Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/d4b542-6392-43d0-a8c2-2cadcf6658ca/1/Mk73breQdOacczAs5MLgr0f0Uwc.mft
File: Mk73breQdOacczAs5MLgr0f0Uwc.mft (raw, json)
Hash identifier: zivcREzKHtYl1D0q6aeilRxbg9aQbiKay7fFUl0lRBA=
Subject key identifier: 0A:C0:C5:0A:BD:0B:3B:DD:C3:75:3D:6D:94:38:8A:F9:37:1F:84:3D
Authority key identifier: 32:4E:F7:6E:B7:90:74:E6:9C:73:30:2C:E4:C2:E0:AF:47:F4:53:07
Certificate issuer: /CN=324ef76eb79074e69c73302ce4c2e0af47f45307
Certificate serial: 0197B6A0BF042103B819BE030CF743E7663B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mk73breQdOacczAs5MLgr0f0Uwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/d4b542-6392-43d0-a8c2-2cadcf6658ca/1/Mk73breQdOacczAs5MLgr0f0Uwc.mft
Manifest number: 03FE
Signing time: Sat 28 Jun 2025 13:01:17 +0000
Manifest this update: Sat 28 Jun 2025 13:01:17 +0000
Manifest next update: Sun 29 Jun 2025 13:01:17 +0000
Files and hashes: 1: I9UkQ41YeX1efTDwQLbD_CMYPDQ.roa (hash: iSNpeYLJZVe6ucEI95ka4RakvFZqRgRE032Te/mBPRQ=)
2: Mk73breQdOacczAs5MLgr0f0Uwc.crl (hash: vbS/yyge04IcE9pyrkSqtlXTsq6Hb1gKvJiFFbIPtok=)
3: x8qUgYPzT7g1nXs61F1j3vP06ZA.roa (hash: /RVMiuVCMeWyNuJCZhsV4JVmBiQgFuEHvbUPa8p74t4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/d4b542-6392-43d0-a8c2-2cadcf6658ca/1/Mk73breQdOacczAs5MLgr0f0Uwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/d4b542-6392-43d0-a8c2-2cadcf6658ca/1/Mk73breQdOacczAs5MLgr0f0Uwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mk73breQdOacczAs5MLgr0f0Uwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:bf:04:21:03:b8:19:be:03:0c:f7:43:e7:66:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=324ef76eb79074e69c73302ce4c2e0af47f45307
Validity
Not Before: Jun 28 13:01:17 2025 GMT
Not After : Jun 29 13:01:17 2025 GMT
Subject: CN=0ac0c50abd0b3bddc3753d6d94388af9371f843d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e8:a7:8e:d1:76:98:b6:87:c6:77:79:37:73:
41:3d:db:77:77:58:d0:39:b5:d2:74:fa:24:5c:9a:
4d:5f:50:76:d0:ff:e8:38:20:aa:5b:45:85:50:76:
d9:cb:ad:20:c6:f2:b8:ce:ee:fe:10:7a:26:6d:c7:
60:cd:16:f1:b9:4e:57:0f:d0:06:47:15:2d:78:b7:
43:e3:06:2a:50:11:70:6a:64:05:ce:84:ae:35:83:
95:3c:8a:55:bf:94:ec:96:93:2a:dc:bf:dc:17:6b:
74:0a:35:66:fe:28:7e:e9:c9:80:82:0a:ea:7c:16:
5c:63:f0:0c:b0:da:73:e6:da:2e:1d:b0:81:38:0c:
ef:7e:ad:7d:53:89:60:ba:e8:5f:65:3f:75:2b:c4:
d6:da:3c:5d:bc:83:82:54:8c:b5:63:b3:49:cc:db:
72:08:18:b8:a2:3d:23:b5:0a:23:db:eb:df:da:c1:
1c:32:e3:86:9b:96:2e:99:f8:5f:75:47:ab:1e:bb:
fd:c8:c6:1d:3f:18:1c:0a:9a:d7:8c:bf:87:4c:07:
d9:91:33:e6:e3:ed:82:7a:16:dd:f5:62:e5:84:65:
f4:71:69:93:72:2e:e4:aa:c0:97:d6:a7:3e:29:82:
c8:cb:a7:4d:50:23:86:d3:c5:6b:d5:6f:aa:c7:39:
18:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:C0:C5:0A:BD:0B:3B:DD:C3:75:3D:6D:94:38:8A:F9:37:1F:84:3D
X509v3 Authority Key Identifier:
keyid:32:4E:F7:6E:B7:90:74:E6:9C:73:30:2C:E4:C2:E0:AF:47:F4:53:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mk73breQdOacczAs5MLgr0f0Uwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/d4b542-6392-43d0-a8c2-2cadcf6658ca/1/Mk73breQdOacczAs5MLgr0f0Uwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/d4b542-6392-43d0-a8c2-2cadcf6658ca/1/Mk73breQdOacczAs5MLgr0f0Uwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:ad:a7:27:90:c9:7d:6c:35:e4:89:fd:a4:0a:51:44:0b:99:
87:59:9f:86:14:2e:30:b3:bd:b9:67:fc:f8:1d:6a:02:40:79:
ee:41:59:f6:19:74:f8:4e:e3:e9:29:88:83:7f:bd:fb:66:5b:
e8:45:37:db:ab:df:2e:62:7e:b7:47:0e:7c:0c:04:54:f2:6a:
8a:b2:2f:08:16:3c:fb:57:d9:7c:d8:e6:14:58:9a:f3:55:b8:
00:77:9d:95:d7:b5:4c:4c:d3:b8:16:3f:2d:0a:63:b5:f8:72:
21:8f:75:8f:96:fd:4e:31:66:52:fe:60:88:f1:00:f3:d2:5a:
77:f4:28:f7:6f:b3:80:24:80:d1:8c:06:88:94:42:9e:a6:2c:
38:bd:74:97:59:40:0c:71:ff:67:62:64:1b:ae:0a:d6:46:96:
d3:9e:90:0f:0b:17:73:00:02:55:13:e6:a8:17:5b:a6:d8:b5:
da:6c:a3:c0:15:fb:4c:24:f8:a7:6e:67:d3:44:e9:41:30:7f:
28:9d:21:e4:3d:b7:13:9a:09:0c:ec:5d:7d:32:56:34:0b:69:
8b:85:cc:88:55:98:0e:20:45:15:f0:e5:fe:d5:65:af:3d:82:
59:4b:07:90:1e:b8:95:ba:28:88:83:36:f8:b2:de:90:92:a1:
f3:60:74:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:17:11 2025 by rpki-client