Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/cd4624-620a-4cb2-a416-6be92b1aa8b3/1/mk2qT2rA5rwQK2iECirGu1QbQPw.mft
File: mk2qT2rA5rwQK2iECirGu1QbQPw.mft (raw, json)
Hash identifier: F7el23GpZeNdkVGARebKNeh8ixqmPjIkSfJbSpSUWCY=
Subject key identifier: 82:69:68:60:88:C3:BC:81:D6:17:05:B3:8B:83:ED:8F:CE:6D:C6:E7
Authority key identifier: 9A:4D:AA:4F:6A:C0:E6:BC:10:2B:68:84:0A:2A:C6:BB:54:1B:40:FC
Certificate issuer: /CN=9a4daa4f6ac0e6bc102b68840a2ac6bb541b40fc
Certificate serial: 0197C049DA2CC92E9D22CFC98D1C969F33B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mk2qT2rA5rwQK2iECirGu1QbQPw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/cd4624-620a-4cb2-a416-6be92b1aa8b3/1/mk2qT2rA5rwQK2iECirGu1QbQPw.mft
Manifest number: 05B0
Signing time: Mon 30 Jun 2025 10:02:34 +0000
Manifest this update: Mon 30 Jun 2025 10:02:34 +0000
Manifest next update: Tue 01 Jul 2025 10:02:34 +0000
Files and hashes: 1: j0Asbb5ngsOWlyvv7kth_3yoBYM.roa (hash: O/JfF/netiv5OyRHt3hhhICYzLbMzCW+fJQdQl7HVfM=)
2: mk2qT2rA5rwQK2iECirGu1QbQPw.crl (hash: QGcvYAjAQYdjRI1cDPPsWgWK/vzYHJdXYzxqWxCJgIo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/cd4624-620a-4cb2-a416-6be92b1aa8b3/1/mk2qT2rA5rwQK2iECirGu1QbQPw.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/cd4624-620a-4cb2-a416-6be92b1aa8b3/1/mk2qT2rA5rwQK2iECirGu1QbQPw.mft
rsync://rpki.ripe.net/repository/DEFAULT/mk2qT2rA5rwQK2iECirGu1QbQPw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 10:02:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c0:49:da:2c:c9:2e:9d:22:cf:c9:8d:1c:96:9f:33:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a4daa4f6ac0e6bc102b68840a2ac6bb541b40fc
Validity
Not Before: Jun 30 10:02:34 2025 GMT
Not After : Jul 1 10:02:34 2025 GMT
Subject: CN=8269686088c3bc81d61705b38b83ed8fce6dc6e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a9:63:01:0b:7e:08:96:7b:e3:72:d1:b5:e5:
d5:dd:ea:6f:45:28:31:7a:6e:32:31:61:b4:e3:2f:
17:e5:87:63:a8:80:e1:b0:af:a6:a7:ce:bf:ab:49:
ea:a0:9e:6b:7d:0c:6a:87:7b:cd:3f:19:d5:cd:2f:
ea:48:ce:df:dc:bd:81:31:c3:b4:d0:eb:d1:96:5b:
eb:2d:6d:1c:ab:ba:22:c1:a0:87:5b:e2:cb:b7:f6:
09:c8:6d:10:97:67:67:86:b2:24:ba:23:c5:9c:f0:
86:1c:94:2d:63:15:97:40:92:c6:b6:d2:e7:c8:4b:
57:0f:72:69:98:6a:fb:74:93:b6:5e:2b:d8:08:6e:
7c:bc:3f:4e:f7:29:88:fa:0c:0b:17:75:b5:74:5c:
8e:71:79:99:31:be:40:47:e5:e9:a7:7d:14:52:f8:
80:30:76:e1:93:ff:55:2b:d2:ef:9b:c6:4e:df:34:
bf:d7:1c:7f:20:d5:31:3a:fb:11:d7:09:6c:6e:37:
27:ec:bc:4a:7d:60:40:aa:8d:3a:c1:c1:5d:4b:a6:
bf:ac:36:73:1b:57:c1:f0:5f:ad:f8:19:2c:fb:be:
c3:2c:f5:26:cf:1f:df:0d:6b:f8:34:d5:db:ba:95:
bc:09:28:08:1a:97:0c:41:47:3c:07:36:d5:9e:e1:
d9:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:69:68:60:88:C3:BC:81:D6:17:05:B3:8B:83:ED:8F:CE:6D:C6:E7
X509v3 Authority Key Identifier:
keyid:9A:4D:AA:4F:6A:C0:E6:BC:10:2B:68:84:0A:2A:C6:BB:54:1B:40:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mk2qT2rA5rwQK2iECirGu1QbQPw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/cd4624-620a-4cb2-a416-6be92b1aa8b3/1/mk2qT2rA5rwQK2iECirGu1QbQPw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/cd4624-620a-4cb2-a416-6be92b1aa8b3/1/mk2qT2rA5rwQK2iECirGu1QbQPw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:39:34:eb:f9:c8:5d:f7:e2:03:c0:fe:cd:42:c0:c9:e0:01:
58:d7:15:1c:09:54:43:86:39:7d:7c:0d:e7:ad:4d:fc:49:b2:
57:f3:a0:dd:fa:5b:25:08:2a:0e:78:42:ad:99:e6:5d:60:e5:
16:82:19:c3:07:3c:74:b4:9b:15:e3:84:e3:c9:00:83:50:26:
59:b7:d5:3a:bb:29:6a:94:07:45:5b:4d:d3:40:53:ab:f4:bf:
4e:38:80:8f:91:46:eb:4c:a3:33:42:33:76:89:b0:9a:0a:3b:
4f:fe:ee:c8:7c:65:f0:63:41:75:b4:69:60:48:31:4e:69:fa:
93:8b:96:34:9a:6b:2f:34:f2:a1:e0:0f:7a:80:99:85:3c:68:
62:78:b1:ab:15:a9:2a:e7:75:1e:b6:1b:69:3b:1e:72:6c:86:
4c:89:fb:61:94:23:5c:92:07:42:aa:ab:55:c8:dc:b4:ea:85:
c0:54:33:9f:73:f4:76:52:81:0f:c3:15:ee:03:99:c1:6c:31:
f6:9b:86:cc:a1:10:02:76:34:42:f4:9f:4a:50:75:4a:e3:c5:
d6:56:09:8c:40:87:df:cf:bb:17:39:29:77:04:7f:d0:61:1b:
05:07:4c:28:7c:ae:2d:d9:81:98:ea:02:a6:d7:94:99:f0:5f:
62:23:f9:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 15:50:45 2025 by rpki-client