Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/pk-mS7PC3keIMGMSxlLedJ7JNRc.mft
File: pk-mS7PC3keIMGMSxlLedJ7JNRc.mft (raw, json)
Hash identifier: 9H0N/niIr3yHEyb+h23TEmwj7WnSCPluFZ086mHf6mE=
Subject key identifier: 64:2D:09:4E:81:9F:C5:7C:91:5B:E8:5B:A3:44:63:83:61:50:0A:AE
Authority key identifier: A6:4F:A6:4B:B3:C2:DE:47:88:30:63:12:C6:52:DE:74:9E:C9:35:17
Certificate issuer: /CN=a64fa64bb3c2de4788306312c652de749ec93517
Certificate serial: 0198D65F5A273C0CC5DD44F36AF01126C9D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pk-mS7PC3keIMGMSxlLedJ7JNRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/pk-mS7PC3keIMGMSxlLedJ7JNRc.mft
Manifest number: 0F89
Signing time: Sat 23 Aug 2025 10:00:29 +0000
Manifest this update: Sat 23 Aug 2025 10:00:29 +0000
Manifest next update: Sun 24 Aug 2025 10:00:29 +0000
Files and hashes: 1: DGbM08ZTsAqYw2-cwkwYARO53tE.roa (hash: vRmKPjIDxHKM6g2DoHk9sDKKAGwsNzCt7i6bkh/HxXk=)
2: pk-mS7PC3keIMGMSxlLedJ7JNRc.crl (hash: m+lc68M1W8pBXQfOm46AQPhizHfjCPVkwrSgYvp7NF4=)
3: rXPM57-D6wTVhLckZD7CZVwkBW8.roa (hash: fUjK4fhETtHvQdYsLgWmfiWiFboo/MkwlvPD3alJWYc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/pk-mS7PC3keIMGMSxlLedJ7JNRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/pk-mS7PC3keIMGMSxlLedJ7JNRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/pk-mS7PC3keIMGMSxlLedJ7JNRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:5a:27:3c:0c:c5:dd:44:f3:6a:f0:11:26:c9:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a64fa64bb3c2de4788306312c652de749ec93517
Validity
Not Before: Aug 23 10:00:29 2025 GMT
Not After : Aug 24 10:00:29 2025 GMT
Subject: CN=642d094e819fc57c915be85ba344638361500aae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4e:28:be:68:bb:88:f1:f7:d1:0d:af:88:cf:
e7:ec:18:6c:22:ab:d0:be:71:0b:ad:5c:3f:e9:3e:
77:3a:41:a5:e9:96:2a:fe:f9:2e:84:2e:ec:d8:1e:
7a:29:d1:86:dd:ea:4f:4a:4f:d8:b2:6d:55:80:2d:
41:32:3e:a2:18:5f:5c:58:28:d7:48:32:e9:21:d5:
de:db:7c:69:c2:1a:cd:d8:3a:82:8b:80:61:af:7a:
4a:91:09:48:31:e2:2b:33:18:db:32:98:19:ef:c9:
c9:ee:f0:4b:3c:30:fe:76:a0:f5:df:5f:a7:c1:ba:
f5:ca:20:0c:66:07:23:19:ef:ae:6a:b8:5e:d3:91:
cd:12:dc:b4:d2:ea:ee:75:3e:54:c5:f5:ec:bc:38:
26:a6:c1:8a:d1:0b:88:42:af:86:ed:a6:4a:14:62:
3b:c5:ad:00:80:8b:8f:67:a6:c7:4e:27:f8:72:32:
a2:cf:ee:62:d3:89:57:fc:fe:77:e5:72:56:9a:db:
41:59:c6:fa:cc:a2:53:c2:4b:29:a1:6a:76:af:cb:
6f:6d:18:b8:41:96:4d:b0:4c:22:11:f4:e2:b8:f2:
47:ea:75:dc:c8:3a:db:c5:84:05:d9:cf:89:3e:c2:
06:a2:60:ec:48:17:af:85:77:38:fb:8b:03:d2:23:
ff:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:2D:09:4E:81:9F:C5:7C:91:5B:E8:5B:A3:44:63:83:61:50:0A:AE
X509v3 Authority Key Identifier:
keyid:A6:4F:A6:4B:B3:C2:DE:47:88:30:63:12:C6:52:DE:74:9E:C9:35:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pk-mS7PC3keIMGMSxlLedJ7JNRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/pk-mS7PC3keIMGMSxlLedJ7JNRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/pk-mS7PC3keIMGMSxlLedJ7JNRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:95:7d:e3:bf:f5:f6:58:ab:35:fa:0a:f5:76:2a:65:b1:38:
3a:a9:a7:d3:bc:b6:11:1e:a8:ae:b9:1f:61:d2:85:85:35:00:
26:69:a7:a0:ca:29:f7:22:c5:98:bd:4a:84:d4:78:96:06:33:
26:c4:ea:e1:d9:08:ee:93:59:15:21:20:c7:75:fd:c5:7f:e5:
08:3c:95:ec:c7:1b:7a:ef:6a:9b:00:35:04:09:2a:17:f8:7a:
99:dc:33:4c:49:07:3a:6b:7f:41:f9:50:1a:a7:ea:96:41:ad:
8b:79:cb:f1:6c:ec:dc:65:c8:3b:c9:9d:5c:61:0d:a0:a2:75:
8a:d5:06:b9:de:7f:10:60:13:49:23:45:04:9b:c0:df:77:8d:
72:42:1a:62:8b:2d:e0:df:4f:58:95:24:ef:39:80:3a:d2:78:
a1:a0:c0:1a:16:bf:47:61:45:8c:1d:6e:6b:83:16:cc:26:49:
2a:5b:65:97:40:1e:56:ec:01:e8:8c:6a:05:9b:42:e2:17:b0:
66:9f:f0:a7:91:0c:6f:9a:86:c3:9b:e2:e1:1e:b3:28:f7:fc:
14:11:84:c0:e9:53:3d:aa:e1:7a:09:f2:72:83:02:bd:6b:c4:
80:1d:6d:56:92:5d:ac:72:20:24:cb:22:31:73:68:3b:bf:22:
e5:d2:bc:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:56:01 2025 by rpki-client