Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/pk-mS7PC3keIMGMSxlLedJ7JNRc.mft
File: pk-mS7PC3keIMGMSxlLedJ7JNRc.mft (raw, json)
Hash identifier: ZQkNdrEDUdmaVI+YuboPGPY/le/gNUiO1J/8ymYdW2E=
Subject key identifier: 0F:62:0D:A7:CF:ED:13:6B:AF:F7:5B:81:C5:FF:1B:E9:7C:4B:61:FF
Authority key identifier: A6:4F:A6:4B:B3:C2:DE:47:88:30:63:12:C6:52:DE:74:9E:C9:35:17
Certificate issuer: /CN=a64fa64bb3c2de4788306312c652de749ec93517
Certificate serial: 01987D89A79CA9A55088FCDCFFACCDBD3424
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pk-mS7PC3keIMGMSxlLedJ7JNRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/pk-mS7PC3keIMGMSxlLedJ7JNRc.mft
Manifest number: 0F5B
Signing time: Wed 06 Aug 2025 04:00:29 +0000
Manifest this update: Wed 06 Aug 2025 04:00:29 +0000
Manifest next update: Thu 07 Aug 2025 04:00:29 +0000
Files and hashes: 1: DGbM08ZTsAqYw2-cwkwYARO53tE.roa (hash: vRmKPjIDxHKM6g2DoHk9sDKKAGwsNzCt7i6bkh/HxXk=)
2: pk-mS7PC3keIMGMSxlLedJ7JNRc.crl (hash: 2Brc2w4qtAhU19vQIXmix+zngxb7GekVe8f3GwDqAi0=)
3: rXPM57-D6wTVhLckZD7CZVwkBW8.roa (hash: fUjK4fhETtHvQdYsLgWmfiWiFboo/MkwlvPD3alJWYc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/pk-mS7PC3keIMGMSxlLedJ7JNRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/pk-mS7PC3keIMGMSxlLedJ7JNRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/pk-mS7PC3keIMGMSxlLedJ7JNRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:89:a7:9c:a9:a5:50:88:fc:dc:ff:ac:cd:bd:34:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a64fa64bb3c2de4788306312c652de749ec93517
Validity
Not Before: Aug 6 04:00:29 2025 GMT
Not After : Aug 7 04:00:29 2025 GMT
Subject: CN=0f620da7cfed136baff75b81c5ff1be97c4b61ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:7a:e9:0b:e0:58:d9:01:7a:c6:f6:f3:80:54:
22:66:5e:31:6c:d2:6d:ea:cf:93:27:fc:41:9d:dd:
ac:a6:37:a1:f9:24:f3:29:6e:21:24:93:1b:39:0d:
8c:4e:8f:a4:05:ef:10:d4:65:54:b1:95:be:32:de:
34:af:7b:c5:85:03:87:15:5f:e9:08:8f:83:f3:98:
68:fb:8c:27:49:08:a1:a7:2a:4e:45:8d:82:e4:77:
8d:be:e3:c3:22:34:8a:4c:a0:5b:78:bc:ab:ea:34:
4a:65:02:09:af:f6:71:00:7b:0f:ed:4b:72:c8:2d:
71:3c:7d:c2:27:24:07:f6:5b:04:1f:d5:58:4f:dd:
81:53:ed:ff:56:9e:48:2f:e6:3c:e5:9b:b4:20:6a:
5f:fd:54:78:4e:c7:12:c6:bf:fc:8e:e4:41:fd:23:
62:1e:e8:a3:c1:f8:af:ae:d5:bd:88:57:a7:2d:d6:
ca:e0:3d:86:0f:97:33:24:b0:82:5b:bc:49:78:5c:
2e:6f:01:cf:aa:aa:3f:84:4d:c7:5e:17:2a:f6:3c:
55:b0:f8:51:71:43:5a:9c:26:bd:77:ae:6e:3e:e0:
fc:a4:0c:82:a9:fa:69:eb:0b:24:9a:68:fe:0c:ed:
8a:ab:87:cf:f1:6b:48:29:16:38:90:8f:bc:b5:a2:
17:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:62:0D:A7:CF:ED:13:6B:AF:F7:5B:81:C5:FF:1B:E9:7C:4B:61:FF
X509v3 Authority Key Identifier:
keyid:A6:4F:A6:4B:B3:C2:DE:47:88:30:63:12:C6:52:DE:74:9E:C9:35:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pk-mS7PC3keIMGMSxlLedJ7JNRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/pk-mS7PC3keIMGMSxlLedJ7JNRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/pk-mS7PC3keIMGMSxlLedJ7JNRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:d2:0a:e5:ad:46:39:27:7a:55:4c:27:10:49:d1:43:4b:32:
fe:14:da:48:fc:9e:91:5c:db:72:d3:12:78:5c:73:41:9d:bd:
54:4f:a7:8d:40:0f:ed:ff:5c:44:85:8f:09:03:f1:9d:84:11:
31:40:cd:16:2d:08:99:a8:b5:3e:0a:e6:9b:c8:a5:2d:4a:d1:
ae:83:f3:30:f6:a5:93:c6:be:6e:31:52:8c:b4:c8:e9:23:35:
97:e9:95:bc:ad:15:08:f1:32:19:5a:e8:ba:81:fb:e0:cd:64:
c6:6e:bc:e7:f7:57:42:bb:2a:0e:36:65:42:94:57:11:4e:13:
ae:1a:60:d3:68:5f:08:8a:4b:f3:b6:f4:03:20:31:61:e4:6b:
d4:48:eb:38:f3:6e:c5:18:39:42:34:c1:d8:eb:12:dc:27:d2:
64:ad:15:30:45:69:f9:2f:0d:87:bf:02:cd:8d:0c:d8:98:11:
ec:76:4d:29:51:f5:c7:ec:d9:1d:b2:3e:7a:a2:93:e8:17:4c:
b8:e4:ad:40:b9:9d:e6:d1:f6:68:05:9d:c2:46:38:fc:66:10:
0f:12:d1:81:da:14:be:40:c5:8d:1e:de:e6:87:44:db:3c:20:
50:6f:42:0c:a2:7c:37:a7:22:19:05:61:12:d3:b4:6d:06:45:
60:cd:6c:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:40:55 2025 by rpki-client