Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/22a465-025d-4841-884f-14b20d753372/1/7_ZbcAAg4w1z07HfeCceVD4wjzo.mft
File: 7_ZbcAAg4w1z07HfeCceVD4wjzo.mft (raw, json)
Hash identifier: axbTlhc5Nq934hkjMv6dV1lGzwEE4E6ZftRMRWc/vCA=
Subject key identifier: 9B:59:8E:4D:11:91:DF:6D:23:30:1B:CE:81:DC:0E:95:37:24:AC:2D
Authority key identifier: EF:F6:5B:70:00:20:E3:0D:73:D3:B1:DF:78:27:1E:54:3E:30:8F:3A
Certificate issuer: /CN=eff65b700020e30d73d3b1df78271e543e308f3a
Certificate serial: 0198D583B96095B851A0CCEF5784E4BB9CFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7_ZbcAAg4w1z07HfeCceVD4wjzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/22a465-025d-4841-884f-14b20d753372/1/7_ZbcAAg4w1z07HfeCceVD4wjzo.mft
Manifest number: 0DAF
Signing time: Sat 23 Aug 2025 06:00:36 +0000
Manifest this update: Sat 23 Aug 2025 06:00:36 +0000
Manifest next update: Sun 24 Aug 2025 06:00:36 +0000
Files and hashes: 1: 7_ZbcAAg4w1z07HfeCceVD4wjzo.crl (hash: WfnLBbfsC/bwSBYFdjRRgSsIbukMmQI5HJ6YHtP1fHw=)
2: AdFVK1KtSnf7ZNfSr9y68mDkPRc.roa (hash: /eDjhHT0EL0eZWQnzwFCLaBMZZnRebciW+q12o5OJ+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/22a465-025d-4841-884f-14b20d753372/1/7_ZbcAAg4w1z07HfeCceVD4wjzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/22a465-025d-4841-884f-14b20d753372/1/7_ZbcAAg4w1z07HfeCceVD4wjzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/7_ZbcAAg4w1z07HfeCceVD4wjzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:b9:60:95:b8:51:a0:cc:ef:57:84:e4:bb:9c:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eff65b700020e30d73d3b1df78271e543e308f3a
Validity
Not Before: Aug 23 06:00:36 2025 GMT
Not After : Aug 24 06:00:36 2025 GMT
Subject: CN=9b598e4d1191df6d23301bce81dc0e953724ac2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:16:2b:cd:3b:2c:c9:36:5c:99:63:54:c3:79:
64:6e:fa:30:a4:01:08:87:79:88:d7:65:4a:a4:f1:
22:fa:75:18:37:40:4a:2c:c1:e2:73:4d:f8:f0:16:
95:a2:77:e2:dd:88:97:d6:fd:3b:18:07:f8:25:3f:
7c:c1:d8:a9:d4:77:da:a4:41:86:ea:22:e9:0f:c0:
62:0c:ab:61:dc:b7:61:92:e9:06:bb:59:8a:cf:dd:
18:2e:8a:d6:29:e4:76:85:e3:b7:b7:1d:27:66:6f:
4a:18:82:e9:05:8b:14:3f:60:cd:49:52:37:da:3a:
92:25:03:e5:fd:da:2d:36:f5:76:2c:09:c2:7a:0e:
85:a8:37:8f:4b:de:40:cc:47:ae:d8:c6:18:c0:52:
1f:9d:18:ce:54:85:b6:47:0a:a5:a2:20:92:9a:0d:
42:b3:d3:2f:7a:db:08:f5:21:e9:3f:9d:c4:af:0e:
93:da:07:c2:49:85:c0:2f:00:e9:f8:b5:aa:2a:96:
b5:ca:30:e4:ff:39:92:df:56:22:9e:57:99:82:32:
b4:c6:af:e5:94:b5:bc:02:19:cc:61:cf:ae:24:bc:
1c:de:63:f8:35:95:cc:1e:58:5e:47:10:81:81:78:
e2:3c:c5:27:0c:6e:48:49:9d:98:4c:08:70:69:28:
38:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:59:8E:4D:11:91:DF:6D:23:30:1B:CE:81:DC:0E:95:37:24:AC:2D
X509v3 Authority Key Identifier:
