Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/cd4624-620a-4cb2-a416-6be92b1aa8b3/1/mk2qT2rA5rwQK2iECirGu1QbQPw.mft
File: mk2qT2rA5rwQK2iECirGu1QbQPw.mft (raw, json)
Hash identifier: +VVGHhEEAo+CUsh0hNkSapATvnPHUg9vzgSlZln6UE4=
Subject key identifier: 11:5C:54:25:0D:97:89:43:A1:EE:FB:43:A2:D3:76:75:3D:33:67:73
Authority key identifier: 9A:4D:AA:4F:6A:C0:E6:BC:10:2B:68:84:0A:2A:C6:BB:54:1B:40:FC
Certificate issuer: /CN=9a4daa4f6ac0e6bc102b68840a2ac6bb541b40fc
Certificate serial: 0199FBEB42F442400BE8659B4EE62B6FE2E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mk2qT2rA5rwQK2iECirGu1QbQPw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/cd4624-620a-4cb2-a416-6be92b1aa8b3/1/mk2qT2rA5rwQK2iECirGu1QbQPw.mft
Manifest number: 06D8
Signing time: Sun 19 Oct 2025 10:02:03 +0000
Manifest this update: Sun 19 Oct 2025 10:02:03 +0000
Manifest next update: Mon 20 Oct 2025 10:02:03 +0000
Files and hashes: 1: j0Asbb5ngsOWlyvv7kth_3yoBYM.roa (hash: O/JfF/netiv5OyRHt3hhhICYzLbMzCW+fJQdQl7HVfM=)
2: mk2qT2rA5rwQK2iECirGu1QbQPw.crl (hash: Zwld23oAQMrixDumlgA3fZNCz1tKTBe5rxPmaihY0r8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/cd4624-620a-4cb2-a416-6be92b1aa8b3/1/mk2qT2rA5rwQK2iECirGu1QbQPw.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/cd4624-620a-4cb2-a416-6be92b1aa8b3/1/mk2qT2rA5rwQK2iECirGu1QbQPw.mft
rsync://rpki.ripe.net/repository/DEFAULT/mk2qT2rA5rwQK2iECirGu1QbQPw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:42:f4:42:40:0b:e8:65:9b:4e:e6:2b:6f:e2:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a4daa4f6ac0e6bc102b68840a2ac6bb541b40fc
Validity
Not Before: Oct 19 10:02:03 2025 GMT
Not After : Oct 20 10:02:03 2025 GMT
Subject: CN=115c54250d978943a1eefb43a2d376753d336773
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:12:74:db:b3:90:72:6c:b1:b2:7b:8c:82:5c:
a6:12:47:c4:3e:06:15:a4:82:a2:08:e9:8c:fe:b4:
27:ed:12:82:da:c2:d2:23:3c:bf:2e:83:aa:35:ca:
e0:68:eb:47:3c:c0:b0:69:72:1e:31:fb:31:83:ab:
59:cc:e9:1d:bc:4f:70:7f:bb:bd:5f:cb:17:09:a5:
b9:0b:72:68:e5:96:0c:ef:9c:21:89:87:89:32:bd:
6e:a1:65:6c:1b:eb:ac:2d:ff:4d:95:8c:c4:fd:f5:
c9:9f:eb:02:cf:a5:2e:3f:13:c4:23:04:94:13:8c:
74:16:ae:f0:67:3c:cb:87:2e:da:68:3b:59:8e:55:
b6:49:89:91:8a:23:04:0d:f6:e3:c8:e5:3c:85:3b:
1e:de:56:e3:0e:76:40:50:a7:53:27:ab:ce:e9:7b:
37:eb:e0:01:85:c7:c5:6e:24:c0:f9:33:6c:b1:ed:
b6:f6:92:08:2b:11:0b:c2:6d:7b:a0:9c:94:51:71:
75:9b:fe:4a:a5:58:c6:75:5b:74:61:61:7f:01:c0:
e0:3b:4c:61:15:1d:48:fe:91:ec:56:0b:ce:cc:3d:
c2:67:d3:7e:82:2d:49:9e:d6:30:92:9e:8f:bd:72:
58:e8:36:46:02:08:ea:e0:25:b3:93:80:c1:c3:df:
ba:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:5C:54:25:0D:97:89:43:A1:EE:FB:43:A2:D3:76:75:3D:33:67:73
X509v3 Authority Key Identifier:
keyid:9A:4D:AA:4F:6A:C0:E6:BC:10:2B:68:84:0A:2A:C6:BB:54:1B:40:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mk2qT2rA5rwQK2iECirGu1QbQPw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/cd4624-620a-4cb2-a416-6be92b1aa8b3/1/mk2qT2rA5rwQK2iECirGu1QbQPw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/cd4624-620a-4cb2-a416-6be92b1aa8b3/1/mk2qT2rA5rwQK2iECirGu1QbQPw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:99:68:2c:4a:f4:1b:48:73:40:ae:5a:dc:96:29:db:af:40:
b2:74:1a:ba:de:28:eb:63:2e:e2:ea:9e:0b:ed:1c:45:50:38:
44:5c:7b:bd:49:0d:f2:0c:9c:3f:ca:92:aa:f0:62:2b:45:3e:
ca:64:29:e7:12:e1:b1:db:c0:6f:25:e8:d3:f2:19:5e:8a:00:
03:cf:cd:99:bb:1f:72:5b:5c:b1:4e:9b:ab:37:f1:e9:7c:6d:
76:15:31:c9:79:aa:7a:ca:49:7f:2e:b9:9f:b1:4b:51:8a:50:
2d:11:ad:da:28:60:d4:6f:f6:46:fd:dd:2a:d1:f7:d6:9f:5a:
31:a9:6d:bb:03:d5:59:4e:dc:91:54:42:5a:bf:87:0a:32:67:
2d:5e:98:1c:97:ef:7f:d6:51:35:37:23:4f:16:f7:b9:99:e6:
d6:8e:08:15:fc:db:17:f4:59:d8:06:10:40:73:14:e3:67:5f:
67:9b:4a:cf:ae:2d:75:2e:6d:e8:db:a8:e3:ae:6e:33:d1:d3:
4b:f2:13:00:59:ba:36:b3:f9:ca:b6:ff:7b:f9:e8:88:f2:51:
c1:b6:61:41:81:0f:07:8f:36:ca:1c:c9:ca:3d:44:95:ff:94:
86:28:15:f6:22:a5:28:e8:5b:4f:a5:50:69:00:9e:41:0c:59:
b5:b8:74:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:09:42 2025 by rpki-client