Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/fbfacc-a4f0-4bdb-abbb-0f73661d5f35/1/7ZAKVVGLZ57cePqpiD7G5gNa5xw.mft
File: 7ZAKVVGLZ57cePqpiD7G5gNa5xw.mft (raw, json)
Hash identifier: +/LD0nZdMioZ9J32fa8fnlpNrMnWHC2pBCfb7fgl2ak=
Subject key identifier: 43:75:A5:33:7B:B8:5D:23:75:51:63:7D:84:B3:B2:8A:DA:99:65:A8
Authority key identifier: ED:90:0A:55:51:8B:67:9E:DC:78:FA:A9:88:3E:C6:E6:03:5A:E7:1C
Certificate issuer: /CN=ed900a55518b679edc78faa9883ec6e6035ae71c
Certificate serial: 0199FC589BF5CF0464814C625785445638A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7ZAKVVGLZ57cePqpiD7G5gNa5xw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/fbfacc-a4f0-4bdb-abbb-0f73661d5f35/1/7ZAKVVGLZ57cePqpiD7G5gNa5xw.mft
Manifest number: 04A0
Signing time: Sun 19 Oct 2025 12:01:29 +0000
Manifest this update: Sun 19 Oct 2025 12:01:29 +0000
Manifest next update: Mon 20 Oct 2025 12:01:29 +0000
Files and hashes: 1: 1-ieyIqujcrCxJblAajzfComBT5M.roa (hash: n5puj2nwsSUZldVzpI+lBrVc/7elXyEjudzznV0aSbQ=)
2: 7ZAKVVGLZ57cePqpiD7G5gNa5xw.crl (hash: g8xXbAVNs3KBgL9L59lLRALnoP5tOhlxxwxYjZb+7xM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/fbfacc-a4f0-4bdb-abbb-0f73661d5f35/1/7ZAKVVGLZ57cePqpiD7G5gNa5xw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/fbfacc-a4f0-4bdb-abbb-0f73661d5f35/1/7ZAKVVGLZ57cePqpiD7G5gNa5xw.mft
rsync://rpki.ripe.net/repository/DEFAULT/7ZAKVVGLZ57cePqpiD7G5gNa5xw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:9b:f5:cf:04:64:81:4c:62:57:85:44:56:38:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed900a55518b679edc78faa9883ec6e6035ae71c
Validity
Not Before: Oct 19 12:01:29 2025 GMT
Not After : Oct 20 12:01:29 2025 GMT
Subject: CN=4375a5337bb85d237551637d84b3b28ada9965a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e8:9c:3e:ba:fb:b7:34:e2:03:8e:4a:fc:3d:
38:f0:1f:cb:6d:78:47:a3:44:60:8f:2b:c3:a7:a2:
11:24:57:07:23:1d:fe:5c:f0:54:b4:f3:90:f2:5a:
59:76:e3:2e:19:07:ad:d2:9d:ef:01:cf:1c:09:6b:
58:33:53:7d:b9:d1:87:2c:b1:95:e3:45:ca:a3:9e:
1f:79:61:99:4c:2d:17:48:82:79:8c:04:de:5c:34:
5b:72:d8:f4:9e:4e:43:bc:c6:e6:6a:c0:63:25:2d:
20:62:91:17:90:06:f8:35:fe:75:8a:6f:78:bc:a3:
a7:76:a0:3c:a0:33:1f:70:58:64:27:09:66:53:87:
f7:63:34:a1:5e:64:5b:94:85:4e:f6:1c:14:5b:1f:
64:67:71:bc:09:77:b6:4d:7d:44:6e:7a:d4:13:a9:
ea:07:ad:79:a5:b8:10:6d:14:3b:41:fb:87:4c:41:
cb:46:a4:6a:91:fa:28:57:95:09:38:92:21:53:58:
36:31:ed:32:78:7a:42:17:78:be:5f:3d:6e:98:29:
79:6a:10:72:c4:d3:ef:6d:cf:66:e5:0f:d9:be:a2:
55:b9:80:b6:98:c7:b7:20:11:74:af:a9:a2:56:f3:
18:29:03:0d:a5:2b:c1:cf:e1:f9:80:f1:64:9f:06:
4a:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:75:A5:33:7B:B8:5D:23:75:51:63:7D:84:B3:B2:8A:DA:99:65:A8
X509v3 Authority Key Identifier:
keyid:ED:90:0A:55:51:8B:67:9E:DC:78:FA:A9:88:3E:C6:E6:03:5A:E7:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7ZAKVVGLZ57cePqpiD7G5gNa5xw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fbfacc-a4f0-4bdb-abbb-0f73661d5f35/1/7ZAKVVGLZ57cePqpiD7G5gNa5xw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fbfacc-a4f0-4bdb-abbb-0f73661d5f35/1/7ZAKVVGLZ57cePqpiD7G5gNa5xw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:74:9e:49:8e:c0:85:77:a4:b8:69:ed:16:5c:de:42:c2:44:
46:e5:ac:05:03:d8:2d:46:4d:32:9f:a4:42:14:7a:ef:60:be:
74:8b:43:21:f8:4d:58:e1:78:79:26:02:49:53:8c:32:d8:fb:
4c:a6:51:58:95:90:8f:24:68:c4:27:b3:3b:11:48:17:e1:53:
9b:22:aa:80:39:f7:72:0e:f3:cd:f2:93:19:66:03:3f:0f:cc:
e7:d6:75:13:9d:29:f4:1e:f2:74:60:b0:f8:1c:57:bb:cd:7b:
12:df:83:86:09:ae:14:ca:3d:06:30:74:ef:66:aa:3d:a6:2f:
20:15:e3:bb:58:39:1d:3f:d8:b6:7d:d3:ae:82:5f:97:86:93:
9a:4f:30:9b:bb:15:22:1f:01:f8:e0:ec:e7:72:72:5e:a4:ff:
00:84:80:0c:80:4c:61:5b:28:da:ca:ab:d3:f1:51:be:51:6d:
be:89:49:70:33:27:da:ed:46:68:ea:ba:19:8e:24:06:77:15:
bd:03:70:23:2c:c3:ff:a1:37:e6:62:4e:34:1b:06:2d:06:d4:
5e:a3:4b:e7:05:6f:ec:a3:5f:17:c3:90:7a:f3:2c:d2:4f:32:
b8:dc:d6:c4:e9:f1:f1:b8:df:cf:94:85:a1:af:c7:4b:8e:d0:
11:74:40:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:27:21 2025 by rpki-client