Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.mft
File: mkjB2ACM3AWdsLJ6qVFHmcBtVEM.mft (raw, json)
Hash identifier: RwUuYLFim+hvzmLS3HEjqKuA+GTG+n1b+75oDtkaruM=
Subject key identifier: 9E:E1:9B:D4:BD:C0:A7:24:E9:9E:89:4F:28:57:79:8E:67:D1:21:59
Authority key identifier: 9A:48:C1:D8:00:8C:DC:05:9D:B0:B2:7A:A9:51:47:99:C0:6D:54:43
Certificate issuer: /CN=9a48c1d8008cdc059db0b27aa9514799c06d5443
Certificate serial: 0199FB0F11D196ADB6C72C897C5244CB4232
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.mft
Manifest number: 1252
Signing time: Sun 19 Oct 2025 06:01:32 +0000
Manifest this update: Sun 19 Oct 2025 06:01:32 +0000
Manifest next update: Mon 20 Oct 2025 06:01:32 +0000
Files and hashes: 1: GS3n997-WSAnBFI5sxW4oYhya68.roa (hash: 9uLSgMiqXXeu2TS+gBYSbYKO48DlZM21pWe2MUShNG8=)
2: K1RZ-_Fg9dSZIebCMUhpe6gbgJc.roa (hash: DeEJ/lwM2EUWvyFmV2osr5NnI9rnfMu9oAVwUv2cQPg=)
3: mkjB2ACM3AWdsLJ6qVFHmcBtVEM.crl (hash: bvrGyOERoKzUlnsL6m7YqBxviBYsJqYzE7GouO8/ZZo=)
4: tKjpgYt3F1U92FlxxtExmwv_VJA.roa (hash: PCobIxyuHsntJ/hl1UTuu1qlban1/mIdUKP0z5QY3l0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0f:11:d1:96:ad:b6:c7:2c:89:7c:52:44:cb:42:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a48c1d8008cdc059db0b27aa9514799c06d5443
Validity
Not Before: Oct 19 06:01:32 2025 GMT
Not After : Oct 20 06:01:32 2025 GMT
Subject: CN=9ee19bd4bdc0a724e99e894f2857798e67d12159
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:f8:84:45:d1:15:ce:19:4d:02:24:d7:8c:8f:
f3:b6:d0:1c:6d:61:b0:9b:31:8d:70:b4:96:ac:93:
aa:79:ee:e6:32:41:91:c9:1b:96:83:a6:2f:49:99:
c4:ff:c3:b8:7a:71:b4:e5:74:49:4d:1c:00:0c:59:
41:02:b5:95:71:f6:34:f6:bc:39:4e:65:93:6c:aa:
58:50:c3:73:1d:dd:ea:c7:a3:f7:7d:39:ba:46:8a:
da:91:2b:32:4e:4e:95:5d:5c:01:01:98:f4:26:f2:
6d:94:8d:39:26:37:09:21:e0:da:86:cc:c1:95:02:
03:6b:38:1d:49:82:68:e8:d2:ef:0c:a0:f1:3e:29:
10:53:bc:16:6a:be:93:bb:ac:b3:cc:63:00:a5:08:
d0:c3:0f:fd:91:2f:23:96:db:c7:b9:4d:c2:48:41:
e9:46:f9:df:ae:f7:9c:f6:02:a4:a5:51:17:93:92:
79:40:9b:3d:06:09:dc:e3:56:64:e0:37:7d:22:b9:
cf:57:25:2b:b8:8b:14:6d:f5:24:f0:fc:e4:c9:50:
cc:d6:af:d0:25:d4:e4:8b:b9:49:80:59:3c:20:bc:
49:c1:6a:8b:ee:75:c7:ff:88:76:98:a9:44:34:3f:
3c:a6:bf:67:74:05:c2:f6:e3:82:35:c0:0d:90:cb:
bd:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:E1:9B:D4:BD:C0:A7:24:E9:9E:89:4F:28:57:79:8E:67:D1:21:59
X509v3 Authority Key Identifier:
keyid:9A:48:C1:D8:00:8C:DC:05:9D:B0:B2:7A:A9:51:47:99:C0:6D:54:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:69:48:9e:f2:75:ef:d8:69:b6:58:c0:4b:8f:22:27:f1:73:
c6:d7:be:67:34:73:1d:b7:5b:69:79:dd:08:bc:8b:a3:60:05:
76:fe:0c:5f:cf:b8:69:b5:d6:03:fb:d1:5a:67:73:b3:7a:91:
b6:a1:78:75:e4:a6:2b:50:f2:78:7a:87:05:b4:59:36:7c:2b:
ec:5a:82:0e:e8:d1:4e:63:d1:92:98:01:51:6e:ac:ab:2d:47:
75:31:be:38:01:b5:15:07:1c:84:02:71:52:4c:c9:3c:8d:5e:
aa:57:1b:17:6b:6e:33:02:16:71:8f:68:0b:2b:56:2e:6f:3a:
80:91:0c:56:a9:76:06:03:35:4e:9b:03:88:ed:24:96:5b:f2:
1b:70:82:d2:0b:2e:a2:51:41:2f:5a:04:46:d6:80:22:b5:d9:
e3:69:e4:e7:76:4d:19:03:59:e7:c3:07:ad:77:cb:9d:75:39:
1c:4e:f7:46:a2:8b:ed:ee:45:fc:da:71:f9:9c:c4:4c:b1:36:
6f:51:c8:51:2c:9e:9e:b4:90:80:80:23:56:a7:bf:ca:f2:2e:
e7:bd:42:e4:bb:c2:6c:40:f6:86:9a:0d:ba:7a:aa:69:c2:29:
61:c5:7a:41:f6:22:2d:8b:67:45:94:5f:1c:44:1f:a1:72:0c:
5e:29:1e:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:37:06 2025 by rpki-client