833708fd30032f23fef485
Certificate serial: 01984A09D0B547ECF3A89BD1AA8A50C3D990
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/stsr_PWdmcpwgzcI_TADLyP-9IU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/39db6c-f23b-4c9b-9f79-734994c52c1f/1/stsr_PWdmcpwgzcI_TADLyP-9IU.mft
Manifest number: 15CD
Signing time: Sun 27 Jul 2025 04:00:13 +0000
Manifest this update: Sun 27 Jul 2025 04:00:13 +0000
Manifest next update: Mon 28 Jul 2025 04:00:13 +0000
Files and hashes: 1: 8OSq_me_piuY9aTEESBxQ_Nz1Zc.roa (hash: jli/f4rA8lzODNLo/sC1h2DAhvEwSPZMgYQGoXMtAvM=)
2: stsr_PWdmcpwgzcI_TADLyP-9IU.crl (hash: +FvpewRNzGZD1Z39JIx3BOH4p1O97tgUfZWUZsuH3p0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/39db6c-f23b-4c9b-9f79-734994c52c1f/1/stsr_PWdmcpwgzcI_TADLyP-9IU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/39db6c-f23b-4c9b-9f79-734994c52c1f/1/stsr_PWdmcpwgzcI_TADLyP-9IU.mft
rsync://rpki.ripe.net/repository/DEFAULT/stsr_PWdmcpwgzcI_TADLyP-9IU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 04:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:09:d0:b5:47:ec:f3:a8:9b:d1:aa:8a:50:c3:d9:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2db2bfcf59d99ca70833708fd30032f23fef485
Validity
Not Before: Jul 27 04:00:13 2025 GMT
Not After : Jul 28 04:00:13 2025 GMT
Subject: CN=c77b569a7cb854cc640bceb0b27e09e7e8ed5d6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:f3:71:23:49:a2:f2:68:89:f9:e2:16:56:2c:
28:c2:70:85:a7:78:12:19:7f:d2:f0:c1:84:f6:d8:
bb:36:76:ef:4b:e7:2b:d5:45:3e:36:29:ef:b6:03:
35:c5:9d:47:3c:a7:54:a3:b9:da:b4:c7:83:58:10:
ca:7b:54:3b:62:5f:5f:ab:80:f7:0d:de:50:f4:a2:
57:95:a2:94:0d:5a:a7:2d:6b:44:68:56:60:0c:dd:
56:33:69:7a:ad:2e:15:ea:b2:9c:00:ba:0d:d0:6c:
3e:fd:19:ee:e8:ab:3e:77:30:60:29:f1:aa:03:6f:
07:df:6b:b0:e3:f5:d1:fe:6b:c0:21:a9:e4:2b:31:
20:64:57:b1:4a:3f:95:ff:9a:8e:52:52:14:4d:fc:
af:ed:b5:72:44:8d:43:5a:49:57:37:bb:33:f8:9d:
ab:76:90:e3:67:41:01:29:95:8e:98:87:75:19:5e:
5a:4e:98:df:57:17:a6:71:36:a0:ed:eb:5c:4c:fc:
08:e4:bc:8c:fd:ca:05:7e:79:63:6d:e0:34:52:a1:
08:92:f1:de:24:b8:69:12:25:4c:2e:e5:c1:30:99:
84:9d:f5:9e:fc:f6:80:b6:6e:0b:b1:c6:c6:49:b1:
ae:84:3e:46:19:33:67:4f:62:d5:fb:bf:d3:1d:bc:
43:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:7B:56:9A:7C:B8:54:CC:64:0B:CE:B0:B2:7E:09:E7:E8:ED:5D:6B
X509v3 Authority Key Identifier:
keyid:B2:DB:2B:FC:F5:9D:99:CA:70:83:37:08:FD:30:03:2F:23:FE:F4:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/stsr_PWdmcpwgzcI_TADLyP-9IU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/39db6c-f23b-4c9b-9f79-734994c52c1f/1/stsr_PWdmcpwgzcI_TADLyP-9IU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/39db6c-f23b-4c9b-9f79-734994c52c1f/1/stsr_PWdmcpwgzcI_TADLyP-9IU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:61:70:62:96:06:50:a9:0c:40:b6:0d:de:fb:49:dd:cd:b1:
fa:37:b2:8f:9c:77:e3:d8:c3:d9:91:94:28:51:f8:67:c6:31:
75:ae:49:49:fe:0f:1f:b6:a7:7d:7b:94:81:39:e5:91:89:ec:
0a:25:59:bb:e4:e7:2c:bf:89:5b:4b:23:9c:17:2e:33:b3:23:
3a:d2:b5:04:0f:ea:00:18:12:16:6d:f1:9b:f1:3c:b3:4f:7f:
50:0e:78:28:92:31:80:0d:f8:a0:3b:5d:0a:fd:ba:cd:54:ca:
c9:71:4f:a1:4f:80:ab:ea:46:37:4a:d6:f9:3c:65:68:46:4a:
23:f1:f6:d7:6c:06:6f:af:83:b5:5f:77:1a:9c:19:5f:3b:dc:
b5:77:50:89:59:cb:5b:d7:33:78:e8:20:db:10:92:66:00:39:
f9:36:4c:bd:ca:6c:7c:0a:11:ee:6a:55:84:b6:85:0c:e7:ca:
c6:82:0a:99:7a:5b:e5:bf:d6:ab:69:40:7e:60:69:4e:f5:1a:
5f:49:22:84:ea:51:29:5e:fc:fb:18:98:ff:ea:c4:a4:67:e6:
ad:fb:65:7a:41:d1:cc:ef:35:8b:89:6f:ac:1c:da:af:53:06:
48:85:46:c4:e6:6c:a6:e6:cd:e9:67:aa:45:03:80:2d:80:09:
d0:6b:d7:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:57:19 2025 by rpki-client