Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/5b0494-5ad6-4ea4-95fa-a83d9d920d31/1/mk-ppgpaJP_mFLbftYgT2SWjsxg.mft
File: mk-ppgpaJP_mFLbftYgT2SWjsxg.mft (raw, json)
Hash identifier: YWdg+sGDQjTfiJdAWBZ/U/EtqsiUtp1xTXpk0snX2jQ=
Subject key identifier: 92:D8:70:A5:D5:7A:4B:9B:39:1E:02:E8:FE:69:11:C8:57:2E:CA:53
Authority key identifier: 9A:4F:A9:A6:0A:5A:24:FF:E6:14:B6:DF:B5:88:13:D9:25:A3:B3:18
Certificate issuer: /CN=9a4fa9a60a5a24ffe614b6dfb58813d925a3b318
Certificate serial: 0199FC217C76B73AB900E35E9929E22A2D62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mk-ppgpaJP_mFLbftYgT2SWjsxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/5b0494-5ad6-4ea4-95fa-a83d9d920d31/1/mk-ppgpaJP_mFLbftYgT2SWjsxg.mft
Manifest number: 0DF7
Signing time: Sun 19 Oct 2025 11:01:16 +0000
Manifest this update: Sun 19 Oct 2025 11:01:16 +0000
Manifest next update: Mon 20 Oct 2025 11:01:16 +0000
Files and hashes: 1: WF_UUzJyBXVRYaWBRz9A5RqP7uM.roa (hash: fXJDB7viVboUYMb0Tq5yYms1zX+sjGa50QbTOcD6d1o=)
2: mk-ppgpaJP_mFLbftYgT2SWjsxg.crl (hash: sTmheZ9fvQuF8qhRDT7VaC+MrlJ2DydDd2l6KwM4TDw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/5b0494-5ad6-4ea4-95fa-a83d9d920d31/1/mk-ppgpaJP_mFLbftYgT2SWjsxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/5b0494-5ad6-4ea4-95fa-a83d9d920d31/1/mk-ppgpaJP_mFLbftYgT2SWjsxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/mk-ppgpaJP_mFLbftYgT2SWjsxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:7c:76:b7:3a:b9:00:e3:5e:99:29:e2:2a:2d:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a4fa9a60a5a24ffe614b6dfb58813d925a3b318
Validity
Not Before: Oct 19 11:01:16 2025 GMT
Not After : Oct 20 11:01:16 2025 GMT
Subject: CN=92d870a5d57a4b9b391e02e8fe6911c8572eca53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:7b:64:4f:a9:e9:5e:a7:78:94:48:60:a3:aa:
42:3d:66:03:58:a0:12:3b:11:bd:73:81:12:aa:ef:
9c:b3:06:a6:6e:4b:54:a9:fe:c2:8f:c1:cb:bc:8b:
78:f3:ad:7d:c7:7a:92:4a:0b:01:f5:ff:51:a2:61:
0a:66:bc:a5:b4:89:a5:f3:cb:b5:cd:1f:37:4c:f5:
df:f8:ca:68:d1:3f:23:fe:f1:11:5a:d4:9b:31:17:
0c:9e:86:8a:9d:d8:3d:53:29:66:35:42:d1:41:69:
e6:02:36:55:a9:20:39:9b:60:ac:75:c3:9e:61:d1:
c3:39:a4:de:dc:33:3a:54:7a:c7:a5:44:f4:2d:69:
0a:af:b4:41:46:cf:a9:bd:55:00:a5:c5:76:85:e8:
1f:a7:1c:a0:37:b8:e7:6e:fd:04:60:31:d1:be:1f:
8e:16:0d:a4:51:fe:62:12:9b:eb:47:81:41:ca:ab:
48:c7:b7:e7:2b:05:1a:0f:bf:f6:46:b6:de:ae:8a:
9b:e2:b5:56:e5:3d:43:e6:ee:9f:6a:87:77:31:03:
69:5a:14:a5:a1:db:b5:4c:85:6f:c8:31:ce:f5:2e:
75:b3:ea:18:7f:23:21:cd:23:08:83:ca:cd:18:a4:
19:da:0a:71:7f:c2:63:70:4d:b1:e5:05:77:f8:ca:
6f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:D8:70:A5:D5:7A:4B:9B:39:1E:02:E8:FE:69:11:C8:57:2E:CA:53
X509v3 Authority Key Identifier:
keyid:9A:4F:A9:A6:0A:5A:24:FF:E6:14:B6:DF:B5:88:13:D9:25:A3:B3:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mk-ppgpaJP_mFLbftYgT2SWjsxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5b0494-5ad6-4ea4-95fa-a83d9d920d31/1/mk-ppgpaJP_mFLbftYgT2SWjsxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5b0494-5ad6-4ea4-95fa-a83d9d920d31/1/mk-ppgpaJP_mFLbftYgT2SWjsxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:84:41:f4:1c:f9:a3:58:52:c5:dc:f5:a4:f3:f6:cb:88:a9:
62:7d:73:01:1b:8f:2a:0c:b6:9e:50:0d:c0:a0:7d:7f:fd:33:
7b:42:2b:73:b9:69:57:cf:32:86:90:9f:2e:8b:1e:15:e9:63:
29:37:48:16:01:fb:d7:09:e6:96:86:62:3b:44:9c:f6:c9:fb:
c9:23:1d:9d:2a:56:19:79:9d:e6:66:fc:d8:94:a0:dc:82:30:
0c:73:a6:b9:a9:07:a4:7d:73:cb:15:ff:7a:3c:a9:a5:6d:d8:
cc:be:f3:0f:7d:4c:6d:8d:87:3b:c3:90:5a:52:76:a9:c2:54:
ee:34:19:38:f4:94:5a:77:8b:f3:4f:4d:42:ea:51:cd:75:89:
48:98:4b:71:61:51:cf:c4:5c:40:ef:22:57:8b:bd:1b:b4:7a:
02:be:b0:f9:92:f8:5c:0c:e4:04:35:39:7c:00:98:d8:e2:ba:
b7:70:4a:b0:ba:fb:b9:4a:e4:ec:d6:43:19:e3:ad:ea:25:89:
da:43:74:01:02:49:7f:d8:87:c6:f0:c5:e5:b2:02:3e:e8:eb:
91:93:01:e8:ad:60:b9:f8:22:97:00:0e:c8:62:eb:10:f9:64:
9a:3e:cf:cc:75:5e:f5:03:b8:2a:88:02:f6:08:45:56:91:8f:
f7:15:be:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:29:02 2025 by rpki-client