Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/aa9e97-4001-48a4-bf80-3d25458b39ee/1/0stdGBr-pp854XESWTvksA5YS00.mft
File: 0stdGBr-pp854XESWTvksA5YS00.mft (raw, json)
Hash identifier: 0fKaUjWU2cnPxuhW2KNL83fOJHhBcIY3MGVzJWpSwF4=
Subject key identifier: 26:B3:64:F8:01:8B:A0:C2:A2:8C:77:9C:82:30:B8:AF:78:35:E0:D7
Authority key identifier: D2:CB:5D:18:1A:FE:A6:9F:39:E1:71:12:59:3B:E4:B0:0E:58:4B:4D
Certificate issuer: /CN=d2cb5d181afea69f39e17112593be4b00e584b4d
Certificate serial: 019922C37A7932EDC2DC0E74640A429A92E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0stdGBr-pp854XESWTvksA5YS00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/aa9e97-4001-48a4-bf80-3d25458b39ee/1/0stdGBr-pp854XESWTvksA5YS00.mft
Manifest number: 04DE
Signing time: Sun 07 Sep 2025 06:01:00 +0000
Manifest this update: Sun 07 Sep 2025 06:01:00 +0000
Manifest next update: Mon 08 Sep 2025 06:01:00 +0000
Files and hashes: 1: 0stdGBr-pp854XESWTvksA5YS00.crl (hash: vwuacZn18VuHLm5YFjqvO51G4rozb3Ba+PcI7lIxM58=)
2: DjD9dQKu2fp9cHrAn1sIWGhC488.roa (hash: fAPGT8GWJz86zGyzRAQmnMcTrszvTZhO+N/oXftz62E=)
3: IBq-WXNXCM-_L3wj6_Sv5Rx4dNA.roa (hash: vuy64Y3PAKsG7oegiPafGsZ4QGAupXIefuGc7dRwG0A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/aa9e97-4001-48a4-bf80-3d25458b39ee/1/0stdGBr-pp854XESWTvksA5YS00.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/aa9e97-4001-48a4-bf80-3d25458b39ee/1/0stdGBr-pp854XESWTvksA5YS00.mft
rsync://rpki.ripe.net/repository/DEFAULT/0stdGBr-pp854XESWTvksA5YS00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:7a:79:32:ed:c2:dc:0e:74:64:0a:42:9a:92:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2cb5d181afea69f39e17112593be4b00e584b4d
Validity
Not Before: Sep 7 06:01:00 2025 GMT
Not After : Sep 8 06:01:00 2025 GMT
Subject: CN=26b364f8018ba0c2a28c779c8230b8af7835e0d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:c1:fa:7b:df:3f:de:d5:f5:c8:10:9d:ac:c5:
27:de:b5:3a:2d:c7:4a:20:8f:b8:70:e8:8c:b4:2e:
6d:f2:c5:f2:3d:34:d6:bc:98:c7:a5:fc:c1:8a:99:
c8:ac:2c:e5:94:c5:18:80:92:64:cc:95:de:fc:aa:
25:ef:aa:8d:48:82:58:19:8a:46:40:92:a2:a5:04:
e7:51:99:1a:24:22:9c:c0:27:22:32:a1:37:8b:85:
f5:31:ec:45:58:49:80:df:fd:9b:c9:8d:3a:58:7b:
4f:8a:a4:13:95:82:4f:25:06:eb:5f:18:f9:b5:c0:
5b:4e:19:b4:54:30:9d:29:2c:4b:05:af:bf:92:37:
ec:79:d9:77:d7:4a:85:1b:59:92:69:fd:0b:bb:4a:
5d:08:5d:ae:6a:80:d3:61:c4:10:75:05:13:b0:e5:
91:05:b0:70:80:e7:1d:a8:30:a3:06:79:c5:28:4d:
12:8f:a9:8d:18:56:52:7c:0d:06:7f:6a:8f:e2:0e:
06:b7:bc:81:15:cb:df:e6:e6:af:37:5d:98:34:1d:
da:ce:f8:14:84:99:62:32:79:38:90:c1:da:03:1e:
71:90:d7:6c:80:e9:44:a9:26:10:d3:12:f4:6c:6c:
99:0d:33:8e:72:93:ee:e9:f2:51:94:dc:79:a6:2a:
fe:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:B3:64:F8:01:8B:A0:C2:A2:8C:77:9C:82:30:B8:AF:78:35:E0:D7
X509v3 Authority Key Identifier:
keyid:D2:CB:5D:18:1A:FE:A6:9F:39:E1:71:12:59:3B:E4:B0:0E:58:4B:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0stdGBr-pp854XESWTvksA5YS00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/aa9e97-4001-48a4-bf80-3d25458b39ee/1/0stdGBr-pp854XESWTvksA5YS00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/aa9e97-4001-48a4-bf80-3d25458b39ee/1/0stdGBr-pp854XESWTvksA5YS00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:04:56:0d:2a:9b:ff:c3:c2:7c:36:a2:9e:25:87:7d:e7:c2:
4f:9e:f8:13:50:6d:c8:bd:c5:b1:49:0d:89:24:f1:e4:e2:ea:
15:09:25:58:d4:d6:81:68:cf:4e:0a:e5:2b:55:be:a8:e4:26:
63:e4:34:b9:27:db:4b:4c:de:ba:49:ee:2e:b5:b1:da:8c:1f:
2e:c8:16:19:a3:08:5d:21:0b:72:04:c7:53:c3:cf:33:5a:19:
50:60:48:f0:ff:53:cc:4e:b6:65:6b:f9:34:6d:1a:e4:07:56:
7c:b2:d8:26:bc:e3:c0:d9:fb:64:21:1f:50:98:b7:5d:92:f7:
09:33:e9:a8:07:20:5d:5f:c4:c4:06:ba:6e:b1:b3:f8:21:52:
f4:56:d1:ef:20:07:f1:7f:3a:90:1c:a1:f2:1e:d4:ef:e9:75:
99:b9:8e:34:de:c6:0f:5e:12:c0:04:c0:5a:68:1e:6d:63:42:
ff:97:95:1a:a7:3a:90:06:5e:e9:a4:3f:a5:07:28:c5:50:bf:
e9:f4:9f:b1:13:b9:46:c6:1d:a1:dd:c6:d2:45:d4:cd:1d:6d:
e5:d1:d3:5b:f4:8d:6d:44:9e:92:99:cf:db:a1:00:73:18:21:
56:e1:3b:a3:72:c8:e8:44:00:4f:29:c6:e8:d6:78:0e:fe:eb:
c9:77:26:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:39:32 2025 by rpki-client