Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/a87e6b-a003-453c-bc0d-42df31974d68/1/p7ZLX1AsUfocwRSIHLpStansHsg.mft
File: p7ZLX1AsUfocwRSIHLpStansHsg.mft (raw, json)
Hash identifier: 88S4J58hFRzY894xkz2WRCIbK3RKMi7wCNlvEOpzHbU=
Subject key identifier: 68:80:38:9A:89:16:10:C6:B6:B9:29:16:CF:F1:6E:DB:54:E0:89:3D
Authority key identifier: A7:B6:4B:5F:50:2C:51:FA:1C:C1:14:88:1C:BA:52:B5:A9:EC:1E:C8
Certificate issuer: /CN=a7b64b5f502c51fa1cc114881cba52b5a9ec1ec8
Certificate serial: 019922FA575E8D978085C89D5476411053E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p7ZLX1AsUfocwRSIHLpStansHsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/a87e6b-a003-453c-bc0d-42df31974d68/1/p7ZLX1AsUfocwRSIHLpStansHsg.mft
Manifest number: 09E2
Signing time: Sun 07 Sep 2025 07:00:55 +0000
Manifest this update: Sun 07 Sep 2025 07:00:55 +0000
Manifest next update: Mon 08 Sep 2025 07:00:55 +0000
Files and hashes: 1: p7ZLX1AsUfocwRSIHLpStansHsg.crl (hash: m0DinQb7a06Al2qVxk1ao39TrPW3gOqa0YA+w6Mhjug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/a87e6b-a003-453c-bc0d-42df31974d68/1/p7ZLX1AsUfocwRSIHLpStansHsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/a87e6b-a003-453c-bc0d-42df31974d68/1/p7ZLX1AsUfocwRSIHLpStansHsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/p7ZLX1AsUfocwRSIHLpStansHsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:57:5e:8d:97:80:85:c8:9d:54:76:41:10:53:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7b64b5f502c51fa1cc114881cba52b5a9ec1ec8
Validity
Not Before: Sep 7 07:00:55 2025 GMT
Not After : Sep 8 07:00:55 2025 GMT
Subject: CN=6880389a891610c6b6b92916cff16edb54e0893d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:53:24:2f:7a:7a:70:96:6e:6d:b5:5c:50:c8:
38:98:03:8d:4e:18:53:bf:3e:eb:b3:98:33:a1:6a:
8d:d3:6d:6d:87:24:6a:e0:ce:c6:87:1f:4e:c0:a2:
a5:91:cf:f5:0f:b2:64:7c:cb:78:0e:59:0c:71:f5:
2f:5c:01:16:fa:55:13:4f:cc:92:50:2f:dc:1b:cc:
58:0a:e3:6c:0c:4d:e4:24:9e:77:2b:5c:f7:ed:b1:
d6:cf:5a:28:50:b4:50:bd:d5:87:22:23:12:b4:8e:
8b:78:bc:cf:de:b7:44:eb:00:96:63:07:88:5f:7a:
e1:b7:2f:a6:29:f6:4c:a3:2b:fd:aa:58:16:37:7e:
93:fb:d2:8b:ab:b0:3f:b1:a3:51:d3:b2:e4:ad:d8:
ca:fd:45:8e:02:e0:ce:1b:20:95:5f:89:4e:75:04:
69:b9:cc:c8:14:3a:c0:4c:18:6e:2c:80:14:dd:c4:
c2:b2:d6:38:d3:83:ce:28:00:2a:c6:d5:7d:f0:7e:
a0:72:f0:9d:57:11:a6:48:d4:28:f8:f0:16:cf:34:
4e:cb:4c:4f:a9:ac:5c:2b:04:34:a6:b7:8d:c8:54:
29:05:c4:10:48:ea:88:9c:f5:7c:03:4c:6f:8f:69:
02:fb:95:45:83:b1:07:29:28:dc:c8:85:f3:bb:21:
5d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:80:38:9A:89:16:10:C6:B6:B9:29:16:CF:F1:6E:DB:54:E0:89:3D
X509v3 Authority Key Identifier:
