Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/22a465-025d-4841-884f-14b20d753372/1/7_ZbcAAg4w1z07HfeCceVD4wjzo.mft
File: 7_ZbcAAg4w1z07HfeCceVD4wjzo.mft (raw, json)
Hash identifier: +oxpLRp43fa79BlDEFr9H+3/gqfWKvItRDQhxvrgeuo=
Subject key identifier: 7C:84:7A:6B:D1:79:B3:6C:8B:A7:38:47:46:DA:0D:CE:29:7F:A3:F0
Authority key identifier: EF:F6:5B:70:00:20:E3:0D:73:D3:B1:DF:78:27:1E:54:3E:30:8F:3A
Certificate issuer: /CN=eff65b700020e30d73d3b1df78271e543e308f3a
Certificate serial: 0197B7B3671266E473DD213FF5E42CA28524
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7_ZbcAAg4w1z07HfeCceVD4wjzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/22a465-025d-4841-884f-14b20d753372/1/7_ZbcAAg4w1z07HfeCceVD4wjzo.mft
Manifest number: 0D1B
Signing time: Sat 28 Jun 2025 18:01:17 +0000
Manifest this update: Sat 28 Jun 2025 18:01:17 +0000
Manifest next update: Sun 29 Jun 2025 18:01:17 +0000
Files and hashes: 1: 7_ZbcAAg4w1z07HfeCceVD4wjzo.crl (hash: aA9ND6blXBIVUUs1GjfoSNDIORbHZQNGJdoxvgrm7Qo=)
2: AdFVK1KtSnf7ZNfSr9y68mDkPRc.roa (hash: /eDjhHT0EL0eZWQnzwFCLaBMZZnRebciW+q12o5OJ+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/22a465-025d-4841-884f-14b20d753372/1/7_ZbcAAg4w1z07HfeCceVD4wjzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/22a465-025d-4841-884f-14b20d753372/1/7_ZbcAAg4w1z07HfeCceVD4wjzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/7_ZbcAAg4w1z07HfeCceVD4wjzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:67:12:66:e4:73:dd:21:3f:f5:e4:2c:a2:85:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eff65b700020e30d73d3b1df78271e543e308f3a
Validity
Not Before: Jun 28 18:01:17 2025 GMT
Not After : Jun 29 18:01:17 2025 GMT
Subject: CN=7c847a6bd179b36c8ba7384746da0dce297fa3f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:71:08:4d:39:54:b3:e1:ac:aa:60:1a:34:17:
4a:56:37:e8:a2:34:63:06:db:b5:9b:24:f3:42:99:
f4:1a:42:29:08:ae:13:cb:84:4f:c0:d9:ce:bc:ab:
5e:7f:00:8f:93:c6:95:54:c4:45:b3:ef:d3:28:8b:
82:4e:64:a4:da:e1:22:f3:33:b9:0e:65:46:b3:93:
31:66:0b:d1:89:17:38:95:07:a5:fe:b0:b6:88:86:
50:be:ac:e2:b9:fd:5d:e8:98:15:17:50:4d:0f:33:
aa:c3:ca:1c:20:25:8f:b6:86:ad:31:92:7a:bd:83:
c2:b4:e1:f2:ae:6d:df:2c:a6:4f:e2:dd:e0:fa:4f:
5f:35:52:1a:d9:06:5d:51:28:57:f5:59:4d:64:fd:
9a:af:00:ae:f9:7d:97:fc:b3:c1:29:99:dc:0c:f1:
71:48:9c:09:70:a9:c4:97:2e:da:1a:98:80:d9:35:
92:2c:b6:23:8e:9d:dc:09:24:99:1f:bc:89:88:fe:
1b:f9:e3:99:1c:79:08:86:e7:3f:14:93:32:af:6a:
75:fd:6c:36:74:56:38:5b:a6:39:ac:55:0b:ac:38:
ae:99:ea:0d:77:c7:40:5a:b6:8c:2b:a3:a1:90:19:
ad:f4:33:92:97:14:a5:68:08:44:ef:03:92:76:25:
30:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:84:7A:6B:D1:79:B3:6C:8B:A7:38:47:46:DA:0D:CE:29:7F:A3:F0
X509v3 Authority Key Identifier:
