Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/72bd07-3cf1-45b1-9eef-b847eb77afc8/1/mK_pac8OqToOjlfulYjK9VcrOyI.mft
File: mK_pac8OqToOjlfulYjK9VcrOyI.mft (raw, json)
Hash identifier: 9R5qDHeL9S3mzpfofLae++5RUTa527n5dCf4Sft3GQk=
Subject key identifier: 71:78:9B:63:6B:5C:EF:1B:34:A6:5A:39:9C:81:C2:BD:21:2A:F7:10
Authority key identifier: 98:AF:E9:69:CF:0E:A9:3A:0E:8E:57:EE:95:88:CA:F5:57:2B:3B:22
Certificate issuer: /CN=98afe969cf0ea93a0e8e57ee9588caf5572b3b22
Certificate serial: 01987DF86E61339276A2EA0D88F9E346B832
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mK_pac8OqToOjlfulYjK9VcrOyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/72bd07-3cf1-45b1-9eef-b847eb77afc8/1/mK_pac8OqToOjlfulYjK9VcrOyI.mft
Manifest number: 0441
Signing time: Wed 06 Aug 2025 06:01:29 +0000
Manifest this update: Wed 06 Aug 2025 06:01:29 +0000
Manifest next update: Thu 07 Aug 2025 06:01:29 +0000
Files and hashes: 1: 022L9fV8F1ZZ2EE1EuaAsn4eywo.roa (hash: XmLPJO8dC104vud5SObyJBz1K1qN+7X4uqFqIhLIBZ4=)
2: mK_pac8OqToOjlfulYjK9VcrOyI.crl (hash: +EQZ8tlcgn/suD6+R+HZ2s4XMw3xk07hxJpgfI3N6v8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/72bd07-3cf1-45b1-9eef-b847eb77afc8/1/mK_pac8OqToOjlfulYjK9VcrOyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/72bd07-3cf1-45b1-9eef-b847eb77afc8/1/mK_pac8OqToOjlfulYjK9VcrOyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/mK_pac8OqToOjlfulYjK9VcrOyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:f8:6e:61:33:92:76:a2:ea:0d:88:f9:e3:46:b8:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98afe969cf0ea93a0e8e57ee9588caf5572b3b22
Validity
Not Before: Aug 6 06:01:29 2025 GMT
Not After : Aug 7 06:01:29 2025 GMT
Subject: CN=71789b636b5cef1b34a65a399c81c2bd212af710
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:dd:22:68:3c:53:50:7a:38:0d:f7:a5:70:29:
62:30:e7:1e:80:d0:e0:2a:92:37:12:9d:12:4f:eb:
cd:a0:22:91:1a:27:87:83:d8:66:4c:48:07:60:50:
33:4a:25:18:fa:2f:99:6b:d4:5c:42:13:d9:36:4d:
64:e3:9f:94:36:a2:03:4f:72:e9:dc:57:1f:c7:b2:
62:85:6c:c0:6d:20:8a:37:f3:58:dc:1c:5c:e3:e5:
3c:a9:2c:03:30:ba:50:f3:64:30:77:50:c4:20:21:
26:43:ef:36:a7:ed:35:9e:c8:67:31:48:9d:da:65:
2e:95:87:3e:bf:2d:ec:b7:4d:9f:57:ee:b8:d6:15:
ae:fe:63:3c:a4:3e:80:0f:64:5a:17:f3:b9:5d:58:
61:2b:ba:d8:c1:0e:90:6a:09:41:b8:ef:0e:be:05:
22:7c:b2:e7:ec:29:b2:d3:13:ba:64:17:d7:d7:7b:
f1:76:be:fe:fe:c1:2b:ed:98:ca:c2:c5:33:0e:1a:
4a:0c:44:55:a2:96:7d:91:01:6f:b9:eb:76:04:85:
98:6f:62:47:a9:f7:13:06:f3:70:c8:af:43:84:ac:
b3:3f:8f:0b:c8:1f:e8:9b:8a:35:01:b9:94:c6:94:
64:d3:a4:f1:c7:cf:10:fc:3f:94:d0:ce:48:7d:1d:
02:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:78:9B:63:6B:5C:EF:1B:34:A6:5A:39:9C:81:C2:BD:21:2A:F7:10
X509v3 Authority Key Identifier:
keyid:98:AF:E9:69:CF:0E:A9:3A:0E:8E:57:EE:95:88:CA:F5:57:2B:3B:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mK_pac8OqToOjlfulYjK9VcrOyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/72bd07-3cf1-45b1-9eef-b847eb77afc8/1/mK_pac8OqToOjlfulYjK9VcrOyI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/72bd07-3cf1-45b1-9eef-b847eb77afc8/1/mK_pac8OqToOjlfulYjK9VcrOyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:88:db:12:5a:ad:b6:ee:6b:ab:5a:a5:8f:09:d4:6f:b6:27:
6e:c5:b6:e4:62:c9:5f:df:98:78:8f:5d:2f:b8:de:48:53:07:
13:39:3f:ea:54:7d:ba:ed:a4:81:04:c4:36:e4:0f:bd:c3:79:
c4:48:5a:b6:2d:f1:88:21:1b:77:f0:8b:cd:ca:cc:1b:cc:63:
2a:87:7d:8d:a7:e8:4d:1e:5a:6a:d7:bd:5d:d9:56:27:58:33:
47:e3:8d:97:94:eb:62:47:fc:a1:d8:4e:2a:37:d1:f5:af:bc:
cb:3e:06:8c:11:f9:9b:f7:9c:2f:59:a0:46:89:af:2c:41:af:
fa:da:21:e9:60:88:34:d3:2a:66:4a:ae:30:41:6d:c6:ae:e3:
da:94:af:fa:b1:f2:e5:3d:5f:e5:ce:0f:d1:46:99:fe:2f:a8:
99:b0:57:59:04:88:ae:15:b3:30:10:e5:3c:eb:f5:94:fa:b2:
a8:89:1c:7d:67:50:a0:d1:53:40:42:e1:93:c6:e3:05:ea:a5:
76:f9:4a:ef:fa:0d:69:61:7a:1c:3e:a7:13:1d:f6:31:56:98:
45:67:35:f0:1e:76:15:21:28:06:76:2e:fe:af:08:16:41:94:
3c:af:62:58:fe:fb:5d:76:7e:63:91:de:0b:8b:21:c1:3c:da:
cb:9c:4b:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:26:33 2025 by rpki-client