Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/aa9e97-4001-48a4-bf80-3d25458b39ee/1/0stdGBr-pp854XESWTvksA5YS00.mft
File: 0stdGBr-pp854XESWTvksA5YS00.mft (raw, json)
Hash identifier: Zh3I3WH6vh1DxPnyDxo9Itl7Czew3oGoDurtah/g0mk=
Subject key identifier: FD:F9:98:14:FE:39:02:5E:F4:05:C5:51:9E:FF:40:17:FB:10:07:EF
Authority key identifier: D2:CB:5D:18:1A:FE:A6:9F:39:E1:71:12:59:3B:E4:B0:0E:58:4B:4D
Certificate issuer: /CN=d2cb5d181afea69f39e17112593be4b00e584b4d
Certificate serial: 0197499EDD9E90791955EFCC320FB3273C59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0stdGBr-pp854XESWTvksA5YS00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/aa9e97-4001-48a4-bf80-3d25458b39ee/1/0stdGBr-pp854XESWTvksA5YS00.mft
Manifest number: 03E9
Signing time: Sat 07 Jun 2025 09:00:37 +0000
Manifest this update: Sat 07 Jun 2025 09:00:37 +0000
Manifest next update: Sun 08 Jun 2025 09:00:37 +0000
Files and hashes: 1: 0stdGBr-pp854XESWTvksA5YS00.crl (hash: lsNNsF1xDqmyQ4Of+5J0NSjdPtPQx1EUdVhO5EOfwNE=)
2: DjD9dQKu2fp9cHrAn1sIWGhC488.roa (hash: fAPGT8GWJz86zGyzRAQmnMcTrszvTZhO+N/oXftz62E=)
3: IBq-WXNXCM-_L3wj6_Sv5Rx4dNA.roa (hash: vuy64Y3PAKsG7oegiPafGsZ4QGAupXIefuGc7dRwG0A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/aa9e97-4001-48a4-bf80-3d25458b39ee/1/0stdGBr-pp854XESWTvksA5YS00.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/aa9e97-4001-48a4-bf80-3d25458b39ee/1/0stdGBr-pp854XESWTvksA5YS00.mft
rsync://rpki.ripe.net/repository/DEFAULT/0stdGBr-pp854XESWTvksA5YS00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:9e:dd:9e:90:79:19:55:ef:cc:32:0f:b3:27:3c:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2cb5d181afea69f39e17112593be4b00e584b4d
Validity
Not Before: Jun 7 09:00:37 2025 GMT
Not After : Jun 8 09:00:37 2025 GMT
Subject: CN=fdf99814fe39025ef405c5519eff4017fb1007ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:3e:e8:d2:30:13:1c:92:76:ee:d7:43:04:43:
a7:af:af:5b:03:a5:69:66:b5:49:3e:98:1f:ea:40:
54:84:04:cf:c2:eb:c4:8b:28:43:37:bb:2e:87:12:
67:64:b6:15:c1:8c:20:e3:ca:19:1c:16:62:3b:db:
66:3b:58:6e:46:7c:d0:75:89:6c:07:eb:31:e3:76:
89:6c:98:d3:a8:5a:0e:7a:e9:84:c7:be:43:c3:10:
41:7b:df:2e:fa:f9:91:f0:e4:53:d4:cf:7f:c3:ca:
11:08:e6:40:c5:d7:4d:c7:fb:0f:3d:5f:68:b5:f0:
3c:dc:6e:5b:40:fb:79:5d:1b:06:aa:ee:49:b7:11:
99:e9:e7:5a:09:6f:ce:00:31:1a:08:29:b2:9b:ba:
2d:4e:c8:d7:bd:9c:fa:29:03:a1:86:94:19:a5:f9:
60:70:50:6b:f9:c7:52:e5:5a:d0:ce:a3:05:49:e5:
17:68:64:b3:29:5d:6a:ed:2d:11:91:c4:fd:64:47:
48:f5:fa:10:bf:dd:4b:41:56:41:6e:98:c7:f7:02:
ff:3f:14:3b:82:81:b8:e0:57:aa:e7:c5:96:f8:93:
02:0e:4a:f1:7a:89:ed:11:0e:e7:60:a3:c7:a7:b0:
1e:ff:59:2f:f8:b4:07:5d:38:f9:01:54:cf:42:54:
c3:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:F9:98:14:FE:39:02:5E:F4:05:C5:51:9E:FF:40:17:FB:10:07:EF
X509v3 Authority Key Identifier:
keyid:D2:CB:5D:18:1A:FE:A6:9F:39:E1:71:12:59:3B:E4:B0:0E:58:4B:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0stdGBr-pp854XESWTvksA5YS00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/aa9e97-4001-48a4-bf80-3d25458b39ee/1/0stdGBr-pp854XESWTvksA5YS00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/aa9e97-4001-48a4-bf80-3d25458b39ee/1/0stdGBr-pp854XESWTvksA5YS00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:18:6d:9d:81:6c:3c:45:d9:84:a4:ed:c5:13:73:77:2b:13:
99:1d:fd:31:d8:cc:83:80:dc:9e:fb:e8:4d:65:a6:5e:c0:ac:
5d:35:a5:f6:5e:1f:86:4a:51:c5:0b:dc:2b:a3:ea:6b:d5:a9:
d7:75:95:bf:82:b0:71:7a:69:56:93:32:f1:5b:5a:63:f5:2b:
ba:0f:a0:61:2a:01:52:70:ec:53:2e:b4:5b:aa:37:58:23:ae:
b9:1b:a6:2d:c5:36:9f:dc:b2:f7:e9:c9:dc:0e:40:14:74:cc:
71:6a:a1:5f:e9:5f:65:87:2d:08:98:3b:59:cb:18:52:8a:78:
ce:12:40:64:63:f5:f4:68:0c:46:52:3e:c2:ca:c3:9f:58:68:
5a:76:67:ac:e7:46:f6:77:5c:31:f0:ff:36:95:a5:23:b8:d2:
d1:d5:8c:87:1d:ed:b7:3a:37:27:fe:22:e9:d3:ef:55:36:b1:
ee:1a:0e:d3:ec:f5:39:0b:7e:80:aa:ce:ef:52:c2:f1:0a:60:
aa:7a:3f:b6:5e:dd:e3:ee:ca:27:76:35:ad:1c:4b:c4:bd:78:
07:7a:00:6e:9a:15:66:5d:1e:8f:59:72:a3:cc:27:08:8b:c6:
62:af:31:62:09:fa:1a:c5:27:d2:c5:f3:1e:37:4d:e1:bf:5a:
de:4e:45:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:54:09 2025 by rpki-client