Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/a87e6b-a003-453c-bc0d-42df31974d68/1/p7ZLX1AsUfocwRSIHLpStansHsg.mft
File: p7ZLX1AsUfocwRSIHLpStansHsg.mft (raw, json)
Hash identifier: sm+j1BmwnHxCsNmQcpPkpZlzdBUIAQIozlKd5Q7nwdI=
Subject key identifier: AF:67:25:DF:30:32:CF:7A:DF:9C:79:EF:41:17:BA:43:1E:97:E5:F4
Authority key identifier: A7:B6:4B:5F:50:2C:51:FA:1C:C1:14:88:1C:BA:52:B5:A9:EC:1E:C8
Certificate issuer: /CN=a7b64b5f502c51fa1cc114881cba52b5a9ec1ec8
Certificate serial: 019A4E4F6616BC2B92DD9B64547F80F2B496
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p7ZLX1AsUfocwRSIHLpStansHsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/a87e6b-a003-453c-bc0d-42df31974d68/1/p7ZLX1AsUfocwRSIHLpStansHsg.mft
Manifest number: 0A7D
Signing time: Tue 04 Nov 2025 10:00:17 +0000
Manifest this update: Tue 04 Nov 2025 10:00:17 +0000
Manifest next update: Wed 05 Nov 2025 10:00:17 +0000
Files and hashes: 1: p7ZLX1AsUfocwRSIHLpStansHsg.crl (hash: pLI441ZGrKATnKLX/DJ/pX6dB4SK3lO5MjWMdF+B5LQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/a87e6b-a003-453c-bc0d-42df31974d68/1/p7ZLX1AsUfocwRSIHLpStansHsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/a87e6b-a003-453c-bc0d-42df31974d68/1/p7ZLX1AsUfocwRSIHLpStansHsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/p7ZLX1AsUfocwRSIHLpStansHsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:66:16:bc:2b:92:dd:9b:64:54:7f:80:f2:b4:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7b64b5f502c51fa1cc114881cba52b5a9ec1ec8
Validity
Not Before: Nov 4 10:00:17 2025 GMT
Not After : Nov 5 10:00:17 2025 GMT
Subject: CN=af6725df3032cf7adf9c79ef4117ba431e97e5f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:da:78:da:48:b8:0b:10:96:ea:bc:2f:97:d0:
88:d9:c0:4d:3d:32:90:ab:75:ec:22:8c:2d:fe:a6:
e0:cd:95:90:9e:37:77:4e:43:9b:e4:e7:48:7e:2e:
8f:4d:1e:3d:10:58:6e:c9:7a:e8:6d:2f:43:10:3f:
5a:fb:50:46:a1:ee:25:77:b0:ba:e1:8b:ee:83:4c:
9b:2b:d1:02:33:f1:fd:39:0b:16:b1:29:1a:85:bc:
48:eb:0f:c1:6b:63:4f:7b:fc:e7:e3:64:3b:a7:03:
ee:40:52:58:7b:06:da:83:66:80:b7:27:44:18:6d:
51:65:16:b1:28:9b:5a:c2:52:34:cd:c3:3b:33:21:
4e:8d:38:21:12:8b:d2:25:c7:59:3f:8c:f2:c7:04:
5e:73:d8:9f:73:33:71:20:7b:7a:16:17:c2:4a:e6:
6c:c3:45:4c:1b:75:b0:51:92:a5:26:73:cb:b4:1b:
45:3f:12:95:e2:81:37:08:bd:eb:da:df:78:91:e5:
84:ed:c8:ff:b4:c2:38:63:4c:94:42:57:f7:18:44:
bd:08:f5:4e:3d:64:80:59:fd:f3:32:df:89:75:56:
b7:a4:98:99:6f:5e:c9:f5:0d:a5:87:35:64:cf:69:
b5:4d:dd:a4:08:95:0d:fc:14:de:9f:15:16:03:64:
b7:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:67:25:DF:30:32:CF:7A:DF:9C:79:EF:41:17:BA:43:1E:97:E5:F4
X509v3 Authority Key Identifier:
keyid:A7:B6:4B:5F:50:2C:51:FA:1C:C1:14:88:1C:BA:52:B5:A9:EC:1E:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p7ZLX1AsUfocwRSIHLpStansHsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/a87e6b-a003-453c-bc0d-42df31974d68/1/p7ZLX1AsUfocwRSIHLpStansHsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/a87e6b-a003-453c-bc0d-42df31974d68/1/p7ZLX1AsUfocwRSIHLpStansHsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:e5:77:83:c2:19:97:31:b1:1e:aa:85:c0:20:5b:47:fa:46:
48:e8:55:88:57:05:6c:fb:c4:5a:c7:f4:45:89:09:d9:28:f8:
26:1f:25:1b:13:fd:02:0b:4d:73:e3:d9:51:36:5a:11:ba:a7:
a5:f7:8f:eb:a1:67:39:e2:e4:ba:31:7c:bf:bb:80:72:d4:ae:
4c:f8:15:19:fa:cd:5c:b4:7f:c6:2d:f3:c8:80:6c:25:95:21:
43:fa:2a:b4:c7:06:4e:9c:2b:b5:30:df:1b:d8:15:4a:a8:96:
6d:b7:cd:f4:8b:9d:79:ae:ce:8e:ed:21:ea:de:87:da:e6:73:
2c:96:9f:51:64:e0:5e:bb:e8:85:4c:ae:f9:f5:73:42:1f:93:
9b:da:89:f9:c7:d3:25:9b:72:7a:4b:f6:b9:05:94:60:07:23:
fb:94:64:fd:a3:4b:1b:e2:13:41:b0:7e:7e:3d:ca:2e:04:9b:
9e:a3:73:10:36:2e:21:55:11:12:69:84:92:66:cf:64:a6:1c:
6b:6b:d7:1e:e9:b5:02:ee:23:83:ca:e4:de:ee:de:fc:98:b3:
c7:23:e2:95:28:11:7a:4d:67:a0:ba:b1:29:bc:d4:4c:5b:95:
43:ce:2b:b3:fa:45:5b:6c:89:42:f1:de:4f:93:4a:d3:88:25:
20:47:43:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:52:44 2025 by rpki-client