
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/D_K7zRwtjXrfdB1wTZ3GS55hT9o.mft
File: D_K7zRwtjXrfdB1wTZ3GS55hT9o.mft (raw, json)
Hash identifier: fI0BGZdulOiy+4I3c37TQMHWuGA1GR67F0NxGT/GGrw=
Subject key identifier: E7:9C:FE:86:BF:A1:0C:33:6F:10:A5:63:3A:AE:27:23:3C:30:4F:5A
Authority key identifier: 0F:F2:BB:CD:1C:2D:8D:7A:DF:74:1D:70:4D:9D:C6:4B:9E:61:4F:DA
Certificate issuer: /CN=0ff2bbcd1c2d8d7adf741d704d9dc64b9e614fda
Certificate serial: 019846D1DED8F68EDD235A18B14D4F98C319
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_K7zRwtjXrfdB1wTZ3GS55hT9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/D_K7zRwtjXrfdB1wTZ3GS55hT9o.mft
Manifest number: 070B
Signing time: Sat 26 Jul 2025 13:00:15 +0000
Manifest this update: Sat 26 Jul 2025 13:00:15 +0000
Manifest next update: Sun 27 Jul 2025 13:00:15 +0000
Files and hashes: 1: D_K7zRwtjXrfdB1wTZ3GS55hT9o.crl (hash: 4VxX0A9uqk5vaCJftJShi0Cr7jcGmqkU6uyFTGcxMIc=)
2: _66pxASs3q8uB-XVTEtYg_28j2c.roa (hash: jpHC45psSv+zAzzYw1OCRaKkzWVXUPpgp6OyO01yiRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/D_K7zRwtjXrfdB1wTZ3GS55hT9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/D_K7zRwtjXrfdB1wTZ3GS55hT9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/D_K7zRwtjXrfdB1wTZ3GS55hT9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:d1:de:d8:f6:8e:dd:23:5a:18:b1:4d:4f:98:c3:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ff2bbcd1c2d8d7adf741d704d9dc64b9e614fda
Validity
Not Before: Jul 26 13:00:15 2025 GMT
Not After : Jul 27 13:00:15 2025 GMT
Subject: CN=e79cfe86bfa10c336f10a5633aae27233c304f5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:76:0a:86:10:f5:a0:6d:e2:4e:af:1a:4e:cc:
7a:19:55:05:70:92:77:56:8c:6a:fb:41:36:90:5e:
c1:a3:3c:50:8a:19:fa:15:3a:62:d2:e9:ea:54:4f:
5c:8c:c3:46:e2:e4:8a:75:e8:bd:b3:78:3f:b9:a7:
af:18:31:b0:0a:b1:16:4d:9b:57:4b:6d:51:50:ed:
db:95:48:ce:eb:76:95:6e:8e:cb:88:59:af:51:5d:
3f:04:0e:51:16:41:af:30:6d:fb:cc:57:e0:97:9e:
f5:18:43:6b:65:72:74:6a:01:2a:fc:b6:f2:61:a9:
4b:9d:85:10:93:1b:b0:e0:25:7d:de:cc:81:59:5c:
eb:34:1e:93:79:77:c0:2d:30:60:46:84:2e:30:f8:
85:b8:72:6f:63:64:12:20:7f:4d:42:1a:61:36:0b:
bc:1e:8d:06:90:c7:05:eb:db:af:da:a6:5a:9a:42:
ce:69:49:fe:b0:11:ef:60:ea:fc:80:27:d1:6d:1b:
f1:42:d0:be:f5:d1:85:0e:c4:17:51:cc:59:5e:97:
22:ac:be:84:ca:d2:0d:49:5a:53:13:2e:e1:f6:2f:
f6:50:3b:81:a9:9d:15:2f:e7:c4:de:ff:c8:a8:c1:
a9:70:ef:53:83:0b:e5:a5:60:35:b4:06:5d:54:90:
93:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:9C:FE:86:BF:A1:0C:33:6F:10:A5:63:3A:AE:27:23:3C:30:4F:5A
X509v3 Authority Key Identifier:
keyid:0F:F2:BB:CD:1C:2D:8D:7A:DF:74:1D:70:4D:9D:C6:4B:9E:61:4F:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_K7zRwtjXrfdB1wTZ3GS55hT9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/D_K7zRwtjXrfdB1wTZ3GS55hT9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/D_K7zRwtjXrfdB1wTZ3GS55hT9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:33:77:46:e8:c1:0f:85:39:34:09:90:d4:39:dd:1f:67:2c:
db:14:9f:ad:c0:5a:da:b1:6b:95:74:d0:98:e1:5a:6d:02:88:
90:b6:29:45:75:0b:be:a7:d9:24:9a:60:01:37:80:82:d3:81:
94:8f:40:d8:22:75:25:54:b5:81:87:66:77:6e:a0:60:a0:c4:
d1:98:2c:49:9a:59:2a:a9:f0:14:41:28:5e:09:c7:60:09:3b:
0a:3c:a0:70:5e:d1:41:89:00:d8:93:83:50:2f:fd:97:27:f8:
d7:9b:99:ed:ee:f8:e3:ef:60:9a:cf:53:94:c6:1d:8b:b8:a5:
c7:f5:0d:b8:c8:6b:01:cf:08:77:23:7e:2d:a3:27:ff:7f:89:
69:5e:c1:17:ed:6a:43:9c:46:1d:73:9b:87:db:b3:3a:bd:c0:
42:3c:02:2d:ee:5e:98:e4:4a:f4:de:fe:90:ce:d9:29:53:82:
b6:e9:ad:69:a4:b0:08:50:ff:0b:bd:da:7f:79:f6:82:aa:4e:
ab:fe:26:c7:dd:73:1c:79:bd:3f:55:de:c6:8d:0b:bb:71:2d:
86:e1:20:16:96:15:a4:aa:97:19:9d:e6:8c:b6:20:a9:42:ec:
4f:b0:d5:4b:9b:38:cd:35:ea:93:9d:fd:0a:f0:64:53:16:bb:
45:a2:ce:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:48:36 2025 by rpki-client