Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/D_K7zRwtjXrfdB1wTZ3GS55hT9o.mft
File: D_K7zRwtjXrfdB1wTZ3GS55hT9o.mft (raw, json)
Hash identifier: Rwt1A1+pHjtoI0NMrxHjyG+ozIARxFl39+7q5ik1Abk=
Subject key identifier: 38:31:5C:5D:01:3B:05:3E:4D:DA:9C:90:95:CA:A4:4F:03:8F:E7:E6
Authority key identifier: 0F:F2:BB:CD:1C:2D:8D:7A:DF:74:1D:70:4D:9D:C6:4B:9E:61:4F:DA
Certificate issuer: /CN=0ff2bbcd1c2d8d7adf741d704d9dc64b9e614fda
Certificate serial: 019A21E4AD93D4C4258F7C7E21213737973B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_K7zRwtjXrfdB1wTZ3GS55hT9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/D_K7zRwtjXrfdB1wTZ3GS55hT9o.mft
Manifest number: 0801
Signing time: Sun 26 Oct 2025 19:00:26 +0000
Manifest this update: Sun 26 Oct 2025 19:00:26 +0000
Manifest next update: Mon 27 Oct 2025 19:00:26 +0000
Files and hashes: 1: D_K7zRwtjXrfdB1wTZ3GS55hT9o.crl (hash: BYQAGxw6ZZOqEeH68YyxQOmQYHYAoIXJeKxa/tbj9IE=)
2: _66pxASs3q8uB-XVTEtYg_28j2c.roa (hash: jpHC45psSv+zAzzYw1OCRaKkzWVXUPpgp6OyO01yiRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/D_K7zRwtjXrfdB1wTZ3GS55hT9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/D_K7zRwtjXrfdB1wTZ3GS55hT9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/D_K7zRwtjXrfdB1wTZ3GS55hT9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:e4:ad:93:d4:c4:25:8f:7c:7e:21:21:37:37:97:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ff2bbcd1c2d8d7adf741d704d9dc64b9e614fda
Validity
Not Before: Oct 26 19:00:26 2025 GMT
Not After : Oct 27 19:00:26 2025 GMT
Subject: CN=38315c5d013b053e4dda9c9095caa44f038fe7e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:72:45:dc:c6:b2:59:74:1d:6c:69:b5:a3:2e:
fc:87:60:87:e5:62:ec:ec:d9:e8:d8:7f:9d:a2:44:
45:21:16:17:47:d0:9c:f2:ea:d3:4f:64:9f:78:dc:
33:d6:2a:a3:b1:59:82:82:50:da:82:08:f5:c5:f4:
bb:29:8d:1f:32:18:45:35:67:49:51:13:ac:f5:9a:
db:c5:cd:02:4a:a4:5d:1e:b0:20:c7:7e:58:be:f4:
3a:8a:a8:14:c9:46:6f:4f:b8:d9:d1:f7:7d:73:bc:
b3:ca:eb:12:0d:59:60:28:ff:ed:70:97:6b:ec:5a:
3b:df:66:79:9a:fd:88:67:dd:7c:eb:33:07:f0:e3:
f1:ec:66:59:da:8e:96:42:e9:3c:bd:cc:29:2b:bb:
c7:75:9a:87:cb:2c:ad:b0:9d:73:b2:0f:11:89:16:
ba:c5:57:70:51:a7:e5:b2:36:e0:c7:c6:a0:7b:26:
7a:69:e4:be:7f:20:2c:43:23:d3:7a:2b:10:ea:e3:
09:b8:35:84:53:b1:3b:26:48:00:a6:8d:d7:c1:90:
63:06:10:75:b1:99:2b:31:ae:46:3c:1b:44:c8:b6:
50:27:ca:81:ee:c6:16:0e:df:2a:20:ea:a1:e7:07:
02:40:34:2f:46:0d:06:df:e3:c2:b5:75:52:cc:5b:
4a:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:31:5C:5D:01:3B:05:3E:4D:DA:9C:90:95:CA:A4:4F:03:8F:E7:E6
X509v3 Authority Key Identifier:
keyid:0F:F2:BB:CD:1C:2D:8D:7A:DF:74:1D:70:4D:9D:C6:4B:9E:61:4F:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_K7zRwtjXrfdB1wTZ3GS55hT9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/D_K7zRwtjXrfdB1wTZ3GS55hT9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/D_K7zRwtjXrfdB1wTZ3GS55hT9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:d2:ef:48:cc:6a:67:e4:19:4c:78:99:2d:38:57:73:2f:b4:
00:af:7f:6a:87:d9:22:f1:73:85:d7:13:d7:aa:0c:9b:d4:5d:
3d:07:11:47:19:94:7b:7a:c9:41:05:3e:b8:42:15:1c:e1:9f:
4e:1f:55:22:32:8a:15:e0:48:8b:73:b3:f4:52:fd:43:db:d8:
80:02:f0:0e:9f:0e:ff:14:b1:96:b5:ef:0c:00:57:0d:a2:36:
3d:ee:31:9a:51:71:1a:47:30:76:e2:7c:77:13:4e:f3:06:58:
b4:94:0c:e8:43:43:13:9f:d7:2b:fc:d9:bd:bd:79:78:be:2c:
c5:ba:1c:98:2e:a8:85:67:8d:8b:24:50:41:7f:61:66:85:c7:
87:dc:e2:d4:2a:6d:4d:f2:31:b7:36:89:a0:4e:a9:13:5b:fd:
85:18:86:82:0b:77:bd:f3:de:35:36:a4:25:68:2f:4b:14:24:
39:79:83:48:6f:e3:7d:93:44:d7:58:00:f6:63:68:91:26:df:
66:1c:2d:e8:78:0d:4e:ea:f4:dd:75:ee:d9:b9:a0:75:85:b5:
b6:5e:82:08:b6:48:19:0c:03:13:0f:2c:c7:ca:ed:06:07:50:
80:54:0d:9c:59:70:0a:e8:d1:5c:d0:75:2f:0c:ee:db:3f:8a:
47:af:fd:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 20:11:03 2025 by rpki-client