keyid:EF:F6:5B:70:00:20:E3:0D:73:D3:B1:DF:78:27:1E:54:3E:30:8F:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7_ZbcAAg4w1z07HfeCceVD4wjzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/22a465-025d-4841-884f-14b20d753372/1/7_ZbcAAg4w1z07HfeCceVD4wjzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/22a465-025d-4841-884f-14b20d753372/1/7_ZbcAAg4w1z07HfeCceVD4wjzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:7a:d4:8b:50:4a:f8:92:3b:ad:f7:61:ad:12:1b:31:d5:53:
86:95:0c:ca:65:85:28:2e:96:ec:f4:41:9d:9c:49:18:b8:c1:
2b:b7:7d:46:e1:d9:7f:9d:ae:29:ae:be:79:35:7d:d7:1b:eb:
0e:03:7a:2b:7c:21:09:39:57:84:9f:d6:c6:4a:c5:2b:95:08:
27:75:a9:f8:2b:0d:cb:38:34:7d:ea:19:24:37:2b:ba:76:6c:
a6:7d:a3:4f:55:e6:32:4b:07:56:5d:ef:06:a5:12:ed:64:b5:
dc:3d:56:dd:ca:02:4d:2e:b2:5c:c8:e2:2f:f8:e9:99:7d:4d:
68:e8:02:24:80:eb:51:17:50:fb:15:4b:47:d2:8e:80:ed:23:
ef:a0:c0:f6:44:ae:52:8d:ca:8d:16:69:43:04:eb:bf:19:55:
1f:6a:8f:b4:19:17:b1:3b:e3:b5:7c:53:06:77:b4:8e:d0:7e:
05:ff:e2:d0:72:45:c3:b8:6b:97:dd:2e:44:f9:d6:7d:57:83:
25:b7:9e:43:e3:e0:49:6e:ba:e0:b7:7a:40:b0:17:ff:8f:e5:
a1:9e:f9:47:3d:55:e3:a7:69:b8:8d:94:2e:7f:e9:5b:fb:c0:
44:c2:b1:41:34:f0:80:93:cf:76:9f:aa:ae:3d:cb:54:6c:b7:
f4:ee:30:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3s2cSZuRz3SE/9eQsooUkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmZjY1YjcwMDAyMGUzMGQ3M2QzYjFkZjc4MjcxZTU0M2Uz
MDhmM2EwHhcNMjUwNjI4MTgwMTE3WhcNMjUwNjI5MTgwMTE3WjAzMTEwLwYDVQQD
Eyg3Yzg0N2E2YmQxNzliMzZjOGJhNzM4NDc0NmRhMGRjZTI5N2ZhM2YwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3HEITTlUs+GsqmAaNBdKVjfoojRj
Btu1myTzQpn0GkIpCK4Ty4RPwNnOvKtefwCPk8aVVMRFs+/TKIuCTmSk2uEi8zO5
DmVGs5MxZgvRiRc4lQel/rC2iIZQvqziuf1d6JgVF1BNDzOqw8ocICWPtoatMZJ6
vYPCtOHyrm3fLKZP4t3g+k9fNVIa2QZdUShX9VlNZP2arwCu+X2X/LPBKZncDPFx
SJwJcKnEly7aGpiA2TWSLLYjjp3cCSSZH7yJiP4b+eOZHHkIhuc/FJMyr2p1/Ww2
dFY4W6Y5rFULrDiumeoNd8dAWraMK6OhkBmt9DOSlxSlaAhE7wOSdiUwjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHyEemvRebNsi6c4R0baDc4pf6PwMB8GA1UdIwQY
MBaAFO/2W3AAIOMNc9Ox33gnHlQ+MI86MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN19aYmNBQWc0dzF6MDdIZmVDY2VWRDR3anpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8yMmE0NjUtMDI1ZC00ODQxLTg4NGYt
MTRiMjBkNzUzMzcyLzEvN19aYmNBQWc0dzF6MDdIZmVDY2VWRDR3anpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi8yMmE0NjUtMDI1ZC00ODQxLTg4NGYtMTRiMjBkNzUzMzcy
LzEvN19aYmNBQWc0dzF6MDdIZmVDY2VWRDR3anpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaHrUi1BK
+JI7rfdhrRIbMdVThpUMymWFKC6W7PRBnZxJGLjBK7d9RuHZf52uKa6+eTV91xvr
DgN6K3whCTlXhJ/WxkrFK5UIJ3Wp+CsNyzg0feoZJDcrunZspn2jT1XmMksHVl3v
BqUS7WS13D1W3coCTS6yXMjiL/jpmX1NaOgCJIDrURdQ+xVLR9KOgO0j76DA9kSu
Uo3KjRZpQwTrvxlVH2qPtBkXsTvjtXxTBne0jtB+Bf/i0HJFw7hrl90uRPnWfVeD
JbeeQ+PgSW664Ld6QLAX/4/loZ75Rz1V46dpuI2ULn/pW/vARMKxQTTwgJPPdp+q
rj3LVGy39O4w9Q==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:59:18 2025 by rpki-client