Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/mk123S9GBosIca1FAKxuV3r-Rpw.mft
File: mk123S9GBosIca1FAKxuV3r-Rpw.mft (raw, json)
Hash identifier: YZt2yIH3ndZhSNbX7TCmy7cOBCZjwDKgE1x+tSuNCqc=
Subject key identifier: 50:13:42:66:24:BA:06:F6:3F:03:F6:36:C5:CA:4C:A2:83:30:E6:F3
Authority key identifier: 9A:4D:76:DD:2F:46:06:8B:08:71:AD:45:00:AC:6E:57:7A:FE:46:9C
Certificate issuer: /CN=9a4d76dd2f46068b0871ad4500ac6e577afe469c
Certificate serial: 019A4D3CF5B6E822F55C83FD71E5A736035D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mk123S9GBosIca1FAKxuV3r-Rpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/mk123S9GBosIca1FAKxuV3r-Rpw.mft
Manifest number: 1717
Signing time: Tue 04 Nov 2025 05:00:31 +0000
Manifest this update: Tue 04 Nov 2025 05:00:31 +0000
Manifest next update: Wed 05 Nov 2025 05:00:31 +0000
Files and hashes: 1: g_4HQ6dPEqLM5A1GtfThJC294J4.roa (hash: LZYhI0FV7wY5oWB7xQyZ5bQSIIqgJBDQ7uNwEne/gVE=)
2: j-Wf3znAxyHVOa1yHEzX6v3sp9U.roa (hash: OwOwX0XTVGFVpqs+QebopX8jgHz3h7KxGANJ/Crp1oA=)
3: mk123S9GBosIca1FAKxuV3r-Rpw.crl (hash: igbOyDtjV9q9GOn7e99Yvod4SRxY6EUvIhZUaDejqNY=)
4: vscV7GZRMa0CPUTvFLBuSp-lIJ8.roa (hash: 2C3QYWkPGEbQmt4ETFEFUqH1R92qUMl/4nE7fTPMPhA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/mk123S9GBosIca1FAKxuV3r-Rpw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/mk123S9GBosIca1FAKxuV3r-Rpw.mft
rsync://rpki.ripe.net/repository/DEFAULT/mk123S9GBosIca1FAKxuV3r-Rpw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3c:f5:b6:e8:22:f5:5c:83:fd:71:e5:a7:36:03:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a4d76dd2f46068b0871ad4500ac6e577afe469c
Validity
Not Before: Nov 4 05:00:31 2025 GMT
Not After : Nov 5 05:00:31 2025 GMT
Subject: CN=5013426624ba06f63f03f636c5ca4ca28330e6f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:13:a1:f4:59:62:96:ac:9f:00:d6:2f:5c:ae:
50:7d:4e:51:2d:29:44:ee:0a:c2:e1:bc:61:2b:64:
d2:ac:e5:65:66:06:19:7b:5b:c3:d5:26:d5:0b:3c:
ef:ff:d3:70:f0:ac:9a:ee:a4:cf:5e:69:3d:df:c7:
a9:64:6c:1e:0c:4d:dc:13:e3:c7:1d:99:ac:42:5b:
16:60:68:a3:45:22:57:a3:89:83:1e:80:d2:cb:36:
65:1a:b8:ad:4e:72:46:68:f9:ce:de:2d:2c:36:6d:
0e:25:15:d0:14:bd:23:5f:74:a4:f2:b2:fa:28:9e:
91:36:c6:41:cd:bc:e5:eb:b3:cd:82:92:69:8b:42:
f4:ca:dc:a7:11:f7:f5:ba:42:bd:f1:db:30:57:7b:
35:eb:9e:3b:cb:c0:91:6e:bc:e1:56:1b:a3:13:72:
2f:cb:47:ab:52:c8:ca:63:30:5c:79:18:7c:2a:ed:
0c:11:ff:94:cf:59:35:38:1d:c5:3d:44:ee:ee:b5:
d7:1b:01:d5:79:f0:28:a3:e7:91:2d:46:7c:ab:f4:
cc:8f:66:54:d8:5e:11:4d:9d:ff:ce:ca:70:84:53:
82:bd:fb:50:10:01:c9:cf:4f:2a:e1:bd:1d:c3:51:
3f:c2:9d:da:f8:31:7f:3d:89:d3:d8:ce:a5:4a:9e:
cf:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:13:42:66:24:BA:06:F6:3F:03:F6:36:C5:CA:4C:A2:83:30:E6:F3
X509v3 Authority Key Identifier:
keyid:9A:4D:76:DD:2F:46:06:8B:08:71:AD:45:00:AC:6E:57:7A:FE:46:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mk123S9GBosIca1FAKxuV3r-Rpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/mk123S9GBosIca1FAKxuV3r-Rpw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/mk123S9GBosIca1FAKxuV3r-Rpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:e8:4a:a4:aa:c6:ee:87:c6:1b:30:22:3c:21:4d:c1:d8:ae:
d7:5e:90:f1:3d:c2:f7:51:31:6b:ab:5c:45:0e:a7:26:0e:e7:
0d:58:4c:74:9b:bb:a3:a4:0b:93:ab:50:bd:f0:ce:dd:f0:2e:
6d:ce:4d:e8:1f:5a:da:ae:9a:fe:2a:04:ee:4a:10:b6:56:2e:
a9:8f:0c:c6:ab:33:84:3d:b6:d1:71:d6:97:f7:6b:1f:ab:a0:
7f:51:25:be:27:78:ed:ec:58:05:44:2b:af:04:30:69:2d:63:
5a:18:22:f9:6b:d9:85:66:87:1e:4b:a8:9e:e8:6e:51:8c:b6:
c3:e4:e4:ad:cc:cc:fa:74:b4:70:3d:f1:53:cc:aa:4f:1d:e8:
0d:ee:e6:37:5d:18:88:92:f1:8e:b4:31:3d:3c:87:a6:69:18:
1a:ec:1e:56:4b:1d:40:f6:03:ba:70:09:80:a9:25:b1:e2:97:
16:29:1e:bd:f7:0b:b4:f0:a7:80:c0:ef:86:8a:eb:c8:22:db:
3d:8f:8c:63:ca:9d:39:22:fb:e6:28:53:fd:98:e4:f5:9b:45:
f0:67:cf:2f:2f:ea:8c:77:b0:ee:b7:4a:41:27:7b:a7:1a:3e:
c7:c0:d9:eb:54:0f:0f:28:5c:f6:9a:be:6d:d8:ac:3e:e4:13:
7c:96:84:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:40:39 2025 by rpki-client