Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/D_K7zRwtjXrfdB1wTZ3GS55hT9o.mft
File: D_K7zRwtjXrfdB1wTZ3GS55hT9o.mft (raw, json)
Hash identifier: XzfYX01WzTWl8xjunbuwoFE47Wu9onklCt5PUcgl6mo=
Subject key identifier: 49:E1:B9:B5:29:D6:A8:42:BA:33:F5:5F:07:CC:46:F1:CA:20:42:A9
Authority key identifier: 0F:F2:BB:CD:1C:2D:8D:7A:DF:74:1D:70:4D:9D:C6:4B:9E:61:4F:DA
Certificate issuer: /CN=0ff2bbcd1c2d8d7adf741d704d9dc64b9e614fda
Certificate serial: 019749D606DEB39C91F9693831B804DD1704
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_K7zRwtjXrfdB1wTZ3GS55hT9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/D_K7zRwtjXrfdB1wTZ3GS55hT9o.mft
Manifest number: 0688
Signing time: Sat 07 Jun 2025 10:00:52 +0000
Manifest this update: Sat 07 Jun 2025 10:00:52 +0000
Manifest next update: Sun 08 Jun 2025 10:00:52 +0000
Files and hashes: 1: D_K7zRwtjXrfdB1wTZ3GS55hT9o.crl (hash: 1QEXgrMf0x4g11J4gw0WHHg4e+I6FonlVC80cDXX1Sc=)
2: _66pxASs3q8uB-XVTEtYg_28j2c.roa (hash: jpHC45psSv+zAzzYw1OCRaKkzWVXUPpgp6OyO01yiRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/D_K7zRwtjXrfdB1wTZ3GS55hT9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/D_K7zRwtjXrfdB1wTZ3GS55hT9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/D_K7zRwtjXrfdB1wTZ3GS55hT9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d6:06:de:b3:9c:91:f9:69:38:31:b8:04:dd:17:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ff2bbcd1c2d8d7adf741d704d9dc64b9e614fda
Validity
Not Before: Jun 7 10:00:52 2025 GMT
Not After : Jun 8 10:00:52 2025 GMT
Subject: CN=49e1b9b529d6a842ba33f55f07cc46f1ca2042a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:33:71:d2:be:46:1d:dc:25:ba:b4:b1:e2:df:
ab:b3:62:12:46:ce:4d:26:32:94:30:32:f0:c9:78:
f7:96:01:97:85:83:95:9d:19:d1:dd:7a:6e:88:82:
94:f9:15:9a:36:61:17:7d:90:09:b6:6e:ae:bf:98:
6e:c7:b1:4a:3d:0d:8f:e2:e6:71:ac:00:64:d5:25:
1f:9b:bf:90:22:87:49:de:f0:8c:09:83:82:1d:74:
ab:2d:3f:74:c2:77:b0:b6:2d:7c:33:60:12:c1:99:
25:51:71:e9:45:93:56:53:39:73:28:e0:3a:d4:8b:
28:40:c0:7c:d7:2e:04:eb:7b:c6:d2:cb:08:2a:92:
51:ac:58:e5:b8:f1:44:a9:c9:d0:3d:af:15:e3:00:
93:01:75:36:ae:c7:3d:0e:61:95:c3:ff:b5:d7:dd:
2f:9d:ac:06:ba:d9:43:ff:4c:b5:ba:98:12:e0:5c:
27:b5:d0:b1:0d:bb:c9:70:85:eb:2c:a4:59:1a:4b:
d4:c7:f0:3d:32:9a:55:9b:c7:26:10:4f:28:69:8d:
95:c9:8f:9d:04:05:a8:9f:4d:91:03:16:cc:63:6d:
1a:7d:e5:82:9a:a4:1c:eb:f5:90:a1:4a:3e:ff:df:
3b:4c:60:c2:60:39:99:fc:21:6a:7e:d8:7c:8b:42:
57:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:E1:B9:B5:29:D6:A8:42:BA:33:F5:5F:07:CC:46:F1:CA:20:42:A9
X509v3 Authority Key Identifier:
