Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/ab8307-5f9c-49c6-8a0b-f3b45819f2b0/1/mKmHxs0KNvlNvvEO8qLGYCCpVhE.mft
File: mKmHxs0KNvlNvvEO8qLGYCCpVhE.mft (raw, json)
Hash identifier: 8DzTJUsuT1Vce/Jx22iurg6TtX/5MS1yVdMxxU5vAKs=
Subject key identifier: E6:33:90:DC:B5:97:E8:68:8A:BC:E9:39:E0:AE:47:D4:54:04:80:F7
Authority key identifier: 98:A9:87:C6:CD:0A:36:F9:4D:BE:F1:0E:F2:A2:C6:60:20:A9:56:11
Certificate issuer: /CN=98a987c6cd0a36f94dbef10ef2a2c66020a95611
Certificate serial: 0199FDD9CE8EBD9ACFD714C9DECFCDDE4834
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mKmHxs0KNvlNvvEO8qLGYCCpVhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/ab8307-5f9c-49c6-8a0b-f3b45819f2b0/1/mKmHxs0KNvlNvvEO8qLGYCCpVhE.mft
Manifest number: 1277
Signing time: Sun 19 Oct 2025 19:02:13 +0000
Manifest this update: Sun 19 Oct 2025 19:02:13 +0000
Manifest next update: Mon 20 Oct 2025 19:02:13 +0000
Files and hashes: 1: KkXU6YkVywPte3FQKPTwmXq43Jw.roa (hash: +grv15uxretevWYIDb50yFoisYnL85l43pH++WpX3xI=)
2: mKmHxs0KNvlNvvEO8qLGYCCpVhE.crl (hash: kHoIBgCrnlSmvqenRyJnTmn7FeV+BMD4OnpoFnFaHKE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/ab8307-5f9c-49c6-8a0b-f3b45819f2b0/1/mKmHxs0KNvlNvvEO8qLGYCCpVhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/ab8307-5f9c-49c6-8a0b-f3b45819f2b0/1/mKmHxs0KNvlNvvEO8qLGYCCpVhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/mKmHxs0KNvlNvvEO8qLGYCCpVhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:ce:8e:bd:9a:cf:d7:14:c9:de:cf:cd:de:48:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98a987c6cd0a36f94dbef10ef2a2c66020a95611
Validity
Not Before: Oct 19 19:02:13 2025 GMT
Not After : Oct 20 19:02:13 2025 GMT
Subject: CN=e63390dcb597e8688abce939e0ae47d4540480f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a8:08:c6:62:c0:ae:16:52:48:c1:9a:e2:05:
3d:15:31:ff:1b:08:58:92:a0:8a:8d:06:51:f5:79:
9f:ad:fc:a9:82:3a:06:62:53:a7:6f:a5:21:ff:6b:
7c:12:fb:ac:15:ab:d7:f6:be:48:da:cc:01:a3:98:
06:f3:ef:6a:aa:8e:08:32:15:68:7e:aa:69:eb:d9:
e9:d0:8c:44:15:68:9e:32:b1:b4:67:8e:6c:73:d0:
86:25:a0:1d:51:45:67:75:75:e8:4c:a8:08:db:15:
d5:62:ad:7b:4a:2e:e7:0c:b7:ac:e1:a5:8a:3a:03:
4b:2a:7d:99:9d:18:d6:40:30:a9:d5:fe:ce:34:2e:
b1:18:fd:71:02:e5:52:12:04:5b:68:fe:8f:2e:7f:
fa:12:13:81:ef:1c:4d:92:e3:c5:cd:5f:df:bf:75:
b6:0f:df:ad:90:2b:71:ed:37:0c:83:86:9b:f6:ba:
98:71:a0:bb:13:72:80:a4:a6:f7:c2:c9:f1:be:3a:
6c:85:d8:fb:35:b9:1c:e8:ec:48:9c:50:0b:d2:58:
7a:eb:40:06:93:7e:dc:57:b4:2e:63:28:cb:6d:cc:
97:17:9b:c4:82:bb:b2:18:bc:35:3a:ef:9e:31:1b:
72:12:51:c8:b2:27:ce:b2:18:75:e2:e1:17:81:bc:
4a:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:33:90:DC:B5:97:E8:68:8A:BC:E9:39:E0:AE:47:D4:54:04:80:F7
X509v3 Authority Key Identifier:
keyid:98:A9:87:C6:CD:0A:36:F9:4D:BE:F1:0E:F2:A2:C6:60:20:A9:56:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mKmHxs0KNvlNvvEO8qLGYCCpVhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ab8307-5f9c-49c6-8a0b-f3b45819f2b0/1/mKmHxs0KNvlNvvEO8qLGYCCpVhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ab8307-5f9c-49c6-8a0b-f3b45819f2b0/1/mKmHxs0KNvlNvvEO8qLGYCCpVhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:e6:89:a0:08:c4:44:1f:bb:c8:1e:3f:5b:cb:16:f4:8a:61:
ac:2a:29:1b:39:63:37:66:97:ab:b2:f0:0e:3a:7b:c5:fe:1c:
aa:97:02:bd:3f:0a:8d:c6:e8:7c:08:8b:6c:6d:0a:5b:ab:0e:
84:a0:b6:0f:7b:d1:6a:e2:71:98:df:9b:7c:e9:ff:c2:8e:6f:
87:72:bf:c8:48:ba:3b:54:52:5a:41:8b:36:b2:4b:d9:16:b8:
fa:83:46:41:99:5f:14:01:f8:f4:0a:e0:01:90:5c:f3:ba:fd:
9c:77:df:91:46:54:2e:6f:cc:5f:f1:99:35:57:a3:5e:54:cf:
36:96:35:0a:b8:38:a1:82:48:96:b0:7a:b5:af:fc:1a:16:c0:
df:e6:99:26:ed:7d:6e:05:5d:c6:e8:11:36:ce:68:c6:49:da:
2c:ce:90:b0:5a:d0:74:c0:f9:02:5d:26:5b:81:1d:42:46:c9:
e3:44:cf:c3:80:91:b5:d5:fb:7f:34:06:67:20:d5:2a:18:4d:
b2:73:8d:2f:ac:8c:71:fe:6f:92:67:71:c0:6e:e0:9b:8f:35:
8b:87:df:98:05:38:11:46:46:99:ab:70:8a:ca:31:ee:7d:2a:
64:db:90:c8:cf:77:3e:bf:9c:6c:c4:26:ea:7b:cb:b7:c9:80:
a0:6c:21:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:11:32 2025 by rpki-client