Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.mft
File: mkjB2ACM3AWdsLJ6qVFHmcBtVEM.mft (raw, json)
Hash identifier: jYqz++Pu9zuMFf/iOKcEdf9e/+wo4whP93z7/3XoL1k=
Subject key identifier: F7:DA:B5:F5:9C:0C:7A:81:D7:6D:22:DD:37:0C:73:CC:F1:12:83:5A
Authority key identifier: 9A:48:C1:D8:00:8C:DC:05:9D:B0:B2:7A:A9:51:47:99:C0:6D:54:43
Certificate issuer: /CN=9a48c1d8008cdc059db0b27aa9514799c06d5443
Certificate serial: 019A51F5DF3B95F25ED4BCF023269B5F70F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.mft
Manifest number: 127F
Signing time: Wed 05 Nov 2025 03:00:59 +0000
Manifest this update: Wed 05 Nov 2025 03:00:59 +0000
Manifest next update: Thu 06 Nov 2025 03:00:59 +0000
Files and hashes: 1: GS3n997-WSAnBFI5sxW4oYhya68.roa (hash: 9uLSgMiqXXeu2TS+gBYSbYKO48DlZM21pWe2MUShNG8=)
2: K1RZ-_Fg9dSZIebCMUhpe6gbgJc.roa (hash: DeEJ/lwM2EUWvyFmV2osr5NnI9rnfMu9oAVwUv2cQPg=)
3: mkjB2ACM3AWdsLJ6qVFHmcBtVEM.crl (hash: +W2dKOY8g1kibXq6+XG7NNWlWmOSU6NRZCBug6UdMxo=)
4: tKjpgYt3F1U92FlxxtExmwv_VJA.roa (hash: PCobIxyuHsntJ/hl1UTuu1qlban1/mIdUKP0z5QY3l0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:f5:df:3b:95:f2:5e:d4:bc:f0:23:26:9b:5f:70:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a48c1d8008cdc059db0b27aa9514799c06d5443
Validity
Not Before: Nov 5 03:00:59 2025 GMT
Not After : Nov 6 03:00:59 2025 GMT
Subject: CN=f7dab5f59c0c7a81d76d22dd370c73ccf112835a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:73:b1:c4:dc:f7:4b:25:65:9d:78:bd:97:dc:
73:89:46:bd:59:08:da:9e:ed:f2:1a:5b:b9:cd:c8:
5d:e9:f8:dd:15:78:57:8c:a8:94:5d:8b:de:3e:f1:
1f:75:c2:71:b1:28:be:5f:3b:13:df:91:78:76:89:
bd:2a:67:5d:53:be:40:e0:96:af:8c:82:d2:6a:a3:
36:65:98:5c:15:75:bb:62:ed:2f:f9:34:6a:d3:ce:
6a:6f:20:c9:44:6c:ac:ed:0b:1e:62:1d:49:07:2d:
e7:67:73:1a:9b:8e:81:5e:69:3d:ea:f1:75:25:e8:
43:21:64:69:ee:77:79:a9:cd:eb:2d:22:79:93:06:
fb:79:12:29:55:f8:98:66:40:d4:3d:b7:5f:40:58:
e4:80:f3:fc:9e:8d:8e:e9:b7:e2:de:27:bf:de:e9:
7a:7f:d5:b8:0a:20:6d:ca:2a:56:f9:56:04:bd:22:
71:a2:e3:5a:18:55:d5:e7:c5:ad:83:d6:3a:f3:a7:
ab:b4:a6:73:14:df:59:93:5f:7d:9d:64:17:9c:d1:
99:e2:63:0b:3e:ef:4f:2c:23:8b:af:b9:c3:3a:81:
4b:96:4e:a7:d6:9c:9c:fc:16:a6:b0:ed:96:29:6f:
31:f4:15:7e:91:44:b1:93:da:db:a7:e6:a8:62:e8:
a1:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:DA:B5:F5:9C:0C:7A:81:D7:6D:22:DD:37:0C:73:CC:F1:12:83:5A
X509v3 Authority Key Identifier:
keyid:9A:48:C1:D8:00:8C:DC:05:9D:B0:B2:7A:A9:51:47:99:C0:6D:54:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:3c:4d:e5:34:ac:d4:72:2c:b7:cd:1a:c4:73:35:a5:44:18:
64:4f:38:24:56:54:3f:ec:e8:e6:ad:71:fa:50:6b:73:74:fb:
db:bf:e2:2f:1b:6d:95:58:6f:50:2a:e6:07:a6:89:19:e2:bb:
42:2f:2b:e6:b7:82:24:28:b5:7d:fa:c7:31:a7:c3:55:50:24:
ca:70:58:42:41:bc:e8:d9:d0:e1:30:4b:62:3e:10:f9:a9:e5:
1e:3c:eb:44:44:f5:da:37:f9:c2:08:b5:4f:e5:ff:5b:fa:12:
fa:84:93:9d:84:d1:81:22:f9:fa:fd:7a:af:4b:57:b1:0b:af:
33:3d:8d:ec:42:b1:c2:87:38:47:01:e7:db:91:17:05:79:d9:
d2:ce:d0:21:0a:5d:76:48:ff:0d:f3:a2:74:b1:7a:d2:ca:94:
fc:83:08:d6:06:a4:b4:49:bd:f5:7b:74:7e:7a:f3:0f:eb:46:
15:3b:06:56:85:91:59:a3:fb:df:f8:9f:b1:20:5a:d0:3d:4b:
8d:fe:44:dd:a1:29:32:f1:2c:73:11:b5:09:5a:9b:4c:d6:f4:
58:7f:a8:97:12:86:7b:7c:64:24:b0:7d:5a:1f:83:e2:23:f1:
49:05:ba:53:01:d4:bc:c8:b0:9b:c6:93:94:9b:19:b2:59:2c:
7e:24:50:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:54:47 2025 by rpki-client