Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/ab8307-5f9c-49c6-8a0b-f3b45819f2b0/1/mKmHxs0KNvlNvvEO8qLGYCCpVhE.mft
File: mKmHxs0KNvlNvvEO8qLGYCCpVhE.mft (raw, json)
Hash identifier: uOMJvpiSaXmTjoEXXtKGG/6dDjEUp53cFVjlSRpQSyk=
Subject key identifier: 7A:9C:1C:4F:1A:4D:E7:84:D6:B3:18:6B:D0:AC:27:3C:0D:54:68:FD
Authority key identifier: 98:A9:87:C6:CD:0A:36:F9:4D:BE:F1:0E:F2:A2:C6:60:20:A9:56:11
Certificate issuer: /CN=98a987c6cd0a36f94dbef10ef2a2c66020a95611
Certificate serial: 0198D65FCB2BDF77A6D3314096957459C5E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mKmHxs0KNvlNvvEO8qLGYCCpVhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/ab8307-5f9c-49c6-8a0b-f3b45819f2b0/1/mKmHxs0KNvlNvvEO8qLGYCCpVhE.mft
Manifest number: 11DE
Signing time: Sat 23 Aug 2025 10:00:58 +0000
Manifest this update: Sat 23 Aug 2025 10:00:58 +0000
Manifest next update: Sun 24 Aug 2025 10:00:58 +0000
Files and hashes: 1: KkXU6YkVywPte3FQKPTwmXq43Jw.roa (hash: +grv15uxretevWYIDb50yFoisYnL85l43pH++WpX3xI=)
2: mKmHxs0KNvlNvvEO8qLGYCCpVhE.crl (hash: Fc5V5pf/nMTIbWsIanqp+aMiE8OnA13A9igAxCBm8tU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/ab8307-5f9c-49c6-8a0b-f3b45819f2b0/1/mKmHxs0KNvlNvvEO8qLGYCCpVhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/ab8307-5f9c-49c6-8a0b-f3b45819f2b0/1/mKmHxs0KNvlNvvEO8qLGYCCpVhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/mKmHxs0KNvlNvvEO8qLGYCCpVhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:cb:2b:df:77:a6:d3:31:40:96:95:74:59:c5:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98a987c6cd0a36f94dbef10ef2a2c66020a95611
Validity
Not Before: Aug 23 10:00:58 2025 GMT
Not After : Aug 24 10:00:58 2025 GMT
Subject: CN=7a9c1c4f1a4de784d6b3186bd0ac273c0d5468fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b1:cb:11:ac:2c:99:bf:c5:2c:b6:11:df:11:
8a:65:0d:8d:c2:70:3b:db:3a:82:6c:48:d6:4d:a0:
5c:be:a7:ff:57:cc:a8:0d:b9:9f:92:1b:f1:56:d6:
09:80:57:a3:74:a8:16:6e:3b:0f:3d:2d:87:16:08:
1a:84:ec:68:7f:50:0a:c1:27:eb:b3:33:cd:0c:33:
0a:c6:95:46:d8:56:7b:bd:3a:4c:93:ea:4d:55:8e:
c7:72:87:34:bd:48:38:88:b8:34:b5:18:de:b8:7c:
91:46:7b:26:ab:b3:33:55:58:e9:82:4a:e9:45:63:
de:76:ac:1f:e2:06:c8:53:77:1f:2d:c6:77:a4:8f:
53:f7:b3:cc:1f:c4:b9:6d:79:24:ed:72:2f:a7:ce:
41:f5:fa:41:ad:e2:cc:91:ee:c4:76:78:b9:a2:e9:
0f:49:30:79:0f:85:8e:a2:d8:60:b4:fa:42:cd:ee:
0a:52:90:1f:ef:26:27:a2:53:77:12:ad:ef:ad:83:
c4:b1:a3:43:20:4f:fe:7b:4a:10:7a:1e:d4:01:6e:
9d:df:97:66:55:23:07:3f:c5:90:04:2b:cc:1f:f3:
9d:b4:cc:d7:1f:36:0d:13:da:ff:3f:26:54:0d:fb:
3b:ea:f2:c6:1f:2a:63:7b:27:41:dc:22:ae:e9:72:
8a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:9C:1C:4F:1A:4D:E7:84:D6:B3:18:6B:D0:AC:27:3C:0D:54:68:FD
X509v3 Authority Key Identifier:
