Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/ab8307-5f9c-49c6-8a0b-f3b45819f2b0/1/mKmHxs0KNvlNvvEO8qLGYCCpVhE.mft
File: mKmHxs0KNvlNvvEO8qLGYCCpVhE.mft (raw, json)
Hash identifier: Dac+R9SpVEGr9tsVQ/AEGzAw6u0Tdt/l9F6IqAeAEoQ=
Subject key identifier: 50:2A:1E:F8:BE:8D:37:7F:BA:E5:0B:9E:0B:76:C7:4A:C0:0D:82:4F
Authority key identifier: 98:A9:87:C6:CD:0A:36:F9:4D:BE:F1:0E:F2:A2:C6:60:20:A9:56:11
Certificate issuer: /CN=98a987c6cd0a36f94dbef10ef2a2c66020a95611
Certificate serial: 0197B88FF340F8F5366814F0D7A048B2F76B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mKmHxs0KNvlNvvEO8qLGYCCpVhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/ab8307-5f9c-49c6-8a0b-f3b45819f2b0/1/mKmHxs0KNvlNvvEO8qLGYCCpVhE.mft
Manifest number: 114A
Signing time: Sat 28 Jun 2025 22:02:11 +0000
Manifest this update: Sat 28 Jun 2025 22:02:11 +0000
Manifest next update: Sun 29 Jun 2025 22:02:11 +0000
Files and hashes: 1: KkXU6YkVywPte3FQKPTwmXq43Jw.roa (hash: +grv15uxretevWYIDb50yFoisYnL85l43pH++WpX3xI=)
2: mKmHxs0KNvlNvvEO8qLGYCCpVhE.crl (hash: lOjlR8IilT/lUz2AkBjGGc4ZyvtMe5rlnWvhN80Wesg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/ab8307-5f9c-49c6-8a0b-f3b45819f2b0/1/mKmHxs0KNvlNvvEO8qLGYCCpVhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/ab8307-5f9c-49c6-8a0b-f3b45819f2b0/1/mKmHxs0KNvlNvvEO8qLGYCCpVhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/mKmHxs0KNvlNvvEO8qLGYCCpVhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 22:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:f3:40:f8:f5:36:68:14:f0:d7:a0:48:b2:f7:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98a987c6cd0a36f94dbef10ef2a2c66020a95611
Validity
Not Before: Jun 28 22:02:11 2025 GMT
Not After : Jun 29 22:02:11 2025 GMT
Subject: CN=502a1ef8be8d377fbae50b9e0b76c74ac00d824f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:42:05:c2:3e:1a:d5:34:33:86:34:02:41:b0:
a6:3b:7e:6b:ef:09:d5:29:45:ca:4d:04:a5:78:b8:
c5:cb:03:6a:cd:6e:9e:21:b6:69:22:e9:38:3e:4f:
97:61:e9:37:4a:c5:c7:68:f5:bf:2f:62:27:65:5e:
9e:b8:24:19:63:a7:fb:e7:b4:68:72:99:c4:2d:b1:
ab:1b:79:b4:46:89:d2:a6:67:42:34:22:1e:d7:97:
30:da:34:ee:71:f8:8d:b4:06:e4:d1:68:9b:af:09:
ce:14:26:81:87:22:b0:d7:21:8a:43:f9:ed:88:96:
05:e2:76:fd:34:3a:8b:83:d4:2e:11:2c:fe:af:65:
1a:d3:7f:59:91:aa:a8:74:43:19:56:f2:5e:93:98:
62:5d:38:63:66:2f:ad:80:a8:6b:32:0b:3d:00:03:
35:c3:30:4d:a1:23:70:36:dc:a2:bb:7c:95:d5:2c:
b5:57:76:3e:91:b5:e7:52:93:a4:dd:ed:a8:fb:72:
de:9c:1e:6e:26:97:08:f5:92:8d:4b:3b:49:0b:56:
f8:c6:08:51:f0:0a:4a:1a:c5:12:25:3a:c9:ff:31:
59:b9:3c:c3:9a:96:62:a8:03:cf:b7:3e:70:8a:09:
da:f6:45:46:ed:4a:99:5c:b4:34:94:1b:50:c0:df:
b2:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:2A:1E:F8:BE:8D:37:7F:BA:E5:0B:9E:0B:76:C7:4A:C0:0D:82:4F
X509v3 Authority Key Identifier:
keyid:98:A9:87:C6:CD:0A:36:F9:4D:BE:F1:0E:F2:A2:C6:60:20:A9:56:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mKmHxs0KNvlNvvEO8qLGYCCpVhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ab8307-5f9c-49c6-8a0b-f3b45819f2b0/1/mKmHxs0KNvlNvvEO8qLGYCCpVhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ab8307-5f9c-49c6-8a0b-f3b45819f2b0/1/mKmHxs0KNvlNvvEO8qLGYCCpVhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:33:06:26:c8:f9:66:71:8a:d7:c2:cf:bb:f3:98:73:80:57:
2e:5d:81:45:0b:21:a8:6e:53:b0:03:1f:e0:99:4c:21:82:9c:
1d:b8:8b:60:38:63:b0:95:ba:c4:85:9a:a3:f8:05:14:8b:69:
ef:d1:b7:de:da:d3:b5:2f:00:ce:63:6b:d1:ff:e7:84:e4:67:
7a:44:05:d2:dc:70:06:63:0a:3f:9a:87:d4:2a:0a:db:90:6c:
51:f4:6f:95:a6:41:99:33:1f:0a:11:59:99:42:08:c6:c4:d4:
b8:89:3a:25:64:36:ab:8e:4e:1a:09:82:bc:3a:47:c1:13:f1:
57:70:80:75:0d:c9:4c:1a:0f:b3:04:c8:ce:40:47:cb:1b:5f:
72:e7:8f:d1:85:2c:be:5f:e7:bd:04:7b:d2:c4:c7:16:79:9c:
34:39:5c:4e:2f:d6:ca:8c:64:45:af:4a:e2:27:14:9a:05:99:
44:6e:00:26:eb:d6:bc:76:b0:10:ca:b0:9d:63:c6:5e:25:e6:
2f:53:0e:3a:1b:f6:dc:a4:62:7e:37:13:b4:fe:da:82:a5:3c:
9f:a5:73:97:5e:82:50:1f:f9:d1:e0:6b:d4:60:36:aa:92:4f:
f2:9b:23:e4:d8:e4:30:d3:fc:29:03:53:64:36:51:45:8a:7c:
94:77:22:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:36:08 2025 by rpki-client