Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/13da12-e553-4714-9618-4ce506cf7a2c/1/STGaFtGrBlzvNlhRkqfv-H-VFV8.mft
File:                     STGaFtGrBlzvNlhRkqfv-H-VFV8.mft (raw, json)
Hash identifier:          0E7HFTwvUeqRLFxLnf7CbL8yIXaLALAj16BK31Jb09A=
Subject key identifier:   24:D4:73:8F:17:E5:11:95:20:A7:BA:72:37:20:70:A9:F0:13:0A:CD
Authority key identifier: 49:31:9A:16:D1:AB:06:5C:EF:36:58:51:92:A7:EF:F8:7F:95:15:5F
Certificate issuer:       /CN=49319a16d1ab065cef36585192a7eff87f95155f
Certificate serial:       019759EEA76F86FF1CA36199F41A4718A9C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/STGaFtGrBlzvNlhRkqfv-H-VFV8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/13da12-e553-4714-9618-4ce506cf7a2c/1/STGaFtGrBlzvNlhRkqfv-H-VFV8.mft
Manifest number:          0447
Signing time:             Tue 10 Jun 2025 13:01:41 +0000
Manifest this update:     Tue 10 Jun 2025 13:01:41 +0000
Manifest next update:     Wed 11 Jun 2025 13:01:41 +0000
Files and hashes:         1: STGaFtGrBlzvNlhRkqfv-H-VFV8.crl (hash: 73Xbxz/J1PYntdqKIFfAgVbWIbmA5AJAmAzCPIKyCGI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/13da12-e553-4714-9618-4ce506cf7a2c/1/STGaFtGrBlzvNlhRkqfv-H-VFV8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/13da12-e553-4714-9618-4ce506cf7a2c/1/STGaFtGrBlzvNlhRkqfv-H-VFV8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/STGaFtGrBlzvNlhRkqfv-H-VFV8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 13:01:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:59:ee:a7:6f:86:ff:1c:a3:61:99:f4:1a:47:18:a9:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49319a16d1ab065cef36585192a7eff87f95155f
        Validity
            Not Before: Jun 10 13:01:41 2025 GMT
            Not After : Jun 11 13:01:41 2025 GMT
        Subject: CN=24d4738f17e5119520a7ba72372070a9f0130acd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:69:df:48:e7:f1:29:6f:12:0c:43:98:97:24:
                    c2:dd:31:67:ef:a1:08:7f:13:7c:e1:74:d8:1b:33:
                    5e:e5:16:37:ce:f7:fd:ab:c9:95:23:35:b9:35:ba:
                    f0:8b:e5:e4:9a:58:05:0b:e5:7d:67:65:7c:ff:b4:
                    57:a2:78:5b:da:1d:24:6c:cb:95:70:3c:9d:e4:fa:
                    6f:ec:46:53:08:a9:fe:e5:ee:8e:b5:d9:86:0f:74:
                    52:9f:b0:f0:46:1d:d9:43:2e:40:f8:3b:53:5e:d4:
                    10:3a:12:fc:af:69:75:85:b9:ba:ff:f6:b1:0c:7f:
                    d3:4b:7c:c2:77:87:45:84:ab:85:40:12:11:2b:84:
                    9a:08:30:1d:05:d4:e9:f1:ad:34:c0:54:b4:da:cc:
                    a4:06:b3:c1:86:20:d3:78:eb:e6:9c:bc:64:79:cf:
                    44:a3:ec:27:7a:ca:d4:7e:4c:cb:05:bf:8d:34:60:
                    f5:2d:36:ef:f3:06:27:d8:d3:6d:b0:ab:de:46:8d:
                    e1:38:3d:14:61:f2:9f:38:ff:8b:88:d3:d0:61:ac:
                    88:a1:e1:59:70:8d:b6:db:f7:d7:23:99:6f:a5:19:
                    ef:1a:1c:af:68:b5:c0:74:b9:ee:90:7c:9d:b1:4f:
                    ce:27:7f:5c:ef:4d:ed:c5:a8:04:ea:83:fd:f3:52:
                    9a:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:D4:73:8F:17:E5:11:95:20:A7:BA:72:37:20:70:A9:F0:13:0A:CD
            X509v3 Authority Key Identifier:
                keyid:49:31:9A:16:D1:AB:06:5C:EF:36:58:51:92:A7:EF:F8:7F:95:15:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/STGaFtGrBlzvNlhRkqfv-H-VFV8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/13da12-e553-4714-9618-4ce506cf7a2c/1/STGaFtGrBlzvNlhRkqfv-H-VFV8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/13da12-e553-4714-9618-4ce506cf7a2c/1/STGaFtGrBlzvNlhRkqfv-H-VFV8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:0c:46:75:96:1d:39:17:59:9a:3c:6f:ad:88:c1:9b:5b:43:
         4a:18:0a:ec:80:59:1a:e5:12:97:4e:49:f8:6f:a4:18:d9:25:
         20:27:07:d0:a2:58:77:e0:e4:f9:f6:6f:4f:34:62:9a:ce:0d:
         0c:fc:3a:1a:c0:8d:49:32:a9:59:69:db:63:8a:19:30:6b:1a:
         5a:65:e7:92:1f:18:32:2c:af:0b:92:9f:b7:ea:7e:50:af:f0:
         06:94:de:6f:1c:c8:b1:99:a3:a8:4d:0a:a7:9b:1e:ae:4b:9d:
         0e:fa:89:18:e3:de:d2:7c:75:c7:21:74:e2:f5:0f:16:34:52:
         67:37:5f:f7:bd:1b:9d:e7:83:a0:ca:36:a5:56:a0:f8:4a:a4:
         fe:9e:d6:72:a6:83:e7:05:72:59:30:41:12:9f:9d:58:92:ac:
         da:4f:3b:d9:40:cf:63:be:8d:45:11:9d:54:98:e3:ff:e9:d1:
         88:43:8a:64:21:79:b4:7d:1d:a5:d0:40:0b:ff:6c:93:a1:ca:
         3c:e8:c7:f1:8f:f6:7b:6a:3b:41:a6:ab:b3:9c:8b:29:2b:8f:
         86:45:6c:fa:76:de:a0:f6:ca:bf:ae:53:35:41:e5:ad:88:ad:
         43:1b:62:0b:79:84:00:73:8e:9a:63:3f:a0:ff:df:c6:47:31:
         3f:c7:5f:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 17:44:10 2025 by rpki-client