Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/22a465-025d-4841-884f-14b20d753372/1/7_ZbcAAg4w1z07HfeCceVD4wjzo.mft
File: 7_ZbcAAg4w1z07HfeCceVD4wjzo.mft (raw, json)
Hash identifier: 4wM2bYPPDyVaWhTzqjdA3s4cBoDNUc/P+9BoVwnUb40=
Subject key identifier: E0:2F:02:64:EC:4E:35:97:FA:93:F9:DC:BC:B5:3F:FB:21:26:7D:2B
Authority key identifier: EF:F6:5B:70:00:20:E3:0D:73:D3:B1:DF:78:27:1E:54:3E:30:8F:3A
Certificate issuer: /CN=eff65b700020e30d73d3b1df78271e543e308f3a
Certificate serial: 019922C3712236572A9401216504C06B7ED3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7_ZbcAAg4w1z07HfeCceVD4wjzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/22a465-025d-4841-884f-14b20d753372/1/7_ZbcAAg4w1z07HfeCceVD4wjzo.mft
Manifest number: 0DD7
Signing time: Sun 07 Sep 2025 06:00:57 +0000
Manifest this update: Sun 07 Sep 2025 06:00:57 +0000
Manifest next update: Mon 08 Sep 2025 06:00:57 +0000
Files and hashes: 1: 7_ZbcAAg4w1z07HfeCceVD4wjzo.crl (hash: z84kinBzBxllUq9/CBAJUvtuMHmLs47wKKMFZmWSg+E=)
2: AdFVK1KtSnf7ZNfSr9y68mDkPRc.roa (hash: /eDjhHT0EL0eZWQnzwFCLaBMZZnRebciW+q12o5OJ+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/22a465-025d-4841-884f-14b20d753372/1/7_ZbcAAg4w1z07HfeCceVD4wjzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/22a465-025d-4841-884f-14b20d753372/1/7_ZbcAAg4w1z07HfeCceVD4wjzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/7_ZbcAAg4w1z07HfeCceVD4wjzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:71:22:36:57:2a:94:01:21:65:04:c0:6b:7e:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eff65b700020e30d73d3b1df78271e543e308f3a
Validity
Not Before: Sep 7 06:00:57 2025 GMT
Not After : Sep 8 06:00:57 2025 GMT
Subject: CN=e02f0264ec4e3597fa93f9dcbcb53ffb21267d2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:b7:0c:ee:0e:3c:aa:1a:84:2c:e4:84:5f:69:
39:4a:6a:e9:8d:cf:9e:9b:bd:88:ff:a7:3f:e2:9a:
fb:b7:3d:e5:35:22:a4:5c:2c:44:4d:76:22:3a:4f:
b4:0b:19:3e:34:72:d6:b9:e6:c7:1b:e1:bb:2b:e2:
98:08:cd:08:72:54:06:40:2e:b8:2b:3a:25:05:39:
e3:30:3c:11:c5:13:9c:41:dc:86:08:ad:50:8a:ab:
0b:c3:fa:74:75:85:99:8d:dc:c8:4f:dd:2b:9e:a5:
2c:e1:ca:52:16:34:9a:1f:f5:04:04:ef:49:9e:b3:
c8:4d:32:a5:fe:6d:8d:99:6f:09:e4:f8:1b:67:d3:
34:93:cc:b6:c8:98:20:63:94:79:5a:a2:5f:11:dd:
86:00:06:c1:60:b6:2f:f7:2b:59:60:da:fa:ed:3e:
dd:a1:bd:b0:3d:11:54:52:ca:d2:db:e1:16:4e:d6:
02:13:0e:a1:67:f4:3c:86:67:0e:72:30:ee:cd:bc:
b0:25:9f:83:6c:c6:72:c2:bd:28:66:57:71:0a:f6:
d5:8e:91:51:11:d9:d7:9d:e3:54:84:c6:3d:49:20:
2d:97:6e:33:8e:e7:66:8d:00:92:f9:21:b5:4d:40:
f0:99:79:3a:a3:1f:b0:cc:10:89:a2:6b:d7:fb:a8:
23:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:2F:02:64:EC:4E:35:97:FA:93:F9:DC:BC:B5:3F:FB:21:26:7D:2B
X509v3 Authority Key Identifier:
keyid:EF:F6:5B:70:00:20:E3:0D:73:D3:B1:DF:78:27:1E:54:3E:30:8F:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7_ZbcAAg4w1z07HfeCceVD4wjzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/22a465-025d-4841-884f-14b20d753372/1/7_ZbcAAg4w1z07HfeCceVD4wjzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/22a465-025d-4841-884f-14b20d753372/1/7_ZbcAAg4w1z07HfeCceVD4wjzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:ce:36:67:f9:87:d7:aa:83:4d:ac:e9:cf:55:a6:aa:95:b1:
7e:33:60:ba:64:12:5d:18:28:9a:44:5a:b5:e8:d5:2f:df:0b:
e2:17:04:14:e4:5d:c9:63:4d:22:f5:e7:05:c1:49:49:7b:49:
ed:2d:8e:dd:43:ae:fd:36:72:8a:1c:95:7a:39:48:6b:35:4c:
73:42:e2:e3:f4:cb:d6:f1:83:53:ab:5d:6e:2c:d7:3a:26:07:
3e:22:2b:43:06:e3:f8:12:26:39:ab:3a:08:8b:d7:98:bf:20:
34:50:39:b2:2f:88:78:d7:79:78:9c:5b:ca:69:ec:f4:10:ee:
a5:25:41:69:9a:d9:18:b7:91:4e:bd:98:b4:e1:1e:fe:b8:08:
3c:ea:0c:00:00:65:a9:00:b1:17:e5:e1:7f:88:75:c7:76:cc:
13:30:27:cd:9d:1c:cb:60:be:7f:92:54:c0:be:03:cb:01:ee:
bf:5b:df:40:8e:9d:db:da:b8:bf:56:4e:16:63:72:bb:96:ad:
00:e8:a3:76:72:83:fd:c9:dc:0c:96:11:ac:cb:4b:72:fe:a8:
0d:e7:61:07:ac:00:b3:d7:bf:3c:b1:7b:c4:e5:b8:16:2e:54:
b0:45:75:3a:01:1d:67:de:ee:2b:c8:3b:3e:a6:cc:da:9d:9c:
6d:07:5c:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:39:50 2025 by rpki-client