Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/13da12-e553-4714-9618-4ce506cf7a2c/1/STGaFtGrBlzvNlhRkqfv-H-VFV8.mft
File: STGaFtGrBlzvNlhRkqfv-H-VFV8.mft (raw, json)
Hash identifier: xiY3YyzmWZA9G7e1MLHqzkFtsizSP85i5il/PjMCPSE=
Subject key identifier: 91:86:C4:3B:E1:9B:93:EF:2A:DC:82:A7:01:F7:76:A2:92:71:C5:4E
Authority key identifier: 49:31:9A:16:D1:AB:06:5C:EF:36:58:51:92:A7:EF:F8:7F:95:15:5F
Certificate issuer: /CN=49319a16d1ab065cef36585192a7eff87f95155f
Certificate serial: 0196CCF41DED58F2CD7DBC1A5D0859D0F098
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/STGaFtGrBlzvNlhRkqfv-H-VFV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/13da12-e553-4714-9618-4ce506cf7a2c/1/STGaFtGrBlzvNlhRkqfv-H-VFV8.mft
Manifest number: 03FE
Signing time: Wed 14 May 2025 04:01:12 +0000
Manifest this update: Wed 14 May 2025 04:01:12 +0000
Manifest next update: Thu 15 May 2025 04:01:12 +0000
Files and hashes: 1: STGaFtGrBlzvNlhRkqfv-H-VFV8.crl (hash: YH4fGMJHA7rZh5tDmsjPKLU64YXeapPVDyc/Zgr51Po=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/13da12-e553-4714-9618-4ce506cf7a2c/1/STGaFtGrBlzvNlhRkqfv-H-VFV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/13da12-e553-4714-9618-4ce506cf7a2c/1/STGaFtGrBlzvNlhRkqfv-H-VFV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/STGaFtGrBlzvNlhRkqfv-H-VFV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 22:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cc:f4:1d:ed:58:f2:cd:7d:bc:1a:5d:08:59:d0:f0:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49319a16d1ab065cef36585192a7eff87f95155f
Validity
Not Before: May 14 04:01:12 2025 GMT
Not After : May 15 04:01:12 2025 GMT
Subject: CN=9186c43be19b93ef2adc82a701f776a29271c54e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:d0:a8:94:dc:c6:79:42:70:9c:df:d4:0d:4b:
ef:a9:90:ca:d1:69:20:dd:bc:cd:d2:e1:8e:dc:94:
3f:49:6b:b4:44:2c:c1:13:92:ea:44:a6:5b:c9:4c:
ad:11:9c:4d:dc:b5:9e:57:a4:f0:38:b9:ef:ef:f6:
75:ac:27:20:99:14:2f:1b:7b:ba:0a:65:3f:5c:39:
cf:9a:4e:08:0d:02:23:1e:3b:53:4a:a5:7a:f2:39:
cc:06:76:36:fb:51:07:30:e3:84:9b:85:9c:97:63:
92:a0:46:7d:c2:87:19:9e:00:49:46:d9:27:09:26:
3d:33:65:c4:e4:2a:91:b6:b6:4d:7d:ff:5c:7b:b6:
2c:04:f7:36:60:45:c2:a3:eb:28:35:e6:92:62:ae:
9e:50:84:f0:62:d2:19:eb:ef:dc:eb:cf:da:92:0a:
44:61:d9:da:d7:83:82:ed:dd:09:c0:dd:52:c6:55:
11:97:86:c6:75:c2:45:7c:0f:f5:6a:c6:a7:3f:0b:
7a:bc:f7:af:ea:aa:c3:3d:68:20:22:6e:2b:2d:02:
47:14:17:14:19:28:2a:6b:e5:c8:42:53:8b:de:dd:
c8:0d:71:0f:a7:ba:2f:e7:c2:a4:41:45:d6:0e:53:
96:3f:6e:ff:77:2d:34:62:12:25:f4:8c:ac:bb:80:
1c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:86:C4:3B:E1:9B:93:EF:2A:DC:82:A7:01:F7:76:A2:92:71:C5:4E
X509v3 Authority Key Identifier:
