Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/8273b5-279c-4323-82dc-c257607317f3/1/_stf432FEfZ6YFMW6wlTU4_P6ec.mft
File: _stf432FEfZ6YFMW6wlTU4_P6ec.mft (raw, json)
Hash identifier: cTbwNJAXtofWgoDP/5/SN3CmDqSZSkohWKvVGnurVgA=
Subject key identifier: 94:8F:6B:FA:80:C9:F9:8C:20:BE:1E:21:57:20:F7:9A:6F:07:2B:3B
Authority key identifier: FE:CB:5F:E3:7D:85:11:F6:7A:60:53:16:EB:09:53:53:8F:CF:E9:E7
Certificate issuer: /CN=fecb5fe37d8511f67a605316eb0953538fcfe9e7
Certificate serial: 019749D5D2CD4452AE632D8DD323ED5B7E5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_stf432FEfZ6YFMW6wlTU4_P6ec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/8273b5-279c-4323-82dc-c257607317f3/1/_stf432FEfZ6YFMW6wlTU4_P6ec.mft
Manifest number: 0F57
Signing time: Sat 07 Jun 2025 10:00:39 +0000
Manifest this update: Sat 07 Jun 2025 10:00:39 +0000
Manifest next update: Sun 08 Jun 2025 10:00:39 +0000
Files and hashes: 1: _stf432FEfZ6YFMW6wlTU4_P6ec.crl (hash: q7iG1kf9YkvUVjhxqS7OCVROMO3yR0K4HE+lNxpCBts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/8273b5-279c-4323-82dc-c257607317f3/1/_stf432FEfZ6YFMW6wlTU4_P6ec.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/8273b5-279c-4323-82dc-c257607317f3/1/_stf432FEfZ6YFMW6wlTU4_P6ec.mft
rsync://rpki.ripe.net/repository/DEFAULT/_stf432FEfZ6YFMW6wlTU4_P6ec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d5:d2:cd:44:52:ae:63:2d:8d:d3:23:ed:5b:7e:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fecb5fe37d8511f67a605316eb0953538fcfe9e7
Validity
Not Before: Jun 7 10:00:39 2025 GMT
Not After : Jun 8 10:00:39 2025 GMT
Subject: CN=948f6bfa80c9f98c20be1e215720f79a6f072b3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a1:63:e7:9d:38:88:36:93:84:96:27:c3:2e:
bc:f9:59:1b:b2:19:34:6f:2a:a1:dc:f0:5d:52:9b:
04:85:1e:03:f5:4f:8a:c3:f0:20:4f:4f:c5:e9:cc:
d1:4d:fa:f1:0c:b9:bd:0c:51:d3:ec:69:86:30:f0:
11:20:12:ab:cf:2f:b7:72:cc:eb:8b:20:e6:d8:6a:
33:8f:3c:80:99:fe:d4:d7:37:59:da:62:9e:59:52:
f4:fd:76:04:3d:94:26:b0:c1:34:1f:c3:f5:31:59:
5d:db:af:39:3c:ff:18:bd:83:09:6a:7d:e5:a7:9d:
bb:98:67:78:70:be:d5:dd:47:a1:2c:6c:90:8a:15:
48:06:81:6e:af:bc:d2:a7:62:1e:18:08:49:a6:9d:
63:da:ad:c5:0a:20:9f:35:13:09:0c:26:a6:e6:da:
94:46:bf:09:90:9f:23:1e:a7:b8:3e:4a:6f:6c:ad:
38:12:5c:a0:5a:0a:f5:cf:0d:28:12:b9:2d:58:31:
dd:da:e3:c9:3c:25:96:b8:19:d4:86:81:a2:2e:b5:
bf:4d:79:fd:24:8c:36:f5:ed:e8:b0:e1:c6:90:bf:
2a:7d:3b:d4:b7:76:55:66:a6:15:7b:9a:20:ab:bc:
ff:47:68:8d:65:53:c6:c0:f3:25:63:bc:ed:ed:80:
e1:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:8F:6B:FA:80:C9:F9:8C:20:BE:1E:21:57:20:F7:9A:6F:07:2B:3B
X509v3 Authority Key Identifier:
keyid:FE:CB:5F:E3:7D:85:11:F6:7A:60:53:16:EB:09:53:53:8F:CF:E9:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_stf432FEfZ6YFMW6wlTU4_P6ec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/8273b5-279c-4323-82dc-c257607317f3/1/_stf432FEfZ6YFMW6wlTU4_P6ec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/8273b5-279c-4323-82dc-c257607317f3/1/_stf432FEfZ6YFMW6wlTU4_P6ec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:ec:06:a3:01:e0:de:ed:92:07:3f:ee:cb:53:80:14:a2:00:
dd:fd:fd:00:40:c2:a7:2a:e0:35:a8:83:c7:7f:3f:d7:d2:0b:
5a:95:0b:fc:2b:59:46:df:fd:00:4b:d9:ee:28:e6:95:d4:15:
74:7e:23:cc:7e:6c:af:ed:af:32:36:8b:70:63:68:e2:bc:a5:
af:5b:54:5f:5d:0c:d6:80:57:06:81:7c:db:da:ee:0d:21:1e:
22:58:6d:20:29:61:f8:5b:8a:07:86:08:bd:c3:60:67:18:88:
40:31:0c:37:e5:a6:aa:28:3c:63:68:ee:dd:ef:98:46:d8:87:
89:e8:b0:04:8e:5d:bd:88:f7:55:19:7a:e3:d1:cb:c8:3f:c3:
e6:1f:10:a5:41:80:20:f4:79:83:17:73:72:5e:e4:17:4b:73:
a9:cb:df:8d:27:5d:b9:c4:83:d5:e7:8e:52:61:53:6c:c0:63:
da:c3:89:8b:5d:c8:c6:d6:92:eb:42:23:c6:64:d5:e9:6c:f2:
db:67:c8:df:f2:85:a3:9b:51:ab:bd:13:eb:c8:83:c1:20:f2:
69:0a:93:ee:69:bf:ea:0b:bc:4e:61:dc:98:95:a3:15:a8:3a:
13:9d:43:bd:ec:34:b4:a5:8c:da:b1:62:8a:f0:47:63:88:ed:
5a:2c:bb:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:52:04 2025 by rpki-client