Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/13da12-e553-4714-9618-4ce506cf7a2c/1/STGaFtGrBlzvNlhRkqfv-H-VFV8.mft
File: STGaFtGrBlzvNlhRkqfv-H-VFV8.mft (raw, json)
Hash identifier: nh0YHNaIiJokOm8WvcgIjbjwf0Ijs2N3g20U6eSQcOo=
Subject key identifier: 77:E9:F0:AD:FE:6F:DD:90:F0:77:E0:7C:A5:CB:A7:D8:65:7F:C9:34
Authority key identifier: 49:31:9A:16:D1:AB:06:5C:EF:36:58:51:92:A7:EF:F8:7F:95:15:5F
Certificate issuer: /CN=49319a16d1ab065cef36585192a7eff87f95155f
Certificate serial: 0194C387B97C05FD33793AF602704525742F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/STGaFtGrBlzvNlhRkqfv-H-VFV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/13da12-e553-4714-9618-4ce506cf7a2c/1/STGaFtGrBlzvNlhRkqfv-H-VFV8.mft
Manifest number: 02F0
Signing time: Sat 01 Feb 2025 22:00:39 +0000
Manifest this update: Sat 01 Feb 2025 22:00:39 +0000
Manifest next update: Sun 02 Feb 2025 22:00:39 +0000
Files and hashes: 1: STGaFtGrBlzvNlhRkqfv-H-VFV8.crl (hash: M+r6d/fqCnCyxrOeZqC7ECVl9mIiGpjMlJBcmYRwEjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/13da12-e553-4714-9618-4ce506cf7a2c/1/STGaFtGrBlzvNlhRkqfv-H-VFV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/13da12-e553-4714-9618-4ce506cf7a2c/1/STGaFtGrBlzvNlhRkqfv-H-VFV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/STGaFtGrBlzvNlhRkqfv-H-VFV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 22:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:87:b9:7c:05:fd:33:79:3a:f6:02:70:45:25:74:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49319a16d1ab065cef36585192a7eff87f95155f
Validity
Not Before: Feb 1 22:00:39 2025 GMT
Not After : Feb 2 22:00:39 2025 GMT
Subject: CN=77e9f0adfe6fdd90f077e07ca5cba7d8657fc934
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:8a:59:d6:6b:67:10:91:05:f6:f5:4e:2d:66:
b1:db:70:18:c0:30:c6:cc:be:65:bc:1c:fb:2c:8e:
2f:f3:e6:bb:b6:c5:f1:88:00:c0:de:14:8f:e6:8d:
71:0d:f9:d2:c5:af:62:0e:bd:5c:79:dc:df:d4:48:
22:a8:4d:ad:f8:23:ef:4c:ed:6c:2d:22:81:46:31:
d0:78:93:d5:56:f0:db:b2:d5:ec:0e:f0:79:ca:91:
a6:88:53:5c:94:a4:23:4f:a7:5a:83:77:81:dd:12:
71:c4:86:e9:b1:23:8b:ee:5b:46:58:94:cf:30:e0:
c9:0c:24:42:6f:49:21:4d:8e:0a:fb:b7:4c:3c:6b:
ac:2e:8a:47:08:b0:97:55:94:66:64:81:1f:33:64:
83:22:52:46:3d:5d:12:31:8c:79:dc:c1:38:3b:43:
14:90:5f:e7:ec:25:9d:a2:33:0a:39:27:75:e1:df:
0b:a5:ac:13:d0:74:4f:b4:84:a3:4e:ed:7c:de:b5:
03:cc:7f:98:9d:82:26:2f:57:ec:00:b1:89:4f:7a:
3a:ed:7b:41:c2:e1:5b:cf:04:f3:53:77:5b:ce:e8:
e1:ad:75:02:34:0f:81:77:49:89:22:2e:c0:d1:2d:
1d:38:a7:72:5b:7b:4f:65:46:3c:64:12:cf:18:67:
e9:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:E9:F0:AD:FE:6F:DD:90:F0:77:E0:7C:A5:CB:A7:D8:65:7F:C9:34
X509v3 Authority Key Identifier:
keyid:49:31:9A:16:D1:AB:06:5C:EF:36:58:51:92:A7:EF:F8:7F:95:15:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/STGaFtGrBlzvNlhRkqfv-H-VFV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/13da12-e553-4714-9618-4ce506cf7a2c/1/STGaFtGrBlzvNlhRkqfv-H-VFV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/13da12-e553-4714-9618-4ce506cf7a2c/1/STGaFtGrBlzvNlhRkqfv-H-VFV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:15:ef:d9:5f:db:57:0d:cf:96:51:a9:3d:9b:5e:71:94:9f:
a4:bb:bc:bd:12:5b:0d:81:7d:ae:7c:f4:c2:29:2c:cd:06:38:
c9:1b:71:6e:25:da:36:6e:71:e3:06:fc:68:31:dc:b0:b8:4b:
79:2c:c1:17:ba:a5:7c:3f:40:25:4c:d9:58:66:1e:40:7f:af:
9d:b8:15:e9:3d:0e:ec:d5:e6:cd:14:6f:a5:1b:d5:b4:f2:df:
62:d0:68:7a:fd:2d:c0:ac:75:bc:89:4e:3f:7f:65:15:a8:d9:
f5:04:16:9a:f1:43:de:b2:f7:df:b1:8d:57:ea:5c:70:7c:49:
52:d9:42:ad:b8:c2:3f:6e:b4:6a:23:62:ac:87:14:ef:6c:f4:
9b:10:d0:e6:11:a5:b4:2e:65:f3:4a:ec:cd:96:5a:5f:05:db:
50:0a:c2:89:91:85:ca:79:ce:d9:45:61:a6:46:40:b2:9c:88:
da:c4:7f:7e:78:8a:4d:59:77:d7:1b:cf:60:6b:8b:4e:3b:12:
d9:6a:8e:bf:4b:35:c1:68:2f:67:ee:07:e2:40:b3:b3:52:63:
77:71:b5:5b:5f:78:9c:ba:d5:a9:4f:e6:89:7e:b6:82:df:09:
80:0a:f6:32:bc:35:a6:6a:f2:7b:c5:6d:8b:81:0f:e3:bc:54:
0f:7a:72:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:03:26 2025 by rpki-client