Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/a87e6b-a003-453c-bc0d-42df31974d68/1/p7ZLX1AsUfocwRSIHLpStansHsg.mft
File: p7ZLX1AsUfocwRSIHLpStansHsg.mft (raw, json)
Hash identifier: 0bl4/WKLgmKTu2lX88NCZHlMVNzw+WL369KVwGBdhZs=
Subject key identifier: 8F:A8:4B:6A:AB:68:8D:EF:C5:EE:7E:6E:CE:57:39:50:58:BD:38:D2
Authority key identifier: A7:B6:4B:5F:50:2C:51:FA:1C:C1:14:88:1C:BA:52:B5:A9:EC:1E:C8
Certificate issuer: /CN=a7b64b5f502c51fa1cc114881cba52b5a9ec1ec8
Certificate serial: 019A71134989EFA5AE2E9F46EBF4E0F70222
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p7ZLX1AsUfocwRSIHLpStansHsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/a87e6b-a003-453c-bc0d-42df31974d68/1/p7ZLX1AsUfocwRSIHLpStansHsg.mft
Manifest number: 0A8F
Signing time: Tue 11 Nov 2025 04:01:20 +0000
Manifest this update: Tue 11 Nov 2025 04:01:20 +0000
Manifest next update: Wed 12 Nov 2025 04:01:20 +0000
Files and hashes: 1: p7ZLX1AsUfocwRSIHLpStansHsg.crl (hash: gmOs71vUxoyxg/Rb+1e8wZ/Z82q4NfN6Jb4zMPpYlWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/a87e6b-a003-453c-bc0d-42df31974d68/1/p7ZLX1AsUfocwRSIHLpStansHsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/a87e6b-a003-453c-bc0d-42df31974d68/1/p7ZLX1AsUfocwRSIHLpStansHsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/p7ZLX1AsUfocwRSIHLpStansHsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:49:89:ef:a5:ae:2e:9f:46:eb:f4:e0:f7:02:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7b64b5f502c51fa1cc114881cba52b5a9ec1ec8
Validity
Not Before: Nov 11 04:01:20 2025 GMT
Not After : Nov 12 04:01:20 2025 GMT
Subject: CN=8fa84b6aab688defc5ee7e6ece57395058bd38d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:95:df:0f:ab:3a:25:fc:f9:d4:f4:a7:47:9f:
a9:1c:34:90:3a:4f:d6:c6:52:8e:14:fb:f0:8b:a0:
dc:e6:c3:cf:41:89:a6:26:a1:72:68:21:bc:95:5e:
b0:26:5a:c8:8e:d2:e4:7c:0f:cc:3b:2e:f5:b3:88:
0e:58:41:39:87:d4:95:4a:49:03:fc:84:3c:a6:81:
5b:cc:0e:00:4f:79:49:64:0e:11:11:66:40:7d:da:
2c:05:85:1c:56:9e:11:8d:79:ab:cb:fa:3d:42:13:
cc:b5:62:38:0c:9e:b4:ab:7d:ab:0b:94:45:9c:7a:
e0:7b:1c:21:0f:f7:1d:11:1d:da:62:87:b2:2d:21:
fe:75:c1:8a:b4:52:d8:60:25:ac:fe:2b:59:c5:6c:
eb:97:ff:d8:e0:d1:21:b1:02:e7:27:ca:41:24:16:
78:4c:0a:74:51:6f:99:0e:4c:54:47:6c:0c:7e:f2:
82:92:da:2a:ce:f0:ac:24:c6:fe:46:f1:8f:a5:35:
d7:bd:cf:97:03:88:9f:62:87:85:1f:5e:bf:ea:15:
75:0b:aa:c9:16:4b:d2:72:02:2b:64:b0:12:f5:cf:
3d:2e:bd:96:41:cb:94:9a:2b:80:3e:2d:ec:c4:fc:
4b:ba:2e:20:eb:65:1b:e0:85:ea:4d:1d:95:1c:f9:
7d:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:A8:4B:6A:AB:68:8D:EF:C5:EE:7E:6E:CE:57:39:50:58:BD:38:D2
X509v3 Authority Key Identifier:
keyid:A7:B6:4B:5F:50:2C:51:FA:1C:C1:14:88:1C:BA:52:B5:A9:EC:1E:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p7ZLX1AsUfocwRSIHLpStansHsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/a87e6b-a003-453c-bc0d-42df31974d68/1/p7ZLX1AsUfocwRSIHLpStansHsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/a87e6b-a003-453c-bc0d-42df31974d68/1/p7ZLX1AsUfocwRSIHLpStansHsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:1b:8f:b0:e5:13:9f:4d:23:de:c7:58:a6:0a:4f:c3:11:01:
42:7d:f1:9b:da:37:8e:d9:64:ea:0b:ab:9a:19:f0:69:7b:bb:
95:06:a4:ad:f6:da:88:2a:b5:ee:d3:43:23:1f:28:ac:d9:88:
cf:9d:69:15:f5:fa:a0:27:8a:02:c6:78:80:fb:22:bf:d3:38:
da:30:67:66:2c:89:fa:b4:98:81:01:d5:2d:8f:16:52:b0:3b:
b3:0b:28:af:43:cf:86:89:07:c1:e0:69:ba:d2:a8:b3:b0:3c:
3e:2e:c1:69:e8:3b:6c:1a:aa:5e:07:fa:3f:69:c3:b0:0f:8e:
5d:be:eb:d6:90:83:c6:a8:1c:a7:8f:66:b7:06:f0:f5:e5:31:
41:ba:26:39:25:17:da:6b:d6:66:d2:75:0f:51:25:f9:57:fc:
d0:43:82:67:d4:51:a9:35:ef:27:89:2b:84:f9:5a:49:2f:75:
9b:cc:2a:e4:f0:b1:48:03:eb:d9:d5:26:cb:0e:05:bf:23:ed:
3b:d7:24:1f:8e:87:33:c2:c9:bf:45:bf:f8:a3:91:34:ee:53:
96:41:8b:bd:1b:de:bd:2f:9c:5b:62:f4:df:17:5f:9d:9a:59:
15:99:42:a9:c6:f5:04:37:75:4a:a0:ba:22:14:4c:28:90:a6:
82:28:9b:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:03:41 2025 by rpki-client