Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/aa9e97-4001-48a4-bf80-3d25458b39ee/1/0stdGBr-pp854XESWTvksA5YS00.mft
File: 0stdGBr-pp854XESWTvksA5YS00.mft (raw, json)
Hash identifier: vSAkdAYIvJZhuDb3sOeIIz/B9RAKqozdWXdb165x2YM=
Subject key identifier: 7A:86:15:B6:35:E4:C0:88:D3:56:7F:AB:DC:33:48:88:60:A8:57:13
Authority key identifier: D2:CB:5D:18:1A:FE:A6:9F:39:E1:71:12:59:3B:E4:B0:0E:58:4B:4D
Certificate issuer: /CN=d2cb5d181afea69f39e17112593be4b00e584b4d
Certificate serial: 0197B5C50F812AA857D8CF091C4BC71C6624
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0stdGBr-pp854XESWTvksA5YS00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/aa9e97-4001-48a4-bf80-3d25458b39ee/1/0stdGBr-pp854XESWTvksA5YS00.mft
Manifest number: 0421
Signing time: Sat 28 Jun 2025 09:01:19 +0000
Manifest this update: Sat 28 Jun 2025 09:01:19 +0000
Manifest next update: Sun 29 Jun 2025 09:01:19 +0000
Files and hashes: 1: 0stdGBr-pp854XESWTvksA5YS00.crl (hash: ClYeXSpppd0pzD6WNsw3jVElpK59mN2uN6UazM9zwZw=)
2: DjD9dQKu2fp9cHrAn1sIWGhC488.roa (hash: fAPGT8GWJz86zGyzRAQmnMcTrszvTZhO+N/oXftz62E=)
3: IBq-WXNXCM-_L3wj6_Sv5Rx4dNA.roa (hash: vuy64Y3PAKsG7oegiPafGsZ4QGAupXIefuGc7dRwG0A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/aa9e97-4001-48a4-bf80-3d25458b39ee/1/0stdGBr-pp854XESWTvksA5YS00.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/aa9e97-4001-48a4-bf80-3d25458b39ee/1/0stdGBr-pp854XESWTvksA5YS00.mft
rsync://rpki.ripe.net/repository/DEFAULT/0stdGBr-pp854XESWTvksA5YS00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 09:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:c5:0f:81:2a:a8:57:d8:cf:09:1c:4b:c7:1c:66:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2cb5d181afea69f39e17112593be4b00e584b4d
Validity
Not Before: Jun 28 09:01:19 2025 GMT
Not After : Jun 29 09:01:19 2025 GMT
Subject: CN=7a8615b635e4c088d3567fabdc33488860a85713
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d7:4b:25:b2:23:e1:61:24:34:1d:6b:15:bd:
26:e5:5e:6f:8f:0f:0f:95:99:1a:d2:fe:2b:e0:b0:
55:d3:6c:4e:29:4d:3e:82:6f:98:24:34:35:9d:70:
b0:42:83:ac:3d:fe:d3:94:99:4c:b8:02:09:92:bc:
c4:1a:1c:86:58:2c:82:9b:5f:f2:eb:b3:d1:af:1e:
8b:b2:0f:d4:b0:8c:5e:e3:c6:35:67:21:22:81:32:
14:58:e7:52:00:90:e6:5a:17:2b:6c:67:9f:6e:98:
17:40:60:de:bc:ec:12:9d:78:97:04:c3:6c:df:5c:
1f:1a:df:8b:18:13:95:0f:ec:0c:15:75:bc:58:f4:
77:08:33:93:e8:33:d4:05:c0:9f:ca:0c:25:9a:a7:
ef:8f:9e:8a:da:66:cf:ac:3f:81:3a:de:a0:94:5c:
24:53:5e:fb:31:4d:ed:9e:47:30:4d:94:e1:72:e4:
2a:80:71:a7:f9:d8:50:34:f3:44:8d:29:e7:1c:48:
c8:64:b1:c4:5b:ef:3c:0b:4f:c6:57:aa:f5:ad:42:
9f:d4:be:fb:73:a9:97:22:2d:c6:c7:84:34:fc:f8:
43:f2:64:4d:c1:ed:55:49:86:ca:a3:64:8c:de:32:
70:0e:57:8e:40:ef:ef:7f:c2:41:27:c8:00:88:7d:
15:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:86:15:B6:35:E4:C0:88:D3:56:7F:AB:DC:33:48:88:60:A8:57:13
X509v3 Authority Key Identifier:
keyid:D2:CB:5D:18:1A:FE:A6:9F:39:E1:71:12:59:3B:E4:B0:0E:58:4B:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0stdGBr-pp854XESWTvksA5YS00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/aa9e97-4001-48a4-bf80-3d25458b39ee/1/0stdGBr-pp854XESWTvksA5YS00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/aa9e97-4001-48a4-bf80-3d25458b39ee/1/0stdGBr-pp854XESWTvksA5YS00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:73:1f:d6:7e:e0:65:7e:6b:31:66:23:42:10:f4:f0:93:47:
1b:9f:bc:5c:ad:f5:9d:74:5f:82:1f:8c:05:6c:f1:f8:2f:93:
db:3a:aa:ba:c1:45:31:15:4d:3e:27:32:30:d1:3b:5f:82:30:
3c:1f:b2:e5:a3:c1:c7:7d:3f:a4:b5:a8:8a:5e:a7:8d:73:80:
d1:61:b2:6d:43:4c:fa:8d:21:19:2c:db:3e:47:ba:b8:73:ff:
d8:a6:96:de:40:e3:c6:f5:c2:5e:ee:7a:32:66:c8:5b:ec:72:
d6:1f:47:d5:35:85:66:ff:36:2e:50:97:3c:10:50:aa:c1:40:
22:d2:b9:5e:22:3a:85:bb:f4:cf:46:db:41:2a:c6:b4:3f:62:
c0:27:03:71:86:78:66:c3:d5:32:95:b0:e5:b3:43:13:67:6d:
8f:de:9d:bc:c0:e4:ee:53:35:1f:28:e1:d6:70:32:d4:e8:fe:
44:5b:d0:71:6e:5b:76:ed:70:fb:ac:29:16:79:2a:b0:bd:af:
91:cb:50:e6:f6:b7:25:05:4c:bd:e5:a6:a6:2c:83:b3:73:55:
6f:3c:3b:c2:ce:55:ca:de:b6:9a:22:d0:2b:4f:f3:0c:f7:00:
3d:31:c8:7a:28:90:bf:70:99:e6:5d:ba:5b:a0:b2:2e:95:d1:
58:fb:19:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:37:18 2025 by rpki-client