Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/aa9e97-4001-48a4-bf80-3d25458b39ee/1/0stdGBr-pp854XESWTvksA5YS00.mft
File: 0stdGBr-pp854XESWTvksA5YS00.mft (raw, json)
Hash identifier: BZjbZUXSPy03wCFgRzPQiBv2+H5zbYcd7ButpCCAQ3o=
Subject key identifier: 47:30:6B:27:55:83:EB:4D:01:CE:22:8C:F1:78:A1:02:CB:4E:AE:92
Authority key identifier: D2:CB:5D:18:1A:FE:A6:9F:39:E1:71:12:59:3B:E4:B0:0E:58:4B:4D
Certificate issuer: /CN=d2cb5d181afea69f39e17112593be4b00e584b4d
Certificate serial: 019A70DC44FD55CF019B858D0C8C2560A556
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0stdGBr-pp854XESWTvksA5YS00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/aa9e97-4001-48a4-bf80-3d25458b39ee/1/0stdGBr-pp854XESWTvksA5YS00.mft
Manifest number: 058B
Signing time: Tue 11 Nov 2025 03:01:14 +0000
Manifest this update: Tue 11 Nov 2025 03:01:14 +0000
Manifest next update: Wed 12 Nov 2025 03:01:14 +0000
Files and hashes: 1: 0stdGBr-pp854XESWTvksA5YS00.crl (hash: qxSTkuuzgKx/WWu2ZsBtRzub2Bvzh9T0X+jy2Gz9RXs=)
2: DjD9dQKu2fp9cHrAn1sIWGhC488.roa (hash: fAPGT8GWJz86zGyzRAQmnMcTrszvTZhO+N/oXftz62E=)
3: IBq-WXNXCM-_L3wj6_Sv5Rx4dNA.roa (hash: vuy64Y3PAKsG7oegiPafGsZ4QGAupXIefuGc7dRwG0A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/aa9e97-4001-48a4-bf80-3d25458b39ee/1/0stdGBr-pp854XESWTvksA5YS00.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/aa9e97-4001-48a4-bf80-3d25458b39ee/1/0stdGBr-pp854XESWTvksA5YS00.mft
rsync://rpki.ripe.net/repository/DEFAULT/0stdGBr-pp854XESWTvksA5YS00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:44:fd:55:cf:01:9b:85:8d:0c:8c:25:60:a5:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2cb5d181afea69f39e17112593be4b00e584b4d
Validity
Not Before: Nov 11 03:01:14 2025 GMT
Not After : Nov 12 03:01:14 2025 GMT
Subject: CN=47306b275583eb4d01ce228cf178a102cb4eae92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c5:a2:2e:49:b1:af:6f:f1:bf:bf:c0:51:dd:
d4:ce:03:7b:42:8f:a3:e4:89:62:e3:ec:78:21:af:
8d:58:52:e4:45:6e:d0:38:90:77:64:68:4d:3e:7f:
88:4e:8c:b3:51:e3:b4:ea:ff:00:67:9b:eb:f4:f5:
da:46:78:c5:eb:56:09:9a:a3:77:bf:e3:d7:36:b0:
5a:64:bd:bf:49:34:eb:05:97:37:b0:24:fc:aa:b4:
79:d6:31:34:a3:be:55:1a:d2:b1:9f:bb:b5:b2:3e:
93:9a:d9:7b:f1:06:76:84:38:00:5f:bf:5a:1b:6d:
3a:b4:ee:bc:bf:25:9b:b2:63:21:34:65:34:f2:56:
02:c6:a6:1b:66:1f:ea:da:73:e0:36:10:ff:9c:b7:
8e:72:03:95:36:cc:b0:77:19:8e:b4:45:c1:03:28:
36:88:e8:61:21:af:51:c1:ee:6a:b1:25:6e:fd:c9:
6f:1f:a6:8d:7c:f1:11:47:29:04:c1:2d:c8:56:66:
ed:be:da:b9:0c:74:14:1c:b4:f3:aa:4f:ac:d8:56:
4d:2e:65:33:23:f4:9f:a1:99:93:b6:9b:9a:d4:4f:
3c:e6:a5:d9:7c:06:41:cf:60:4d:d2:28:1c:2a:cb:
61:d8:33:e4:b9:4e:64:3f:09:54:11:78:38:38:97:
59:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:30:6B:27:55:83:EB:4D:01:CE:22:8C:F1:78:A1:02:CB:4E:AE:92
X509v3 Authority Key Identifier:
keyid:D2:CB:5D:18:1A:FE:A6:9F:39:E1:71:12:59:3B:E4:B0:0E:58:4B:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0stdGBr-pp854XESWTvksA5YS00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/aa9e97-4001-48a4-bf80-3d25458b39ee/1/0stdGBr-pp854XESWTvksA5YS00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/aa9e97-4001-48a4-bf80-3d25458b39ee/1/0stdGBr-pp854XESWTvksA5YS00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:ab:06:4b:9c:c2:76:2b:42:ce:4a:2b:7c:d6:37:e5:46:7a:
da:57:2a:a4:c5:85:3d:a9:a9:9e:dc:3e:0a:9c:c7:60:f0:16:
b7:45:3c:f3:74:17:95:ce:0b:20:49:4c:12:68:b4:69:40:80:
aa:8d:48:5e:ff:79:5d:1e:5e:ec:de:44:03:0f:ef:35:c7:dd:
b8:92:f6:51:b3:b3:37:0c:f2:82:45:e9:de:81:52:35:05:6a:
8c:61:fd:fa:b4:a5:b2:8a:5f:78:48:1a:b7:62:c2:35:a1:2b:
49:a1:25:95:0d:a8:19:e7:bc:0b:a3:ea:79:73:3d:00:e9:c3:
bf:0d:3c:e6:5b:a1:c6:1d:10:98:28:0f:a8:92:e7:e5:da:3b:
d3:30:ea:4b:20:8b:a3:2f:8b:f8:97:1d:7a:b2:55:9c:bf:0c:
98:d7:a2:31:35:34:54:a6:79:e9:1b:c2:ce:a4:7e:8f:34:2e:
cd:13:f8:0f:52:e9:9b:20:07:4e:65:dc:35:79:1b:fa:9b:bd:
ea:18:b3:08:6c:07:12:ca:8f:c4:df:67:8e:b7:e5:2b:f8:49:
10:c0:b2:dd:99:ee:86:05:08:58:98:e7:54:2d:57:a1:9b:cb:
34:4d:cd:90:19:a8:f9:3a:25:6e:81:52:14:38:74:ca:3d:3b:
7b:58:75:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:41:03 2025 by rpki-client