Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/13da12-e553-4714-9618-4ce506cf7a2c/1/STGaFtGrBlzvNlhRkqfv-H-VFV8.mft
File: STGaFtGrBlzvNlhRkqfv-H-VFV8.mft (raw, json)
Hash identifier: Trj/TaWATI949g3Y1vJ7Wlnv5IBS5tV7P+9OjL0lCPg=
Subject key identifier: 63:26:CE:A5:76:C6:AD:93:1C:F1:A0:75:63:CA:F0:0B:97:2B:E5:BB
Authority key identifier: 49:31:9A:16:D1:AB:06:5C:EF:36:58:51:92:A7:EF:F8:7F:95:15:5F
Certificate issuer: /CN=49319a16d1ab065cef36585192a7eff87f95155f
Certificate serial: 019660CEED3D145C4F7A5F2BC5E69FD662BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/STGaFtGrBlzvNlhRkqfv-H-VFV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/13da12-e553-4714-9618-4ce506cf7a2c/1/STGaFtGrBlzvNlhRkqfv-H-VFV8.mft
Manifest number: 03C6
Signing time: Wed 23 Apr 2025 04:01:35 +0000
Manifest this update: Wed 23 Apr 2025 04:01:35 +0000
Manifest next update: Thu 24 Apr 2025 04:01:35 +0000
Files and hashes: 1: STGaFtGrBlzvNlhRkqfv-H-VFV8.crl (hash: Bo51db8slLPcgqrM+e2VsAcr8p1CnvxE7PRB0JzVY5o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/13da12-e553-4714-9618-4ce506cf7a2c/1/STGaFtGrBlzvNlhRkqfv-H-VFV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/13da12-e553-4714-9618-4ce506cf7a2c/1/STGaFtGrBlzvNlhRkqfv-H-VFV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/STGaFtGrBlzvNlhRkqfv-H-VFV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Apr 2025 04:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:60:ce:ed:3d:14:5c:4f:7a:5f:2b:c5:e6:9f:d6:62:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49319a16d1ab065cef36585192a7eff87f95155f
Validity
Not Before: Apr 23 04:01:35 2025 GMT
Not After : Apr 24 04:01:35 2025 GMT
Subject: CN=6326cea576c6ad931cf1a07563caf00b972be5bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e5:2a:a0:dd:88:e2:ae:a0:c8:9c:6f:94:38:
bc:1d:2a:4f:a0:86:46:de:7e:67:41:5f:28:1d:63:
b8:7f:78:9e:27:a0:53:82:74:08:4c:10:ee:ca:55:
73:25:53:7a:b9:fd:77:9d:cf:07:e9:11:c7:7e:f8:
8c:dd:eb:1e:a3:e3:aa:05:e1:3c:49:64:66:b6:63:
1c:77:23:11:39:43:92:11:c3:38:bc:1e:28:06:ac:
4c:02:ca:62:4b:eb:f5:5e:64:81:a0:f6:8d:fc:ed:
0e:56:88:b2:97:01:91:ec:77:ad:8c:05:d6:65:8b:
36:4e:42:cf:65:53:8d:37:c7:ca:fc:81:35:79:c3:
fe:97:0a:64:42:95:90:50:03:0a:7b:c7:55:75:3f:
25:5d:88:cd:70:c5:09:c4:09:82:44:5a:9d:07:17:
8f:2e:8c:81:4a:08:42:44:cf:12:41:ab:68:64:7e:
ec:4e:22:7c:d1:10:eb:c7:ee:29:2b:bd:f5:a4:9a:
0e:6a:5a:c1:bf:ac:0e:cc:20:77:cb:b6:cd:10:c5:
3f:47:77:41:3f:fc:6c:7a:0b:31:0d:ca:85:54:96:
c2:8d:fc:19:1f:38:01:64:c4:d1:42:51:c5:9a:d2:
79:c1:c9:8d:e0:55:fb:6a:c0:38:d2:28:ac:77:96:
ea:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:26:CE:A5:76:C6:AD:93:1C:F1:A0:75:63:CA:F0:0B:97:2B:E5:BB
X509v3 Authority Key Identifier:
