Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/cf6b07-03b2-4ebe-b966-f1e9bf2bff21/1/A7zvl2ZC1UtLShmY8LP_SIRakm0.mft
File: A7zvl2ZC1UtLShmY8LP_SIRakm0.mft (raw, json)
Hash identifier: 0uDpbDgTU8iXHM6HyLnUzXZknWL1xR3Fg4TZZfTAUPo=
Subject key identifier: 16:FB:1E:C8:28:1D:29:B2:F7:73:8C:FD:24:70:BE:28:5A:41:8E:C6
Authority key identifier: 03:BC:EF:97:66:42:D5:4B:4B:4A:19:98:F0:B3:FF:48:84:5A:92:6D
Certificate issuer: /CN=03bcef976642d54b4b4a1998f0b3ff48845a926d
Certificate serial: 0197B6D7AD0C65F7B88DFB11C294564B1715
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7zvl2ZC1UtLShmY8LP_SIRakm0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/cf6b07-03b2-4ebe-b966-f1e9bf2bff21/1/A7zvl2ZC1UtLShmY8LP_SIRakm0.mft
Manifest number: 0FAF
Signing time: Sat 28 Jun 2025 14:01:17 +0000
Manifest this update: Sat 28 Jun 2025 14:01:17 +0000
Manifest next update: Sun 29 Jun 2025 14:01:17 +0000
Files and hashes: 1: A7zvl2ZC1UtLShmY8LP_SIRakm0.crl (hash: ZqB8eJv1YXPtl/8PNV9wvs2vRFMEHWqNbBJguNV9ycU=)
2: zrwokDU3FhdB7_q1CXdcMR9bnVs.roa (hash: GD4RouuFMqAMeF041Js/nVB0Sr40yt7mYWnED87KOPQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/cf6b07-03b2-4ebe-b966-f1e9bf2bff21/1/A7zvl2ZC1UtLShmY8LP_SIRakm0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/cf6b07-03b2-4ebe-b966-f1e9bf2bff21/1/A7zvl2ZC1UtLShmY8LP_SIRakm0.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7zvl2ZC1UtLShmY8LP_SIRakm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:ad:0c:65:f7:b8:8d:fb:11:c2:94:56:4b:17:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03bcef976642d54b4b4a1998f0b3ff48845a926d
Validity
Not Before: Jun 28 14:01:17 2025 GMT
Not After : Jun 29 14:01:17 2025 GMT
Subject: CN=16fb1ec8281d29b2f7738cfd2470be285a418ec6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ef:ca:3e:a2:05:96:e4:0c:da:c1:07:17:48:
c9:ca:4a:ec:d4:ac:f9:fa:7f:ef:6a:33:54:05:70:
7b:a6:53:2e:1a:cc:82:e1:60:18:84:c0:b0:4b:b9:
6e:7b:c8:32:cb:cd:ab:55:a9:45:e6:2c:14:2d:ae:
9a:51:3f:17:32:bd:38:0e:44:c1:db:d8:bc:91:95:
80:a5:dd:a4:14:b3:dd:80:13:bb:3b:31:de:4d:49:
d4:be:c8:b9:02:c1:09:9c:86:97:be:52:35:b1:03:
81:4c:4f:4f:9e:7d:17:12:c4:77:73:8c:ab:69:1b:
3a:ea:f0:24:df:df:30:69:36:99:87:f3:64:10:a1:
0a:e6:a7:02:3c:2e:44:db:df:54:2d:dc:66:d9:75:
e0:e1:95:bb:bf:d5:4a:c5:e4:10:40:14:b6:82:0d:
8d:18:58:ba:1b:13:e0:c7:c9:59:ce:77:fa:24:dd:
d9:04:65:f2:18:1a:99:d1:77:73:17:dd:49:3a:ee:
76:34:9f:05:d1:68:e2:34:72:72:58:33:b2:32:e4:
e0:00:1b:c6:61:c8:89:83:cf:fd:3a:a3:69:99:f4:
c7:db:86:13:c3:9f:15:c1:81:c5:95:c5:97:20:34:
d4:57:10:86:e1:a4:62:14:08:0b:13:01:ec:88:62:
8c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:FB:1E:C8:28:1D:29:B2:F7:73:8C:FD:24:70:BE:28:5A:41:8E:C6
X509v3 Authority Key Identifier:
keyid:03:BC:EF:97:66:42:D5:4B:4B:4A:19:98:F0:B3:FF:48:84:5A:92:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7zvl2ZC1UtLShmY8LP_SIRakm0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/cf6b07-03b2-4ebe-b966-f1e9bf2bff21/1/A7zvl2ZC1UtLShmY8LP_SIRakm0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/cf6b07-03b2-4ebe-b966-f1e9bf2bff21/1/A7zvl2ZC1UtLShmY8LP_SIRakm0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:94:7e:28:66:27:49:d9:3a:60:c4:df:50:29:da:c8:26:c4:
31:78:db:9f:10:36:da:65:d3:c6:ef:54:21:80:13:b6:a5:e3:
a5:11:04:82:c8:16:76:0f:eb:ea:40:3c:46:bf:e8:6c:e1:e1:
0d:c9:d7:46:35:f3:6a:fb:ba:98:33:28:cc:bf:3a:3b:5a:90:
c6:9d:7b:44:95:d9:4e:1b:83:f1:74:bb:bc:75:9f:9a:86:87:
ae:3a:3c:41:fe:e4:14:0a:28:f6:a6:1c:c2:e0:94:2e:30:f5:
80:cd:b0:ff:c0:4f:38:f2:9a:b4:a5:88:02:c8:14:64:fa:1f:
ba:66:3c:e1:c1:08:30:a1:af:a3:d4:35:50:88:e5:61:1c:43:
b5:70:a8:61:a2:d0:91:9d:a0:cb:c3:d4:bd:d4:c0:fc:a5:d6:
06:46:eb:5b:5e:06:70:ea:b4:d3:b4:6d:e9:1c:9d:25:33:5b:
e9:9e:dc:82:34:53:03:f8:fa:12:c6:b7:78:5f:3b:59:11:21:
f0:83:b0:6e:37:6b:8b:a8:59:6d:c0:c9:9b:16:d7:ea:32:f8:
5d:22:af:ac:59:81:f7:9f:b8:56:d1:fc:c0:75:61:7f:77:83:
17:bb:90:bd:36:6f:db:85:5e:56:9b:eb:d2:d7:81:d2:fa:fa:
6e:0f:64:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:14:30 2025 by rpki-client