Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/a87e6b-a003-453c-bc0d-42df31974d68/1/p7ZLX1AsUfocwRSIHLpStansHsg.mft
File: p7ZLX1AsUfocwRSIHLpStansHsg.mft (raw, json)
Hash identifier: v1AY8KUbNodr2slAxzVFj41MijYIi/AEPNe88AHgXko=
Subject key identifier: 54:5C:C0:88:EB:95:C9:E2:91:22:CE:C3:C4:BF:2E:D1:BD:59:C0:A7
Authority key identifier: A7:B6:4B:5F:50:2C:51:FA:1C:C1:14:88:1C:BA:52:B5:A9:EC:1E:C8
Certificate issuer: /CN=a7b64b5f502c51fa1cc114881cba52b5a9ec1ec8
Certificate serial: 0196C2A7028CCFB8E3E5AD52008ED48D45A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p7ZLX1AsUfocwRSIHLpStansHsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/a87e6b-a003-453c-bc0d-42df31974d68/1/p7ZLX1AsUfocwRSIHLpStansHsg.mft
Manifest number: 08A7
Signing time: Mon 12 May 2025 04:00:47 +0000
Manifest this update: Mon 12 May 2025 04:00:47 +0000
Manifest next update: Tue 13 May 2025 04:00:47 +0000
Files and hashes: 1: p7ZLX1AsUfocwRSIHLpStansHsg.crl (hash: Wp7faSp+h+9JpRrovVJ5sHO9P6vOmWXUbsLuUKROCVg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/a87e6b-a003-453c-bc0d-42df31974d68/1/p7ZLX1AsUfocwRSIHLpStansHsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/a87e6b-a003-453c-bc0d-42df31974d68/1/p7ZLX1AsUfocwRSIHLpStansHsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/p7ZLX1AsUfocwRSIHLpStansHsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:a7:02:8c:cf:b8:e3:e5:ad:52:00:8e:d4:8d:45:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7b64b5f502c51fa1cc114881cba52b5a9ec1ec8
Validity
Not Before: May 12 04:00:47 2025 GMT
Not After : May 13 04:00:47 2025 GMT
Subject: CN=545cc088eb95c9e29122cec3c4bf2ed1bd59c0a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:73:dd:30:2a:aa:31:ab:dd:09:4d:13:4f:93:
ff:45:fc:f7:95:03:5c:32:3f:d1:13:ae:93:f8:3c:
ad:77:9e:a0:e2:79:8c:6a:31:79:d5:d3:3f:f1:45:
8a:e7:08:25:c9:af:fe:fd:a1:6f:a0:9a:99:66:87:
7a:84:86:e6:34:9b:1c:13:aa:7e:ae:0e:fb:9e:fa:
b9:1a:da:9c:32:c3:59:77:66:18:19:01:97:0a:54:
90:38:34:1c:2e:d5:41:be:cf:07:44:59:7b:44:e6:
18:30:bc:d8:5e:c9:de:9f:4d:db:db:97:16:3b:e8:
73:a1:ba:47:dd:66:01:5a:3c:98:ab:e7:ca:65:64:
d3:45:ea:02:76:af:ac:8e:3a:22:39:a8:7b:59:16:
cd:4a:c5:cb:53:cc:c6:10:ff:e2:aa:2f:72:70:46:
5e:4a:4a:a7:ac:3f:be:b5:17:9e:41:09:2d:13:ad:
db:54:de:0d:aa:e2:29:11:fb:98:c8:ba:7e:b3:f7:
92:51:79:5c:b1:f1:ee:35:8d:2a:0a:ed:95:e9:c7:
16:25:06:dd:22:31:34:6b:a9:11:3e:4a:9b:b5:3e:
77:1a:ac:d2:58:82:87:1e:e5:9e:99:a1:38:eb:96:
c2:a4:e7:a8:c0:b8:e4:3e:59:56:94:c9:ff:2d:63:
2c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:5C:C0:88:EB:95:C9:E2:91:22:CE:C3:C4:BF:2E:D1:BD:59:C0:A7
X509v3 Authority Key Identifier:
keyid:A7:B6:4B:5F:50:2C:51:FA:1C:C1:14:88:1C:BA:52:B5:A9:EC:1E:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p7ZLX1AsUfocwRSIHLpStansHsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/a87e6b-a003-453c-bc0d-42df31974d68/1/p7ZLX1AsUfocwRSIHLpStansHsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/a87e6b-a003-453c-bc0d-42df31974d68/1/p7ZLX1AsUfocwRSIHLpStansHsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:15:62:3e:59:44:96:a5:cd:ec:e6:88:0f:75:35:1f:fa:0d:
66:b8:78:1a:92:51:f3:a3:4d:03:11:fa:28:a2:3f:bc:b6:78:
b4:45:4a:7d:0b:e1:56:18:8a:2b:96:33:ad:63:0b:b8:80:7a:
6a:41:64:4b:84:e5:14:1e:f8:b2:73:42:ce:c2:1b:18:cf:6b:
be:b7:81:58:64:1e:3e:68:ea:05:5d:b2:3f:d7:8a:b9:c2:42:
4a:bb:05:ee:8a:c3:bf:4e:92:40:a7:7b:e1:1d:bc:b1:da:8a:
e7:1a:28:ea:b4:43:c5:72:e2:47:2f:fa:f5:b7:3c:eb:24:b9:
87:01:ea:7d:eb:59:46:c1:01:94:21:22:ba:f2:ec:a5:f1:ea:
a0:a9:e6:44:c9:40:30:d4:4a:66:59:76:f8:40:0b:44:64:f5:
e1:0b:76:b4:86:28:72:0e:66:47:c0:fc:e6:75:ac:0e:b6:e9:
a7:72:97:10:d7:13:3d:aa:fb:43:8a:bb:92:91:88:15:a3:fc:
83:4c:40:e4:58:6d:cf:fc:b0:e0:a7:4f:98:41:d0:9e:82:3d:
c0:d8:44:ef:de:85:1f:af:60:1e:4a:0f:5d:84:6a:f7:b8:2c:
82:e6:f0:1f:2d:57:62:4a:b4:ad:27:b0:39:0e:59:3a:18:e7:
96:91:18:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 07:44:56 2025 by rpki-client