Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/fbfacc-a4f0-4bdb-abbb-0f73661d5f35/1/7ZAKVVGLZ57cePqpiD7G5gNa5xw.mft
File: 7ZAKVVGLZ57cePqpiD7G5gNa5xw.mft (raw, json)
Hash identifier: jJLmlnG09fNGANbWxpCO3vGQLnwYRvHGj84xwqQtvak=
Subject key identifier: D3:06:E0:14:3F:00:D1:4A:86:44:5A:50:A1:38:7A:AD:3A:71:48:D1
Authority key identifier: ED:90:0A:55:51:8B:67:9E:DC:78:FA:A9:88:3E:C6:E6:03:5A:E7:1C
Certificate issuer: /CN=ed900a55518b679edc78faa9883ec6e6035ae71c
Certificate serial: 0197B70EE8E7224DF23CBFB1D8744EE2954F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7ZAKVVGLZ57cePqpiD7G5gNa5xw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/fbfacc-a4f0-4bdb-abbb-0f73661d5f35/1/7ZAKVVGLZ57cePqpiD7G5gNa5xw.mft
Manifest number: 0373
Signing time: Sat 28 Jun 2025 15:01:37 +0000
Manifest this update: Sat 28 Jun 2025 15:01:37 +0000
Manifest next update: Sun 29 Jun 2025 15:01:37 +0000
Files and hashes: 1: 1-ieyIqujcrCxJblAajzfComBT5M.roa (hash: n5puj2nwsSUZldVzpI+lBrVc/7elXyEjudzznV0aSbQ=)
2: 7ZAKVVGLZ57cePqpiD7G5gNa5xw.crl (hash: Eb0ovj9VnRIqLbTlg1/gy2aPPz3Kkg8RieScKn20RP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/fbfacc-a4f0-4bdb-abbb-0f73661d5f35/1/7ZAKVVGLZ57cePqpiD7G5gNa5xw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/fbfacc-a4f0-4bdb-abbb-0f73661d5f35/1/7ZAKVVGLZ57cePqpiD7G5gNa5xw.mft
rsync://rpki.ripe.net/repository/DEFAULT/7ZAKVVGLZ57cePqpiD7G5gNa5xw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:e8:e7:22:4d:f2:3c:bf:b1:d8:74:4e:e2:95:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed900a55518b679edc78faa9883ec6e6035ae71c
Validity
Not Before: Jun 28 15:01:37 2025 GMT
Not After : Jun 29 15:01:37 2025 GMT
Subject: CN=d306e0143f00d14a86445a50a1387aad3a7148d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2c:2a:c6:a9:44:c0:fd:59:14:7a:2b:dc:aa:
27:54:60:d8:71:6f:88:c9:7c:b1:57:95:9a:78:f7:
38:3e:57:63:d1:5b:62:a7:a5:29:62:90:9a:d6:27:
df:18:66:ab:14:a2:59:31:d8:5a:b7:57:cf:5b:44:
d4:27:96:4a:b8:2c:3b:99:f9:8e:0c:50:b0:e4:b5:
c4:a3:56:2b:ba:a3:bd:ff:a1:7f:8e:55:06:8e:f0:
79:d2:4f:90:4a:32:6f:24:a2:2a:c0:d9:bf:24:9a:
71:96:75:ef:57:4f:f4:81:20:39:21:05:f4:c0:de:
d9:4e:e5:4b:cd:99:59:f6:09:63:1e:59:91:cd:06:
2d:82:4c:7c:25:0d:68:0c:75:c7:60:f3:29:d8:24:
15:33:bd:66:78:08:6f:26:a3:b6:e1:40:13:d8:38:
b0:ef:68:23:5d:77:d6:9c:c1:4c:41:d8:17:a1:07:
9a:e9:80:7d:2d:29:07:bd:a9:01:ee:3b:7c:99:ae:
30:90:bc:5b:1f:23:dc:70:c3:a0:3f:18:97:44:12:
f1:9d:c3:0c:f1:42:db:05:71:5d:2e:06:72:f2:6f:
1a:93:c8:ad:60:f9:54:25:d1:21:49:1d:5d:ec:41:
a8:cc:57:a4:2c:ec:65:6e:c1:13:7a:dc:30:31:5e:
d0:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:06:E0:14:3F:00:D1:4A:86:44:5A:50:A1:38:7A:AD:3A:71:48:D1
X509v3 Authority Key Identifier:
keyid:ED:90:0A:55:51:8B:67:9E:DC:78:FA:A9:88:3E:C6:E6:03:5A:E7:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7ZAKVVGLZ57cePqpiD7G5gNa5xw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fbfacc-a4f0-4bdb-abbb-0f73661d5f35/1/7ZAKVVGLZ57cePqpiD7G5gNa5xw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fbfacc-a4f0-4bdb-abbb-0f73661d5f35/1/7ZAKVVGLZ57cePqpiD7G5gNa5xw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:9d:2f:9b:1e:4a:43:5b:0a:01:05:17:12:74:21:99:4e:84:
bc:fd:9e:d9:f1:83:36:3a:ef:90:83:29:ca:c8:f7:7f:49:d8:
11:ae:53:b6:36:aa:6d:8a:dd:28:6d:d4:9e:20:56:9e:a8:a2:
43:34:97:70:ff:ce:d9:aa:02:29:63:4f:c1:23:f3:84:0c:bf:
2c:d3:f2:5b:03:16:ae:b2:4a:8c:23:02:63:ac:a0:89:3e:91:
ac:e1:a4:66:7c:86:ca:67:7d:b7:0a:08:e4:13:27:ee:20:9f:
5d:72:aa:98:b7:3f:61:13:df:ab:12:89:9d:df:e0:1d:70:9e:
0a:15:68:29:54:c7:cd:fe:22:ce:f8:e3:af:24:7b:bb:8f:20:
96:81:fd:5f:d0:a5:28:f5:63:b2:79:6c:4b:a7:e7:8f:68:95:
ec:45:a6:56:fa:dc:66:63:bb:e1:63:a4:13:16:45:15:35:10:
3f:b1:10:14:49:51:50:6b:09:ce:71:72:24:50:c8:09:a6:f6:
ae:08:eb:53:84:31:3f:6b:40:6b:32:99:9c:57:01:bf:07:ea:
50:c1:d5:4e:75:d9:ba:56:53:15:cc:ba:e4:b6:a2:e3:2b:5c:
9e:69:bc:ed:c4:97:e5:31:b3:8b:6a:5c:25:5d:0e:49:f5:8c:
39:c0:e7:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:56:59 2025 by rpki-client