Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/D_K7zRwtjXrfdB1wTZ3GS55hT9o.mft
File: D_K7zRwtjXrfdB1wTZ3GS55hT9o.mft (raw, json)
Hash identifier: bZ8cZkCb3s3VzN+y7xZ9jXJ2Z41tMCc044loeD16oB0=
Subject key identifier: CD:A4:52:63:04:35:7B:F1:A4:3E:40:F4:58:6C:05:7F:A7:AB:4F:77
Authority key identifier: 0F:F2:BB:CD:1C:2D:8D:7A:DF:74:1D:70:4D:9D:C6:4B:9E:61:4F:DA
Certificate issuer: /CN=0ff2bbcd1c2d8d7adf741d704d9dc64b9e614fda
Certificate serial: 0197B5FBBD64CE79C2BA0EBD95A4DFACDF37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_K7zRwtjXrfdB1wTZ3GS55hT9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/D_K7zRwtjXrfdB1wTZ3GS55hT9o.mft
Manifest number: 06C0
Signing time: Sat 28 Jun 2025 10:01:03 +0000
Manifest this update: Sat 28 Jun 2025 10:01:03 +0000
Manifest next update: Sun 29 Jun 2025 10:01:03 +0000
Files and hashes: 1: D_K7zRwtjXrfdB1wTZ3GS55hT9o.crl (hash: c/xVSva4yCXUUhZcaunToaEh6c47epUCjtIEqTN/FxM=)
2: _66pxASs3q8uB-XVTEtYg_28j2c.roa (hash: jpHC45psSv+zAzzYw1OCRaKkzWVXUPpgp6OyO01yiRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/D_K7zRwtjXrfdB1wTZ3GS55hT9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/D_K7zRwtjXrfdB1wTZ3GS55hT9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/D_K7zRwtjXrfdB1wTZ3GS55hT9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fb:bd:64:ce:79:c2:ba:0e:bd:95:a4:df:ac:df:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ff2bbcd1c2d8d7adf741d704d9dc64b9e614fda
Validity
Not Before: Jun 28 10:01:03 2025 GMT
Not After : Jun 29 10:01:03 2025 GMT
Subject: CN=cda4526304357bf1a43e40f4586c057fa7ab4f77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:0d:08:ab:44:02:c0:b4:ec:85:38:0f:1e:7c:
29:18:36:c8:ba:c8:27:1c:bd:9b:bc:21:2d:60:19:
df:99:3b:35:8a:7b:68:e1:5a:37:c1:40:92:f7:81:
30:b8:67:ba:d6:6e:e9:f4:6e:a5:ea:27:44:cd:d9:
3c:cb:da:9f:2a:c9:13:34:b1:e5:2a:24:bc:9b:87:
23:8d:0b:fe:c0:4f:68:99:02:75:4d:f5:06:be:37:
07:ab:ee:be:53:3f:81:b8:17:f3:fd:f2:f4:ea:1d:
59:37:7f:10:2a:07:0c:11:b9:ff:f1:88:3f:88:65:
61:7c:a1:b6:80:11:df:45:35:c2:3f:cc:94:a1:76:
22:f6:c5:27:f4:ce:a0:30:0d:6c:7e:01:b7:7f:48:
fb:12:e6:6c:64:86:6e:9b:64:66:a5:54:0b:12:2c:
44:3c:c4:a0:fd:22:d6:da:31:f6:71:dd:65:25:f9:
63:a5:de:47:7b:f3:e4:7a:dd:07:c7:31:43:6d:06:
96:75:e8:7d:72:b2:2c:62:28:b9:37:ba:3b:5c:55:
39:c3:82:17:24:c6:95:8b:c0:35:d9:ca:1c:47:ec:
ab:91:ca:20:fb:b9:05:f1:72:54:d6:75:82:af:8a:
b8:c9:3f:ab:74:ce:e2:a2:4a:e1:f3:61:c7:d1:c0:
b4:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:A4:52:63:04:35:7B:F1:A4:3E:40:F4:58:6C:05:7F:A7:AB:4F:77
X509v3 Authority Key Identifier:
keyid:0F:F2:BB:CD:1C:2D:8D:7A:DF:74:1D:70:4D:9D:C6:4B:9E:61:4F:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_K7zRwtjXrfdB1wTZ3GS55hT9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/D_K7zRwtjXrfdB1wTZ3GS55hT9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/D_K7zRwtjXrfdB1wTZ3GS55hT9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:e5:c6:1d:3e:6f:58:ee:fc:20:ec:13:87:c3:06:fd:7b:99:
f6:05:83:65:51:7e:52:ef:96:d8:10:af:e8:8b:06:cd:df:c9:
5d:d0:74:33:6b:e7:bb:d2:ae:12:f7:d2:1d:6f:23:4a:48:c6:
5a:50:7a:ac:a6:cf:59:31:1b:82:9d:12:85:95:e8:48:76:bc:
f9:10:d7:9c:76:f9:a3:8c:46:c4:b7:cf:1a:49:48:96:c7:a1:
b9:29:e1:a3:7d:53:2b:79:80:56:22:96:3f:64:b5:16:62:0a:
26:31:0c:2c:bc:bd:8d:ad:c8:5f:5a:a8:28:61:d9:68:b3:11:
ce:8a:0e:57:04:ed:bc:59:3c:64:87:10:83:fa:d3:63:64:26:
a3:6f:69:d7:b4:6d:03:ea:0c:29:9a:75:3e:bf:ee:5f:0e:6b:
e0:63:6d:27:bd:3c:8c:9e:c6:30:99:44:18:cf:32:2c:75:63:
5d:2b:90:a9:9c:75:28:38:f5:af:cf:7a:0d:81:5e:d8:0f:83:
db:24:65:87:24:74:ed:15:af:b8:96:f9:40:2a:99:0d:dd:be:
50:50:ef:c4:d2:94:ac:c8:38:f8:3e:56:d0:f7:af:ba:88:86:
88:8d:4e:1b:f5:4b:52:4e:06:5c:a5:6c:10:d5:8b:0d:21:b1:
8d:7f:e6:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:58:18 2025 by rpki-client