Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/D_K7zRwtjXrfdB1wTZ3GS55hT9o.mft
File: D_K7zRwtjXrfdB1wTZ3GS55hT9o.mft (raw, json)
Hash identifier: apXuYYtJYyl5fLVRx6jK9hVtEWQvqC3OxuFGkUd+45A=
Subject key identifier: 42:7F:0B:4C:38:86:C1:9E:49:64:C7:EE:9F:F6:A9:AF:39:7A:A6:78
Authority key identifier: 0F:F2:BB:CD:1C:2D:8D:7A:DF:74:1D:70:4D:9D:C6:4B:9E:61:4F:DA
Certificate issuer: /CN=0ff2bbcd1c2d8d7adf741d704d9dc64b9e614fda
Certificate serial: 01987AF6A000751901EF57D81CE7CF4084B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_K7zRwtjXrfdB1wTZ3GS55hT9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/D_K7zRwtjXrfdB1wTZ3GS55hT9o.mft
Manifest number: 0726
Signing time: Tue 05 Aug 2025 16:00:39 +0000
Manifest this update: Tue 05 Aug 2025 16:00:39 +0000
Manifest next update: Wed 06 Aug 2025 16:00:39 +0000
Files and hashes: 1: D_K7zRwtjXrfdB1wTZ3GS55hT9o.crl (hash: JAo4NmTKRAIqme+nBpTNdXcFukhdWMl6guUpe6cmIE8=)
2: _66pxASs3q8uB-XVTEtYg_28j2c.roa (hash: jpHC45psSv+zAzzYw1OCRaKkzWVXUPpgp6OyO01yiRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/D_K7zRwtjXrfdB1wTZ3GS55hT9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/D_K7zRwtjXrfdB1wTZ3GS55hT9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/D_K7zRwtjXrfdB1wTZ3GS55hT9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:37:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:f6:a0:00:75:19:01:ef:57:d8:1c:e7:cf:40:84:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ff2bbcd1c2d8d7adf741d704d9dc64b9e614fda
Validity
Not Before: Aug 5 16:00:39 2025 GMT
Not After : Aug 6 16:00:39 2025 GMT
Subject: CN=427f0b4c3886c19e4964c7ee9ff6a9af397aa678
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:19:05:64:77:2d:57:54:66:a7:a7:8b:ee:b3:
66:e0:73:49:ad:02:00:79:bf:3c:d4:f5:04:ab:5e:
85:cc:ca:b4:37:cc:85:31:82:fe:d1:02:d5:f1:2b:
ed:e0:ab:12:d5:b3:8e:7e:99:0e:5b:72:23:4e:c1:
c8:18:c6:e8:50:a2:0e:7d:e7:53:10:fd:88:73:4f:
5b:ac:10:78:68:cb:35:c7:29:1c:db:7d:a7:59:79:
c0:6a:24:77:9b:99:68:ed:6b:55:12:8a:5c:e1:28:
3b:53:a9:0a:e3:37:a4:11:47:52:9d:e9:ce:6d:e7:
2a:ef:ae:25:b8:cb:89:03:91:14:72:22:62:07:6d:
cc:26:f4:4e:85:6a:04:ec:23:f4:bd:e0:d6:19:39:
4d:82:8b:3b:a1:b4:eb:4d:1c:00:c0:60:6f:bc:27:
42:6b:b6:fb:95:fa:b0:84:24:fd:57:3c:8a:52:06:
56:27:43:a4:ab:53:98:d6:c1:48:a0:f6:39:ee:e4:
6b:43:e2:63:5d:8c:5a:2e:b7:cf:fd:9e:0b:95:94:
f3:a6:2c:2d:8f:fe:b8:13:79:7b:49:46:49:44:7f:
7b:05:2e:d1:ff:0b:ef:ea:4e:46:91:0d:e1:6c:1a:
1f:11:b1:ad:cf:68:5d:76:01:e2:b7:c4:cc:a1:1c:
2b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:7F:0B:4C:38:86:C1:9E:49:64:C7:EE:9F:F6:A9:AF:39:7A:A6:78
X509v3 Authority Key Identifier:
keyid:0F:F2:BB:CD:1C:2D:8D:7A:DF:74:1D:70:4D:9D:C6:4B:9E:61:4F:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_K7zRwtjXrfdB1wTZ3GS55hT9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/D_K7zRwtjXrfdB1wTZ3GS55hT9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/D_K7zRwtjXrfdB1wTZ3GS55hT9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:a5:89:89:19:86:8f:11:a7:9e:1c:86:2f:64:35:aa:4b:76:
f5:59:f2:78:ed:28:d6:71:d8:9c:18:4b:af:49:34:a7:45:f6:
50:11:b7:4d:5b:0d:40:a2:18:2a:bd:77:8a:ab:ab:d7:50:16:
12:68:dc:80:53:21:23:05:14:2f:1d:e9:90:42:1d:ac:9a:f7:
ad:d1:74:27:c0:c4:eb:40:e6:23:be:2c:24:c5:bc:45:d7:f6:
7a:fc:a1:4b:08:13:90:e0:f5:af:88:6b:e6:53:fb:9e:b9:df:
14:6b:34:83:84:3d:0e:8d:79:11:f9:25:91:4e:92:8b:27:f7:
60:1d:82:49:13:72:e8:45:20:3d:58:16:c1:f4:f4:11:5d:ff:
4e:87:db:b4:b4:0c:a9:b8:b2:81:46:bc:df:90:a2:88:16:7c:
15:38:24:ff:ab:26:86:06:53:db:49:46:63:75:0b:46:d3:a4:
4c:d8:8a:f9:63:c6:ac:f3:e4:6f:92:ae:9e:49:d3:07:17:33:
66:66:03:56:02:b9:ba:60:d6:5f:92:49:06:bf:13:97:c5:ad:
d7:79:c0:1b:be:dc:fd:0a:48:6d:ae:53:de:41:9f:90:38:cb:
b4:9f:02:36:6f:a8:54:72:de:d3:b5:ee:49:83:48:34:e8:d4:
32:87:c6:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 20:03:31 2025 by rpki-client