Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/22a465-025d-4841-884f-14b20d753372/1/7_ZbcAAg4w1z07HfeCceVD4wjzo.mft
File: 7_ZbcAAg4w1z07HfeCceVD4wjzo.mft (raw, json)
Hash identifier: ePQkdVWEN3SP3wXTjiAh9/YZA4Gp7G7keC6a0aW1OIU=
Subject key identifier: 8A:43:38:12:3F:60:4B:B2:F4:88:27:A4:32:7C:AF:07:A3:82:AF:26
Authority key identifier: EF:F6:5B:70:00:20:E3:0D:73:D3:B1:DF:78:27:1E:54:3E:30:8F:3A
Certificate issuer: /CN=eff65b700020e30d73d3b1df78271e543e308f3a
Certificate serial: 0196C08167756799BC4022C63AD90AF4AEDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7_ZbcAAg4w1z07HfeCceVD4wjzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/22a465-025d-4841-884f-14b20d753372/1/7_ZbcAAg4w1z07HfeCceVD4wjzo.mft
Manifest number: 0C9B
Signing time: Sun 11 May 2025 18:00:28 +0000
Manifest this update: Sun 11 May 2025 18:00:28 +0000
Manifest next update: Mon 12 May 2025 18:00:28 +0000
Files and hashes: 1: 7_ZbcAAg4w1z07HfeCceVD4wjzo.crl (hash: EZt20kQTwF8i3X4u6NrGkasWusW7/cCxDFX8yOxIu8s=)
2: AdFVK1KtSnf7ZNfSr9y68mDkPRc.roa (hash: /eDjhHT0EL0eZWQnzwFCLaBMZZnRebciW+q12o5OJ+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/22a465-025d-4841-884f-14b20d753372/1/7_ZbcAAg4w1z07HfeCceVD4wjzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/22a465-025d-4841-884f-14b20d753372/1/7_ZbcAAg4w1z07HfeCceVD4wjzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/7_ZbcAAg4w1z07HfeCceVD4wjzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:81:67:75:67:99:bc:40:22:c6:3a:d9:0a:f4:ae:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eff65b700020e30d73d3b1df78271e543e308f3a
Validity
Not Before: May 11 18:00:28 2025 GMT
Not After : May 12 18:00:28 2025 GMT
Subject: CN=8a4338123f604bb2f48827a4327caf07a382af26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7f:80:9f:f8:68:7c:cb:2d:95:b1:f0:79:4c:
30:c6:93:d2:b3:23:47:b1:90:be:13:2d:6e:d3:82:
fd:03:94:c7:04:19:46:31:16:44:be:5c:b7:52:c9:
45:82:f1:80:cf:97:68:a4:3c:50:ef:0c:fc:fd:47:
32:82:b3:cf:ee:80:99:3d:d2:b2:3d:30:a8:9b:2a:
b8:9a:b4:b9:24:0e:4f:f0:d0:42:fc:f8:de:1e:62:
44:5e:e4:3b:59:d2:dd:d4:85:24:84:4d:9d:b6:c2:
bb:bd:b1:b3:5b:d4:5e:ec:52:2f:6f:47:f2:1f:ea:
19:8c:77:2c:89:94:5c:36:47:e9:6c:6f:a3:07:37:
ab:15:55:c7:92:66:23:fb:fb:fd:7f:f7:9d:d5:bd:
2c:91:55:6f:63:bb:06:00:2c:e3:0e:3d:07:1b:62:
78:58:67:a3:1a:ca:8e:d9:4c:4f:7c:fa:a6:11:c0:
d9:9f:ba:d8:b1:35:3c:eb:53:ee:ee:91:77:25:b3:
b1:b4:f3:8c:47:9c:35:4b:de:d0:75:e7:cc:75:be:
97:2b:dd:c0:2b:55:c4:a0:28:9a:3d:22:5c:83:71:
e9:08:67:db:03:80:5f:9a:2e:23:ad:50:33:20:84:
22:2b:67:2d:38:03:fe:57:4b:0f:d9:ac:9b:bc:25:
ee:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:43:38:12:3F:60:4B:B2:F4:88:27:A4:32:7C:AF:07:A3:82:AF:26
X509v3 Authority Key Identifier:
keyid:EF:F6:5B:70:00:20:E3:0D:73:D3:B1:DF:78:27:1E:54:3E:30:8F:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7_ZbcAAg4w1z07HfeCceVD4wjzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/22a465-025d-4841-884f-14b20d753372/1/7_ZbcAAg4w1z07HfeCceVD4wjzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/22a465-025d-4841-884f-14b20d753372/1/7_ZbcAAg4w1z07HfeCceVD4wjzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:8b:39:d7:fe:39:2e:c8:d5:52:b5:63:07:5b:a2:ef:3c:e8:
dc:cb:ed:9a:f9:01:90:67:f3:23:5b:61:17:c4:f7:ed:99:bb:
f6:cf:d4:f1:bf:c9:50:bb:f3:b9:ab:f4:59:a4:9a:02:50:03:
11:b0:38:1f:08:3d:25:fb:2d:ef:b6:f6:27:06:1a:20:52:9c:
46:dc:64:19:03:14:71:b6:30:6a:a9:05:f5:bf:95:16:28:a2:
b6:d1:96:68:f0:77:3c:45:61:41:75:d7:d2:6f:ad:c8:76:74:
a9:fb:33:70:72:ee:12:2c:ac:03:51:cf:9a:85:21:a2:91:d4:
6a:65:45:61:ac:ae:5d:d0:60:4c:ba:18:16:e6:57:04:e1:58:
76:30:4b:80:65:a4:03:f6:d7:7c:da:72:5a:f0:3e:a5:48:e1:
3d:a4:15:f0:52:9a:e3:d8:1f:2f:e7:b8:48:29:1b:e8:0e:14:
30:c8:c0:32:5a:b4:26:64:e9:7a:fa:35:c6:62:ca:bb:72:18:
1d:e7:86:ae:e3:d3:9e:f1:b9:6c:47:ff:23:09:0f:34:01:cb:
37:69:c3:b1:c4:c8:e1:7c:a6:0d:07:c5:3f:9d:a6:e7:a5:26:
42:6e:b1:9d:46:2b:f7:80:56:1c:8e:82:76:c4:d5:c0:ce:ab:
89:d7:d8:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:18:32 2025 by rpki-client