Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/8273b5-279c-4323-82dc-c257607317f3/1/_stf432FEfZ6YFMW6wlTU4_P6ec.mft
File: _stf432FEfZ6YFMW6wlTU4_P6ec.mft (raw, json)
Hash identifier: qd+MHIytOWsNCAm7FeDntY05CY0WQ1M+psLDk8Wf8IA=
Subject key identifier: AF:63:E5:44:E2:C2:7C:5C:AD:3C:42:21:F5:14:6C:03:53:73:47:DA
Authority key identifier: FE:CB:5F:E3:7D:85:11:F6:7A:60:53:16:EB:09:53:53:8F:CF:E9:E7
Certificate issuer: /CN=fecb5fe37d8511f67a605316eb0953538fcfe9e7
Certificate serial: 0197B7EA3246F920D35D6EA05D16BFD77EB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_stf432FEfZ6YFMW6wlTU4_P6ec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/8273b5-279c-4323-82dc-c257607317f3/1/_stf432FEfZ6YFMW6wlTU4_P6ec.mft
Manifest number: 0F90
Signing time: Sat 28 Jun 2025 19:01:08 +0000
Manifest this update: Sat 28 Jun 2025 19:01:08 +0000
Manifest next update: Sun 29 Jun 2025 19:01:08 +0000
Files and hashes: 1: _stf432FEfZ6YFMW6wlTU4_P6ec.crl (hash: QX3rJpDAPLtukm/5+2fjk5ChtzUcD5vz5i2jHTiyZtE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/8273b5-279c-4323-82dc-c257607317f3/1/_stf432FEfZ6YFMW6wlTU4_P6ec.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/8273b5-279c-4323-82dc-c257607317f3/1/_stf432FEfZ6YFMW6wlTU4_P6ec.mft
rsync://rpki.ripe.net/repository/DEFAULT/_stf432FEfZ6YFMW6wlTU4_P6ec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:32:46:f9:20:d3:5d:6e:a0:5d:16:bf:d7:7e:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fecb5fe37d8511f67a605316eb0953538fcfe9e7
Validity
Not Before: Jun 28 19:01:08 2025 GMT
Not After : Jun 29 19:01:08 2025 GMT
Subject: CN=af63e544e2c27c5cad3c4221f5146c03537347da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:2a:4e:32:2b:99:5e:61:50:95:6e:e5:d6:55:
f4:bb:0f:86:db:b9:9e:5b:c7:2e:a1:6e:18:94:37:
50:02:b6:46:15:76:e7:62:1f:fa:18:ff:a2:1c:e1:
a7:b0:41:6e:a3:76:a6:cb:fa:e6:a4:f9:ef:72:be:
f7:91:1f:6d:84:f2:3d:ec:a0:93:a5:29:d5:60:cf:
82:44:5d:bb:9b:11:65:7a:bf:ea:d9:5f:5a:5f:4b:
67:e5:17:7f:42:b6:d0:1d:29:5b:e4:63:5f:dc:17:
5f:ac:f3:45:44:1b:36:fb:60:0b:46:7f:69:8e:98:
ba:97:8a:98:5a:85:68:ce:ae:b9:34:c0:c5:10:23:
05:de:d2:05:57:c1:a2:3b:30:7f:40:21:85:97:95:
7c:78:52:d2:b7:d0:96:24:86:dd:45:ea:24:30:18:
76:bb:f6:78:cb:93:77:1c:8c:7d:5b:fe:e4:f7:cd:
b7:9b:3b:de:9c:46:90:cc:91:8e:9f:41:9b:f4:c8:
44:72:f9:2d:3b:b0:a0:bd:db:cf:74:49:75:7c:80:
35:21:23:4f:8d:65:36:4a:59:64:f5:f5:34:ff:fd:
ce:51:68:7a:be:00:0a:45:78:1f:b4:90:a0:7b:80:
7a:2b:c6:08:e0:ea:b1:b6:5d:bf:d5:42:bf:ba:f0:
9e:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:63:E5:44:E2:C2:7C:5C:AD:3C:42:21:F5:14:6C:03:53:73:47:DA
X509v3 Authority Key Identifier:
keyid:FE:CB:5F:E3:7D:85:11:F6:7A:60:53:16:EB:09:53:53:8F:CF:E9:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_stf432FEfZ6YFMW6wlTU4_P6ec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/8273b5-279c-4323-82dc-c257607317f3/1/_stf432FEfZ6YFMW6wlTU4_P6ec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/8273b5-279c-4323-82dc-c257607317f3/1/_stf432FEfZ6YFMW6wlTU4_P6ec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:55:c2:bb:d4:76:94:66:3f:b9:c2:22:50:48:2a:f8:86:62:
a7:18:e1:89:3f:a1:77:ef:28:f8:34:12:c3:98:f3:e1:b2:8d:
cc:ed:0a:e4:92:8d:e5:71:1f:10:6f:77:fd:a3:27:5e:c2:e7:
fd:2d:42:da:ad:82:7c:68:e9:2b:7f:6e:0d:7e:aa:4b:25:bb:
e0:fe:5c:0e:01:2b:3a:f6:37:64:53:1d:80:cb:dc:7b:5e:9c:
35:2b:4d:24:28:55:90:8d:95:d3:a4:ab:db:02:3f:9e:59:f4:
84:2e:f2:60:73:a0:49:19:d3:08:67:b4:43:19:09:1c:26:b0:
4b:16:20:92:00:c4:a4:a8:eb:47:9c:b1:60:5f:ef:92:56:f6:
63:e3:2a:61:31:6a:34:cb:cf:ea:5e:23:a6:29:30:26:2f:30:
ea:a1:60:ea:be:3f:28:3f:a8:f3:33:ef:b5:06:5a:7c:39:9e:
99:f3:62:90:1f:cf:2d:31:22:0a:0e:bf:1c:4c:4b:8c:55:24:
17:fb:0c:53:93:05:b3:2e:11:a7:15:27:c9:f9:8d:66:80:d5:
c5:3b:93:fb:92:7c:2b:01:78:ba:c2:d5:71:10:9d:5f:11:8f:
b0:9f:7e:c5:5e:cf:de:d0:72:03:ba:17:34:12:23:9f:2a:6c:
50:4c:02:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:24:45 2025 by rpki-client