Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/cf6b07-03b2-4ebe-b966-f1e9bf2bff21/1/A7zvl2ZC1UtLShmY8LP_SIRakm0.mft
File: A7zvl2ZC1UtLShmY8LP_SIRakm0.mft (raw, json)
Hash identifier: K0GRxdk0+kGOyVgwp4kmImZ8hFCpc6rNDrRbJfIoXNs=
Subject key identifier: A2:00:03:7B:CB:2B:BA:4C:79:26:C3:4B:B3:30:D5:B2:53:CB:47:30
Authority key identifier: 03:BC:EF:97:66:42:D5:4B:4B:4A:19:98:F0:B3:FF:48:84:5A:92:6D
Certificate issuer: /CN=03bcef976642d54b4b4a1998f0b3ff48845a926d
Certificate serial: 019A4D3CB59BFDB2E6B8A65B10356A33CC9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7zvl2ZC1UtLShmY8LP_SIRakm0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/cf6b07-03b2-4ebe-b966-f1e9bf2bff21/1/A7zvl2ZC1UtLShmY8LP_SIRakm0.mft
Manifest number: 1106
Signing time: Tue 04 Nov 2025 05:00:15 +0000
Manifest this update: Tue 04 Nov 2025 05:00:15 +0000
Manifest next update: Wed 05 Nov 2025 05:00:15 +0000
Files and hashes: 1: A7zvl2ZC1UtLShmY8LP_SIRakm0.crl (hash: ePOPaCrZEjq+O8mUEwjXgWO7gwZUJLV7bBKUFVZBcQA=)
2: zrwokDU3FhdB7_q1CXdcMR9bnVs.roa (hash: GD4RouuFMqAMeF041Js/nVB0Sr40yt7mYWnED87KOPQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/cf6b07-03b2-4ebe-b966-f1e9bf2bff21/1/A7zvl2ZC1UtLShmY8LP_SIRakm0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/cf6b07-03b2-4ebe-b966-f1e9bf2bff21/1/A7zvl2ZC1UtLShmY8LP_SIRakm0.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7zvl2ZC1UtLShmY8LP_SIRakm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3c:b5:9b:fd:b2:e6:b8:a6:5b:10:35:6a:33:cc:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03bcef976642d54b4b4a1998f0b3ff48845a926d
Validity
Not Before: Nov 4 05:00:15 2025 GMT
Not After : Nov 5 05:00:15 2025 GMT
Subject: CN=a200037bcb2bba4c7926c34bb330d5b253cb4730
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:e7:00:b1:a0:ee:58:e2:72:ce:8d:62:24:b9:
e1:4c:ce:41:ee:46:84:d0:73:5f:df:0b:9e:1f:29:
ae:87:de:03:95:d6:67:20:99:da:6c:03:37:dd:a4:
93:ed:e9:4b:ab:73:b9:c2:05:06:0a:0d:cb:32:30:
72:84:44:2d:4f:d1:7a:0d:9a:ae:ce:a1:86:2d:ca:
71:0c:a4:b1:9f:bc:86:56:a5:0c:4c:e9:3b:70:3d:
38:e9:ec:e6:1b:ab:53:24:5f:94:64:8f:f5:d1:fb:
bc:8b:e6:01:e2:ff:44:1f:bd:c3:1a:e8:06:b6:35:
dd:a9:db:5b:dd:6c:41:47:f4:bb:95:a9:3e:ac:fd:
86:e9:5e:f2:1a:ba:55:c6:00:91:99:91:d8:fe:6d:
8b:e5:5b:0f:1f:31:c5:af:4a:d8:19:f1:3d:4a:3d:
44:ae:5b:5c:39:8a:b9:50:76:0f:e6:1b:4a:bf:ad:
9f:89:8a:d4:50:91:f3:10:bd:e7:13:ab:42:73:87:
bf:9f:6b:c2:90:e9:e8:c8:c6:c7:33:c3:2a:e0:08:
12:e5:80:86:ef:25:5a:fb:7a:54:80:f4:34:09:97:
7c:f7:78:98:02:95:8a:63:f4:49:f7:98:1c:a5:01:
0a:b8:1f:77:cf:3c:07:8b:3c:03:82:d5:c6:02:75:
8a:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:00:03:7B:CB:2B:BA:4C:79:26:C3:4B:B3:30:D5:B2:53:CB:47:30
X509v3 Authority Key Identifier:
keyid:03:BC:EF:97:66:42:D5:4B:4B:4A:19:98:F0:B3:FF:48:84:5A:92:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7zvl2ZC1UtLShmY8LP_SIRakm0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/cf6b07-03b2-4ebe-b966-f1e9bf2bff21/1/A7zvl2ZC1UtLShmY8LP_SIRakm0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/cf6b07-03b2-4ebe-b966-f1e9bf2bff21/1/A7zvl2ZC1UtLShmY8LP_SIRakm0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:4d:9b:15:ee:bf:0f:79:2c:0c:c2:03:29:63:3c:aa:4b:7b:
bb:02:94:43:4f:e6:80:1b:ee:2e:6b:77:8c:47:03:fe:67:d5:
9c:81:d2:9e:e4:f4:18:43:44:70:b7:46:7a:36:9e:db:a2:74:
72:e7:49:36:bc:50:76:a4:f3:e7:f5:e3:49:9e:87:0f:f8:22:
50:11:ff:26:1a:6c:4f:56:59:31:5e:44:55:a0:8b:1b:1f:7a:
ec:e1:84:cd:3a:7d:f2:d3:1c:aa:93:e8:21:10:6e:d2:5a:ba:
13:c8:cc:96:2a:35:f6:5b:18:24:53:68:ef:c5:9e:a5:76:b5:
21:c0:b0:d0:86:09:79:fa:27:12:8e:16:f0:e1:3c:4f:94:dd:
0e:28:99:ae:8f:27:83:88:4b:5a:f0:27:4a:ef:f3:04:d3:82:
d3:a3:8d:c0:6e:80:6b:bb:22:e9:6a:e9:9c:24:e8:54:73:2a:
41:16:f2:0f:4e:dc:d3:ac:87:09:98:df:1c:f6:3d:b1:c3:0e:
5b:36:cd:b2:35:21:e4:9f:70:fb:74:0e:1c:32:df:b4:82:0a:
37:78:e7:69:8c:2e:31:07:f4:8a:c3:99:53:b6:97:2e:11:7a:
5d:2b:18:ef:2a:15:c2:ab:40:de:5d:9d:aa:92:f1:da:ee:d4:
b7:e0:1a:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:57:21 2025 by rpki-client