Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/aa9e97-4001-48a4-bf80-3d25458b39ee/1/0stdGBr-pp854XESWTvksA5YS00.mft
File: 0stdGBr-pp854XESWTvksA5YS00.mft (raw, json)
Hash identifier: 9UtkqLamoi2ZLdc5uIdfXjVEcAMcx9DtgO/KO0U8h2U=
Subject key identifier: 19:96:AC:29:4C:EB:27:41:65:88:77:45:F3:14:E1:24:C5:6C:65:97
Authority key identifier: D2:CB:5D:18:1A:FE:A6:9F:39:E1:71:12:59:3B:E4:B0:0E:58:4B:4D
Certificate issuer: /CN=d2cb5d181afea69f39e17112593be4b00e584b4d
Certificate serial: 019644E90C01E92A418BFFF17A3317BA8CD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0stdGBr-pp854XESWTvksA5YS00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/aa9e97-4001-48a4-bf80-3d25458b39ee/1/0stdGBr-pp854XESWTvksA5YS00.mft
Manifest number: 0362
Signing time: Thu 17 Apr 2025 18:00:45 +0000
Manifest this update: Thu 17 Apr 2025 18:00:45 +0000
Manifest next update: Fri 18 Apr 2025 18:00:45 +0000
Files and hashes: 1: 0stdGBr-pp854XESWTvksA5YS00.crl (hash: uRFjnxIIzDSbckNdmYc7OEYFZ1JR6utY1tdy6jeQ3SM=)
2: DjD9dQKu2fp9cHrAn1sIWGhC488.roa (hash: fAPGT8GWJz86zGyzRAQmnMcTrszvTZhO+N/oXftz62E=)
3: IBq-WXNXCM-_L3wj6_Sv5Rx4dNA.roa (hash: vuy64Y3PAKsG7oegiPafGsZ4QGAupXIefuGc7dRwG0A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/aa9e97-4001-48a4-bf80-3d25458b39ee/1/0stdGBr-pp854XESWTvksA5YS00.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/aa9e97-4001-48a4-bf80-3d25458b39ee/1/0stdGBr-pp854XESWTvksA5YS00.mft
rsync://rpki.ripe.net/repository/DEFAULT/0stdGBr-pp854XESWTvksA5YS00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:e9:0c:01:e9:2a:41:8b:ff:f1:7a:33:17:ba:8c:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2cb5d181afea69f39e17112593be4b00e584b4d
Validity
Not Before: Apr 17 18:00:45 2025 GMT
Not After : Apr 18 18:00:45 2025 GMT
Subject: CN=1996ac294ceb274165887745f314e124c56c6597
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:e1:72:a1:6b:e9:c7:50:98:81:ae:07:27:32:
d5:5e:02:c0:2d:46:83:11:57:78:03:a2:f6:48:4e:
22:d3:02:1d:6b:b2:ca:d7:eb:cc:fe:c4:ea:3f:9e:
7a:5a:d1:ec:7e:d7:f1:83:1b:6e:27:be:95:2d:dc:
b7:60:34:b7:4a:2c:f5:c1:d8:df:51:88:da:1b:6b:
75:21:8f:3a:fa:95:d8:07:2f:c6:ec:ba:bd:c2:d7:
3f:a3:b3:b3:9a:ce:d7:84:0e:b4:d0:15:3d:f1:cb:
70:93:91:16:e2:e0:aa:45:cf:b0:61:3f:ca:30:f0:
ca:ad:4d:7c:0f:d0:36:b1:60:84:2e:64:28:d7:3b:
a4:92:2c:86:c6:ea:65:83:60:b3:20:3d:09:f7:55:
3e:2a:12:8e:61:eb:01:0b:65:6a:c2:1d:0a:30:16:
6b:6d:1e:89:30:e4:66:79:7b:3a:8b:e8:0e:f1:d6:
0e:57:45:55:0d:be:44:bf:45:ed:24:9b:37:d9:ca:
92:b0:42:1e:0a:01:54:89:db:03:e8:08:c2:08:01:
36:4c:c4:09:f1:75:16:71:d5:84:6d:06:d6:72:7f:
35:71:ef:8f:12:ac:01:4f:cf:a5:b2:49:2a:e7:57:
98:45:71:17:08:af:5f:68:8d:45:44:0f:e7:ef:5f:
b7:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:96:AC:29:4C:EB:27:41:65:88:77:45:F3:14:E1:24:C5:6C:65:97
X509v3 Authority Key Identifier:
keyid:D2:CB:5D:18:1A:FE:A6:9F:39:E1:71:12:59:3B:E4:B0:0E:58:4B:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0stdGBr-pp854XESWTvksA5YS00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/aa9e97-4001-48a4-bf80-3d25458b39ee/1/0stdGBr-pp854XESWTvksA5YS00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/aa9e97-4001-48a4-bf80-3d25458b39ee/1/0stdGBr-pp854XESWTvksA5YS00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:06:b8:5a:20:45:b1:f7:84:1a:b6:07:97:c4:13:57:1b:11:
c0:24:2e:94:ee:87:98:04:95:5a:37:bc:5a:53:d4:8e:8e:5b:
d1:60:96:37:12:d6:32:94:c5:0d:c3:a5:3b:f7:10:77:2e:45:
75:eb:35:d6:bd:55:8d:21:59:8a:84:83:a1:2e:32:42:a3:92:
86:1a:21:91:ed:ee:63:25:85:3e:75:80:85:e2:02:ca:74:c4:
99:db:79:b2:e5:b9:dd:b1:c4:56:22:b8:3f:61:e6:04:d4:56:
ec:94:7b:e3:f7:64:b2:95:f2:a8:a8:52:45:f6:c8:55:b2:6e:
a3:6f:53:53:46:a6:d3:c5:55:59:77:ee:dd:d8:2d:fe:80:41:
90:67:61:de:99:f5:a9:f5:07:fb:82:93:b3:3a:53:b9:32:4a:
84:8f:af:6d:b7:c1:63:46:b2:70:af:06:24:87:c4:c0:11:4a:
1e:cf:f3:5b:c5:89:f4:8f:71:c1:ae:40:5d:29:ea:fb:1e:02:
85:2e:ea:0b:d1:9c:c5:6a:fb:9d:aa:88:1c:ea:94:22:3f:15:
3f:6f:53:db:6b:b8:6a:29:e2:35:f8:0b:37:50:23:8a:82:38:
b2:ec:37:e6:c1:5e:ec:9f:9f:2b:59:4e:f6:65:4a:e2:3f:8a:
bb:8c:e1:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:28:27 2025 by rpki-client