keyid:49:31:9A:16:D1:AB:06:5C:EF:36:58:51:92:A7:EF:F8:7F:95:15:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/STGaFtGrBlzvNlhRkqfv-H-VFV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/13da12-e553-4714-9618-4ce506cf7a2c/1/STGaFtGrBlzvNlhRkqfv-H-VFV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/13da12-e553-4714-9618-4ce506cf7a2c/1/STGaFtGrBlzvNlhRkqfv-H-VFV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:be:0f:e0:08:67:1d:72:72:0d:65:47:11:e7:33:0d:29:a1:
b0:3f:fd:fd:88:0d:49:5a:61:d4:a3:29:73:5c:78:9c:55:77:
d1:59:a1:1a:10:5c:31:af:9a:e9:0e:0c:c9:12:5b:25:e4:a8:
24:4f:b1:23:d5:91:d9:41:7b:41:d5:83:b1:a2:0b:d3:b6:19:
0d:2f:c2:d3:f9:49:37:ac:be:4d:58:1e:3d:40:28:89:76:37:
d1:0b:55:60:f2:37:a8:36:15:ec:68:f1:e3:41:18:22:f4:59:
dd:21:2c:63:1a:ed:29:c9:96:cc:03:1c:7f:5f:74:b9:30:25:
2e:bc:e0:7e:65:27:6e:c8:a5:ea:57:4f:26:9f:19:b7:1d:e3:
1c:20:b2:75:44:69:cf:49:bb:84:6f:26:1e:f4:57:31:7c:6f:
15:19:c7:bb:5a:8b:27:ab:3e:38:79:c3:0b:53:d4:8c:97:45:
ad:6f:ac:3c:28:03:a5:39:9a:1e:17:e3:a2:b5:47:5a:be:9b:
46:62:00:40:a8:7a:59:a9:b1:9d:02:68:05:44:c7:75:1d:68:
9c:ef:38:22:9a:1d:b1:1d:1a:70:2f:bd:70:d2:5a:fe:0d:45:
2f:de:6e:0b:17:22:48:b1:69:72:ef:85:f8:cf:d3:ea:1f:88:
29:ed:76:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbM9B3tWPLNfbwaXQhZ0PCYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5MzE5YTE2ZDFhYjA2NWNlZjM2NTg1MTkyYTdlZmY4N2Y5
NTE1NWYwHhcNMjUwNTE0MDQwMTEyWhcNMjUwNTE1MDQwMTEyWjAzMTEwLwYDVQQD
Eyg5MTg2YzQzYmUxOWI5M2VmMmFkYzgyYTcwMWY3NzZhMjkyNzFjNTRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi9ColNzGeUJwnN/UDUvvqZDK0Wkg
3bzN0uGO3JQ/SWu0RCzBE5LqRKZbyUytEZxN3LWeV6TwOLnv7/Z1rCcgmRQvG3u6
CmU/XDnPmk4IDQIjHjtTSqV68jnMBnY2+1EHMOOEm4Wcl2OSoEZ9wocZngBJRtkn
CSY9M2XE5CqRtrZNff9ce7YsBPc2YEXCo+soNeaSYq6eUITwYtIZ6+/c68/akgpE
Ydna14OC7d0JwN1SxlURl4bGdcJFfA/1asanPwt6vPev6qrDPWggIm4rLQJHFBcU
GSgqa+XIQlOL3t3IDXEPp7ov58KkQUXWDlOWP27/dy00YhIl9Iysu4Ac2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJGGxDvhm5PvKtyCpwH3dqKSccVOMB8GA1UdIwQY
MBaAFEkxmhbRqwZc7zZYUZKn7/h/lRVfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1RHYUZ0R3JCbHp2TmxoUmtxZnYtSC1WRlY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8xM2RhMTItZTU1My00NzE0LTk2MTgt
NGNlNTA2Y2Y3YTJjLzEvU1RHYUZ0R3JCbHp2TmxoUmtxZnYtSC1WRlY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC8xM2RhMTItZTU1My00NzE0LTk2MTgtNGNlNTA2Y2Y3YTJj
LzEvU1RHYUZ0R3JCbHp2TmxoUmtxZnYtSC1WRlY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo74P4Ahn
HXJyDWVHEeczDSmhsD/9/YgNSVph1KMpc1x4nFV30VmhGhBcMa+a6Q4MyRJbJeSo
JE+xI9WR2UF7QdWDsaIL07YZDS/C0/lJN6y+TVgePUAoiXY30QtVYPI3qDYV7Gjx
40EYIvRZ3SEsYxrtKcmWzAMcf190uTAlLrzgfmUnbsil6ldPJp8Ztx3jHCCydURp
z0m7hG8mHvRXMXxvFRnHu1qLJ6s+OHnDC1PUjJdFrW+sPCgDpTmaHhfjorVHWr6b
RmIAQKh6WamxnQJoBUTHdR1onO84IpodsR0acC+9cNJa/g1FL95uCxciSLFpcu+F
+M/T6h+IKe123w==
-----END CERTIFICATE-----
Generated at Wed May 14 06:57:06 2025 by rpki-client