Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/fbfacc-a4f0-4bdb-abbb-0f73661d5f35/1/7ZAKVVGLZ57cePqpiD7G5gNa5xw.mft
File: 7ZAKVVGLZ57cePqpiD7G5gNa5xw.mft (raw, json)
Hash identifier: TXZCxFtyypIqvHOd0yBhNJ6geojaDiL9sNMcz26KnIU=
Subject key identifier: B7:DE:91:3C:D1:12:56:C1:D7:61:87:AF:41:78:C3:BE:26:60:E3:C2
Authority key identifier: ED:90:0A:55:51:8B:67:9E:DC:78:FA:A9:88:3E:C6:E6:03:5A:E7:1C
Certificate issuer: /CN=ed900a55518b679edc78faa9883ec6e6035ae71c
Certificate serial: 019A72264C99A2A02294A7953F9E4CBDA435
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7ZAKVVGLZ57cePqpiD7G5gNa5xw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/fbfacc-a4f0-4bdb-abbb-0f73661d5f35/1/7ZAKVVGLZ57cePqpiD7G5gNa5xw.mft
Manifest number: 04DD
Signing time: Tue 11 Nov 2025 09:01:43 +0000
Manifest this update: Tue 11 Nov 2025 09:01:43 +0000
Manifest next update: Wed 12 Nov 2025 09:01:43 +0000
Files and hashes: 1: 1-ieyIqujcrCxJblAajzfComBT5M.roa (hash: n5puj2nwsSUZldVzpI+lBrVc/7elXyEjudzznV0aSbQ=)
2: 7ZAKVVGLZ57cePqpiD7G5gNa5xw.crl (hash: rb1kC8dvJzZ4Uy2E4OKkiYEOQQo7l0NNRuPzvDvRVmE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/fbfacc-a4f0-4bdb-abbb-0f73661d5f35/1/7ZAKVVGLZ57cePqpiD7G5gNa5xw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/fbfacc-a4f0-4bdb-abbb-0f73661d5f35/1/7ZAKVVGLZ57cePqpiD7G5gNa5xw.mft
rsync://rpki.ripe.net/repository/DEFAULT/7ZAKVVGLZ57cePqpiD7G5gNa5xw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:4c:99:a2:a0:22:94:a7:95:3f:9e:4c:bd:a4:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed900a55518b679edc78faa9883ec6e6035ae71c
Validity
Not Before: Nov 11 09:01:43 2025 GMT
Not After : Nov 12 09:01:43 2025 GMT
Subject: CN=b7de913cd11256c1d76187af4178c3be2660e3c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6c:7d:ba:29:a7:04:77:23:da:14:1a:4d:36:
77:21:cd:53:41:50:1c:de:c7:09:be:e7:0b:2a:68:
19:5b:38:d0:95:a9:57:8c:d4:6c:6b:43:ca:95:cc:
71:c9:55:35:54:19:1a:08:e4:ce:19:2e:ff:91:a1:
0c:6b:46:e0:a7:c5:0b:7d:ad:cf:94:2d:6a:82:47:
e7:b7:fd:15:9d:fe:0e:4d:2e:e7:4f:9d:50:e7:5e:
fa:0d:d9:67:6a:fc:18:6a:0c:04:d2:5e:94:db:2d:
05:bd:d1:31:43:35:bf:b6:d7:e0:8f:1d:7b:fd:c5:
88:4b:c5:7e:24:97:44:95:85:27:b6:ea:8b:d6:8e:
11:5f:d3:7d:9e:9e:62:5a:f2:dd:f4:e7:59:bd:7a:
8c:ad:86:da:0a:a9:ea:c1:e3:be:1b:ad:97:32:04:
a2:4a:fd:95:96:09:24:1a:43:ba:5b:dd:f6:23:42:
01:58:e5:91:94:af:4f:1f:88:71:69:b2:6b:f6:1e:
6a:54:2c:28:54:07:aa:ac:2e:26:6d:3e:e9:bb:79:
a8:f3:93:f4:57:69:a9:2a:60:7b:c4:e9:24:aa:a8:
36:98:be:b8:81:d3:9a:9e:49:4c:78:be:f1:25:2e:
53:bb:57:93:10:7f:1f:24:48:26:61:15:13:bc:d9:
f1:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:DE:91:3C:D1:12:56:C1:D7:61:87:AF:41:78:C3:BE:26:60:E3:C2
X509v3 Authority Key Identifier:
keyid:ED:90:0A:55:51:8B:67:9E:DC:78:FA:A9:88:3E:C6:E6:03:5A:E7:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7ZAKVVGLZ57cePqpiD7G5gNa5xw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fbfacc-a4f0-4bdb-abbb-0f73661d5f35/1/7ZAKVVGLZ57cePqpiD7G5gNa5xw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fbfacc-a4f0-4bdb-abbb-0f73661d5f35/1/7ZAKVVGLZ57cePqpiD7G5gNa5xw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:6f:ea:6f:f7:35:63:4f:88:98:3b:6e:04:2b:95:a1:f2:23:
10:6b:38:3d:e1:f0:1e:3a:97:ff:71:9f:42:e8:d0:1d:a0:9c:
ed:ec:3b:a8:5f:e0:53:11:32:28:67:91:20:f8:86:77:06:f3:
cc:6a:01:0e:f5:ab:5a:dd:89:e2:7c:80:ae:f4:c4:5a:e6:c9:
d9:d7:a4:5d:3b:d8:10:38:56:0c:8c:c5:49:b1:d0:55:fd:c0:
4a:3d:df:4d:a8:74:ac:02:56:7b:96:a8:68:f3:b6:67:38:58:
cb:3f:d4:2f:d6:d3:82:e4:0a:91:07:89:c8:30:cb:36:31:89:
07:1f:f0:d8:d5:15:01:ce:f9:82:c1:52:dd:b3:31:b6:75:d7:
91:e7:bc:e5:98:62:2a:1f:f8:8c:3f:64:d2:04:17:9f:a5:e7:
71:6b:00:09:d4:e2:aa:e6:0c:c9:ba:da:f3:9d:39:46:25:ab:
9d:18:15:aa:34:6f:e2:f8:77:ca:42:ae:c0:d0:5f:69:7f:fc:
8e:9d:3b:20:9d:04:f9:02:a3:03:c6:29:31:46:8e:31:d4:1b:
17:7c:dc:9d:f9:df:32:42:16:76:8f:77:e0:7e:e4:ac:de:70:
e7:03:05:f8:b7:ff:87:b4:fb:d7:61:4a:92:32:26:d6:21:a4:
a0:27:be:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:04:21 2025 by rpki-client