keyid:0F:F2:BB:CD:1C:2D:8D:7A:DF:74:1D:70:4D:9D:C6:4B:9E:61:4F:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_K7zRwtjXrfdB1wTZ3GS55hT9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/D_K7zRwtjXrfdB1wTZ3GS55hT9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/D_K7zRwtjXrfdB1wTZ3GS55hT9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:45:bb:1d:07:c9:66:b0:6c:f3:15:62:db:86:67:4a:61:80:
32:82:c5:24:f0:a7:5a:9d:cb:9c:9e:71:03:95:e4:29:6e:1c:
d8:0e:93:a4:18:6f:ec:7e:f7:de:fc:07:79:2c:49:a6:f5:52:
33:17:a2:e2:0c:bc:8b:bf:e5:80:83:b4:fb:de:5f:6e:d5:f8:
0f:4c:5b:e6:56:f1:f2:14:38:c6:05:07:0c:b2:10:99:40:1f:
b8:74:6c:bf:a6:6a:08:49:78:a0:fc:87:5f:3f:a7:62:65:59:
1c:a2:8f:7c:d8:7c:74:29:97:8c:95:56:6f:3f:86:8f:0c:e0:
ee:b7:4d:21:41:31:2f:b9:a7:72:33:a9:83:78:a2:ed:16:9b:
f7:23:fa:b1:02:cc:20:24:b3:a6:11:58:06:c4:e3:9d:02:b5:
a2:6f:5c:bb:f2:7b:c4:93:99:1b:2d:59:5f:a1:ab:d0:bb:76:
90:5e:60:73:ec:01:71:56:75:a8:d1:5b:18:3f:ea:91:ca:68:
9f:e7:bb:e3:a3:f0:72:96:fa:14:31:48:91:9c:30:2d:d2:06:
bd:f5:7a:d6:93:fa:02:66:90:f5:55:1f:85:1c:a8:f3:7c:93:
c9:91:80:46:86:5d:9b:06:99:cb:89:ee:60:f2:d3:97:7f:e7:
b2:c8:de:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJ1gbes5yR+Wk4MbgE3RcEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmZjJiYmNkMWMyZDhkN2FkZjc0MWQ3MDRkOWRjNjRiOWU2
MTRmZGEwHhcNMjUwNjA3MTAwMDUyWhcNMjUwNjA4MTAwMDUyWjAzMTEwLwYDVQQD
Eyg0OWUxYjliNTI5ZDZhODQyYmEzM2Y1NWYwN2NjNDZmMWNhMjA0MmE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzjNx0r5GHdwlurSx4t+rs2ISRs5N
JjKUMDLwyXj3lgGXhYOVnRnR3XpuiIKU+RWaNmEXfZAJtm6uv5hux7FKPQ2P4uZx
rABk1SUfm7+QIodJ3vCMCYOCHXSrLT90wnewti18M2ASwZklUXHpRZNWUzlzKOA6
1IsoQMB81y4E63vG0ssIKpJRrFjluPFEqcnQPa8V4wCTAXU2rsc9DmGVw/+1190v
nawGutlD/0y1upgS4FwntdCxDbvJcIXrLKRZGkvUx/A9MppVm8cmEE8oaY2VyY+d
BAWon02RAxbMY20afeWCmqQc6/WQoUo+/987TGDCYDmZ/CFqfth8i0JXFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEnhubUp1qhCujP1XwfMRvHKIEKpMB8GA1UdIwQY
MBaAFA/yu80cLY1633QdcE2dxkueYU/aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRF9LN3pSd3RqWHJmZEIxd1RaM0dTNTVoVDlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9mODk0YTMtOGVkNy00ZDZmLWJiMDMt
NmFiMDU1NjhhZGUyLzEvRF9LN3pSd3RqWHJmZEIxd1RaM0dTNTVoVDlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9mODk0YTMtOGVkNy00ZDZmLWJiMDMtNmFiMDU1NjhhZGUy
LzEvRF9LN3pSd3RqWHJmZEIxd1RaM0dTNTVoVDlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhUW7HQfJ
ZrBs8xVi24ZnSmGAMoLFJPCnWp3LnJ5xA5XkKW4c2A6TpBhv7H733vwHeSxJpvVS
Mxei4gy8i7/lgIO0+95fbtX4D0xb5lbx8hQ4xgUHDLIQmUAfuHRsv6ZqCEl4oPyH
Xz+nYmVZHKKPfNh8dCmXjJVWbz+Gjwzg7rdNIUExL7mncjOpg3ii7Rab9yP6sQLM
ICSzphFYBsTjnQK1om9cu/J7xJOZGy1ZX6Gr0Lt2kF5gc+wBcVZ1qNFbGD/qkcpo
n+e746Pwcpb6FDFIkZwwLdIGvfV61pP6AmaQ9VUfhRyo83yTyZGARoZdmwaZy4nu
YPLTl3/nssjePw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 18:56:27 2025 by rpki-client