Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.mft
File: MksgMsOPsX9C-IMqTCHh8NXxnuA.mft (raw, json)
Hash identifier: ITcGm1EnBYedCl0ZWouz8IWtaA/Hx9+7iRUCb1k6a5g=
Subject key identifier: 64:A0:08:B7:03:EC:36:D2:A0:78:07:90:D6:1A:53:B8:BF:0C:72:B7
Authority key identifier: 32:4B:20:32:C3:8F:B1:7F:42:F8:83:2A:4C:21:E1:F0:D5:F1:9E:E0
Certificate issuer: /CN=324b2032c38fb17f42f8832a4c21e1f0d5f19ee0
Certificate serial: 01987374451206A32053D3E7B194AF6E9671
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MksgMsOPsX9C-IMqTCHh8NXxnuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.mft
Manifest number: 02BC
Signing time: Mon 04 Aug 2025 05:00:56 +0000
Manifest this update: Mon 04 Aug 2025 05:00:56 +0000
Manifest next update: Tue 05 Aug 2025 05:00:56 +0000
Files and hashes: 1: 1-5n0KWaGHCDQYhl2aLfMjhVyMRI.roa (hash: KATmxtMp2ikC0o4XIGyQU9bJkWtT8ILR3+Dm38ZRLnA=)
2: MksgMsOPsX9C-IMqTCHh8NXxnuA.crl (hash: 6gQ+Xl8Cmwimhlkrnu3jS7hrFa/Hio2txn254CaGIDM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.mft
rsync://rpki.ripe.net/repository/DEFAULT/MksgMsOPsX9C-IMqTCHh8NXxnuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:74:45:12:06:a3:20:53:d3:e7:b1:94:af:6e:96:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=324b2032c38fb17f42f8832a4c21e1f0d5f19ee0
Validity
Not Before: Aug 4 05:00:56 2025 GMT
Not After : Aug 5 05:00:56 2025 GMT
Subject: CN=64a008b703ec36d2a0780790d61a53b8bf0c72b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e9:f0:7d:0a:a1:fc:4a:25:ab:fe:dd:69:72:
06:be:51:23:c1:73:0a:b6:4e:5f:30:5d:bd:a3:46:
d4:a3:01:27:57:ca:ba:2e:91:45:cd:d7:7e:b4:43:
75:8b:ef:c1:ce:54:fe:f0:23:9d:0b:a5:45:fc:dd:
8b:e9:52:ab:14:0e:11:6a:f6:7b:c0:8b:82:7c:c8:
f4:db:6d:4a:4a:34:87:7d:8e:2f:56:71:39:47:ac:
bb:2f:dd:01:76:72:de:d5:2e:fb:2a:6f:b9:28:2b:
04:1b:79:b4:d8:6b:1b:fe:dc:18:1d:0b:6d:da:99:
31:83:2f:b3:0d:f4:43:fb:6a:02:5c:68:6c:b0:a4:
61:21:fe:18:11:6b:50:02:90:26:2f:1c:48:b7:d9:
67:d5:10:d9:79:d1:87:87:8f:86:f4:b8:fa:9d:db:
2c:8c:dd:bb:59:17:db:61:b4:8b:cd:73:d3:a6:0c:
e5:4e:8e:c6:6e:27:62:bb:3e:93:f4:0e:02:fa:db:
47:69:3d:cd:75:ad:fd:20:e9:b6:7e:ad:5c:76:b7:
ad:d0:22:f2:aa:fc:d6:5a:77:86:79:50:9e:a2:24:
da:b9:6e:e6:c0:82:47:3d:1f:4a:b8:88:8d:1c:26:
ec:b4:e3:b0:83:cb:72:2a:14:51:d2:1d:05:b0:31:
fc:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:A0:08:B7:03:EC:36:D2:A0:78:07:90:D6:1A:53:B8:BF:0C:72:B7
X509v3 Authority Key Identifier:
keyid:32:4B:20:32:C3:8F:B1:7F:42:F8:83:2A:4C:21:E1:F0:D5:F1:9E:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MksgMsOPsX9C-IMqTCHh8NXxnuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:37:c2:4b:62:9d:d0:32:e3:3d:61:2c:f4:a4:ee:e4:12:27:
59:bc:11:20:83:d1:80:b6:2d:86:17:6d:5b:fd:ec:e2:6e:14:
40:d0:37:61:da:25:0e:61:1e:55:9a:8f:7c:fd:68:70:ea:83:
78:7b:7f:9c:f7:b2:01:f1:1b:56:28:db:df:47:d5:ee:d2:a1:
ec:65:ca:d5:ce:b3:dd:0f:0c:cb:e8:b3:5b:d2:da:9c:46:cb:
d7:f5:4c:9c:16:ae:40:9d:d1:53:d2:90:a1:85:8c:af:dd:5b:
f5:90:58:97:7b:54:cc:7e:2d:b1:a9:69:38:90:b3:f9:f7:a8:
0a:b3:e9:81:b4:4d:d0:f7:18:b6:71:18:c0:72:80:11:91:c7:
43:0d:89:73:76:6e:3b:9f:fa:ae:aa:b8:23:05:9c:2a:04:1d:
d2:43:f6:b9:1a:e0:1f:89:d5:00:42:e0:df:84:56:d8:27:17:
4b:24:98:a7:bb:62:b7:c3:ce:19:6c:95:02:9d:bb:c4:c3:0e:
cb:e2:c6:16:c0:26:89:54:45:15:14:3c:55:7f:b9:a1:cb:bb:
8b:a2:be:05:fc:c5:d1:ce:75:75:cd:8e:e9:f9:6f:4e:64:bc:
74:a8:3b:0e:1e:7e:53:cf:ef:f0:1d:7c:33:57:cd:b4:da:50:
43:ca:37:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:16:04 2025 by rpki-client