Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/13da12-e553-4714-9618-4ce506cf7a2c/1/STGaFtGrBlzvNlhRkqfv-H-VFV8.mft
File: STGaFtGrBlzvNlhRkqfv-H-VFV8.mft (raw, json)
Hash identifier: /grB5B0Ox5UjNfLvHM/cHzWYi31d9yPXgCWN/VKL0Ac=
Subject key identifier: 07:41:15:A3:86:05:6D:88:CF:A9:95:FA:47:E1:88:EE:21:31:87:ED
Authority key identifier: 49:31:9A:16:D1:AB:06:5C:EF:36:58:51:92:A7:EF:F8:7F:95:15:5F
Certificate issuer: /CN=49319a16d1ab065cef36585192a7eff87f95155f
Certificate serial: 0199FBEAD4EED22F96285171AF065E1070B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/STGaFtGrBlzvNlhRkqfv-H-VFV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/13da12-e553-4714-9618-4ce506cf7a2c/1/STGaFtGrBlzvNlhRkqfv-H-VFV8.mft
Manifest number: 05A4
Signing time: Sun 19 Oct 2025 10:01:35 +0000
Manifest this update: Sun 19 Oct 2025 10:01:35 +0000
Manifest next update: Mon 20 Oct 2025 10:01:35 +0000
Files and hashes: 1: STGaFtGrBlzvNlhRkqfv-H-VFV8.crl (hash: IQugU2kLieFR+OosNcn7wR7ZWpZvmGFKPtvbgNjYDA4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/13da12-e553-4714-9618-4ce506cf7a2c/1/STGaFtGrBlzvNlhRkqfv-H-VFV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/13da12-e553-4714-9618-4ce506cf7a2c/1/STGaFtGrBlzvNlhRkqfv-H-VFV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/STGaFtGrBlzvNlhRkqfv-H-VFV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:d4:ee:d2:2f:96:28:51:71:af:06:5e:10:70:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49319a16d1ab065cef36585192a7eff87f95155f
Validity
Not Before: Oct 19 10:01:35 2025 GMT
Not After : Oct 20 10:01:35 2025 GMT
Subject: CN=074115a386056d88cfa995fa47e188ee213187ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b5:a5:ca:b6:58:ce:02:26:3b:22:89:7d:52:
82:c7:43:53:76:eb:98:25:fa:d3:73:9e:ee:35:b9:
54:05:56:9c:11:3a:2a:df:f2:6a:4e:0c:fd:23:4a:
ac:aa:7a:ea:fe:eb:e1:13:17:08:3d:25:0f:2f:ac:
6d:4d:3a:b9:8e:d5:1d:5b:02:42:ff:94:9d:61:e4:
a2:f0:f1:ae:bf:cc:62:51:1b:e5:af:c6:23:6c:f5:
38:30:3b:69:a0:b2:05:46:e3:46:dc:78:5c:95:c3:
1d:47:10:70:5a:0b:61:d6:d7:a3:e0:a1:36:93:33:
be:ae:88:a9:28:7a:41:03:88:32:86:fb:45:30:fa:
60:35:23:93:b7:4a:ec:1d:75:86:00:ea:f3:86:5c:
12:2b:ef:3b:ef:75:76:20:70:d9:08:56:fc:27:7f:
30:2a:17:f1:c2:9f:c6:75:9d:74:6b:44:ee:d1:d2:
6a:44:89:55:c4:c3:be:98:c1:2a:fb:aa:3a:28:90:
7f:9c:03:2a:39:ae:76:28:94:ea:66:22:55:55:59:
26:06:6b:39:ca:98:96:e6:f9:c6:1e:f1:60:75:bd:
4b:5e:d7:a1:3d:e8:34:0d:0c:f1:93:fe:a3:b8:be:
61:e7:ec:72:5c:84:51:e9:fe:18:7e:40:ce:85:0f:
0d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:41:15:A3:86:05:6D:88:CF:A9:95:FA:47:E1:88:EE:21:31:87:ED
X509v3 Authority Key Identifier:
keyid:49:31:9A:16:D1:AB:06:5C:EF:36:58:51:92:A7:EF:F8:7F:95:15:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/STGaFtGrBlzvNlhRkqfv-H-VFV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/13da12-e553-4714-9618-4ce506cf7a2c/1/STGaFtGrBlzvNlhRkqfv-H-VFV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/13da12-e553-4714-9618-4ce506cf7a2c/1/STGaFtGrBlzvNlhRkqfv-H-VFV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:a2:69:5e:96:2b:26:06:0d:3b:4d:b2:5b:3b:2c:e2:9b:cd:
c8:27:95:35:6b:55:82:48:12:c0:9d:5d:b9:5a:96:5e:5c:ea:
47:d2:b2:36:8f:4c:e0:7e:89:27:70:ed:c1:e4:2f:55:fe:22:
11:38:70:c6:2e:3d:c1:17:e8:be:16:6a:60:ec:9e:2d:62:44:
af:f0:30:06:1f:8a:18:d2:a8:d8:8d:03:36:43:2c:bd:ff:0d:
01:1f:9c:e0:b6:04:0a:58:97:75:19:98:db:12:fb:10:99:36:
63:46:89:e2:56:32:f6:15:1e:2c:39:30:d5:52:4c:42:81:90:
88:32:97:46:cc:1f:a4:5c:cf:fd:91:4f:56:22:3f:cc:51:9a:
aa:ba:82:b2:b0:ce:ab:c2:59:aa:0d:a9:fb:35:3c:97:13:2f:
6c:7b:94:8f:c0:f8:0e:f0:82:8b:1b:b1:51:2a:82:4f:26:9e:
8a:4e:79:06:e0:1e:52:e9:53:37:70:82:fa:e3:da:40:f7:49:
f3:dd:fc:f1:8f:77:eb:33:3e:67:70:89:8c:87:46:12:7f:80:
d7:54:49:8b:d9:43:2b:77:4f:6b:d4:30:93:0b:89:d2:44:66:
de:d4:5a:bf:59:31:89:3f:b1:71:3e:8e:ac:e7:e5:0a:69:aa:
6b:47:e7:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:06:38 2025 by rpki-client