keyid:EF:F6:5B:70:00:20:E3:0D:73:D3:B1:DF:78:27:1E:54:3E:30:8F:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7_ZbcAAg4w1z07HfeCceVD4wjzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/22a465-025d-4841-884f-14b20d753372/1/7_ZbcAAg4w1z07HfeCceVD4wjzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/22a465-025d-4841-884f-14b20d753372/1/7_ZbcAAg4w1z07HfeCceVD4wjzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:f3:4d:56:b3:41:31:e9:6c:42:a7:03:47:cc:11:e9:27:03:
1c:64:f4:74:58:93:9c:b4:f5:e7:16:b4:d3:f6:29:a6:c8:54:
a9:a9:83:8a:63:2d:a7:89:8e:e2:60:6d:42:57:25:52:8b:5d:
4b:83:55:ab:3e:fe:26:c7:70:8f:92:7a:63:ee:26:34:4b:33:
36:12:8c:2d:65:d3:0c:1d:17:39:c6:95:cd:82:a1:2a:23:a1:
22:2a:bd:0f:b9:7a:34:d4:8a:34:97:fd:d6:65:68:84:fc:11:
b2:d3:47:66:8f:0f:3d:69:66:72:d5:52:76:cc:47:d2:df:f7:
be:fd:1d:08:24:df:80:29:57:35:df:70:22:59:82:ac:8c:9b:
8e:e6:56:1a:d8:5c:f9:eb:3e:e1:1d:83:78:d4:41:0e:3b:7b:
d3:5a:15:a0:f9:c6:a5:45:24:cf:ad:d4:5b:46:c4:df:0b:b3:
50:8d:73:ce:49:d8:1f:28:8b:dc:2f:9c:6b:e3:85:dc:b7:81:
3d:d7:2f:48:27:97:64:b6:96:ff:90:42:0c:02:01:be:f1:a0:
34:fa:7a:5a:4c:f1:bf:87:e3:34:a6:e3:7b:0a:25:cd:9d:e8:
6d:6a:3a:94:2c:a0:84:d7:4d:a6:f0:8b:7c:16:a0:6e:4a:15:
04:08:0a:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVg7lglbhRoMzvV4Tku5z8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmZjY1YjcwMDAyMGUzMGQ3M2QzYjFkZjc4MjcxZTU0M2Uz
MDhmM2EwHhcNMjUwODIzMDYwMDM2WhcNMjUwODI0MDYwMDM2WjAzMTEwLwYDVQQD
Eyg5YjU5OGU0ZDExOTFkZjZkMjMzMDFiY2U4MWRjMGU5NTM3MjRhYzJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwxYrzTssyTZcmWNUw3lkbvowpAEI
h3mI12VKpPEi+nUYN0BKLMHic0348BaVonfi3YiX1v07GAf4JT98wdip1HfapEGG
6iLpD8BiDKth3LdhkukGu1mKz90YLorWKeR2heO3tx0nZm9KGILpBYsUP2DNSVI3
2jqSJQPl/dotNvV2LAnCeg6FqDePS95AzEeu2MYYwFIfnRjOVIW2RwqloiCSmg1C
s9MvetsI9SHpP53Erw6T2gfCSYXALwDp+LWqKpa1yjDk/zmS31YinleZgjK0xq/l
lLW8AhnMYc+uJLwc3mP4NZXMHlheRxCBgXjiPMUnDG5ISZ2YTAhwaSg4IQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJtZjk0Rkd9tIzAbzoHcDpU3JKwtMB8GA1UdIwQY
MBaAFO/2W3AAIOMNc9Ox33gnHlQ+MI86MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN19aYmNBQWc0dzF6MDdIZmVDY2VWRDR3anpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8yMmE0NjUtMDI1ZC00ODQxLTg4NGYt
MTRiMjBkNzUzMzcyLzEvN19aYmNBQWc0dzF6MDdIZmVDY2VWRDR3anpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi8yMmE0NjUtMDI1ZC00ODQxLTg4NGYtMTRiMjBkNzUzMzcy
LzEvN19aYmNBQWc0dzF6MDdIZmVDY2VWRDR3anpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuvNNVrNB
MelsQqcDR8wR6ScDHGT0dFiTnLT15xa00/YppshUqamDimMtp4mO4mBtQlclUotd
S4NVqz7+Jsdwj5J6Y+4mNEszNhKMLWXTDB0XOcaVzYKhKiOhIiq9D7l6NNSKNJf9
1mVohPwRstNHZo8PPWlmctVSdsxH0t/3vv0dCCTfgClXNd9wIlmCrIybjuZWGthc
+es+4R2DeNRBDjt701oVoPnGpUUkz63UW0bE3wuzUI1zzknYHyiL3C+ca+OF3LeB
PdcvSCeXZLaW/5BCDAIBvvGgNPp6Wkzxv4fjNKbjewolzZ3obWo6lCyghNdNpvCL
fBagbkoVBAgKtg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:46:27 2025 by rpki-client