keyid:A7:B6:4B:5F:50:2C:51:FA:1C:C1:14:88:1C:BA:52:B5:A9:EC:1E:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p7ZLX1AsUfocwRSIHLpStansHsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/a87e6b-a003-453c-bc0d-42df31974d68/1/p7ZLX1AsUfocwRSIHLpStansHsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/a87e6b-a003-453c-bc0d-42df31974d68/1/p7ZLX1AsUfocwRSIHLpStansHsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:15:e5:89:fb:cb:ba:8b:e0:6c:a1:58:75:0e:e6:ea:44:b5:
ad:07:71:5b:83:10:3b:7f:5d:86:c6:38:2e:7f:1e:a3:ee:3a:
40:e3:87:b5:54:ae:c1:60:04:14:43:46:bc:ff:1b:0e:fe:67:
93:a7:b1:cd:24:aa:eb:30:c2:07:13:f8:73:ad:58:a4:6b:1b:
01:ab:1c:79:26:e9:e6:6c:1b:ae:a6:52:e4:f6:76:b2:92:02:
7a:82:e2:e5:c2:f7:a8:4c:f9:92:9f:af:80:62:4e:b3:ba:a3:
20:df:ac:8e:2b:3e:bd:a0:5b:fe:34:9a:c8:5c:e6:f8:2d:6c:
08:90:4a:f3:c9:12:9c:dd:19:71:f3:62:51:ba:00:97:aa:8f:
7f:05:40:d0:a6:e2:b3:a8:1b:a7:67:73:34:af:0d:12:dc:20:
91:11:ff:37:cf:27:89:31:9e:6b:a2:59:1a:a9:03:61:41:b2:
29:58:c4:de:38:7a:90:48:14:9a:e7:92:4e:0e:5b:cc:42:75:
7e:24:bc:a3:1e:06:dd:f3:47:ba:08:71:5a:3d:0c:18:5b:3e:
5f:9e:8a:31:a8:a1:b2:ed:38:46:14:7f:c6:d2:05:f2:d0:6a:
2c:59:62:a8:78:3d:b6:3f:20:9a:b2:9e:54:39:e3:93:c1:8a:
e1:e6:28:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZki+ldejZeAhcidVHZBEFPhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3YjY0YjVmNTAyYzUxZmExY2MxMTQ4ODFjYmE1MmI1YTll
YzFlYzgwHhcNMjUwOTA3MDcwMDU1WhcNMjUwOTA4MDcwMDU1WjAzMTEwLwYDVQQD
Eyg2ODgwMzg5YTg5MTYxMGM2YjZiOTI5MTZjZmYxNmVkYjU0ZTA4OTNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVMkL3p6cJZubbVcUMg4mAONThhT
vz7rs5gzoWqN021thyRq4M7Ghx9OwKKlkc/1D7JkfMt4DlkMcfUvXAEW+lUTT8yS
UC/cG8xYCuNsDE3kJJ53K1z37bHWz1ooULRQvdWHIiMStI6LeLzP3rdE6wCWYweI
X3rhty+mKfZMoyv9qlgWN36T+9KLq7A/saNR07LkrdjK/UWOAuDOGyCVX4lOdQRp
uczIFDrATBhuLIAU3cTCstY404POKAAqxtV98H6gcvCdVxGmSNQo+PAWzzROy0xP
qaxcKwQ0preNyFQpBcQQSOqInPV8A0xvj2kC+5VFg7EHKSjcyIXzuyFdZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGiAOJqJFhDGtrkpFs/xbttU4Ik9MB8GA1UdIwQY
MBaAFKe2S19QLFH6HMEUiBy6UrWp7B7IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcDdaTFgxQXNVZm9jd1JTSUhMcFN0YW5zSHNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9hODdlNmItYTAwMy00NTNjLWJjMGQt
NDJkZjMxOTc0ZDY4LzEvcDdaTFgxQXNVZm9jd1JTSUhMcFN0YW5zSHNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS9hODdlNmItYTAwMy00NTNjLWJjMGQtNDJkZjMxOTc0ZDY4
LzEvcDdaTFgxQXNVZm9jd1JTSUhMcFN0YW5zSHNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOhXlifvL
uovgbKFYdQ7m6kS1rQdxW4MQO39dhsY4Ln8eo+46QOOHtVSuwWAEFENGvP8bDv5n
k6exzSSq6zDCBxP4c61YpGsbAasceSbp5mwbrqZS5PZ2spICeoLi5cL3qEz5kp+v
gGJOs7qjIN+sjis+vaBb/jSayFzm+C1sCJBK88kSnN0ZcfNiUboAl6qPfwVA0Kbi
s6gbp2dzNK8NEtwgkRH/N88niTGea6JZGqkDYUGyKVjE3jh6kEgUmueSTg5bzEJ1
fiS8ox4G3fNHughxWj0MGFs+X56KMaihsu04RhR/xtIF8tBqLFliqHg9tj8gmrKe
VDnjk8GK4eYodg==
-----END CERTIFICATE-----
Generated at Sun Sep 7 10:04:45 2025 by rpki-client