Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.mft
File: mkjB2ACM3AWdsLJ6qVFHmcBtVEM.mft (raw, json)
Hash identifier: VWhHTylPywXdhUw7mfQiHJW5emOAOXhalxDt8hAMKoY=
Subject key identifier: B3:BF:31:D8:2F:E0:43:8E:A1:7A:8B:CD:31:0B:30:B6:67:03:C6:A0
Authority key identifier: 9A:48:C1:D8:00:8C:DC:05:9D:B0:B2:7A:A9:51:47:99:C0:6D:54:43
Certificate issuer: /CN=9a48c1d8008cdc059db0b27aa9514799c06d5443
Certificate serial: 01987AC03C5A72FF5BCA3AB2FAC6639BF6AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.mft
Manifest number: 118B
Signing time: Tue 05 Aug 2025 15:01:15 +0000
Manifest this update: Tue 05 Aug 2025 15:01:15 +0000
Manifest next update: Wed 06 Aug 2025 15:01:15 +0000
Files and hashes: 1: GS3n997-WSAnBFI5sxW4oYhya68.roa (hash: 9uLSgMiqXXeu2TS+gBYSbYKO48DlZM21pWe2MUShNG8=)
2: K1RZ-_Fg9dSZIebCMUhpe6gbgJc.roa (hash: DeEJ/lwM2EUWvyFmV2osr5NnI9rnfMu9oAVwUv2cQPg=)
3: mkjB2ACM3AWdsLJ6qVFHmcBtVEM.crl (hash: Jb8kkWBoAZob8slo/Lq2EhlaLFYpSZxA+IUcarKQMTk=)
4: tKjpgYt3F1U92FlxxtExmwv_VJA.roa (hash: PCobIxyuHsntJ/hl1UTuu1qlban1/mIdUKP0z5QY3l0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:37:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:c0:3c:5a:72:ff:5b:ca:3a:b2:fa:c6:63:9b:f6:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a48c1d8008cdc059db0b27aa9514799c06d5443
Validity
Not Before: Aug 5 15:01:15 2025 GMT
Not After : Aug 6 15:01:15 2025 GMT
Subject: CN=b3bf31d82fe0438ea17a8bcd310b30b66703c6a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:56:be:9a:d5:b1:24:5b:5f:fa:9a:a0:50:9d:
68:19:85:ae:6c:1e:e7:65:4b:42:04:79:70:bc:cc:
3f:ab:55:84:09:76:ab:8d:2e:ef:b7:2e:09:86:cc:
91:e7:f7:b9:e2:2e:ea:a8:a2:d9:45:8d:29:24:a4:
ba:17:f4:68:a4:ec:5b:13:c0:d8:44:e8:0f:b5:7b:
8f:89:51:5c:da:54:fd:24:b3:40:55:3f:4f:31:d0:
14:73:0e:cf:0a:57:65:38:ab:39:10:c3:da:4f:17:
a4:50:29:96:ef:56:08:b7:58:bc:5f:a1:20:a8:8b:
60:24:73:7c:8b:e0:3c:1b:1b:1d:b4:bb:fb:b9:5c:
7e:5a:30:6d:a5:31:ae:97:1d:32:47:48:f7:bc:49:
1a:33:b8:0f:f4:d4:f8:0a:ae:95:83:78:e3:c8:87:
64:d9:1d:ab:cb:2c:c7:49:52:1a:e9:7f:6d:91:59:
2e:b6:36:b2:d9:6d:2f:74:a4:4a:35:c4:11:e2:3b:
09:ca:0f:6b:40:88:db:45:05:57:cb:ea:e5:d1:45:
8f:29:84:46:11:e2:ed:8b:18:3e:9f:b0:5e:b8:cb:
71:0b:a8:72:af:dd:0b:76:37:0b:a6:17:c1:a1:c0:
34:94:86:d0:27:f9:27:d4:29:69:d9:9d:0e:f5:96:
10:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:BF:31:D8:2F:E0:43:8E:A1:7A:8B:CD:31:0B:30:B6:67:03:C6:A0
X509v3 Authority Key Identifier:
keyid:9A:48:C1:D8:00:8C:DC:05:9D:B0:B2:7A:A9:51:47:99:C0:6D:54:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:68:dc:fc:a5:f6:e7:ae:93:7f:10:36:33:8d:e7:94:57:cf:
37:56:8c:fa:8d:00:97:5c:b5:90:e3:b3:c4:7b:dd:81:3c:81:
01:a7:ba:5b:2c:2f:36:8a:24:71:a0:ed:c5:e0:3e:82:7d:5c:
10:6f:76:d7:be:4f:cf:5d:6e:a3:c8:0e:bd:aa:35:b2:fb:5d:
45:d1:a1:7c:30:34:91:e3:2e:e4:92:b7:c0:df:3d:3a:30:a4:
0d:58:84:32:ce:0a:c0:68:e1:73:bf:42:15:c0:3a:0f:33:33:
84:d5:8e:6f:3b:6b:64:c4:94:0d:17:48:c7:f9:83:71:3c:4e:
20:82:0f:7e:ae:6c:9f:06:43:61:77:ba:84:39:09:29:01:15:
df:d5:df:a7:7c:a3:e8:f1:00:0a:f5:96:cd:49:e6:b3:bd:68:
2d:56:eb:44:a5:5d:41:ac:6d:00:7b:1e:60:68:01:69:25:2d:
42:db:d5:68:4b:ea:56:a5:8e:96:87:22:b2:fe:c7:f0:fe:a0:
92:0d:fa:7a:f9:17:ae:08:b9:ec:59:e0:7e:9d:2f:3f:44:7a:
5a:a0:c0:00:a4:9b:50:d8:79:87:ea:db:3b:18:8c:21:64:73:
d1:b2:5d:83:6d:45:a8:c9:0e:89:e9:c8:8b:1b:72:c9:0b:de:
bf:e1:10:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:24:16 2025 by rpki-client