Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/9479ca-3db5-4f62-8e23-730b17f069ab/1/MkZ5WtaKa63Vr8trpGU-nAkPyFo.mft
File: MkZ5WtaKa63Vr8trpGU-nAkPyFo.mft (raw, json)
Hash identifier: Az6+3XuFw7e6patkPnhNQG2oYhYZxMswtXzYcMSmrZk=
Subject key identifier: 70:9D:59:7A:A5:76:EB:80:AF:F0:61:85:4A:91:D8:7F:D0:E1:15:FE
Authority key identifier: 32:46:79:5A:D6:8A:6B:AD:D5:AF:CB:6B:A4:65:3E:9C:09:0F:C8:5A
Certificate issuer: /CN=3246795ad68a6badd5afcb6ba4653e9c090fc85a
Certificate serial: 0198756259BAAA3E00059F82913B6A05ECB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MkZ5WtaKa63Vr8trpGU-nAkPyFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/9479ca-3db5-4f62-8e23-730b17f069ab/1/MkZ5WtaKa63Vr8trpGU-nAkPyFo.mft
Manifest number: 13B6
Signing time: Mon 04 Aug 2025 14:00:36 +0000
Manifest this update: Mon 04 Aug 2025 14:00:36 +0000
Manifest next update: Tue 05 Aug 2025 14:00:36 +0000
Files and hashes: 1: LZ8uAkntmN0c-t2Y6sQNZXRHvWc.roa (hash: pnKmEkhVyamHT8q5re1u8FHw0CqLvJSlSrJsXdTnczY=)
2: MkZ5WtaKa63Vr8trpGU-nAkPyFo.crl (hash: EZQCrpJV5MnNu539EP7MYzH2i0m7gvBou2ht/ukrrtw=)
3: RB-1Fy5sD5ZVDFZv751PSyh3H9Q.roa (hash: mxQ53KQYRRHLBJuqI/DtJ482oAxxveSfP/pLhygbyl4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/9479ca-3db5-4f62-8e23-730b17f069ab/1/MkZ5WtaKa63Vr8trpGU-nAkPyFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/9479ca-3db5-4f62-8e23-730b17f069ab/1/MkZ5WtaKa63Vr8trpGU-nAkPyFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/MkZ5WtaKa63Vr8trpGU-nAkPyFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:62:59:ba:aa:3e:00:05:9f:82:91:3b:6a:05:ec:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3246795ad68a6badd5afcb6ba4653e9c090fc85a
Validity
Not Before: Aug 4 14:00:36 2025 GMT
Not After : Aug 5 14:00:36 2025 GMT
Subject: CN=709d597aa576eb80aff061854a91d87fd0e115fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ba:f1:12:41:08:17:7f:38:30:3f:bf:b9:ac:
5a:d9:7d:83:e2:b8:6b:ba:7a:30:38:e4:ff:1b:3b:
f7:e7:73:cf:1a:ca:32:bd:50:bd:64:0d:42:24:b0:
80:c3:3c:43:34:36:2e:4b:bc:5d:d1:5d:c7:12:d3:
ac:94:41:54:d7:78:b1:7a:db:c2:af:9c:88:28:03:
42:f7:9e:19:93:0b:fb:ef:a2:46:a0:51:9c:c2:ef:
51:b1:e5:72:81:0d:e8:a7:ca:ef:fe:6c:f7:5d:9c:
0e:f6:f5:8b:da:c7:4b:ba:38:1e:2e:51:97:f9:e9:
a3:4d:fe:76:69:f7:45:18:71:a1:92:0c:d7:59:74:
e8:93:21:4f:13:fe:c1:30:e8:e2:e7:e9:a7:da:34:
86:83:ff:a2:38:da:0d:fe:4e:44:18:75:08:5e:e6:
f6:b2:80:99:c8:88:ce:dc:4a:ad:dc:e5:90:ae:5b:
62:07:52:ef:bb:b2:8e:8e:b3:38:b5:86:1a:9d:de:
94:bd:c8:db:06:82:f7:52:1b:bf:91:20:0c:06:be:
1d:01:48:22:03:b8:1e:51:16:81:97:b1:5a:51:c1:
99:fb:0b:bb:5f:7c:aa:9b:00:4d:c2:67:44:57:d5:
4c:85:32:53:33:4c:14:4a:f0:cf:6a:44:14:a4:b9:
fb:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:9D:59:7A:A5:76:EB:80:AF:F0:61:85:4A:91:D8:7F:D0:E1:15:FE
X509v3 Authority Key Identifier:
keyid:32:46:79:5A:D6:8A:6B:AD:D5:AF:CB:6B:A4:65:3E:9C:09:0F:C8:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MkZ5WtaKa63Vr8trpGU-nAkPyFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/9479ca-3db5-4f62-8e23-730b17f069ab/1/MkZ5WtaKa63Vr8trpGU-nAkPyFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/9479ca-3db5-4f62-8e23-730b17f069ab/1/MkZ5WtaKa63Vr8trpGU-nAkPyFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:28:91:cb:47:c8:a0:e5:d7:0b:ba:af:87:16:df:32:f9:58:
36:1d:01:e2:b1:f3:2c:9d:92:53:77:71:34:c5:3d:49:6e:53:
8c:05:c4:3f:96:4d:57:e9:42:d0:a9:d1:12:95:c9:88:a9:5d:
3b:68:62:41:73:2b:f0:4f:48:f2:e1:d0:fe:d3:b4:11:46:01:
a8:2f:65:93:8f:04:ec:6a:e2:cc:52:d4:ee:04:c4:2e:43:d7:
f5:f2:cd:60:0d:9d:fc:6f:83:a0:45:b8:7e:23:92:0c:39:43:
d2:cc:2d:5b:3a:3e:f0:3b:3a:2f:85:8c:9c:6b:e0:79:e4:41:
5a:38:97:4f:86:61:40:21:d9:86:56:bd:fc:19:a9:6a:46:21:
24:15:a7:64:6a:fd:d9:f3:38:e7:1d:b3:51:52:01:0b:50:32:
88:9b:90:3c:9a:94:53:7a:eb:9a:ab:17:8a:82:a1:c9:98:85:
70:ca:f1:b6:8d:bc:73:e9:72:19:ec:60:1b:aa:27:5a:6b:cc:
70:c9:da:e1:b9:97:0a:cc:73:2e:94:7a:52:41:86:d9:9a:47:
33:da:97:67:37:c7:6f:9e:41:d7:f9:4a:8f:7c:ec:86:0a:26:
67:9f:27:df:c7:3b:61:16:5b:47:d3:4e:dd:47:14:76:9a:d3:
a7:74:92:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 22:22:35 2025 by rpki-client