Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/D_K7zRwtjXrfdB1wTZ3GS55hT9o.mft
File: D_K7zRwtjXrfdB1wTZ3GS55hT9o.mft (raw, json)
Hash identifier: fgYt4nabiDdLyswBXBCxTOI4Bn3AETq7eBalz+49P8U=
Subject key identifier: 11:A7:9F:00:05:7C:BD:E1:56:45:D1:28:1B:D4:33:A9:38:02:AF:BB
Authority key identifier: 0F:F2:BB:CD:1C:2D:8D:7A:DF:74:1D:70:4D:9D:C6:4B:9E:61:4F:DA
Certificate issuer: /CN=0ff2bbcd1c2d8d7adf741d704d9dc64b9e614fda
Certificate serial: 0198D5BBA28916DDC6C36F3C2ADF714C8450
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_K7zRwtjXrfdB1wTZ3GS55hT9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/D_K7zRwtjXrfdB1wTZ3GS55hT9o.mft
Manifest number: 0755
Signing time: Sat 23 Aug 2025 07:01:40 +0000
Manifest this update: Sat 23 Aug 2025 07:01:40 +0000
Manifest next update: Sun 24 Aug 2025 07:01:40 +0000
Files and hashes: 1: D_K7zRwtjXrfdB1wTZ3GS55hT9o.crl (hash: NkQzYekLdZWWf4YQkiX1cejZpyKRIPC95RFd3gA5T2A=)
2: _66pxASs3q8uB-XVTEtYg_28j2c.roa (hash: jpHC45psSv+zAzzYw1OCRaKkzWVXUPpgp6OyO01yiRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/D_K7zRwtjXrfdB1wTZ3GS55hT9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/D_K7zRwtjXrfdB1wTZ3GS55hT9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/D_K7zRwtjXrfdB1wTZ3GS55hT9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:a2:89:16:dd:c6:c3:6f:3c:2a:df:71:4c:84:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ff2bbcd1c2d8d7adf741d704d9dc64b9e614fda
Validity
Not Before: Aug 23 07:01:40 2025 GMT
Not After : Aug 24 07:01:40 2025 GMT
Subject: CN=11a79f00057cbde15645d1281bd433a93802afbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f8:58:44:ae:66:cb:07:d4:eb:58:63:bd:b1:
40:cb:76:00:2b:19:6a:a1:ca:7c:2e:c6:7c:ff:7c:
af:dc:60:fb:81:cf:37:82:b1:67:c7:36:5c:64:cb:
06:eb:48:f1:30:7e:9c:48:0a:fb:17:00:12:72:95:
b8:da:74:3c:8c:4a:b1:e1:04:a9:40:03:30:f6:02:
71:c7:87:b1:80:71:58:be:cc:76:99:59:55:71:9f:
d4:07:b6:9d:3b:04:0d:3e:da:6e:9a:bd:3d:81:6c:
ec:94:03:b0:9a:84:e0:12:70:13:4d:9a:68:71:e7:
fb:af:08:1c:01:e7:57:ad:43:c5:4f:59:f4:7a:29:
52:e2:d2:ad:81:ba:fc:50:26:8a:f7:49:61:05:e6:
d5:77:b9:e2:9f:b2:98:f2:64:b2:59:06:12:0c:02:
28:85:74:ac:80:eb:a7:c6:64:1a:fa:05:dd:64:b4:
bf:fa:c4:22:dd:22:52:8e:e0:8a:11:ce:0a:3c:83:
ca:c2:6f:d8:29:26:aa:91:c3:3d:b2:fc:59:72:5b:
76:69:79:4c:df:b1:14:32:68:2f:df:0b:77:f5:73:
19:7c:6b:ca:01:b8:33:32:a5:46:be:87:40:74:23:
e4:58:67:29:de:a3:9f:ca:e5:c5:c9:b0:8b:a5:9f:
80:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:A7:9F:00:05:7C:BD:E1:56:45:D1:28:1B:D4:33:A9:38:02:AF:BB
X509v3 Authority Key Identifier:
keyid:0F:F2:BB:CD:1C:2D:8D:7A:DF:74:1D:70:4D:9D:C6:4B:9E:61:4F:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_K7zRwtjXrfdB1wTZ3GS55hT9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/D_K7zRwtjXrfdB1wTZ3GS55hT9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/D_K7zRwtjXrfdB1wTZ3GS55hT9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:0b:64:b0:35:ef:c6:57:a4:2f:42:ac:b4:e3:e3:3d:57:08:
ba:c7:21:45:62:10:81:08:81:6f:b2:8e:8c:f6:bb:5a:ad:3f:
6c:c4:39:3f:42:ba:9e:66:3e:1d:8f:b8:a4:d5:c1:92:96:dd:
8c:61:64:62:f2:70:f4:b5:ae:28:9f:d6:6f:43:c6:c7:44:70:
ff:a0:cb:6a:e2:3c:5e:28:b1:d3:7f:37:ab:9c:85:61:ec:6d:
86:95:f9:40:14:1d:7f:b2:b0:1b:53:10:be:c4:b9:72:11:45:
e8:02:ff:2a:55:0e:5b:9a:7c:02:4b:d4:d4:bc:7f:97:f9:34:
20:43:8a:4d:a6:3b:30:49:4f:fc:9e:0a:fb:e1:87:c7:a0:8a:
1e:91:b7:f2:9f:a7:a8:92:6b:74:60:66:2c:47:7e:bf:df:5f:
fc:87:19:4a:10:d6:b5:15:8a:fc:ff:2e:b4:fa:4c:b7:bf:5d:
58:09:89:0c:b2:2c:e3:84:ca:d6:8e:8d:8f:84:53:e6:6e:f9:
3a:ff:54:db:6f:f0:ef:44:7d:5a:7a:90:7b:5e:6e:2d:68:4c:
ad:e6:84:f4:a8:7b:ab:6c:58:a1:f0:2c:69:2b:36:fb:1a:1f:
a4:e6:9e:3e:1d:96:8b:78:cb:30:0d:e3:e9:53:90:11:4f:9b:
8d:50:32:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:51:14 2025 by rpki-client