Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/8273b5-279c-4323-82dc-c257607317f3/1/_stf432FEfZ6YFMW6wlTU4_P6ec.mft
File: _stf432FEfZ6YFMW6wlTU4_P6ec.mft (raw, json)
Hash identifier: hlnzXXZZJoaxa/ocP+FxHzUIOqDF8y4vhiUho9lJwLM=
Subject key identifier: D9:FD:7F:63:33:E7:04:10:F5:97:72:19:50:E7:7E:07:66:90:03:93
Authority key identifier: FE:CB:5F:E3:7D:85:11:F6:7A:60:53:16:EB:09:53:53:8F:CF:E9:E7
Certificate issuer: /CN=fecb5fe37d8511f67a605316eb0953538fcfe9e7
Certificate serial: 0196C0B862B6AB1E19648549C43406F1593A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_stf432FEfZ6YFMW6wlTU4_P6ec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/8273b5-279c-4323-82dc-c257607317f3/1/_stf432FEfZ6YFMW6wlTU4_P6ec.mft
Manifest number: 0F10
Signing time: Sun 11 May 2025 19:00:31 +0000
Manifest this update: Sun 11 May 2025 19:00:31 +0000
Manifest next update: Mon 12 May 2025 19:00:31 +0000
Files and hashes: 1: _stf432FEfZ6YFMW6wlTU4_P6ec.crl (hash: td4gu0P8Kg0SwBAAuuVTPxC3d5ntmPam99BOkm4u3Ag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/8273b5-279c-4323-82dc-c257607317f3/1/_stf432FEfZ6YFMW6wlTU4_P6ec.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/8273b5-279c-4323-82dc-c257607317f3/1/_stf432FEfZ6YFMW6wlTU4_P6ec.mft
rsync://rpki.ripe.net/repository/DEFAULT/_stf432FEfZ6YFMW6wlTU4_P6ec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:b8:62:b6:ab:1e:19:64:85:49:c4:34:06:f1:59:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fecb5fe37d8511f67a605316eb0953538fcfe9e7
Validity
Not Before: May 11 19:00:31 2025 GMT
Not After : May 12 19:00:31 2025 GMT
Subject: CN=d9fd7f6333e70410f597721950e77e0766900393
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:89:32:ff:47:dd:82:c4:c0:63:ca:a2:a5:c8:
d4:20:12:53:92:78:b8:bc:84:3c:ba:99:b5:b7:7d:
23:e8:20:06:72:f1:74:c6:0c:89:0e:04:da:99:ca:
64:20:79:31:20:bc:f6:60:33:17:56:78:a5:cb:63:
08:40:4b:76:ef:36:e0:3f:cb:06:ea:1d:79:07:5f:
f3:e1:2a:92:6d:a4:4f:78:10:e5:50:fc:d5:48:41:
28:85:26:be:78:96:dc:60:43:2e:87:7c:d2:0a:46:
e9:3a:9d:2c:15:59:9b:3c:d2:c7:a2:25:41:9c:7c:
b5:c7:42:67:8d:db:b1:cb:8c:80:4c:2e:65:89:4f:
40:f7:e5:b1:21:db:fb:3f:e9:66:5f:a9:a2:03:6f:
57:5c:21:93:1c:4b:05:b0:5e:8c:be:b1:e1:97:b7:
41:a6:14:e3:c9:82:bd:91:d1:98:51:fd:8f:c5:b7:
7f:2f:f1:b9:fb:93:bc:38:58:37:b7:50:f6:4f:4c:
81:8a:ec:ac:46:79:8f:33:bd:29:e2:88:f5:24:43:
71:2b:24:91:7b:da:0d:65:4f:51:1d:e0:e3:2b:e7:
23:06:f6:4e:dd:fd:d6:3b:60:82:b9:37:bb:6c:28:
b6:8d:86:e2:b3:d3:7a:e5:5b:e6:84:73:58:e1:eb:
62:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:FD:7F:63:33:E7:04:10:F5:97:72:19:50:E7:7E:07:66:90:03:93
X509v3 Authority Key Identifier:
keyid:FE:CB:5F:E3:7D:85:11:F6:7A:60:53:16:EB:09:53:53:8F:CF:E9:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_stf432FEfZ6YFMW6wlTU4_P6ec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/8273b5-279c-4323-82dc-c257607317f3/1/_stf432FEfZ6YFMW6wlTU4_P6ec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/8273b5-279c-4323-82dc-c257607317f3/1/_stf432FEfZ6YFMW6wlTU4_P6ec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:65:5e:89:d1:81:2e:74:64:ed:f8:9f:93:cf:c1:37:9b:90:
d0:b4:1f:8d:8c:30:74:1a:12:40:a6:29:87:fa:12:20:36:06:
65:ee:18:e8:1a:a5:2c:76:9e:ed:18:67:4d:ea:33:48:39:d5:
bb:4a:ed:36:51:41:a3:62:07:7f:87:30:3f:52:20:0b:9a:46:
6f:8e:e1:ca:3f:b6:24:40:87:78:31:98:c6:3a:96:0c:d5:2b:
c4:0d:6c:35:64:12:3f:67:9e:e5:cc:92:0d:be:b3:ff:e3:dd:
b3:a3:00:3d:f6:9a:a1:92:9f:81:12:f4:17:b0:5a:de:12:b6:
2a:c6:85:65:74:7f:1f:66:5e:96:a9:f2:95:4e:99:74:50:ff:
e7:ad:4e:76:ce:40:a2:d5:1c:ec:43:43:f2:2c:d7:4c:ed:4b:
88:23:10:53:d4:d6:6d:d5:8e:38:3d:a7:a7:63:9d:60:13:b9:
18:76:25:59:0c:16:f9:fb:3a:0a:3c:5f:5c:6f:78:d4:25:9d:
e4:4a:98:9e:f5:a8:eb:b6:52:55:fa:02:6b:fc:bb:e4:bc:6a:
ed:40:21:d1:4c:57:6c:31:66:1f:92:40:ed:75:f3:2b:11:53:
51:2e:44:f6:8b:d7:2c:a8:18:12:ba:29:6f:0f:d5:3f:ba:3b:
0c:e2:3d:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 23:29:41 2025 by rpki-client