Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/a87e6b-a003-453c-bc0d-42df31974d68/1/p7ZLX1AsUfocwRSIHLpStansHsg.mft
File: p7ZLX1AsUfocwRSIHLpStansHsg.mft (raw, json)
Hash identifier: GAVDmemCE78LxHOTYyUT2St2lZDsA91RHYBxOOUHeis=
Subject key identifier: 21:D3:D6:A9:63:50:E4:40:AD:DF:33:5F:87:85:5F:D6:07:45:ED:A0
Authority key identifier: A7:B6:4B:5F:50:2C:51:FA:1C:C1:14:88:1C:BA:52:B5:A9:EC:1E:C8
Certificate issuer: /CN=a7b64b5f502c51fa1cc114881cba52b5a9ec1ec8
Certificate serial: 0198D5BBB905254CF911E4C8649CBB098062
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p7ZLX1AsUfocwRSIHLpStansHsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/a87e6b-a003-453c-bc0d-42df31974d68/1/p7ZLX1AsUfocwRSIHLpStansHsg.mft
Manifest number: 09BA
Signing time: Sat 23 Aug 2025 07:01:46 +0000
Manifest this update: Sat 23 Aug 2025 07:01:46 +0000
Manifest next update: Sun 24 Aug 2025 07:01:46 +0000
Files and hashes: 1: p7ZLX1AsUfocwRSIHLpStansHsg.crl (hash: tkd+UbJTGaNj6DrYJ5FAb04WfHckV6jVXtVquCVWCW4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/a87e6b-a003-453c-bc0d-42df31974d68/1/p7ZLX1AsUfocwRSIHLpStansHsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/a87e6b-a003-453c-bc0d-42df31974d68/1/p7ZLX1AsUfocwRSIHLpStansHsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/p7ZLX1AsUfocwRSIHLpStansHsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:b9:05:25:4c:f9:11:e4:c8:64:9c:bb:09:80:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7b64b5f502c51fa1cc114881cba52b5a9ec1ec8
Validity
Not Before: Aug 23 07:01:46 2025 GMT
Not After : Aug 24 07:01:46 2025 GMT
Subject: CN=21d3d6a96350e440addf335f87855fd60745eda0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:7e:a1:9e:0d:4f:1e:78:01:f5:e9:bb:a3:b3:
66:64:d3:6a:a6:72:b2:15:03:f6:a6:73:53:ef:da:
3f:fe:a6:a0:a7:dd:58:c9:28:91:26:c2:c7:10:9e:
df:5c:d2:d2:9c:81:e8:d8:af:c0:d9:bc:0f:0f:e5:
01:22:61:81:14:15:72:00:1e:46:76:ff:b4:d4:f7:
d6:80:8d:ad:54:dd:38:5a:bb:8f:f2:19:07:8d:7f:
bf:0d:1a:78:86:b1:e0:53:82:d1:f0:46:d7:a1:f0:
af:d4:93:cf:81:62:73:f0:26:d5:86:8c:ab:07:33:
d8:12:50:ce:d3:03:1f:0a:aa:7a:9f:16:98:b7:46:
ab:9c:31:d0:8a:da:ee:a1:4c:53:f8:44:97:69:60:
53:d3:cc:36:2b:64:16:ea:39:db:8f:3a:2c:c2:97:
4b:92:a0:c9:49:c3:66:f3:bc:27:c0:73:98:2d:fd:
80:47:cb:b3:7f:d7:74:5d:12:69:bf:5b:43:44:95:
3c:41:ef:75:c2:9c:42:4f:18:55:d8:f7:ca:14:3f:
ee:2f:34:f5:66:66:ce:a4:43:fd:3a:32:3b:67:15:
f4:31:c6:a8:8f:59:9e:98:fd:fc:7d:61:2f:96:e7:
5f:f5:c2:73:06:d0:26:e2:5f:12:39:d9:30:0d:a2:
a7:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:D3:D6:A9:63:50:E4:40:AD:DF:33:5F:87:85:5F:D6:07:45:ED:A0
X509v3 Authority Key Identifier:
keyid:A7:B6:4B:5F:50:2C:51:FA:1C:C1:14:88:1C:BA:52:B5:A9:EC:1E:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p7ZLX1AsUfocwRSIHLpStansHsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/a87e6b-a003-453c-bc0d-42df31974d68/1/p7ZLX1AsUfocwRSIHLpStansHsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/a87e6b-a003-453c-bc0d-42df31974d68/1/p7ZLX1AsUfocwRSIHLpStansHsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:88:40:c4:58:ad:87:74:ee:65:71:18:53:9e:89:3f:3f:84:
99:47:e8:0b:63:f3:e4:4c:54:b1:39:f2:31:42:15:c3:e4:9f:
02:3b:c8:11:f5:c0:6b:0e:23:c7:a2:f5:10:15:f5:ea:93:8e:
bd:cd:5e:ae:a2:2e:05:74:4b:a7:91:8c:2b:b5:2e:f7:67:b9:
9d:48:35:b7:64:a8:7f:bf:d1:bf:cd:75:61:f5:93:e9:11:ab:
d9:bd:81:88:c6:24:72:48:9d:c5:b4:4a:4a:ef:1d:48:5d:01:
8b:fb:01:6d:25:c8:92:0a:d6:e8:59:b4:a1:0d:27:de:40:f1:
5b:55:a4:86:cf:da:66:f6:50:1d:a1:de:31:74:21:62:28:70:
96:08:f0:92:72:10:a3:d6:cc:05:a6:4a:f2:f2:bb:86:56:9c:
4e:b0:a1:d5:85:d7:43:8f:93:73:e1:89:fd:bf:50:c3:70:61:
17:22:69:ce:a1:6e:6b:ce:82:d3:61:22:df:ae:48:73:aa:4d:
49:1d:6b:74:eb:e8:d1:46:3c:1b:4b:25:3e:60:ba:13:f6:3e:
08:65:5a:2e:69:6d:fa:fb:de:33:10:24:ff:1d:34:e0:20:26:
09:11:f6:3f:e7:ee:cf:25:11:06:ab:a7:cd:b4:e8:d2:b7:42:
3d:32:7a:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:28:52 2025 by rpki-client