keyid:49:31:9A:16:D1:AB:06:5C:EF:36:58:51:92:A7:EF:F8:7F:95:15:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/STGaFtGrBlzvNlhRkqfv-H-VFV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/13da12-e553-4714-9618-4ce506cf7a2c/1/STGaFtGrBlzvNlhRkqfv-H-VFV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/13da12-e553-4714-9618-4ce506cf7a2c/1/STGaFtGrBlzvNlhRkqfv-H-VFV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:df:09:9c:c8:ab:67:26:62:87:1c:94:aa:80:53:9b:b1:ae:
50:02:33:c0:dc:f2:50:b5:39:a4:94:ac:0d:0d:71:d1:b0:95:
82:b0:ef:34:ff:d0:86:c3:61:1d:ec:cf:26:c9:9f:67:aa:72:
23:84:15:04:2a:de:71:31:9a:ea:e0:c3:f3:cb:5e:b7:5b:88:
36:7e:17:bf:40:c4:ec:c6:2e:21:5a:e5:50:f2:e7:9a:75:29:
f3:30:b1:8c:62:c5:04:ad:4c:c7:90:b0:62:5c:7e:2c:27:a3:
08:2a:79:74:9f:cb:3e:d5:97:44:f9:21:73:d9:f6:3f:62:82:
7f:f8:f7:4d:8a:c2:c7:fc:ef:36:40:ef:cf:6a:d1:10:e1:f7:
5f:8d:bc:32:32:11:ba:bf:df:2d:16:e2:db:ff:9d:29:ce:dc:
74:fd:55:7f:05:3a:2f:1a:c9:ba:27:80:28:b4:23:87:bc:69:
2f:c8:dc:5a:ad:b2:33:b4:98:ab:39:05:a9:08:e5:24:57:b0:
67:2c:e2:bb:05:29:03:ab:5f:ec:c5:59:c1:67:d9:62:ea:13:
20:29:b1:0e:ce:da:ba:10:1a:7f:94:0f:f0:33:0d:07:6c:83:
84:58:5a:23:74:fc:b4:4f:1f:aa:51:62:77:97:31:88:45:86:
93:06:37:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZgzu09FFxPel8rxeaf1mK/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5MzE5YTE2ZDFhYjA2NWNlZjM2NTg1MTkyYTdlZmY4N2Y5
NTE1NWYwHhcNMjUwNDIzMDQwMTM1WhcNMjUwNDI0MDQwMTM1WjAzMTEwLwYDVQQD
Eyg2MzI2Y2VhNTc2YzZhZDkzMWNmMWEwNzU2M2NhZjAwYjk3MmJlNWJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApeUqoN2I4q6gyJxvlDi8HSpPoIZG
3n5nQV8oHWO4f3ieJ6BTgnQITBDuylVzJVN6uf13nc8H6RHHfviM3eseo+OqBeE8
SWRmtmMcdyMROUOSEcM4vB4oBqxMAspiS+v1XmSBoPaN/O0OVoiylwGR7HetjAXW
ZYs2TkLPZVONN8fK/IE1ecP+lwpkQpWQUAMKe8dVdT8lXYjNcMUJxAmCRFqdBxeP
LoyBSghCRM8SQatoZH7sTiJ80RDrx+4pK731pJoOalrBv6wOzCB3y7bNEMU/R3dB
P/xsegsxDcqFVJbCjfwZHzgBZMTRQlHFmtJ5wcmN4FX7asA40iisd5bqYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGMmzqV2xq2THPGgdWPK8AuXK+W7MB8GA1UdIwQY
MBaAFEkxmhbRqwZc7zZYUZKn7/h/lRVfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1RHYUZ0R3JCbHp2TmxoUmtxZnYtSC1WRlY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8xM2RhMTItZTU1My00NzE0LTk2MTgt
NGNlNTA2Y2Y3YTJjLzEvU1RHYUZ0R3JCbHp2TmxoUmtxZnYtSC1WRlY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC8xM2RhMTItZTU1My00NzE0LTk2MTgtNGNlNTA2Y2Y3YTJj
LzEvU1RHYUZ0R3JCbHp2TmxoUmtxZnYtSC1WRlY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACN8JnMir
ZyZihxyUqoBTm7GuUAIzwNzyULU5pJSsDQ1x0bCVgrDvNP/QhsNhHezPJsmfZ6py
I4QVBCrecTGa6uDD88tet1uINn4Xv0DE7MYuIVrlUPLnmnUp8zCxjGLFBK1Mx5Cw
Ylx+LCejCCp5dJ/LPtWXRPkhc9n2P2KCf/j3TYrCx/zvNkDvz2rREOH3X428MjIR
ur/fLRbi2/+dKc7cdP1VfwU6LxrJuieAKLQjh7xpL8jcWq2yM7SYqzkFqQjlJFew
ZyziuwUpA6tf7MVZwWfZYuoTICmxDs7auhAaf5QP8DMNB2yDhFhaI3T8tE8fqlFi
d5cxiEWGkwY3/A==
-----END CERTIFICATE-----
Generated at Wed Apr 23 09:36:16 2025 by rpki-client