Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/fbfacc-a4f0-4bdb-abbb-0f73661d5f35/1/7ZAKVVGLZ57cePqpiD7G5gNa5xw.mft
File: 7ZAKVVGLZ57cePqpiD7G5gNa5xw.mft (raw, json)
Hash identifier: VA7Xamv69YH/N+CVS4Yf7heniH1k/3nYR1EvYQJVYXw=
Subject key identifier: B3:CD:B7:62:2D:B6:42:4D:0C:F7:BE:7B:65:28:F5:67:E3:76:22:24
Authority key identifier: ED:90:0A:55:51:8B:67:9E:DC:78:FA:A9:88:3E:C6:E6:03:5A:E7:1C
Certificate issuer: /CN=ed900a55518b679edc78faa9883ec6e6035ae71c
Certificate serial: 019A5150F8FFEFCC0633B4775F4728C40372
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7ZAKVVGLZ57cePqpiD7G5gNa5xw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/fbfacc-a4f0-4bdb-abbb-0f73661d5f35/1/7ZAKVVGLZ57cePqpiD7G5gNa5xw.mft
Manifest number: 04CC
Signing time: Wed 05 Nov 2025 00:00:52 +0000
Manifest this update: Wed 05 Nov 2025 00:00:52 +0000
Manifest next update: Thu 06 Nov 2025 00:00:52 +0000
Files and hashes: 1: 1-ieyIqujcrCxJblAajzfComBT5M.roa (hash: n5puj2nwsSUZldVzpI+lBrVc/7elXyEjudzznV0aSbQ=)
2: 7ZAKVVGLZ57cePqpiD7G5gNa5xw.crl (hash: Gw3XQZbxZiG36eWH5Xs3QhgmP4ohTabMzDEK3qwa8eY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/fbfacc-a4f0-4bdb-abbb-0f73661d5f35/1/7ZAKVVGLZ57cePqpiD7G5gNa5xw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/fbfacc-a4f0-4bdb-abbb-0f73661d5f35/1/7ZAKVVGLZ57cePqpiD7G5gNa5xw.mft
rsync://rpki.ripe.net/repository/DEFAULT/7ZAKVVGLZ57cePqpiD7G5gNa5xw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:50:f8:ff:ef:cc:06:33:b4:77:5f:47:28:c4:03:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed900a55518b679edc78faa9883ec6e6035ae71c
Validity
Not Before: Nov 5 00:00:52 2025 GMT
Not After : Nov 6 00:00:52 2025 GMT
Subject: CN=b3cdb7622db6424d0cf7be7b6528f567e3762224
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:17:eb:38:5c:e5:bd:2c:f6:a8:b4:07:d2:15:
bc:b9:69:ff:2f:e6:19:0b:45:3d:af:39:7d:80:87:
59:6a:83:43:18:58:59:22:6f:9e:c8:a3:ef:33:f2:
ac:40:28:a9:13:f5:c6:62:4e:0c:d1:22:4a:60:09:
9c:ad:ad:d5:d4:c7:16:d7:3f:cb:3a:3c:85:82:4b:
93:36:54:9c:26:da:97:d5:eb:1a:6f:7c:88:63:d5:
65:e5:8f:32:71:7b:d4:79:c5:58:84:4b:0d:80:fb:
d9:95:82:4e:90:04:fc:1c:ff:76:d3:f9:49:d4:2c:
fd:23:c0:34:3c:09:2d:ee:23:6f:3a:65:71:19:45:
ab:fd:73:90:98:14:a7:d1:39:98:61:56:b2:24:d4:
69:73:c7:13:1c:20:48:52:79:a8:97:68:90:84:67:
d3:26:67:2d:4f:66:d2:42:92:ec:d1:b0:05:50:15:
c2:5d:1c:31:03:b1:21:c5:a9:df:3e:c7:a3:76:a4:
91:a4:b2:c7:6c:1d:7b:14:04:79:ec:3b:25:6f:c1:
9f:f7:eb:e6:c3:e6:e3:b3:5f:a2:09:da:ba:0f:33:
ca:e8:43:33:4e:b7:9e:4a:81:b0:e8:73:e6:4a:f6:
e6:ed:08:01:b9:7a:f2:5f:de:36:69:73:bc:91:a4:
64:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:CD:B7:62:2D:B6:42:4D:0C:F7:BE:7B:65:28:F5:67:E3:76:22:24
X509v3 Authority Key Identifier:
keyid:ED:90:0A:55:51:8B:67:9E:DC:78:FA:A9:88:3E:C6:E6:03:5A:E7:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7ZAKVVGLZ57cePqpiD7G5gNa5xw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fbfacc-a4f0-4bdb-abbb-0f73661d5f35/1/7ZAKVVGLZ57cePqpiD7G5gNa5xw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fbfacc-a4f0-4bdb-abbb-0f73661d5f35/1/7ZAKVVGLZ57cePqpiD7G5gNa5xw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:f7:be:96:2d:63:26:ef:91:88:77:13:02:7f:26:1d:7f:be:
2e:3d:7e:dd:91:53:8d:77:ee:db:89:97:68:01:be:11:38:77:
9c:e8:1c:61:52:45:ea:3e:c5:23:53:3e:42:3e:8f:8f:cd:dd:
9f:51:18:73:15:6c:d5:5c:ed:c4:41:5c:9f:f1:1d:7d:67:ce:
37:f2:5b:3c:85:a2:b2:97:43:ae:dd:f3:56:0d:f3:3c:2f:35:
ca:fa:b0:77:e8:b8:ed:12:f6:32:25:27:0d:83:a0:14:90:a4:
ad:f0:fb:06:e5:72:90:d9:cc:39:15:b6:69:76:7f:6e:50:b2:
aa:d8:31:34:ae:2b:96:b9:e6:28:69:4a:ef:43:c1:47:ec:50:
63:70:18:d5:b1:63:d7:98:b8:85:8b:27:72:12:31:28:23:f9:
8e:81:08:9e:9b:dc:b5:c6:26:c6:af:75:b7:79:dd:1e:59:df:
46:48:16:f2:b0:2e:af:a4:56:17:1d:53:6e:36:26:e7:18:e8:
5c:ed:e0:a9:6c:de:bd:fb:bc:1c:b2:fe:3c:c4:05:53:bb:45:
46:eb:d7:1b:00:51:47:b2:cb:16:60:cf:5b:22:0f:d4:e5:a6:
21:93:94:05:78:43:23:c1:ee:52:c4:52:60:69:6d:94:05:d7:
8c:d6:89:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:34:16 2025 by rpki-client