Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/13da12-e553-4714-9618-4ce506cf7a2c/1/STGaFtGrBlzvNlhRkqfv-H-VFV8.mft
File: STGaFtGrBlzvNlhRkqfv-H-VFV8.mft (raw, json)
Hash identifier: x08gMThPZy3sMljIiX8h6eB1GCU2/m0bY4F26vjKzKU=
Subject key identifier: F7:7F:13:F6:D9:EB:89:01:B1:6B:4B:44:6E:5F:A0:BC:CA:2E:88:9C
Authority key identifier: 49:31:9A:16:D1:AB:06:5C:EF:36:58:51:92:A7:EF:F8:7F:95:15:5F
Certificate issuer: /CN=49319a16d1ab065cef36585192a7eff87f95155f
Certificate serial: 0198D65FF877334E5186E8E815BCB84290FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/STGaFtGrBlzvNlhRkqfv-H-VFV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/13da12-e553-4714-9618-4ce506cf7a2c/1/STGaFtGrBlzvNlhRkqfv-H-VFV8.mft
Manifest number: 050C
Signing time: Sat 23 Aug 2025 10:01:10 +0000
Manifest this update: Sat 23 Aug 2025 10:01:10 +0000
Manifest next update: Sun 24 Aug 2025 10:01:10 +0000
Files and hashes: 1: STGaFtGrBlzvNlhRkqfv-H-VFV8.crl (hash: VqGWO67/CDID5oi2i9bvCdj5E/lcxb4a3XpF8sAjH3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/13da12-e553-4714-9618-4ce506cf7a2c/1/STGaFtGrBlzvNlhRkqfv-H-VFV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/13da12-e553-4714-9618-4ce506cf7a2c/1/STGaFtGrBlzvNlhRkqfv-H-VFV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/STGaFtGrBlzvNlhRkqfv-H-VFV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:f8:77:33:4e:51:86:e8:e8:15:bc:b8:42:90:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49319a16d1ab065cef36585192a7eff87f95155f
Validity
Not Before: Aug 23 10:01:10 2025 GMT
Not After : Aug 24 10:01:10 2025 GMT
Subject: CN=f77f13f6d9eb8901b16b4b446e5fa0bcca2e889c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:ec:a5:34:ce:40:4f:dd:a7:f2:48:c1:0f:1e:
c3:28:fd:35:38:c2:57:c5:bb:80:fe:45:ae:56:2c:
62:32:b4:8e:f3:88:48:0c:57:2f:d5:89:a4:6e:6a:
0e:4c:31:6c:99:c6:a6:a0:47:d9:e5:8a:8a:21:2f:
96:c3:ac:77:50:a2:49:72:93:4f:cd:ea:3b:d5:27:
1d:91:ab:f7:04:7d:00:40:ca:01:10:14:98:d2:12:
50:9a:ed:96:66:25:6c:0f:77:ed:c9:85:05:4d:f4:
49:f5:e1:22:37:eb:54:7c:d5:86:31:b6:08:c7:c9:
5b:f8:cd:d4:87:c3:b2:33:3b:6e:c2:9a:23:75:77:
7a:74:a2:2c:73:05:8b:46:e3:25:37:91:a2:ae:50:
4f:f3:fd:f7:03:4d:c6:bf:40:83:85:d4:9d:fe:0b:
0b:d9:1c:2a:4f:d3:3e:4d:d9:09:a8:3d:43:73:ff:
57:69:61:3d:64:ed:66:98:86:7a:fb:64:a9:b0:ab:
64:e6:75:c1:41:6f:a1:84:32:ac:1d:91:2b:10:13:
40:2a:9b:79:41:8e:ed:2c:64:60:9a:3a:6c:f4:ac:
2d:e3:47:49:fa:d0:da:ae:19:9a:62:82:f1:0c:cc:
6f:e3:89:23:d6:b5:25:82:07:3a:86:2b:31:44:e8:
1f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:7F:13:F6:D9:EB:89:01:B1:6B:4B:44:6E:5F:A0:BC:CA:2E:88:9C
X509v3 Authority Key Identifier:
keyid:49:31:9A:16:D1:AB:06:5C:EF:36:58:51:92:A7:EF:F8:7F:95:15:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/STGaFtGrBlzvNlhRkqfv-H-VFV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/13da12-e553-4714-9618-4ce506cf7a2c/1/STGaFtGrBlzvNlhRkqfv-H-VFV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/13da12-e553-4714-9618-4ce506cf7a2c/1/STGaFtGrBlzvNlhRkqfv-H-VFV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:fe:0d:21:7d:9d:de:de:46:8f:26:cf:b0:4b:77:ed:08:9e:
bb:69:13:c1:19:9e:43:f1:8b:8a:d1:08:03:56:80:0c:cf:44:
b5:d8:29:09:e7:fe:de:35:57:8b:e1:4e:b0:cc:9f:ad:56:24:
29:58:5e:97:18:d9:be:2b:9e:e7:0d:7a:c6:75:52:18:7f:8a:
d4:b5:2c:9e:35:7c:db:19:ff:51:be:c3:8c:2f:6b:c4:17:6e:
2c:27:86:61:ae:82:30:e1:d1:03:44:08:02:07:4d:62:30:33:
72:4a:28:9f:ef:f1:aa:81:bf:64:4d:c5:df:0e:70:a1:04:c8:
c4:c3:66:41:ca:0f:23:15:2b:53:60:ab:03:2d:a0:3a:c4:87:
4c:21:6a:b0:7e:93:5a:02:af:45:8d:db:57:3e:4f:2e:a0:b5:
b6:c6:04:cf:b5:c3:81:e4:6d:fd:bd:07:db:96:1f:b7:4c:92:
ac:ba:7b:4f:0c:b6:be:bf:92:a5:63:38:08:65:8a:4e:3d:30:
56:f2:8d:75:14:46:e0:be:9d:81:a4:57:d8:85:2b:52:a7:52:
21:bf:6a:ed:74:eb:82:06:6c:6b:9a:37:28:e6:32:e6:05:24:
34:10:79:90:4f:bb:fd:58:48:c8:2a:08:73:c8:8a:dd:65:3e:
9e:86:7e:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:31:22 2025 by rpki-client