keyid:98:A9:87:C6:CD:0A:36:F9:4D:BE:F1:0E:F2:A2:C6:60:20:A9:56:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mKmHxs0KNvlNvvEO8qLGYCCpVhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ab8307-5f9c-49c6-8a0b-f3b45819f2b0/1/mKmHxs0KNvlNvvEO8qLGYCCpVhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ab8307-5f9c-49c6-8a0b-f3b45819f2b0/1/mKmHxs0KNvlNvvEO8qLGYCCpVhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:49:bb:24:d2:e9:a0:c9:f3:1c:24:28:42:48:7c:53:2a:c3:
c4:1d:a9:0f:e5:fa:18:84:9c:7a:db:ca:4d:24:ea:93:89:b8:
bc:22:ca:59:eb:eb:fa:cf:cd:c6:f8:f3:98:6b:30:ee:50:9e:
26:b3:45:7b:3e:c2:0c:da:d4:c7:78:83:8e:66:76:e8:91:f4:
da:1e:f1:13:29:33:e7:d9:e1:17:23:27:bd:06:30:5b:25:36:
28:7a:bf:40:03:88:a3:86:e9:c5:d1:1f:f9:44:3f:c7:1f:b5:
d9:a3:69:a7:fc:0d:77:76:2f:7f:02:e6:de:2f:a1:e6:13:26:
52:d7:28:7a:86:95:be:06:01:02:56:29:57:10:c3:f9:7a:c2:
6c:c0:15:9a:b8:9d:26:39:b4:c4:88:78:2f:2f:bc:d9:88:34:
af:d6:fe:1f:fa:1a:3e:6a:52:1a:e5:8d:4f:32:4b:ab:fe:b1:
88:91:e2:bc:93:df:56:2f:3f:43:e8:6b:6c:97:9c:93:68:84:
a6:f2:bb:fb:2b:5f:3c:75:36:4f:95:b3:35:6d:32:74:ca:b5:
83:31:ff:a0:e4:f8:c2:d9:f7:e5:89:76:c2:be:2d:37:69:44:
9b:cb:43:50:21:ab:7e:d5:8d:3f:07:22:83:da:d7:59:06:25:
07:6b:c4:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWX8sr33em0zFAlpV0WcXhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4YTk4N2M2Y2QwYTM2Zjk0ZGJlZjEwZWYyYTJjNjYwMjBh
OTU2MTEwHhcNMjUwODIzMTAwMDU4WhcNMjUwODI0MTAwMDU4WjAzMTEwLwYDVQQD
Eyg3YTljMWM0ZjFhNGRlNzg0ZDZiMzE4NmJkMGFjMjczYzBkNTQ2OGZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAorHLEawsmb/FLLYR3xGKZQ2NwnA7
2zqCbEjWTaBcvqf/V8yoDbmfkhvxVtYJgFejdKgWbjsPPS2HFggahOxof1AKwSfr
szPNDDMKxpVG2FZ7vTpMk+pNVY7Hcoc0vUg4iLg0tRjeuHyRRnsmq7MzVVjpgkrp
RWPedqwf4gbIU3cfLcZ3pI9T97PMH8S5bXkk7XIvp85B9fpBreLMke7Edni5oukP
STB5D4WOothgtPpCze4KUpAf7yYnolN3Eq3vrYPEsaNDIE/+e0oQeh7UAW6d35dm
VSMHP8WQBCvMH/OdtMzXHzYNE9r/PyZUDfs76vLGHypjeydB3CKu6XKKfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHqcHE8aTeeE1rMYa9CsJzwNVGj9MB8GA1UdIwQY
MBaAFJiph8bNCjb5Tb7xDvKixmAgqVYRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUttSHhzMEtOdmxOdnZFTzhxTEdZQ0NwVmhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9hYjgzMDctNWY5Yy00OWM2LThhMGIt
ZjNiNDU4MTlmMmIwLzEvbUttSHhzMEtOdmxOdnZFTzhxTEdZQ0NwVmhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS9hYjgzMDctNWY5Yy00OWM2LThhMGItZjNiNDU4MTlmMmIw
LzEvbUttSHhzMEtOdmxOdnZFTzhxTEdZQ0NwVmhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdEm7JNLp
oMnzHCQoQkh8UyrDxB2pD+X6GIScetvKTSTqk4m4vCLKWevr+s/NxvjzmGsw7lCe
JrNFez7CDNrUx3iDjmZ26JH02h7xEykz59nhFyMnvQYwWyU2KHq/QAOIo4bpxdEf
+UQ/xx+12aNpp/wNd3YvfwLm3i+h5hMmUtcoeoaVvgYBAlYpVxDD+XrCbMAVmrid
Jjm0xIh4Ly+82Yg0r9b+H/oaPmpSGuWNTzJLq/6xiJHivJPfVi8/Q+hrbJeck2iE
pvK7+ytfPHU2T5WzNW0ydMq1gzH/oOT4wtn35Yl2wr4tN2lEm8tDUCGrftWNPwci
g9rXWQYlB2vEsQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:04:27 2025 by rpki-client