Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/a87e6b-a003-453c-bc0d-42df31974d68/1/p7ZLX1AsUfocwRSIHLpStansHsg.mft
File: p7ZLX1AsUfocwRSIHLpStansHsg.mft (raw, json)
Hash identifier: XQY7ycKR3i7pDfuPZMKBo8nyriAU5vrYQo8h6t22M6s=
Subject key identifier: 0B:4F:60:64:BB:B4:80:9C:AA:8E:E5:59:D8:87:10:2B:E2:6D:36:B8
Authority key identifier: A7:B6:4B:5F:50:2C:51:FA:1C:C1:14:88:1C:BA:52:B5:A9:EC:1E:C8
Certificate issuer: /CN=a7b64b5f502c51fa1cc114881cba52b5a9ec1ec8
Certificate serial: 0197B7EA2DA9C7AD85142DB72C7E81AD5C85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p7ZLX1AsUfocwRSIHLpStansHsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/a87e6b-a003-453c-bc0d-42df31974d68/1/p7ZLX1AsUfocwRSIHLpStansHsg.mft
Manifest number: 0926
Signing time: Sat 28 Jun 2025 19:01:06 +0000
Manifest this update: Sat 28 Jun 2025 19:01:06 +0000
Manifest next update: Sun 29 Jun 2025 19:01:06 +0000
Files and hashes: 1: p7ZLX1AsUfocwRSIHLpStansHsg.crl (hash: kDerf+PROXentfCWs76nmbyoYsUGZP6ntKlCDh7AoqU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/a87e6b-a003-453c-bc0d-42df31974d68/1/p7ZLX1AsUfocwRSIHLpStansHsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/a87e6b-a003-453c-bc0d-42df31974d68/1/p7ZLX1AsUfocwRSIHLpStansHsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/p7ZLX1AsUfocwRSIHLpStansHsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:2d:a9:c7:ad:85:14:2d:b7:2c:7e:81:ad:5c:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7b64b5f502c51fa1cc114881cba52b5a9ec1ec8
Validity
Not Before: Jun 28 19:01:06 2025 GMT
Not After : Jun 29 19:01:06 2025 GMT
Subject: CN=0b4f6064bbb4809caa8ee559d887102be26d36b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:0f:b4:40:97:4e:2a:dc:bc:e9:67:b5:8b:74:
dc:cd:f7:2e:7a:50:50:ba:7c:71:d2:93:9a:19:b6:
c5:e0:34:06:16:80:83:df:a3:c6:36:9a:b7:5e:fd:
c3:05:d2:5f:0d:87:02:5b:75:b9:f3:fb:95:c3:9c:
22:58:a0:4d:38:f8:cf:25:a3:a0:c4:9a:e1:ec:a5:
ee:b4:17:95:22:26:af:99:04:73:13:8a:65:5b:01:
01:18:26:37:c8:2a:36:61:25:57:d1:01:5d:13:8e:
ee:04:95:af:df:fb:a1:14:c6:07:5d:18:5f:b2:03:
25:d5:7f:66:7b:a1:a2:a0:35:d3:84:d4:10:2e:79:
ee:7e:54:e3:d2:fe:cb:fe:60:6b:b2:d4:a8:71:77:
c1:6b:fe:b2:6a:22:47:7c:f7:95:78:9b:53:f7:42:
d1:1a:0d:b4:ed:23:fc:2e:f3:77:bc:f5:06:64:44:
3e:3f:b3:15:a4:50:5d:77:1a:2c:c4:28:7f:db:fa:
ea:91:e0:06:d7:fa:11:4a:d7:fa:fa:12:9c:ba:f3:
be:f8:3e:cb:fe:5f:d9:da:24:76:96:4f:c4:30:9d:
f1:f7:e1:8b:f4:3e:1b:e0:df:23:63:c3:c0:94:dc:
29:65:90:60:6f:02:0f:ee:56:8c:0b:72:93:c6:20:
72:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:4F:60:64:BB:B4:80:9C:AA:8E:E5:59:D8:87:10:2B:E2:6D:36:B8
X509v3 Authority Key Identifier:
keyid:A7:B6:4B:5F:50:2C:51:FA:1C:C1:14:88:1C:BA:52:B5:A9:EC:1E:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p7ZLX1AsUfocwRSIHLpStansHsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/a87e6b-a003-453c-bc0d-42df31974d68/1/p7ZLX1AsUfocwRSIHLpStansHsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/a87e6b-a003-453c-bc0d-42df31974d68/1/p7ZLX1AsUfocwRSIHLpStansHsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:48:6d:0a:4d:f9:0d:e7:f1:9d:65:09:b7:3b:83:b3:3f:11:
e3:a7:ff:78:a2:c3:b3:d8:c6:f0:74:d2:c9:f0:34:0e:bb:31:
b2:7f:b5:a6:90:f2:36:84:5a:b8:1d:38:eb:98:f1:e8:ba:dc:
a5:0a:88:cc:81:aa:21:32:7c:31:bd:02:e8:a1:6a:f9:66:e3:
ae:dc:7e:22:01:e7:09:c1:f8:2f:09:20:3e:c9:79:45:29:9f:
56:d5:74:3d:3a:e6:f8:55:04:42:c0:f5:82:2d:3d:98:bd:1c:
be:e7:0d:b5:ff:e2:77:33:83:f8:2f:64:2e:60:1d:3c:09:fd:
de:4f:2b:b4:fe:17:80:27:90:da:42:88:3e:8a:98:ec:f6:44:
a0:cb:00:40:7b:c8:9f:8c:2e:20:72:51:73:2e:16:aa:9a:4b:
bc:a6:9b:39:99:de:41:46:f1:c8:59:55:c4:c7:5e:ec:58:16:
d6:67:67:16:68:fc:a1:cd:55:60:ac:aa:1c:c1:6d:f7:42:21:
ae:58:1f:57:8b:a8:ba:52:96:e2:01:9d:a5:ac:45:c7:68:68:
4e:de:2f:b3:d8:49:07:d1:28:43:4e:da:8b:f2:17:9e:06:5e:
a1:97:25:e5:6a:0b:7c:4b:03:95:21:59:3f:29:8f:44:86:30:
40:84:11:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 00:46:09 2025 by rpki-client