Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/mk123S9GBosIca1FAKxuV3r-Rpw.mft
File: mk123S9GBosIca1FAKxuV3r-Rpw.mft (raw, json)
Hash identifier: +pXUi3eKpoPfvDF9gYvfXNMQ+J32HDC7hhOsUEW8U+I=
Subject key identifier: E4:1D:2D:C1:0B:01:4A:36:B8:AB:E4:F5:68:CA:2C:1F:FB:56:7C:37
Authority key identifier: 9A:4D:76:DD:2F:46:06:8B:08:71:AD:45:00:AC:6E:57:7A:FE:46:9C
Certificate issuer: /CN=9a4d76dd2f46068b0871ad4500ac6e577afe469c
Certificate serial: 0197715117F33B899E7F927FEE4920AC95AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mk123S9GBosIca1FAKxuV3r-Rpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/mk123S9GBosIca1FAKxuV3r-Rpw.mft
Manifest number: 159C
Signing time: Sun 15 Jun 2025 02:00:29 +0000
Manifest this update: Sun 15 Jun 2025 02:00:29 +0000
Manifest next update: Mon 16 Jun 2025 02:00:29 +0000
Files and hashes: 1: g_4HQ6dPEqLM5A1GtfThJC294J4.roa (hash: LZYhI0FV7wY5oWB7xQyZ5bQSIIqgJBDQ7uNwEne/gVE=)
2: j-Wf3znAxyHVOa1yHEzX6v3sp9U.roa (hash: OwOwX0XTVGFVpqs+QebopX8jgHz3h7KxGANJ/Crp1oA=)
3: mk123S9GBosIca1FAKxuV3r-Rpw.crl (hash: WpP8sAO6+pGTpl+qTKQaaY3J/av8qPMtIFi8dCzdp7A=)
4: vscV7GZRMa0CPUTvFLBuSp-lIJ8.roa (hash: 2C3QYWkPGEbQmt4ETFEFUqH1R92qUMl/4nE7fTPMPhA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/mk123S9GBosIca1FAKxuV3r-Rpw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/mk123S9GBosIca1FAKxuV3r-Rpw.mft
rsync://rpki.ripe.net/repository/DEFAULT/mk123S9GBosIca1FAKxuV3r-Rpw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:51:17:f3:3b:89:9e:7f:92:7f:ee:49:20:ac:95:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a4d76dd2f46068b0871ad4500ac6e577afe469c
Validity
Not Before: Jun 15 02:00:29 2025 GMT
Not After : Jun 16 02:00:29 2025 GMT
Subject: CN=e41d2dc10b014a36b8abe4f568ca2c1ffb567c37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:0a:7f:3d:a1:70:bf:43:ad:dc:70:25:e8:fa:
4c:f1:99:eb:bf:8f:a8:11:9f:55:2d:44:98:56:f0:
a9:f7:50:9d:9f:62:ec:99:8b:c9:b7:83:d3:07:27:
d2:9e:e9:4e:58:89:e7:ab:88:56:10:85:9d:f5:c0:
a2:ef:0e:d8:b2:60:31:b7:28:99:0a:b4:58:08:7f:
96:d5:a1:17:11:9c:63:5e:02:53:5f:37:24:de:38:
da:bc:19:51:bf:44:73:33:13:a4:f8:c5:e5:e6:1a:
8f:33:69:64:d9:53:4a:36:35:0e:e5:93:47:6b:97:
e6:69:49:d6:af:70:27:cf:e1:ba:67:71:a4:0f:a4:
73:a0:f7:29:19:b6:c1:63:2c:d1:d3:94:b6:72:9f:
91:61:c4:a2:e5:cb:1f:8e:ea:02:bd:45:b9:c7:26:
f6:04:eb:68:f3:bc:9f:1a:68:97:3c:ca:d5:43:42:
5e:df:a6:aa:5a:95:11:3f:cb:c9:01:0d:23:cc:52:
46:17:b0:4d:32:d9:16:1a:ab:2a:ea:e7:01:6a:e5:
3c:e8:4b:bc:4f:53:dd:cd:6f:61:96:8a:e3:b6:f2:
16:60:f7:a4:10:3a:a4:f7:d5:44:3d:e3:a8:61:43:
3f:3e:c3:f3:1c:5b:f2:fb:d9:fe:a4:2c:e1:16:b0:
91:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:1D:2D:C1:0B:01:4A:36:B8:AB:E4:F5:68:CA:2C:1F:FB:56:7C:37
X509v3 Authority Key Identifier:
keyid:9A:4D:76:DD:2F:46:06:8B:08:71:AD:45:00:AC:6E:57:7A:FE:46:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mk123S9GBosIca1FAKxuV3r-Rpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/mk123S9GBosIca1FAKxuV3r-Rpw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/mk123S9GBosIca1FAKxuV3r-Rpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:6c:aa:5d:ac:15:e1:d4:ff:52:a4:ae:3e:a2:be:68:95:fa:
be:4c:b3:9a:53:88:f8:85:93:97:8a:27:ab:78:59:14:ec:46:
cb:bf:8b:fb:8a:14:f8:71:7a:b7:69:00:9b:a0:6e:16:53:da:
3a:95:d3:eb:0c:be:57:9d:2f:b8:0a:89:09:88:73:1c:28:f3:
19:f4:d5:29:b6:38:7c:77:de:00:79:04:55:3d:fd:a9:17:3e:
1e:07:44:53:e7:7e:6a:3c:cc:10:87:b3:99:db:38:17:d9:a7:
72:a6:ee:5d:17:7b:2d:fe:f6:30:ab:41:09:ea:61:b6:aa:1b:
10:86:59:d8:8b:b8:f4:9c:a2:b8:f9:d1:da:a3:b6:35:16:53:
4f:ce:2c:6f:48:9a:31:e3:39:f8:5f:6d:13:90:1b:72:14:f3:
4e:7d:c3:27:f9:79:e0:73:62:52:7f:fa:5f:41:02:a1:0d:ad:
da:cf:9e:a4:1c:72:48:11:d4:b2:7f:9e:e6:c1:0b:5e:5c:dc:
97:07:07:5a:de:c9:15:53:6b:5b:db:1a:b9:dd:2b:9d:36:8c:
04:6a:2b:50:a6:88:a8:69:7f:9a:ea:b2:83:f0:00:bd:0c:e1:
05:a4:6d:38:cf:84:09:b7:32:d3:82:39:bb:88:92:b0:34:b6:
37:85:f9:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 13:11:52 2025 by rpki-client