Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/ab8307-5f9c-49c6-8a0b-f3b45819f2b0/1/mKmHxs0KNvlNvvEO8qLGYCCpVhE.mft
File: mKmHxs0KNvlNvvEO8qLGYCCpVhE.mft (raw, json)
Hash identifier: UpmgO4dm3k5U8nCP9ZK6m69hz/4vMCq3nKt2d91batk=
Subject key identifier: DF:32:83:E8:AD:53:75:0B:1B:B5:E6:09:3D:9D:65:84:E8:E6:C7:C6
Authority key identifier: 98:A9:87:C6:CD:0A:36:F9:4D:BE:F1:0E:F2:A2:C6:60:20:A9:56:11
Certificate issuer: /CN=98a987c6cd0a36f94dbef10ef2a2c66020a95611
Certificate serial: 019894B8191E78F77A66F1D5BA9665FF0610
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mKmHxs0KNvlNvvEO8qLGYCCpVhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/ab8307-5f9c-49c6-8a0b-f3b45819f2b0/1/mKmHxs0KNvlNvvEO8qLGYCCpVhE.mft
Manifest number: 11BC
Signing time: Sun 10 Aug 2025 16:02:29 +0000
Manifest this update: Sun 10 Aug 2025 16:02:29 +0000
Manifest next update: Mon 11 Aug 2025 16:02:29 +0000
Files and hashes: 1: KkXU6YkVywPte3FQKPTwmXq43Jw.roa (hash: +grv15uxretevWYIDb50yFoisYnL85l43pH++WpX3xI=)
2: mKmHxs0KNvlNvvEO8qLGYCCpVhE.crl (hash: oXnn6y6j4wZzdYa1dyf+ZolWJsy+RtG5jpE0KyOpz2w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/ab8307-5f9c-49c6-8a0b-f3b45819f2b0/1/mKmHxs0KNvlNvvEO8qLGYCCpVhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/ab8307-5f9c-49c6-8a0b-f3b45819f2b0/1/mKmHxs0KNvlNvvEO8qLGYCCpVhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/mKmHxs0KNvlNvvEO8qLGYCCpVhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 16:02:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:b8:19:1e:78:f7:7a:66:f1:d5:ba:96:65:ff:06:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98a987c6cd0a36f94dbef10ef2a2c66020a95611
Validity
Not Before: Aug 10 16:02:29 2025 GMT
Not After : Aug 11 16:02:29 2025 GMT
Subject: CN=df3283e8ad53750b1bb5e6093d9d6584e8e6c7c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:84:12:e2:69:77:82:e7:f5:71:50:2d:1a:64:
1e:7a:7a:81:e2:05:57:ad:cf:38:34:35:e9:76:27:
f7:27:1a:71:6e:fd:a8:d1:57:0c:49:ee:29:e5:f7:
a6:63:e5:c4:25:db:90:e2:7f:61:4f:b6:3c:f4:d7:
03:3d:25:54:64:25:90:a5:f4:1b:3a:9d:57:32:c0:
a4:e4:86:46:64:48:13:a2:23:9f:bb:35:ab:4c:a6:
e9:a4:4c:a2:7a:b9:77:55:5e:aa:9b:89:b4:a4:e1:
46:d8:03:90:5f:2e:34:65:f9:ea:ec:5b:33:4b:4a:
c9:3d:ac:29:b3:25:71:9a:ab:df:fb:a9:1b:98:50:
94:50:60:c1:64:b8:26:db:63:73:d5:ca:0f:50:83:
e0:0d:01:96:c0:ca:82:dc:83:27:15:21:08:01:91:
93:35:01:77:e0:95:8a:fa:2b:b4:5b:89:c9:30:51:
32:65:54:73:c6:c4:38:4d:4e:14:fd:94:fa:ae:ec:
10:20:c4:29:46:46:d7:f8:40:17:93:b1:7b:eb:dc:
54:2e:37:81:d2:9c:ce:2f:66:60:7b:f0:70:e4:50:
ea:9b:e3:18:76:ef:f9:6e:2c:e0:01:61:e3:54:1a:
01:71:5b:f5:eb:6f:79:9c:26:db:15:34:26:54:ea:
f6:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:32:83:E8:AD:53:75:0B:1B:B5:E6:09:3D:9D:65:84:E8:E6:C7:C6
X509v3 Authority Key Identifier:
keyid:98:A9:87:C6:CD:0A:36:F9:4D:BE:F1:0E:F2:A2:C6:60:20:A9:56:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mKmHxs0KNvlNvvEO8qLGYCCpVhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ab8307-5f9c-49c6-8a0b-f3b45819f2b0/1/mKmHxs0KNvlNvvEO8qLGYCCpVhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ab8307-5f9c-49c6-8a0b-f3b45819f2b0/1/mKmHxs0KNvlNvvEO8qLGYCCpVhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:35:c5:d0:24:5a:70:06:38:94:d8:35:76:a2:a9:5e:9d:23:
17:c2:4f:93:1a:ed:07:fc:8d:cd:00:21:7c:42:63:1b:88:8f:
92:c9:83:8b:b8:e6:c3:cd:05:a5:b6:30:b0:25:0b:e0:cc:3f:
88:b2:95:f7:cf:70:a5:e1:91:cf:49:f0:6d:45:0a:6c:72:11:
9b:9f:29:7e:62:31:cb:f8:de:9c:b0:fe:b8:82:75:12:a2:58:
0a:93:e2:18:cb:7d:e7:7f:76:9a:34:ad:9b:94:79:37:d6:9b:
81:9d:02:c2:05:d2:2a:77:93:0d:8c:0e:d6:2a:0a:79:bf:8a:
d5:bb:c3:db:27:54:91:ee:fb:83:2b:d4:7d:7a:41:17:24:f8:
a7:ad:45:77:ac:6f:08:a3:20:a2:12:ac:b9:c7:fd:34:15:9b:
47:d2:14:63:c2:42:69:27:c8:95:7a:c2:14:53:de:6c:5e:cc:
bc:2f:01:49:e1:cc:93:c3:46:3d:98:b2:76:83:27:b3:08:b1:
7b:38:f9:3f:c7:eb:aa:45:2e:b1:41:60:51:37:19:4e:70:63:
25:c9:bf:9a:0a:1a:64:37:83:1d:d7:8b:46:81:d8:24:9b:8b:
46:83:aa:da:41:ef:c3:a2:d4:98:87:33:8d:38:50:91:2d:9f:
32:94:14:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 19:47:57 2025 by rpki-client