Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/mk123S9GBosIca1FAKxuV3r-Rpw.mft
File: mk123S9GBosIca1FAKxuV3r-Rpw.mft (raw, json)
Hash identifier: qmF9Kwei3x7uFCscL/NevX4ve5rF+ptlYp/Lb24RHpc=
Subject key identifier: E2:CE:0E:8C:07:A0:06:2F:6A:A5:3C:72:B2:9F:CE:39:57:D4:2B:A3
Authority key identifier: 9A:4D:76:DD:2F:46:06:8B:08:71:AD:45:00:AC:6E:57:7A:FE:46:9C
Certificate issuer: /CN=9a4d76dd2f46068b0871ad4500ac6e577afe469c
Certificate serial: 01987DC1153F664A352F7198DDBF23C18A50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mk123S9GBosIca1FAKxuV3r-Rpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/mk123S9GBosIca1FAKxuV3r-Rpw.mft
Manifest number: 1627
Signing time: Wed 06 Aug 2025 05:01:02 +0000
Manifest this update: Wed 06 Aug 2025 05:01:02 +0000
Manifest next update: Thu 07 Aug 2025 05:01:02 +0000
Files and hashes: 1: g_4HQ6dPEqLM5A1GtfThJC294J4.roa (hash: LZYhI0FV7wY5oWB7xQyZ5bQSIIqgJBDQ7uNwEne/gVE=)
2: j-Wf3znAxyHVOa1yHEzX6v3sp9U.roa (hash: OwOwX0XTVGFVpqs+QebopX8jgHz3h7KxGANJ/Crp1oA=)
3: mk123S9GBosIca1FAKxuV3r-Rpw.crl (hash: OwrWLfYdb6Yehm63mCPqvx9DCVKCjvpXHR0yMhYdeZ0=)
4: vscV7GZRMa0CPUTvFLBuSp-lIJ8.roa (hash: 2C3QYWkPGEbQmt4ETFEFUqH1R92qUMl/4nE7fTPMPhA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/mk123S9GBosIca1FAKxuV3r-Rpw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/mk123S9GBosIca1FAKxuV3r-Rpw.mft
rsync://rpki.ripe.net/repository/DEFAULT/mk123S9GBosIca1FAKxuV3r-Rpw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 05:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:c1:15:3f:66:4a:35:2f:71:98:dd:bf:23:c1:8a:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a4d76dd2f46068b0871ad4500ac6e577afe469c
Validity
Not Before: Aug 6 05:01:02 2025 GMT
Not After : Aug 7 05:01:02 2025 GMT
Subject: CN=e2ce0e8c07a0062f6aa53c72b29fce3957d42ba3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2c:97:27:4b:ef:2b:07:4c:34:c1:94:12:36:
67:ce:58:60:14:4e:27:c6:de:0f:39:d3:c8:47:d3:
82:db:6f:52:5c:99:cc:ac:27:34:19:be:5c:79:51:
bd:22:7f:21:29:1a:25:20:1c:94:f0:90:a6:2b:bd:
1f:32:35:e4:68:d6:e7:ea:64:30:7a:91:cb:5c:be:
ac:3a:3c:b8:60:a2:39:cd:1c:85:68:83:7b:44:52:
61:6e:a8:c3:db:71:dc:1e:3f:43:1f:cd:13:94:09:
db:ac:5f:82:7c:f9:43:d0:75:38:f6:55:cb:86:af:
3c:9b:d0:46:86:bd:1f:25:86:a9:06:3d:5c:f1:41:
f2:68:ea:74:01:0a:6d:54:57:10:9d:1b:57:7d:93:
ed:5e:8f:d0:d9:47:2f:f1:94:2c:ca:58:b4:06:a9:
75:b1:e7:37:7e:a4:a2:80:67:16:bc:3a:26:d7:cd:
8e:0c:1d:8a:eb:55:31:93:85:53:11:ed:26:d3:48:
04:3b:90:a7:4f:c0:60:1d:8b:3d:c6:01:37:69:32:
ce:32:92:f3:53:d1:89:73:50:5d:4e:d7:bd:48:c2:
3e:18:46:ea:19:bd:18:f6:5f:1f:a6:ea:da:bd:85:
e0:ac:75:71:c0:b1:1f:fa:50:8a:a7:0c:08:72:88:
6f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:CE:0E:8C:07:A0:06:2F:6A:A5:3C:72:B2:9F:CE:39:57:D4:2B:A3
X509v3 Authority Key Identifier:
keyid:9A:4D:76:DD:2F:46:06:8B:08:71:AD:45:00:AC:6E:57:7A:FE:46:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mk123S9GBosIca1FAKxuV3r-Rpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/mk123S9GBosIca1FAKxuV3r-Rpw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/mk123S9GBosIca1FAKxuV3r-Rpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:a3:7f:48:11:0d:cd:a7:93:db:95:76:0a:c6:e2:ab:54:1f:
5b:f1:ec:9f:08:99:80:32:d0:1c:03:b8:4d:ac:2a:db:58:33:
b5:8c:c1:2e:7e:29:3c:a0:51:6e:65:cb:de:32:f4:cb:8b:07:
0d:d8:41:f7:90:f1:18:0c:83:f6:44:d5:83:5b:85:3c:3f:5b:
28:0e:06:36:f3:16:d0:a1:6f:12:78:91:f0:9b:59:d0:a5:a9:
24:99:32:cf:e9:59:95:48:b8:fa:9e:bb:88:70:35:5d:6e:56:
e4:4f:c2:7d:21:b7:df:cd:ae:8e:23:19:10:cd:5b:b4:09:01:
b5:d7:b5:fe:a3:5b:0d:7a:09:da:50:6d:66:37:e6:5b:19:0e:
a8:de:b9:d7:59:e7:f8:f9:94:7b:e3:96:33:18:e4:27:c0:21:
91:bf:fe:bb:9f:7c:aa:1e:cf:3f:d7:9b:73:5c:35:5a:76:e6:
69:9f:ae:b4:87:d4:dd:07:97:b4:4a:82:4d:62:ec:1c:b6:d0:
25:78:77:a2:dd:cb:76:7c:a5:b9:51:0a:e2:43:de:42:c8:0c:
83:81:b7:e0:2d:65:0f:7d:6a:35:5f:90:ea:fa:57:24:8b:e3:
6e:56:e9:ae:61:5f:2b:07:37:39:e2:dc:7b:b8:2e:00:20:44:
82:1d:b4:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:09:05 2025 by rpki-client