Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/D_K7zRwtjXrfdB1wTZ3GS55hT9o.mft
File: D_K7zRwtjXrfdB1wTZ3GS55hT9o.mft (raw, json)
Hash identifier: MtaSSvNlJ9Hfs2h4ywrJu/ibAY7Vas9p5hZTkDzGFbw=
Subject key identifier: 4A:0D:CB:E3:6B:8D:B8:15:FD:19:6A:47:3D:75:DE:ED:D0:39:30:9B
Authority key identifier: 0F:F2:BB:CD:1C:2D:8D:7A:DF:74:1D:70:4D:9D:C6:4B:9E:61:4F:DA
Certificate issuer: /CN=0ff2bbcd1c2d8d7adf741d704d9dc64b9e614fda
Certificate serial: 0199FB45E360964167D68A34D7D6D28F79F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_K7zRwtjXrfdB1wTZ3GS55hT9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/D_K7zRwtjXrfdB1wTZ3GS55hT9o.mft
Manifest number: 07ED
Signing time: Sun 19 Oct 2025 07:01:25 +0000
Manifest this update: Sun 19 Oct 2025 07:01:25 +0000
Manifest next update: Mon 20 Oct 2025 07:01:25 +0000
Files and hashes: 1: D_K7zRwtjXrfdB1wTZ3GS55hT9o.crl (hash: f1+yvPZiKZKshHtDxqo9lEK7BsxuZCFh524RNfMb4uo=)
2: _66pxASs3q8uB-XVTEtYg_28j2c.roa (hash: jpHC45psSv+zAzzYw1OCRaKkzWVXUPpgp6OyO01yiRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/D_K7zRwtjXrfdB1wTZ3GS55hT9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/D_K7zRwtjXrfdB1wTZ3GS55hT9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/D_K7zRwtjXrfdB1wTZ3GS55hT9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:e3:60:96:41:67:d6:8a:34:d7:d6:d2:8f:79:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ff2bbcd1c2d8d7adf741d704d9dc64b9e614fda
Validity
Not Before: Oct 19 07:01:25 2025 GMT
Not After : Oct 20 07:01:25 2025 GMT
Subject: CN=4a0dcbe36b8db815fd196a473d75deedd039309b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:e3:ec:d6:4f:6b:1a:34:60:4a:f6:41:a2:87:
63:ca:28:09:fb:64:5f:b5:38:82:b8:47:e4:08:e8:
52:60:1d:01:f7:e7:a3:59:34:24:09:93:ac:29:ec:
8f:94:a4:06:36:99:b1:27:be:f9:a6:c4:7d:9d:a9:
cf:13:58:18:6b:6e:67:29:ce:d1:bd:a6:6f:4a:59:
16:cb:fa:95:a5:69:d0:e4:e2:7a:0c:69:3b:4e:bb:
09:16:b8:df:a5:92:0a:e6:8d:d1:d5:2e:70:68:cf:
05:84:57:ec:36:16:aa:57:e4:da:40:2c:20:dd:86:
4f:35:e2:6a:17:d1:4a:18:23:27:f8:78:a2:07:c3:
8b:69:fc:af:54:4c:04:f1:92:53:0e:b0:45:e9:db:
9f:5f:41:a9:89:7e:cb:bd:94:6a:d5:d6:b2:b3:df:
ff:65:9a:60:de:2c:90:e5:e7:90:d7:87:50:24:72:
c7:8a:84:4d:39:b4:cd:99:5f:34:44:46:aa:17:ae:
6a:8d:87:a8:9b:f5:9b:4a:f6:22:a6:cc:23:96:d0:
12:c2:e8:16:23:39:cf:23:63:e8:91:47:18:24:33:
ae:2a:e4:de:ea:28:4b:7e:56:30:8c:34:77:3a:64:
e8:40:8c:2d:b2:73:1d:ea:fc:de:ac:13:2b:5c:f9:
88:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:0D:CB:E3:6B:8D:B8:15:FD:19:6A:47:3D:75:DE:ED:D0:39:30:9B
X509v3 Authority Key Identifier:
keyid:0F:F2:BB:CD:1C:2D:8D:7A:DF:74:1D:70:4D:9D:C6:4B:9E:61:4F:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_K7zRwtjXrfdB1wTZ3GS55hT9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/D_K7zRwtjXrfdB1wTZ3GS55hT9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/D_K7zRwtjXrfdB1wTZ3GS55hT9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:c5:2f:b8:c3:d3:d6:72:07:45:46:f8:fe:98:6b:aa:57:9d:
e9:7c:d9:8b:97:bc:0a:d6:f1:eb:26:8e:d1:7d:af:4a:c7:c2:
c3:11:70:ee:75:00:0f:33:c6:88:84:a9:a0:b4:a9:ae:0e:13:
03:0d:19:2d:ec:b9:bf:d5:f8:61:b1:2e:7e:ab:eb:1d:d8:02:
92:f6:34:ce:cc:46:b0:16:03:c1:8e:5b:0a:20:b2:71:ff:76:
53:33:39:34:64:c8:b3:b4:63:91:ca:16:a1:93:6f:2f:b8:26:
b8:8e:93:0c:55:08:35:86:78:1e:ca:b9:ed:6c:38:61:a6:a0:
e7:e0:af:dc:e0:47:70:94:01:ba:f9:ba:f7:22:55:84:06:af:
36:e8:58:8f:13:af:5c:20:ce:f3:ce:f0:e0:4d:e7:b6:36:00:
e1:6c:15:04:c9:ef:11:d9:66:a6:c8:2a:bd:96:8d:09:d1:49:
c1:84:90:bc:67:da:75:e6:de:17:3d:d7:66:f7:66:db:79:51:
b7:41:cd:85:00:02:65:b1:5b:77:11:08:e4:c2:cc:52:c0:64:
ed:f5:4f:ed:e4:77:2c:6b:58:0c:55:2a:b4:7d:6d:53:23:e6:
14:54:f2:f1:4d:01:47:ab:21:24:51:e5:0b:1b:fc:f6:10:6f:
b3:a2:90:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:29:05 2025 by rpki-client