Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/13da12-e553-4714-9618-4ce506cf7a2c/1/STGaFtGrBlzvNlhRkqfv-H-VFV8.mft
File: STGaFtGrBlzvNlhRkqfv-H-VFV8.mft (raw, json)
Hash identifier: 0E7HFTwvUeqRLFxLnf7CbL8yIXaLALAj16BK31Jb09A=
Subject key identifier: 24:D4:73:8F:17:E5:11:95:20:A7:BA:72:37:20:70:A9:F0:13:0A:CD
Authority key identifier: 49:31:9A:16:D1:AB:06:5C:EF:36:58:51:92:A7:EF:F8:7F:95:15:5F
Certificate issuer: /CN=49319a16d1ab065cef36585192a7eff87f95155f
Certificate serial: 019759EEA76F86FF1CA36199F41A4718A9C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/STGaFtGrBlzvNlhRkqfv-H-VFV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/13da12-e553-4714-9618-4ce506cf7a2c/1/STGaFtGrBlzvNlhRkqfv-H-VFV8.mft
Manifest number: 0447
Signing time: Tue 10 Jun 2025 13:01:41 +0000
Manifest this update: Tue 10 Jun 2025 13:01:41 +0000
Manifest next update: Wed 11 Jun 2025 13:01:41 +0000
Files and hashes: 1: STGaFtGrBlzvNlhRkqfv-H-VFV8.crl (hash: 73Xbxz/J1PYntdqKIFfAgVbWIbmA5AJAmAzCPIKyCGI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/13da12-e553-4714-9618-4ce506cf7a2c/1/STGaFtGrBlzvNlhRkqfv-H-VFV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/13da12-e553-4714-9618-4ce506cf7a2c/1/STGaFtGrBlzvNlhRkqfv-H-VFV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/STGaFtGrBlzvNlhRkqfv-H-VFV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 13:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:59:ee:a7:6f:86:ff:1c:a3:61:99:f4:1a:47:18:a9:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49319a16d1ab065cef36585192a7eff87f95155f
Validity
Not Before: Jun 10 13:01:41 2025 GMT
Not After : Jun 11 13:01:41 2025 GMT
Subject: CN=24d4738f17e5119520a7ba72372070a9f0130acd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:69:df:48:e7:f1:29:6f:12:0c:43:98:97:24:
c2:dd:31:67:ef:a1:08:7f:13:7c:e1:74:d8:1b:33:
5e:e5:16:37:ce:f7:fd:ab:c9:95:23:35:b9:35:ba:
f0:8b:e5:e4:9a:58:05:0b:e5:7d:67:65:7c:ff:b4:
57:a2:78:5b:da:1d:24:6c:cb:95:70:3c:9d:e4:fa:
6f:ec:46:53:08:a9:fe:e5:ee:8e:b5:d9:86:0f:74:
52:9f:b0:f0:46:1d:d9:43:2e:40:f8:3b:53:5e:d4:
10:3a:12:fc:af:69:75:85:b9:ba:ff:f6:b1:0c:7f:
d3:4b:7c:c2:77:87:45:84:ab:85:40:12:11:2b:84:
9a:08:30:1d:05:d4:e9:f1:ad:34:c0:54:b4:da:cc:
a4:06:b3:c1:86:20:d3:78:eb:e6:9c:bc:64:79:cf:
44:a3:ec:27:7a:ca:d4:7e:4c:cb:05:bf:8d:34:60:
f5:2d:36:ef:f3:06:27:d8:d3:6d:b0:ab:de:46:8d:
e1:38:3d:14:61:f2:9f:38:ff:8b:88:d3:d0:61:ac:
88:a1:e1:59:70:8d:b6:db:f7:d7:23:99:6f:a5:19:
ef:1a:1c:af:68:b5:c0:74:b9:ee:90:7c:9d:b1:4f:
ce:27:7f:5c:ef:4d:ed:c5:a8:04:ea:83:fd:f3:52:
9a:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:D4:73:8F:17:E5:11:95:20:A7:BA:72:37:20:70:A9:F0:13:0A:CD
X509v3 Authority Key Identifier:
keyid:49:31:9A:16:D1:AB:06:5C:EF:36:58:51:92:A7:EF:F8:7F:95:15:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/STGaFtGrBlzvNlhRkqfv-H-VFV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/13da12-e553-4714-9618-4ce506cf7a2c/1/STGaFtGrBlzvNlhRkqfv-H-VFV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/13da12-e553-4714-9618-4ce506cf7a2c/1/STGaFtGrBlzvNlhRkqfv-H-VFV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:0c:46:75:96:1d:39:17:59:9a:3c:6f:ad:88:c1:9b:5b:43:
4a:18:0a:ec:80:59:1a:e5:12:97:4e:49:f8:6f:a4:18:d9:25:
20:27:07:d0:a2:58:77:e0:e4:f9:f6:6f:4f:34:62:9a:ce:0d:
0c:fc:3a:1a:c0:8d:49:32:a9:59:69:db:63:8a:19:30:6b:1a:
5a:65:e7:92:1f:18:32:2c:af:0b:92:9f:b7:ea:7e:50:af:f0:
06:94:de:6f:1c:c8:b1:99:a3:a8:4d:0a:a7:9b:1e:ae:4b:9d:
0e:fa:89:18:e3:de:d2:7c:75:c7:21:74:e2:f5:0f:16:34:52:
67:37:5f:f7:bd:1b:9d:e7:83:a0:ca:36:a5:56:a0:f8:4a:a4:
fe:9e:d6:72:a6:83:e7:05:72:59:30:41:12:9f:9d:58:92:ac:
da:4f:3b:d9:40:cf:63:be:8d:45:11:9d:54:98:e3:ff:e9:d1:
88:43:8a:64:21:79:b4:7d:1d:a5:d0:40:0b:ff:6c:93:a1:ca:
3c:e8:c7:f1:8f:f6:7b:6a:3b:41:a6:ab:b3:9c:8b:29:2b:8f:
86:45:6c:fa:76:de:a0:f6:ca:bf:ae:53:35:41:e5:ad:88:ad:
43:1b:62:0b:79:84:00:73:8e:9a:63:3f:a0:ff:df:c6:47:31:
3f:c7:5f:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 17:44:10 2025 by rpki-client