Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/ab8307-5f9c-49c6-8a0b-f3b45819f2b0/1/mKmHxs0KNvlNvvEO8qLGYCCpVhE.mft
File: mKmHxs0KNvlNvvEO8qLGYCCpVhE.mft (raw, json)
Hash identifier: qB/+XI6Q42rRC/1CNiAeOgGe5+1Lbug/FTvpmfjxBy8=
Subject key identifier: 50:58:B7:80:4C:AC:E6:0C:96:47:11:93:8E:E4:00:AB:0F:9D:F2:8C
Authority key identifier: 98:A9:87:C6:CD:0A:36:F9:4D:BE:F1:0E:F2:A2:C6:60:20:A9:56:11
Certificate issuer: /CN=98a987c6cd0a36f94dbef10ef2a2c66020a95611
Certificate serial: 019A52D23C26E718037FB7E7812C960F9C4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mKmHxs0KNvlNvvEO8qLGYCCpVhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/ab8307-5f9c-49c6-8a0b-f3b45819f2b0/1/mKmHxs0KNvlNvvEO8qLGYCCpVhE.mft
Manifest number: 12A3
Signing time: Wed 05 Nov 2025 07:01:40 +0000
Manifest this update: Wed 05 Nov 2025 07:01:40 +0000
Manifest next update: Thu 06 Nov 2025 07:01:40 +0000
Files and hashes: 1: KkXU6YkVywPte3FQKPTwmXq43Jw.roa (hash: +grv15uxretevWYIDb50yFoisYnL85l43pH++WpX3xI=)
2: mKmHxs0KNvlNvvEO8qLGYCCpVhE.crl (hash: KJJpAT6k5QrVsT41na0WuahJwQ8d5TgKsK7XDlhWCZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/ab8307-5f9c-49c6-8a0b-f3b45819f2b0/1/mKmHxs0KNvlNvvEO8qLGYCCpVhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/ab8307-5f9c-49c6-8a0b-f3b45819f2b0/1/mKmHxs0KNvlNvvEO8qLGYCCpVhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/mKmHxs0KNvlNvvEO8qLGYCCpVhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 07:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d2:3c:26:e7:18:03:7f:b7:e7:81:2c:96:0f:9c:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98a987c6cd0a36f94dbef10ef2a2c66020a95611
Validity
Not Before: Nov 5 07:01:40 2025 GMT
Not After : Nov 6 07:01:40 2025 GMT
Subject: CN=5058b7804cace60c964711938ee400ab0f9df28c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:32:67:07:64:fc:78:07:24:8e:61:22:81:0a:
cf:c5:a1:72:e0:90:b0:83:45:6a:b9:83:b2:f0:c2:
10:b7:e1:5a:23:f2:a1:d8:b9:29:86:de:c6:68:d2:
99:77:18:75:75:05:cd:6c:db:53:c1:47:65:7d:59:
dd:00:a4:16:9d:5d:c6:2b:dd:0d:64:f5:1b:af:53:
2d:56:53:8d:68:42:e7:b1:70:67:1e:22:43:33:8b:
f2:ec:a9:fc:fa:49:7c:f9:69:44:bb:76:78:0c:b9:
df:97:40:9c:2c:79:7e:c3:95:aa:5b:31:48:18:c4:
e4:35:32:b7:be:5a:23:ce:fe:44:0b:76:e1:48:fa:
47:0b:58:49:a5:dc:41:2c:90:2b:2a:25:7d:54:4b:
ea:62:44:97:5d:6e:1e:4b:03:af:e1:8e:46:45:83:
78:30:6d:59:a5:f4:62:aa:be:55:b0:24:3a:54:13:
25:a1:30:d0:00:bf:85:27:ab:5c:a0:80:75:6e:d2:
98:ec:a0:77:ff:3f:61:0b:ae:a3:22:aa:58:46:31:
54:b5:a4:d9:b4:10:49:86:90:11:78:d4:12:76:fb:
e1:f7:f8:db:51:77:93:3a:82:01:03:3e:f3:21:be:
f6:5e:72:8e:5d:53:5d:02:10:1a:81:c2:03:b7:a4:
fd:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:58:B7:80:4C:AC:E6:0C:96:47:11:93:8E:E4:00:AB:0F:9D:F2:8C
X509v3 Authority Key Identifier:
keyid:98:A9:87:C6:CD:0A:36:F9:4D:BE:F1:0E:F2:A2:C6:60:20:A9:56:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mKmHxs0KNvlNvvEO8qLGYCCpVhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ab8307-5f9c-49c6-8a0b-f3b45819f2b0/1/mKmHxs0KNvlNvvEO8qLGYCCpVhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ab8307-5f9c-49c6-8a0b-f3b45819f2b0/1/mKmHxs0KNvlNvvEO8qLGYCCpVhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:12:6a:5d:e4:89:cd:a6:88:5d:88:2b:12:d9:53:a7:d9:77:
31:9e:74:f0:d8:f8:99:ef:53:12:b0:89:fd:32:83:67:77:27:
30:a1:c6:5e:3b:9e:ed:2d:0a:54:f9:1c:89:e3:dc:53:35:22:
a0:0c:16:2b:2e:79:95:35:1e:80:0c:6c:9d:e5:1b:40:62:8e:
c0:50:36:0c:96:d7:49:f6:4f:6c:df:07:fa:62:2b:d2:2c:e4:
3c:7f:6b:08:c0:47:cb:76:c6:df:fb:bf:cd:3f:0a:e3:6f:a6:
6b:3c:61:25:09:88:c8:dc:22:b3:f7:9d:85:dd:c2:e6:b2:b0:
1f:25:4e:71:74:77:e0:c9:57:81:c8:23:66:27:b6:a7:b3:f7:
8d:61:b8:d3:97:15:ad:a6:a2:9e:d0:33:32:5a:05:75:62:ca:
c6:60:0e:4b:1f:25:b5:20:d2:5c:7d:4b:47:85:73:69:82:75:
7e:34:d5:34:86:fd:06:da:a9:2f:1b:09:e2:6f:95:5e:8b:4f:
e3:87:85:cc:13:2d:e0:ba:db:f5:39:8f:53:32:0f:74:35:e3:
64:f6:c8:6a:0b:3c:2a:d6:86:5d:3d:59:31:a5:ed:54:9b:49:
c6:8c:c3:96:c0:77:7a:be:84:70:70:21:53:b1:ac:4d:45:ff:
17:66:ca:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:00:21 2025 by rpki-client