Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/13da12-e553-4714-9618-4ce506cf7a2c/1/STGaFtGrBlzvNlhRkqfv-H-VFV8.mft
File: STGaFtGrBlzvNlhRkqfv-H-VFV8.mft (raw, json)
Hash identifier: KJGadIz7PO8Nc0RvuQxSA3A4mrXU9V6kv7cDx4slk1A=
Subject key identifier: D4:FF:84:3F:2A:DA:5E:E4:E9:DE:01:75:C0:3B:66:4F:E7:8B:D6:63
Authority key identifier: 49:31:9A:16:D1:AB:06:5C:EF:36:58:51:92:A7:EF:F8:7F:95:15:5F
Certificate issuer: /CN=49319a16d1ab065cef36585192a7eff87f95155f
Certificate serial: 01976772C1F66E4C38821E461C5D161CA035
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/STGaFtGrBlzvNlhRkqfv-H-VFV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/13da12-e553-4714-9618-4ce506cf7a2c/1/STGaFtGrBlzvNlhRkqfv-H-VFV8.mft
Manifest number: 044E
Signing time: Fri 13 Jun 2025 04:01:03 +0000
Manifest this update: Fri 13 Jun 2025 04:01:03 +0000
Manifest next update: Sat 14 Jun 2025 04:01:03 +0000
Files and hashes: 1: STGaFtGrBlzvNlhRkqfv-H-VFV8.crl (hash: 4Ta5AyWqWeJToH/EWq+LuajWebDLaTW+/EHnMsKHcTE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/13da12-e553-4714-9618-4ce506cf7a2c/1/STGaFtGrBlzvNlhRkqfv-H-VFV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/13da12-e553-4714-9618-4ce506cf7a2c/1/STGaFtGrBlzvNlhRkqfv-H-VFV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/STGaFtGrBlzvNlhRkqfv-H-VFV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 04:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:67:72:c1:f6:6e:4c:38:82:1e:46:1c:5d:16:1c:a0:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49319a16d1ab065cef36585192a7eff87f95155f
Validity
Not Before: Jun 13 04:01:03 2025 GMT
Not After : Jun 14 04:01:03 2025 GMT
Subject: CN=d4ff843f2ada5ee4e9de0175c03b664fe78bd663
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9d:dd:6b:47:69:88:af:63:1e:26:85:9a:8e:
4d:d2:bc:db:72:b9:97:b8:17:1c:52:2d:cb:a2:04:
b6:ee:1a:18:f6:5a:b5:96:eb:3c:22:5f:3c:e5:c9:
ab:fa:7f:fe:42:e5:99:07:16:32:74:14:b0:20:e1:
de:b4:b5:61:d1:10:f8:62:be:65:ff:f1:f3:5c:6c:
08:40:16:0f:6c:b3:bc:a9:e4:34:f9:03:7c:c3:61:
eb:4a:74:f6:2d:74:46:5e:1b:77:6d:79:01:6f:33:
01:00:62:0f:27:dd:b4:1e:dc:f3:c9:3d:9e:97:14:
fb:2a:9d:02:16:9a:5f:e5:a3:0d:00:a9:6a:ec:be:
a4:fd:31:8c:78:1b:0c:12:23:bf:a6:d8:4f:e9:4b:
ae:9d:c7:7c:2d:ee:c4:71:cf:6c:5e:77:4f:97:18:
71:10:43:46:bc:f8:cd:45:36:c1:8d:45:cf:2e:61:
bd:7a:6c:0b:83:e3:a3:fe:6e:3a:13:d5:0a:cf:dd:
bb:c0:bf:4c:ec:02:82:fa:ca:14:86:89:3e:e2:a9:
ce:6f:fe:6a:ee:44:05:43:df:6a:b5:20:62:c8:50:
3f:9b:44:e1:f2:e0:c7:6d:09:58:9f:e0:65:a6:81:
71:72:75:04:96:fc:2e:2f:dd:c3:34:c5:3a:2f:2e:
e3:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:FF:84:3F:2A:DA:5E:E4:E9:DE:01:75:C0:3B:66:4F:E7:8B:D6:63
X509v3 Authority Key Identifier:
