
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/aa9e97-4001-48a4-bf80-3d25458b39ee/1/0stdGBr-pp854XESWTvksA5YS00.mft
File: 0stdGBr-pp854XESWTvksA5YS00.mft (raw, json)
Hash identifier: j6wuZdXF2PMlk0mQ9XmyoCE/03qViZhMzONLbibRoLM=
Subject key identifier: B8:BC:99:EE:19:4E:71:9B:B7:62:47:6E:E6:66:50:CB:C2:70:B6:B7
Authority key identifier: D2:CB:5D:18:1A:FE:A6:9F:39:E1:71:12:59:3B:E4:B0:0E:58:4B:4D
Certificate issuer: /CN=d2cb5d181afea69f39e17112593be4b00e584b4d
Certificate serial: 0198D583D9C5950E19151C709E05F223B647
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0stdGBr-pp854XESWTvksA5YS00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/aa9e97-4001-48a4-bf80-3d25458b39ee/1/0stdGBr-pp854XESWTvksA5YS00.mft
Manifest number: 04B6
Signing time: Sat 23 Aug 2025 06:00:44 +0000
Manifest this update: Sat 23 Aug 2025 06:00:44 +0000
Manifest next update: Sun 24 Aug 2025 06:00:44 +0000
Files and hashes: 1: 0stdGBr-pp854XESWTvksA5YS00.crl (hash: x5YBLhhAt+7XjWSHgZfw4aO1xRAr5DIfztyKYfQpfXA=)
2: DjD9dQKu2fp9cHrAn1sIWGhC488.roa (hash: fAPGT8GWJz86zGyzRAQmnMcTrszvTZhO+N/oXftz62E=)
3: IBq-WXNXCM-_L3wj6_Sv5Rx4dNA.roa (hash: vuy64Y3PAKsG7oegiPafGsZ4QGAupXIefuGc7dRwG0A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/aa9e97-4001-48a4-bf80-3d25458b39ee/1/0stdGBr-pp854XESWTvksA5YS00.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/aa9e97-4001-48a4-bf80-3d25458b39ee/1/0stdGBr-pp854XESWTvksA5YS00.mft
rsync://rpki.ripe.net/repository/DEFAULT/0stdGBr-pp854XESWTvksA5YS00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:d9:c5:95:0e:19:15:1c:70:9e:05:f2:23:b6:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2cb5d181afea69f39e17112593be4b00e584b4d
Validity
Not Before: Aug 23 06:00:44 2025 GMT
Not After : Aug 24 06:00:44 2025 GMT
Subject: CN=b8bc99ee194e719bb762476ee66650cbc270b6b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:73:8d:42:cc:43:db:97:4d:33:93:08:32:92:
e9:e2:19:79:0f:ae:09:ea:97:aa:ab:38:d2:13:5c:
20:8c:85:3f:51:66:72:00:bc:5d:f4:5a:1d:26:7c:
e3:00:76:54:2d:c0:1f:19:31:01:81:94:a7:69:db:
d8:e2:9e:42:49:3d:5b:10:a3:20:66:54:2c:9b:72:
af:71:45:55:07:b5:23:d2:f0:44:90:8c:24:89:96:
c3:d7:0a:2f:c2:2e:52:34:26:71:db:fa:91:ba:20:
a0:d9:1d:d4:d8:6c:9b:fc:40:a8:55:7c:af:d0:32:
7a:9e:66:e1:71:72:73:f6:97:cd:67:68:f7:39:f8:
47:bf:98:84:13:d2:c1:d5:98:8e:8d:44:1a:19:39:
ed:5e:31:14:9d:5a:fb:52:0d:4d:66:d6:c5:6b:27:
28:83:ca:0f:04:9c:9c:24:e0:c2:a3:d7:43:92:1e:
8d:c2:ef:49:57:20:1c:eb:75:14:e1:9f:6d:32:d3:
b7:d6:bf:94:76:95:0e:32:1a:06:1f:73:9c:a3:70:
32:61:2d:7d:bb:31:7d:79:62:55:1a:a6:de:b4:67:
e1:b5:90:ba:11:58:64:1f:d6:50:27:45:cf:db:90:
85:8b:be:be:7c:5b:6f:fa:0d:36:3b:cc:dd:12:0c:
2d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:BC:99:EE:19:4E:71:9B:B7:62:47:6E:E6:66:50:CB:C2:70:B6:B7
X509v3 Authority Key Identifier:
keyid:D2:CB:5D:18:1A:FE:A6:9F:39:E1:71:12:59:3B:E4:B0:0E:58:4B:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0stdGBr-pp854XESWTvksA5YS00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/aa9e97-4001-48a4-bf80-3d25458b39ee/1/0stdGBr-pp854XESWTvksA5YS00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/aa9e97-4001-48a4-bf80-3d25458b39ee/1/0stdGBr-pp854XESWTvksA5YS00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:90:8c:3c:b0:38:91:40:2a:8a:dc:48:cc:4f:63:dc:b0:6c:
dc:81:fe:42:f2:aa:da:f9:1f:6f:02:e5:75:01:28:c8:19:97:
40:20:5e:22:c8:74:52:0f:e2:51:0e:6a:f2:e7:db:15:13:f0:
de:52:28:ec:6e:a9:ef:9a:b8:96:65:de:d5:5c:e7:38:4b:66:
ed:4d:06:5c:8e:4f:39:cc:e5:7e:fe:f7:3f:ad:6d:eb:ca:97:
d7:ca:95:de:f2:f5:0b:51:06:73:68:62:62:e3:22:05:6a:98:
a0:97:f1:e8:6b:ed:11:4b:50:7c:65:d8:2e:c3:d2:46:ea:c0:
6a:55:87:71:ca:26:f7:ef:74:3e:80:02:8a:2e:52:ad:b7:0f:
50:d5:5f:ca:66:14:38:8e:f7:16:49:13:1e:98:d5:92:90:54:
c6:8e:5d:3d:18:42:74:bc:c4:c4:28:a7:74:a4:70:9f:7f:8f:
9e:56:c4:dc:bd:98:3c:b2:13:ea:b7:ba:8e:c0:02:c0:bc:6b:
be:01:3b:9a:df:8c:f1:84:ca:83:2b:6d:b6:c8:c0:ad:f3:d8:
31:8a:1b:09:ec:87:a7:2b:6e:f9:d7:5e:d0:78:3a:9e:da:37:
16:ed:0a:d0:31:fd:e5:c9:1d:f1:88:f1:c6:85:14:df:06:19:
06:af:d8:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:09:41 2025 by rpki-client