Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/mKUzMIdAu70he_adzpCz9UEghFc.mft
File: mKUzMIdAu70he_adzpCz9UEghFc.mft (raw, json)
Hash identifier: LZ2zbSnDJcbJ/S5sa31bBCgDgmrfKjQzJ6uc8mBUK7g=
Subject key identifier: 05:7C:25:97:2B:79:F2:33:AA:F4:B7:B5:49:71:50:CD:40:D3:13:E6
Authority key identifier: 98:A5:33:30:87:40:BB:BD:21:7B:F6:9D:CE:90:B3:F5:41:20:84:57
Certificate issuer: /CN=98a533308740bbbd217bf69dce90b3f541208457
Certificate serial: 01988D6AD3173ABE5603DBB7809CC1576977
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mKUzMIdAu70he_adzpCz9UEghFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/mKUzMIdAu70he_adzpCz9UEghFc.mft
Manifest number: 1627
Signing time: Sat 09 Aug 2025 06:00:44 +0000
Manifest this update: Sat 09 Aug 2025 06:00:44 +0000
Manifest next update: Sun 10 Aug 2025 06:00:44 +0000
Files and hashes: 1: 4hnUUt9Ys_eQWvU2fA6JemX65dw.roa (hash: ntUnKbzWvKshnrPe1olGFJu/nCj9Xb/2m4Wf2hJLEss=)
2: mKUzMIdAu70he_adzpCz9UEghFc.crl (hash: 9UT9Ks/ELoKJJzMMKwp0zjJJzWtVXcokHXJOf5PWjzA=)
3: sfQ3GEtYzhBBWxqpfOQ0GcKpsbY.roa (hash: wrk4xF0OxGaC9MkY6FPvwbKzU+JxYtuzUOz5b0tcuxA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/mKUzMIdAu70he_adzpCz9UEghFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/mKUzMIdAu70he_adzpCz9UEghFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/mKUzMIdAu70he_adzpCz9UEghFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8d:6a:d3:17:3a:be:56:03:db:b7:80:9c:c1:57:69:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98a533308740bbbd217bf69dce90b3f541208457
Validity
Not Before: Aug 9 06:00:44 2025 GMT
Not After : Aug 10 06:00:44 2025 GMT
Subject: CN=057c25972b79f233aaf4b7b5497150cd40d313e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c5:ca:60:fb:9a:7e:fc:a3:32:dc:d4:f9:96:
31:d5:32:0f:c3:13:e7:90:f9:1f:86:f5:ea:43:fb:
45:14:2e:26:e5:e4:fb:0a:fe:b3:6b:9f:84:31:91:
2f:54:b9:f0:32:3c:e1:0e:9e:9d:b1:74:a3:f5:97:
d8:2b:c6:9d:d8:cc:e4:73:35:e9:24:a7:e7:fc:b2:
e7:5c:2d:87:9b:a5:ac:82:c4:47:80:f7:53:fe:55:
45:34:f0:33:f6:62:dc:f8:60:39:41:b4:45:95:88:
da:03:6f:20:73:31:2b:22:29:37:5f:22:bb:f1:29:
15:fa:31:81:cc:20:04:7f:af:0d:19:c4:9a:9e:aa:
08:76:14:b6:0f:16:c8:be:88:02:ae:76:e2:5d:c2:
11:c6:86:3c:f8:1b:4d:05:62:cb:44:30:bb:76:2f:
78:dd:42:3c:1f:c0:53:a4:2f:dd:9e:02:b6:d4:09:
86:d5:a8:b6:50:a1:53:25:08:98:02:fc:f3:83:27:
96:aa:f3:e5:5b:d0:73:cd:6e:93:20:c4:14:bc:1a:
3f:d1:b9:76:f7:6b:d3:71:56:09:38:ee:8f:1b:9c:
3d:c6:1a:50:a5:57:3d:17:cd:b6:6a:2a:86:20:45:
93:df:89:3e:e0:dd:97:49:6c:ee:7f:b7:b2:54:c6:
fb:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:7C:25:97:2B:79:F2:33:AA:F4:B7:B5:49:71:50:CD:40:D3:13:E6
X509v3 Authority Key Identifier:
keyid:98:A5:33:30:87:40:BB:BD:21:7B:F6:9D:CE:90:B3:F5:41:20:84:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mKUzMIdAu70he_adzpCz9UEghFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/mKUzMIdAu70he_adzpCz9UEghFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/mKUzMIdAu70he_adzpCz9UEghFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:79:20:07:22:97:72:50:3c:2f:c3:05:6c:2b:4a:0c:97:f8:
d5:b4:25:b9:3e:91:b3:d5:1e:c9:8a:61:71:94:c3:2f:cb:84:
00:70:c8:67:42:ca:23:66:27:cc:c9:04:18:b4:b1:4f:4d:52:
c0:79:24:f0:c2:49:44:61:ec:2a:e8:ec:92:dd:bc:f2:4f:76:
a3:65:c3:1b:a0:cc:1f:93:3d:ec:93:f9:e5:31:b8:11:cd:c9:
f7:80:6b:2e:86:e2:69:a5:72:c1:78:14:f5:a7:56:8b:fe:cd:
99:68:a4:d7:bb:92:b1:58:15:03:dd:bb:c5:fa:60:8d:a0:ee:
18:6e:4d:64:03:83:81:e0:0f:35:da:66:3b:22:2d:72:aa:8c:
f5:52:33:60:c0:34:16:e7:11:00:bb:6b:8b:19:de:7d:27:1a:
f4:ad:3f:52:80:cd:42:a4:62:68:f8:f4:73:95:21:3e:dc:86:
f2:1b:d1:03:9c:91:04:26:d0:54:44:c3:c3:72:93:af:32:33:
1d:86:63:2e:c6:a5:65:37:71:cc:de:55:b0:fd:a6:f3:b7:2f:
f4:c3:54:15:2f:b8:52:07:ad:2b:ac:1f:79:de:bd:79:f2:6a:
d0:30:ad:11:b5:01:55:e3:ee:1f:23:10:b8:24:9a:19:ab:c8:
17:b2:2e:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:37:45 2025 by rpki-client