keyid:49:31:9A:16:D1:AB:06:5C:EF:36:58:51:92:A7:EF:F8:7F:95:15:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/STGaFtGrBlzvNlhRkqfv-H-VFV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/13da12-e553-4714-9618-4ce506cf7a2c/1/STGaFtGrBlzvNlhRkqfv-H-VFV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/13da12-e553-4714-9618-4ce506cf7a2c/1/STGaFtGrBlzvNlhRkqfv-H-VFV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:fb:bf:6e:e5:96:2d:6b:0e:79:ab:12:8d:60:e3:ae:47:35:
50:ff:a0:be:c7:71:6a:eb:1d:82:59:88:f0:5e:a2:98:ae:7f:
ca:f4:a1:63:f7:44:65:8a:16:1b:a1:cb:37:8b:21:b5:f9:0a:
ad:2f:c2:5b:a0:3a:d7:9c:53:79:2d:97:36:f3:cc:cd:16:8d:
5e:50:f2:46:59:f2:f2:4a:f4:ee:ed:2c:3f:aa:71:3c:7c:4e:
e3:4b:e2:f3:87:aa:32:79:b0:47:01:f9:ec:75:65:60:65:b2:
72:f8:41:60:6d:39:f9:e9:19:d7:80:f6:ae:68:5b:31:7d:fc:
68:a0:d7:5f:da:f6:bd:1b:44:f1:d9:97:e0:df:57:33:85:16:
55:da:78:8d:45:59:0f:69:6e:10:df:b5:33:fd:36:c4:28:44:
1d:6a:30:45:51:16:31:e8:fa:b6:bc:11:36:b1:5e:54:a9:c3:
23:9a:2d:7f:b9:fb:9a:8e:b3:06:32:d2:be:5a:cc:6e:ad:71:
d7:d0:17:71:31:33:3d:0b:0b:59:05:95:b2:7d:78:01:ac:18:
ad:8f:dd:e7:ae:5a:93:79:12:fd:a1:ad:e1:ba:85:49:6a:49:
d0:eb:ea:4f:e5:3b:71:e6:da:72:b1:de:4b:18:f9:ae:44:d2:
e2:9f:b4:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdncsH2bkw4gh5GHF0WHKA1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5MzE5YTE2ZDFhYjA2NWNlZjM2NTg1MTkyYTdlZmY4N2Y5
NTE1NWYwHhcNMjUwNjEzMDQwMTAzWhcNMjUwNjE0MDQwMTAzWjAzMTEwLwYDVQQD
EyhkNGZmODQzZjJhZGE1ZWU0ZTlkZTAxNzVjMDNiNjY0ZmU3OGJkNjYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtp3da0dpiK9jHiaFmo5N0rzbcrmX
uBccUi3LogS27hoY9lq1lus8Il885cmr+n/+QuWZBxYydBSwIOHetLVh0RD4Yr5l
//HzXGwIQBYPbLO8qeQ0+QN8w2HrSnT2LXRGXht3bXkBbzMBAGIPJ920HtzzyT2e
lxT7Kp0CFppf5aMNAKlq7L6k/TGMeBsMEiO/pthP6Uuuncd8Le7Ecc9sXndPlxhx
EENGvPjNRTbBjUXPLmG9emwLg+Oj/m46E9UKz927wL9M7AKC+soUhok+4qnOb/5q
7kQFQ99qtSBiyFA/m0Th8uDHbQlYn+BlpoFxcnUElvwuL93DNMU6Ly7jGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNT/hD8q2l7k6d4BdcA7Zk/ni9ZjMB8GA1UdIwQY
MBaAFEkxmhbRqwZc7zZYUZKn7/h/lRVfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1RHYUZ0R3JCbHp2TmxoUmtxZnYtSC1WRlY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8xM2RhMTItZTU1My00NzE0LTk2MTgt
NGNlNTA2Y2Y3YTJjLzEvU1RHYUZ0R3JCbHp2TmxoUmtxZnYtSC1WRlY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC8xM2RhMTItZTU1My00NzE0LTk2MTgtNGNlNTA2Y2Y3YTJj
LzEvU1RHYUZ0R3JCbHp2TmxoUmtxZnYtSC1WRlY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB/u/buWW
LWsOeasSjWDjrkc1UP+gvsdxausdglmI8F6imK5/yvShY/dEZYoWG6HLN4shtfkK
rS/CW6A615xTeS2XNvPMzRaNXlDyRlny8kr07u0sP6pxPHxO40vi84eqMnmwRwH5
7HVlYGWycvhBYG05+ekZ14D2rmhbMX38aKDXX9r2vRtE8dmX4N9XM4UWVdp4jUVZ
D2luEN+1M/02xChEHWowRVEWMej6trwRNrFeVKnDI5otf7n7mo6zBjLSvlrMbq1x
19AXcTEzPQsLWQWVsn14AawYrY/d565ak3kS/aGt4bqFSWpJ0OvqT+U7cebacrHe
Sxj5rkTS4p+0lw==
-----END CERTIFICATE-----
Generated at Fri Jun 13 13:24:18 2025 by rpki-client