Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/512313-afcd-4e9a-bb70-71005f7f02a8/1/mGkK8GLqmzrl9kz5qf6lYyTGvZc.mft
File: mGkK8GLqmzrl9kz5qf6lYyTGvZc.mft (raw, json)
Hash identifier: 1FdImmC8kJZ3Ym1JCCrXqTM9qL/L+U6RC8pPiL+9zl8=
Subject key identifier: 5E:4B:DB:EB:47:62:D9:9B:CF:6D:8F:B7:DA:4C:91:04:2C:19:BC:91
Authority key identifier: 98:69:0A:F0:62:EA:9B:3A:E5:F6:4C:F9:A9:FE:A5:63:24:C6:BD:97
Certificate issuer: /CN=98690af062ea9b3ae5f64cf9a9fea56324c6bd97
Certificate serial: 019896A64B4A0AAA603A42AD9C142627E078
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGkK8GLqmzrl9kz5qf6lYyTGvZc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/512313-afcd-4e9a-bb70-71005f7f02a8/1/mGkK8GLqmzrl9kz5qf6lYyTGvZc.mft
Manifest number: 162B
Signing time: Mon 11 Aug 2025 01:02:17 +0000
Manifest this update: Mon 11 Aug 2025 01:02:17 +0000
Manifest next update: Tue 12 Aug 2025 01:02:17 +0000
Files and hashes: 1: CxGOoBY5YoTyd6Nu8KyBbb6HwB4.roa (hash: W6T/EKpt1B07PivG7xwB9X1O2PEBzOLgzqiyKvlh3q4=)
2: mGkK8GLqmzrl9kz5qf6lYyTGvZc.crl (hash: VKck/PJC2GOkrlTxAtQQuGVes3bAUSov9Y+AdsjqyeE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/512313-afcd-4e9a-bb70-71005f7f02a8/1/mGkK8GLqmzrl9kz5qf6lYyTGvZc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/512313-afcd-4e9a-bb70-71005f7f02a8/1/mGkK8GLqmzrl9kz5qf6lYyTGvZc.mft
rsync://rpki.ripe.net/repository/DEFAULT/mGkK8GLqmzrl9kz5qf6lYyTGvZc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 01:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:a6:4b:4a:0a:aa:60:3a:42:ad:9c:14:26:27:e0:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98690af062ea9b3ae5f64cf9a9fea56324c6bd97
Validity
Not Before: Aug 11 01:02:17 2025 GMT
Not After : Aug 12 01:02:17 2025 GMT
Subject: CN=5e4bdbeb4762d99bcf6d8fb7da4c91042c19bc91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:54:88:cc:7e:ac:3c:72:10:c7:db:c0:a6:cb:
5a:ea:e1:bb:58:40:19:fa:35:77:63:88:09:13:8c:
df:68:14:4f:39:50:19:c9:eb:5f:42:1e:ac:99:fb:
4b:a0:7e:95:f4:6e:dd:df:fa:ee:6e:45:c8:a5:26:
d7:c8:92:a6:f1:f3:f9:3e:a7:35:01:7d:59:4d:7c:
e9:69:92:21:58:31:46:ff:58:ee:75:c4:cf:57:1a:
cf:98:e2:89:c1:e1:c1:9c:d2:75:9f:2c:f5:37:05:
0d:7d:4a:1d:7d:08:a0:09:6b:39:19:1a:e2:87:d5:
15:9d:ce:a1:a1:e6:5f:c0:4e:2f:54:ef:4c:23:de:
99:b3:75:71:b0:16:e4:41:43:be:6f:9a:6f:26:3c:
bc:b9:48:aa:19:e5:64:e8:60:d9:7e:f9:c2:02:12:
4f:36:dd:83:58:9d:5c:cb:14:e1:d6:13:cc:2c:cc:
d6:9c:80:29:d4:cf:39:68:65:82:0f:49:87:46:59:
63:e7:16:7a:a1:d7:67:a7:6c:66:85:f5:7b:fe:11:
87:37:73:6b:a6:11:d4:3b:2c:68:39:e2:b0:90:a9:
7a:a5:ff:9c:ee:6d:38:f2:27:b1:9d:74:9d:58:ae:
5a:78:f5:fd:38:0f:43:9c:2b:f7:83:2c:a8:bd:d6:
c3:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:4B:DB:EB:47:62:D9:9B:CF:6D:8F:B7:DA:4C:91:04:2C:19:BC:91
X509v3 Authority Key Identifier:
keyid:98:69:0A:F0:62:EA:9B:3A:E5:F6:4C:F9:A9:FE:A5:63:24:C6:BD:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGkK8GLqmzrl9kz5qf6lYyTGvZc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/512313-afcd-4e9a-bb70-71005f7f02a8/1/mGkK8GLqmzrl9kz5qf6lYyTGvZc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/512313-afcd-4e9a-bb70-71005f7f02a8/1/mGkK8GLqmzrl9kz5qf6lYyTGvZc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:df:d9:aa:28:70:34:c0:b0:cd:9e:57:59:37:58:39:8a:2d:
50:29:ec:49:98:1a:40:63:02:25:24:00:dc:6a:f0:3d:c3:21:
bd:2c:99:88:79:ae:53:9f:14:4f:d9:fd:8e:38:e8:47:18:12:
d0:83:25:b9:c8:97:33:71:e8:d5:f3:e9:41:5e:98:b1:4f:6a:
ae:8c:fa:7c:fb:1d:c3:af:b5:64:57:47:fc:5f:c0:e2:7a:5e:
cd:20:94:94:58:c0:fb:51:f6:34:a8:7f:86:f4:b7:8a:2f:5a:
77:b8:8f:3b:dc:fe:85:9b:05:21:92:fe:b5:28:87:e8:68:0f:
db:cb:85:9c:a8:d6:9e:85:d9:75:5d:01:56:cd:ae:45:27:b6:
05:dd:4f:ec:82:d8:58:f2:53:66:bb:20:dc:a2:c1:ad:fd:b3:
d5:66:ee:65:ee:56:75:0d:78:8f:6f:26:42:3b:f0:fe:38:e2:
fd:f8:2d:10:e1:3b:7e:27:32:3d:e4:85:61:f5:e4:98:33:12:
f8:4b:82:66:8e:45:e9:66:3c:c7:78:a2:7b:01:b7:91:c0:b6:
3f:c2:7d:a5:9b:63:dc:e2:c5:4d:c7:44:53:77:9a:ca:80:fd:
79:15:ff:35:9e:94:7c:25:84:81:de:c4:4e:56:0b:e7:ed:43:
c9:d1:f9:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:09:27 2025 by rpki-client