Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/a87e6b-a003-453c-bc0d-42df31974d68/1/p7ZLX1AsUfocwRSIHLpStansHsg.mft
File: p7ZLX1AsUfocwRSIHLpStansHsg.mft (raw, json)
Hash identifier: fDCG3p2rN90wTlvziUXJddBM5kWucG3aGVS4GISj7lI=
Subject key identifier: 4F:D7:38:73:18:88:D7:28:C5:76:8E:49:EC:BE:66:0F:7E:5B:2B:C7
Authority key identifier: A7:B6:4B:5F:50:2C:51:FA:1C:C1:14:88:1C:BA:52:B5:A9:EC:1E:C8
Certificate issuer: /CN=a7b64b5f502c51fa1cc114881cba52b5a9ec1ec8
Certificate serial: 019749D5B632437BAA8DFA8B78B1BAA155DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p7ZLX1AsUfocwRSIHLpStansHsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/a87e6b-a003-453c-bc0d-42df31974d68/1/p7ZLX1AsUfocwRSIHLpStansHsg.mft
Manifest number: 08ED
Signing time: Sat 07 Jun 2025 10:00:31 +0000
Manifest this update: Sat 07 Jun 2025 10:00:31 +0000
Manifest next update: Sun 08 Jun 2025 10:00:31 +0000
Files and hashes: 1: p7ZLX1AsUfocwRSIHLpStansHsg.crl (hash: 00WVXFW01UpCYP1ab7Vf/K2joj7IQfF1/CNKPIOiLXE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/a87e6b-a003-453c-bc0d-42df31974d68/1/p7ZLX1AsUfocwRSIHLpStansHsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/a87e6b-a003-453c-bc0d-42df31974d68/1/p7ZLX1AsUfocwRSIHLpStansHsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/p7ZLX1AsUfocwRSIHLpStansHsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d5:b6:32:43:7b:aa:8d:fa:8b:78:b1:ba:a1:55:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7b64b5f502c51fa1cc114881cba52b5a9ec1ec8
Validity
Not Before: Jun 7 10:00:31 2025 GMT
Not After : Jun 8 10:00:31 2025 GMT
Subject: CN=4fd738731888d728c5768e49ecbe660f7e5b2bc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a8:54:bd:79:ad:4b:d5:89:1d:16:17:03:6a:
4f:d7:9b:6b:ab:4f:02:04:c8:f1:8e:ff:12:07:d5:
83:e2:ea:81:f7:c0:0f:be:fa:9e:85:b2:3a:aa:41:
41:7e:24:05:32:45:ec:9d:d3:ce:f0:3e:f7:5e:5a:
bd:99:ce:ea:d6:c4:5f:3a:0e:a5:d5:a3:d5:48:fa:
eb:c0:4f:db:44:30:03:bc:b1:60:a2:a6:d3:81:73:
1e:9c:16:8e:8b:98:0a:f1:77:54:9c:c9:86:be:c9:
80:a3:99:1f:c5:f1:ac:3b:b5:7a:96:8b:0c:4b:39:
7c:a7:0e:1b:72:68:6a:91:49:20:2a:21:09:70:f8:
01:c0:c9:5f:f1:2e:ed:26:39:77:9b:f4:da:68:bf:
e4:3e:e0:6b:95:d3:d3:98:54:34:93:c1:01:6b:89:
23:46:ed:8c:cf:69:a3:35:ae:65:0b:da:9b:4f:e5:
f2:66:e8:c6:0b:63:1c:11:a7:dd:6e:40:23:99:4e:
fd:83:1d:fc:4d:00:5e:40:d7:3b:90:17:56:4f:ac:
a6:18:e1:50:e0:a3:0e:24:b4:04:6b:1e:cd:86:4e:
d3:8b:6c:41:c8:a2:44:a0:ce:99:4f:d2:46:a1:9e:
de:ba:2e:df:a7:18:0b:c2:14:71:3a:19:b7:25:b5:
1c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:D7:38:73:18:88:D7:28:C5:76:8E:49:EC:BE:66:0F:7E:5B:2B:C7
X509v3 Authority Key Identifier:
keyid:A7:B6:4B:5F:50:2C:51:FA:1C:C1:14:88:1C:BA:52:B5:A9:EC:1E:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p7ZLX1AsUfocwRSIHLpStansHsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/a87e6b-a003-453c-bc0d-42df31974d68/1/p7ZLX1AsUfocwRSIHLpStansHsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/a87e6b-a003-453c-bc0d-42df31974d68/1/p7ZLX1AsUfocwRSIHLpStansHsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:6b:07:61:52:4c:1e:aa:50:6e:d7:60:d4:35:46:49:1a:4a:
af:8c:32:a8:98:65:8c:6a:32:99:6b:28:c7:9f:b8:60:00:f2:
0d:62:23:b2:5a:56:a6:0b:86:cc:cd:24:d8:07:e1:51:b2:98:
30:99:f6:f0:f7:70:15:0e:9a:e6:5a:ed:45:c5:0f:b3:a1:96:
bc:ab:f1:a2:b5:6f:01:09:8d:d8:3a:8b:86:7b:82:df:65:9c:
ce:74:f7:2d:b8:c4:c7:7b:de:b2:32:41:d1:cd:f8:c6:23:a3:
58:18:f3:b7:18:e3:59:a5:6d:2a:94:f6:99:d7:d1:97:19:8d:
f8:2a:19:36:1e:4a:6c:83:07:2b:3c:c0:7f:b6:7b:00:fd:b8:
9e:b2:e5:bb:af:ba:3e:76:11:5c:21:f1:00:f6:8e:63:e4:b8:
27:38:e1:d0:25:9b:ea:99:b8:10:ef:a2:b9:64:0f:dc:f2:11:
68:e0:f3:e7:d7:1b:17:df:ec:be:11:6e:59:99:b9:35:34:ac:
10:49:39:4a:d4:bb:8a:e2:7a:12:d7:fe:da:4f:25:d2:73:a1:
86:c5:a1:d3:a1:a2:f2:d7:8c:2f:a4:7a:ad:47:4a:a6:6d:3b:
0b:fd:f9:db:cd:72:0f:39:f5:f7:cc:83:81:27:9c:01:d7:b6:
df:3c:0b:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 18:45:04 2025 by rpki-client