Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/22a465-025d-4841-884f-14b20d753372/1/7_ZbcAAg4w1z07HfeCceVD4wjzo.mft
File: 7_ZbcAAg4w1z07HfeCceVD4wjzo.mft (raw, json)
Hash identifier: RPd96rnReXQY5fIuJ11vBoEf8JcYQW286pUrDPhFOVs=
Subject key identifier: 0F:0D:D6:52:5A:76:5D:15:68:96:70:98:DA:A1:08:F5:F0:51:57:FF
Authority key identifier: EF:F6:5B:70:00:20:E3:0D:73:D3:B1:DF:78:27:1E:54:3E:30:8F:3A
Certificate issuer: /CN=eff65b700020e30d73d3b1df78271e543e308f3a
Certificate serial: 0197499F546DB0BC2D717D48411DB2DD7521
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7_ZbcAAg4w1z07HfeCceVD4wjzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/22a465-025d-4841-884f-14b20d753372/1/7_ZbcAAg4w1z07HfeCceVD4wjzo.mft
Manifest number: 0CE2
Signing time: Sat 07 Jun 2025 09:01:07 +0000
Manifest this update: Sat 07 Jun 2025 09:01:07 +0000
Manifest next update: Sun 08 Jun 2025 09:01:07 +0000
Files and hashes: 1: 7_ZbcAAg4w1z07HfeCceVD4wjzo.crl (hash: fbk8L4RpcJRRe+Y1FTP3czqVL6NI5WsKJQ4i4+jIvsQ=)
2: AdFVK1KtSnf7ZNfSr9y68mDkPRc.roa (hash: /eDjhHT0EL0eZWQnzwFCLaBMZZnRebciW+q12o5OJ+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/22a465-025d-4841-884f-14b20d753372/1/7_ZbcAAg4w1z07HfeCceVD4wjzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/22a465-025d-4841-884f-14b20d753372/1/7_ZbcAAg4w1z07HfeCceVD4wjzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/7_ZbcAAg4w1z07HfeCceVD4wjzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:9f:54:6d:b0:bc:2d:71:7d:48:41:1d:b2:dd:75:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eff65b700020e30d73d3b1df78271e543e308f3a
Validity
Not Before: Jun 7 09:01:07 2025 GMT
Not After : Jun 8 09:01:07 2025 GMT
Subject: CN=0f0dd6525a765d1568967098daa108f5f05157ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:73:25:34:33:bf:59:84:e6:4d:b6:ca:95:3d:
c4:d1:ce:3e:79:e8:f0:98:05:9b:cf:04:a7:74:5e:
23:40:99:21:03:76:d8:7c:b7:b4:8c:5f:33:55:29:
8b:ed:9f:1d:fe:37:4e:02:2f:2f:1e:f3:60:8c:85:
71:6e:69:31:43:4a:6e:63:53:4d:3d:5a:ee:5b:31:
78:bf:84:51:95:38:be:21:68:a8:a8:7d:a8:28:58:
e8:67:c9:d9:9c:3b:4b:46:e7:d0:06:2c:76:f7:4c:
54:94:66:aa:3b:40:1f:e8:e9:17:c9:a3:8f:a2:fd:
b9:a1:3d:f5:51:37:38:ab:67:45:4b:d2:84:6b:0c:
c6:d0:a5:6d:4d:88:72:fd:be:de:b0:a8:12:9f:f7:
45:ea:90:cb:dc:2a:e4:e2:ca:1e:42:00:5f:4e:54:
aa:64:6f:af:46:cc:d7:37:7a:5e:b2:af:9d:e6:a1:
d5:93:d9:e2:96:b5:58:c9:2d:cd:ef:db:a9:70:c2:
ed:44:cc:dd:b1:5c:c7:eb:bf:c9:90:54:7d:6a:59:
4f:52:36:3c:ac:43:44:dc:bd:84:e7:0d:6c:b9:99:
57:9c:90:76:dc:ae:18:ed:06:be:ef:9e:34:2d:f6:
1f:3f:5a:1e:04:b7:d9:86:e4:3e:57:f6:3f:10:c2:
c0:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:0D:D6:52:5A:76:5D:15:68:96:70:98:DA:A1:08:F5:F0:51:57:FF
X509v3 Authority Key Identifier:
keyid:EF:F6:5B:70:00:20:E3:0D:73:D3:B1:DF:78:27:1E:54:3E:30:8F:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7_ZbcAAg4w1z07HfeCceVD4wjzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/22a465-025d-4841-884f-14b20d753372/1/7_ZbcAAg4w1z07HfeCceVD4wjzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/22a465-025d-4841-884f-14b20d753372/1/7_ZbcAAg4w1z07HfeCceVD4wjzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:32:bd:12:ef:78:89:80:16:0e:a7:13:4e:00:15:cd:e9:60:
58:73:ad:a4:52:47:12:7a:14:99:98:59:b7:70:89:de:21:db:
64:7a:22:6e:d2:53:b3:34:f6:88:10:08:0d:03:23:c7:21:f6:
47:2d:63:fb:8f:6a:b5:b2:6a:e4:38:9a:d1:54:18:01:05:57:
d5:4e:ad:9d:0e:e6:20:c9:f7:3f:98:2b:cd:c8:7e:ae:a2:fa:
05:e8:54:b3:de:e2:1c:df:8c:f2:77:39:11:19:fa:61:1c:43:
c6:96:4c:01:d3:3f:db:65:0d:15:47:1d:97:36:9e:d9:03:7f:
d2:ef:ae:45:9c:93:c7:f6:60:0e:b2:1c:62:91:dc:68:9b:b0:
c5:32:c8:13:6d:66:45:d8:25:13:36:81:83:bf:14:bd:82:f0:
f8:6b:a7:99:38:df:b1:97:e7:4d:b0:b3:3d:c1:4a:55:53:bd:
c6:87:84:bb:14:17:9a:ff:c0:24:3b:10:ba:bb:d9:b2:27:e9:
b5:1a:2f:61:f6:78:b6:a2:5f:4b:f9:82:6b:d5:35:1f:b3:2f:
03:c2:49:e3:47:03:51:ca:f4:6b:83:a1:d2:33:d1:41:95:e6:
e5:7b:e9:c0:28:53:b6:5d:e4:4d:be:ef:5e:b6:b8:a8:86:86:
73:72:67:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 12:45:29 2025 by rpki-client