Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/22a465-025d-4841-884f-14b20d753372/1/7_ZbcAAg4w1z07HfeCceVD4wjzo.mft
File: 7_ZbcAAg4w1z07HfeCceVD4wjzo.mft (raw, json)
Hash identifier: gFC3UAg1XH2iSPSnyMojmk++ErMpZB9E9hGFt3Jm51I=
Subject key identifier: C7:8E:96:88:9D:21:B3:BE:B9:30:14:9A:94:97:23:29:D0:38:E0:B2
Authority key identifier: EF:F6:5B:70:00:20:E3:0D:73:D3:B1:DF:78:27:1E:54:3E:30:8F:3A
Certificate issuer: /CN=eff65b700020e30d73d3b1df78271e543e308f3a
Certificate serial: 019A70DBF58BC2ECB8ABAE4F289AE835BC8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7_ZbcAAg4w1z07HfeCceVD4wjzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/22a465-025d-4841-884f-14b20d753372/1/7_ZbcAAg4w1z07HfeCceVD4wjzo.mft
Manifest number: 0E84
Signing time: Tue 11 Nov 2025 03:00:54 +0000
Manifest this update: Tue 11 Nov 2025 03:00:54 +0000
Manifest next update: Wed 12 Nov 2025 03:00:54 +0000
Files and hashes: 1: 7_ZbcAAg4w1z07HfeCceVD4wjzo.crl (hash: Qni8V2a1SQRw92rD2N2QppyxS5SVtr2mhkZyVr4xcjU=)
2: AdFVK1KtSnf7ZNfSr9y68mDkPRc.roa (hash: /eDjhHT0EL0eZWQnzwFCLaBMZZnRebciW+q12o5OJ+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/22a465-025d-4841-884f-14b20d753372/1/7_ZbcAAg4w1z07HfeCceVD4wjzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/22a465-025d-4841-884f-14b20d753372/1/7_ZbcAAg4w1z07HfeCceVD4wjzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/7_ZbcAAg4w1z07HfeCceVD4wjzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:db:f5:8b:c2:ec:b8:ab:ae:4f:28:9a:e8:35:bc:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eff65b700020e30d73d3b1df78271e543e308f3a
Validity
Not Before: Nov 11 03:00:54 2025 GMT
Not After : Nov 12 03:00:54 2025 GMT
Subject: CN=c78e96889d21b3beb930149a94972329d038e0b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4d:6c:0a:bb:88:be:69:10:b8:50:f6:5f:f8:
10:9a:d1:03:9f:cf:99:df:78:28:94:87:b5:d5:5b:
b8:3a:2b:64:cc:5d:c3:98:18:47:83:ec:22:29:77:
3c:c1:76:41:ca:59:48:2d:32:5f:79:ed:85:b5:71:
88:ef:78:b1:52:8e:01:e1:09:92:6c:9e:c9:08:e4:
41:63:fe:ac:3c:fb:28:28:9c:dd:15:f2:a7:10:03:
0b:06:c1:05:b6:aa:3f:eb:64:ba:0e:6a:a4:c1:4b:
2d:a6:88:b3:82:4c:f8:fb:99:a7:f3:f1:ba:31:2e:
0e:14:b0:f0:ba:68:4e:76:58:ac:2c:0c:98:45:f8:
e6:51:cf:71:4e:a0:2d:ee:cf:35:a9:2d:fa:0f:08:
35:6e:26:91:5a:c2:43:e7:6b:87:35:b5:06:b9:49:
e0:e4:ae:96:cf:17:92:57:27:38:e7:3b:6d:44:4d:
2a:8a:0a:81:d9:13:f5:c0:6e:e0:f1:c8:2b:c6:bd:
69:d4:fb:cc:8c:a1:ba:43:0c:4f:9a:09:cf:e1:d6:
8c:54:4d:8e:6f:b8:2c:27:ae:aa:c8:e5:45:e2:73:
d0:cc:e1:d5:be:d5:38:69:69:38:39:f2:d2:37:96:
86:7f:aa:c3:83:07:6f:69:70:95:69:79:31:06:aa:
db:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:8E:96:88:9D:21:B3:BE:B9:30:14:9A:94:97:23:29:D0:38:E0:B2
X509v3 Authority Key Identifier:
keyid:EF:F6:5B:70:00:20:E3:0D:73:D3:B1:DF:78:27:1E:54:3E:30:8F:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7_ZbcAAg4w1z07HfeCceVD4wjzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/22a465-025d-4841-884f-14b20d753372/1/7_ZbcAAg4w1z07HfeCceVD4wjzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/22a465-025d-4841-884f-14b20d753372/1/7_ZbcAAg4w1z07HfeCceVD4wjzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:7b:32:b8:0a:29:43:d7:33:d1:16:29:5f:51:30:55:84:1a:
88:bf:bb:9d:54:3e:01:a8:a4:84:2c:63:08:8c:0e:d1:a8:9d:
f0:43:78:14:3a:33:27:1d:85:30:ae:89:5e:b4:64:44:41:a6:
31:4b:be:8a:16:1a:33:12:12:cc:1a:8f:b8:af:18:4e:af:5d:
66:88:ee:50:f9:d0:93:db:39:69:f1:a9:f1:9c:db:4f:97:85:
de:f1:f0:8b:08:8f:10:e9:9e:b1:e7:dc:2e:08:37:64:9e:df:
9d:bb:56:04:b5:97:34:95:1a:23:fa:bd:eb:19:3c:92:6e:2d:
d5:16:ab:ae:7e:19:74:45:1e:55:31:3b:45:22:69:84:6b:99:
bf:cc:98:25:50:5a:8c:1e:74:8c:f7:1d:c2:8a:ba:ad:63:df:
03:65:26:86:4b:00:3a:8e:a8:e5:96:fc:df:e4:5b:e1:2d:20:
f1:a6:64:da:9a:bd:6c:41:28:7f:54:02:80:3f:bf:f9:52:32:
01:43:8b:96:32:c2:88:8b:01:68:6c:07:b7:ae:2b:73:fb:b2:
18:94:38:3c:17:90:ce:fe:60:4a:46:24:91:55:4c:ad:32:ad:
ba:60:31:99:f9:42:eb:ae:c5:64:df:de:8c:97:14:cf:ee:75:
30:f0:cd:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:35:10 2025 by rpki-client