Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/d4b542-6392-43d0-a8c2-2cadcf6658ca/1/Mk73breQdOacczAs5MLgr0f0Uwc.mft
File: Mk73breQdOacczAs5MLgr0f0Uwc.mft (raw, json)
Hash identifier: 1cy9FWtvO4aqvHIpopqFv2CrLlVomVCpjnG8lVsxGgw=
Subject key identifier: 7C:D1:B8:C5:93:9F:DE:BC:6E:6D:6D:D4:3F:48:47:62:C1:03:CF:06
Authority key identifier: 32:4E:F7:6E:B7:90:74:E6:9C:73:30:2C:E4:C2:E0:AF:47:F4:53:07
Certificate issuer: /CN=324ef76eb79074e69c73302ce4c2e0af47f45307
Certificate serial: 019A4EF4899499E284A6701C1D660333BCD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mk73breQdOacczAs5MLgr0f0Uwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/d4b542-6392-43d0-a8c2-2cadcf6658ca/1/Mk73breQdOacczAs5MLgr0f0Uwc.mft
Manifest number: 0556
Signing time: Tue 04 Nov 2025 13:00:39 +0000
Manifest this update: Tue 04 Nov 2025 13:00:39 +0000
Manifest next update: Wed 05 Nov 2025 13:00:39 +0000
Files and hashes: 1: I9UkQ41YeX1efTDwQLbD_CMYPDQ.roa (hash: iSNpeYLJZVe6ucEI95ka4RakvFZqRgRE032Te/mBPRQ=)
2: Mk73breQdOacczAs5MLgr0f0Uwc.crl (hash: Zaw4dYPrHk6SKNr0CkUYNX+1fLqDD5oSlcCfoa1TiTg=)
3: x8qUgYPzT7g1nXs61F1j3vP06ZA.roa (hash: /RVMiuVCMeWyNuJCZhsV4JVmBiQgFuEHvbUPa8p74t4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/d4b542-6392-43d0-a8c2-2cadcf6658ca/1/Mk73breQdOacczAs5MLgr0f0Uwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/d4b542-6392-43d0-a8c2-2cadcf6658ca/1/Mk73breQdOacczAs5MLgr0f0Uwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mk73breQdOacczAs5MLgr0f0Uwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:89:94:99:e2:84:a6:70:1c:1d:66:03:33:bc:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=324ef76eb79074e69c73302ce4c2e0af47f45307
Validity
Not Before: Nov 4 13:00:39 2025 GMT
Not After : Nov 5 13:00:39 2025 GMT
Subject: CN=7cd1b8c5939fdebc6e6d6dd43f484762c103cf06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:8e:bb:35:1e:7b:4f:1e:56:55:9e:90:3c:ba:
1c:92:0f:c5:2c:0f:72:fa:ab:ad:8a:e2:4a:30:ce:
f0:db:82:27:2b:c6:e1:a5:ff:9a:b9:eb:fc:01:58:
ff:54:c6:d7:8f:d4:da:74:52:e9:47:7d:a7:7c:76:
e6:69:1c:82:00:af:68:7b:82:94:ff:85:e9:0d:1a:
b3:e3:c6:a6:b0:7b:69:ed:91:23:6d:ec:0e:a9:14:
57:95:42:8f:44:99:e8:b4:21:29:86:7b:48:ab:6d:
e7:4c:87:03:98:d0:b5:73:40:7f:f8:d8:d3:72:31:
6d:e2:31:83:f1:0e:86:71:89:05:18:45:b9:de:dc:
cc:59:fb:b0:b1:72:1d:90:f9:1d:87:c2:3c:0f:63:
29:c1:d5:63:cd:e7:ea:72:bc:d4:a0:81:3e:40:bd:
7a:3b:b7:8e:bb:fe:a9:eb:f3:d3:3d:91:b2:86:a9:
cb:62:00:20:7a:2a:bd:0f:77:56:05:88:3c:4f:54:
7e:42:02:5a:97:da:34:43:34:49:5c:f7:69:28:de:
7c:b6:7e:46:51:30:31:ab:73:f9:e2:5c:88:86:c9:
f7:49:22:17:dc:cf:b9:c1:3a:d9:1b:15:17:b8:f3:
9e:0c:44:87:ef:6f:fb:21:0c:6d:8a:cf:e7:e9:51:
d5:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:D1:B8:C5:93:9F:DE:BC:6E:6D:6D:D4:3F:48:47:62:C1:03:CF:06
X509v3 Authority Key Identifier:
keyid:32:4E:F7:6E:B7:90:74:E6:9C:73:30:2C:E4:C2:E0:AF:47:F4:53:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mk73breQdOacczAs5MLgr0f0Uwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/d4b542-6392-43d0-a8c2-2cadcf6658ca/1/Mk73breQdOacczAs5MLgr0f0Uwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/d4b542-6392-43d0-a8c2-2cadcf6658ca/1/Mk73breQdOacczAs5MLgr0f0Uwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:99:35:7d:38:0d:ca:12:fe:86:13:f3:dd:22:d9:20:47:a8:
aa:b5:0d:23:95:7b:f0:c1:4a:31:89:4b:92:1c:85:74:ce:3c:
00:b1:3a:a8:f0:ce:4a:e8:38:16:43:26:14:8f:6e:64:bf:78:
c4:ec:04:95:7d:6a:96:a6:2d:3b:02:74:a5:b2:88:d2:9f:60:
43:78:dd:f4:f5:56:61:b6:6d:08:01:38:b3:b1:0c:74:0e:94:
73:f5:a8:b7:8a:ad:9d:44:66:2b:9c:3a:8a:91:05:75:fd:b2:
5e:a4:88:6c:c4:3d:9e:5b:5d:86:9d:cc:bf:b4:26:96:51:b8:
69:72:92:f4:07:e4:c8:83:4e:67:a7:fc:f7:e3:cc:1e:fa:f6:
69:41:18:d7:9d:2b:6d:19:37:ce:86:33:3e:86:24:3b:26:3a:
57:d0:2e:0f:95:e4:2d:db:94:70:ff:df:da:78:09:69:85:59:
3b:48:84:73:90:63:22:10:09:61:2b:d5:8a:9a:4e:b5:f8:02:
8b:21:e4:38:f1:7e:6f:b1:f0:79:b7:b9:23:de:21:93:ad:47:
f4:98:d2:6a:06:2d:da:4d:55:6a:a5:55:c1:20:ed:a5:9a:3d:
fb:6a:67:b8:05:c9:59:93:c0:2f:99:83:ef:4c:1d:c6:b3:e2:
1a:fa:37:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:52:47 2025 by rpki-client