Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/d4b542-6392-43d0-a8c2-2cadcf6658ca/1/Mk73breQdOacczAs5MLgr0f0Uwc.mft
File: Mk73breQdOacczAs5MLgr0f0Uwc.mft (raw, json)
Hash identifier: xkI3gRCXXNeVa4iKQsuQLk307cA0zqW3p/Ifm+Val1g=
Subject key identifier: 18:9E:CD:82:EE:BF:8F:9B:CC:70:11:4D:0E:08:EF:C9:F6:57:F2:48
Authority key identifier: 32:4E:F7:6E:B7:90:74:E6:9C:73:30:2C:E4:C2:E0:AF:47:F4:53:07
Certificate issuer: /CN=324ef76eb79074e69c73302ce4c2e0af47f45307
Certificate serial: 0198D65F2056D3DB92719B40779E39A97C28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mk73breQdOacczAs5MLgr0f0Uwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/d4b542-6392-43d0-a8c2-2cadcf6658ca/1/Mk73breQdOacczAs5MLgr0f0Uwc.mft
Manifest number: 0493
Signing time: Sat 23 Aug 2025 10:00:15 +0000
Manifest this update: Sat 23 Aug 2025 10:00:15 +0000
Manifest next update: Sun 24 Aug 2025 10:00:15 +0000
Files and hashes: 1: I9UkQ41YeX1efTDwQLbD_CMYPDQ.roa (hash: iSNpeYLJZVe6ucEI95ka4RakvFZqRgRE032Te/mBPRQ=)
2: Mk73breQdOacczAs5MLgr0f0Uwc.crl (hash: f3zMf+D8TRto9Iw3wydDdHjgY9Ss/Mo78lMBZfTwLCI=)
3: x8qUgYPzT7g1nXs61F1j3vP06ZA.roa (hash: /RVMiuVCMeWyNuJCZhsV4JVmBiQgFuEHvbUPa8p74t4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/d4b542-6392-43d0-a8c2-2cadcf6658ca/1/Mk73breQdOacczAs5MLgr0f0Uwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/d4b542-6392-43d0-a8c2-2cadcf6658ca/1/Mk73breQdOacczAs5MLgr0f0Uwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mk73breQdOacczAs5MLgr0f0Uwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:20:56:d3:db:92:71:9b:40:77:9e:39:a9:7c:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=324ef76eb79074e69c73302ce4c2e0af47f45307
Validity
Not Before: Aug 23 10:00:15 2025 GMT
Not After : Aug 24 10:00:15 2025 GMT
Subject: CN=189ecd82eebf8f9bcc70114d0e08efc9f657f248
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:e9:d2:60:90:f7:2e:97:af:74:69:f0:fb:05:
3f:24:92:06:d4:6a:4d:a5:06:b0:51:52:1e:d5:c5:
4c:5c:84:51:8b:55:89:97:da:ab:f4:6c:7c:6a:26:
0a:81:ba:b8:d8:ba:fd:0f:9a:95:8d:2b:66:18:98:
18:e9:a8:c5:4e:20:a8:98:3a:58:cf:81:61:d5:2d:
17:92:59:cd:fc:40:2a:9d:1a:b4:26:35:1b:c0:df:
d9:f9:fd:9e:56:8e:8e:c0:a2:f4:08:d0:f4:67:79:
d7:cf:35:47:fa:42:6e:e3:16:7d:76:13:54:36:1e:
05:73:ab:89:eb:59:98:38:83:b5:39:a3:67:36:d0:
6c:8b:13:44:09:e9:25:41:95:56:0e:1c:13:9e:eb:
6b:66:38:f3:11:d2:f1:ab:88:86:de:33:3c:e4:2f:
4f:10:e3:3c:09:02:88:b6:35:f1:8f:f5:12:a6:23:
8c:2d:d7:26:d5:e6:4c:cf:3b:9e:7a:eb:83:ec:e7:
d3:0c:4b:bf:0d:ba:31:78:d9:65:17:74:9d:1b:84:
23:76:c8:d9:73:3d:5a:02:9d:b9:aa:bf:a7:bb:bb:
fa:b6:cd:f3:63:85:df:e4:1f:11:25:b6:11:cd:cf:
28:87:d8:56:ca:cc:3b:f3:48:c3:bf:54:e2:43:03:
6a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:9E:CD:82:EE:BF:8F:9B:CC:70:11:4D:0E:08:EF:C9:F6:57:F2:48
X509v3 Authority Key Identifier:
keyid:32:4E:F7:6E:B7:90:74:E6:9C:73:30:2C:E4:C2:E0:AF:47:F4:53:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mk73breQdOacczAs5MLgr0f0Uwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/d4b542-6392-43d0-a8c2-2cadcf6658ca/1/Mk73breQdOacczAs5MLgr0f0Uwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/d4b542-6392-43d0-a8c2-2cadcf6658ca/1/Mk73breQdOacczAs5MLgr0f0Uwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:51:cc:05:50:c3:60:40:cd:d3:8f:25:21:a3:e3:7f:66:0d:
b6:cb:bd:3a:05:9f:61:fc:19:75:25:d6:60:4f:6f:75:8f:c0:
af:b1:fb:bc:91:6e:ac:46:ca:85:98:74:30:84:59:80:ac:5c:
9d:f6:c5:e7:20:3b:1b:ac:cc:ce:9c:6a:d3:cc:07:53:9f:77:
a4:54:6f:fc:55:bd:96:59:b1:a9:79:6f:3a:ba:b1:a2:2c:cd:
2d:c2:4e:a4:9d:1b:9f:8c:ec:f0:e6:2e:f6:f5:ab:63:b0:a8:
13:19:e6:59:56:ec:bb:04:34:04:0f:8e:df:21:41:6d:9a:15:
e3:df:15:7f:de:fb:95:04:e6:b4:da:25:e3:04:54:11:a3:38:
66:ef:63:f9:64:d8:09:f2:5f:68:c5:38:be:a9:0e:32:ff:1f:
c7:e7:d7:9a:bb:71:64:76:25:e4:b5:47:64:0e:ef:2f:2d:2b:
44:3b:19:b9:73:9d:02:e6:90:25:ef:a0:f2:ec:96:e0:9a:74:
14:93:f2:52:33:46:61:ac:0f:53:10:a1:59:b7:83:94:a8:99:
f0:9c:68:bd:b2:97:ba:00:85:23:b2:8d:6a:5d:32:26:4b:e7:
30:e5:b1:21:7d:95:6e:b3:f8:f6:a8:0e:36:cf:3f:c5:65:45:
cb:0d:08:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:28:55 2025 by rpki-client