Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/pk-mS7PC3keIMGMSxlLedJ7JNRc.mft
File: pk-mS7PC3keIMGMSxlLedJ7JNRc.mft (raw, json)
Hash identifier: 3QFm6vkTlCsoB44O/O9OBVf3sYA3JK0Au8i5cf1y9Xo=
Subject key identifier: 39:3E:F3:C1:FC:57:46:1D:8C:2F:E4:B7:02:32:9D:E7:2B:D9:FF:51
Authority key identifier: A6:4F:A6:4B:B3:C2:DE:47:88:30:63:12:C6:52:DE:74:9E:C9:35:17
Certificate issuer: /CN=a64fa64bb3c2de4788306312c652de749ec93517
Certificate serial: 0199FFC88BA0805E834ED37405175034F309
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pk-mS7PC3keIMGMSxlLedJ7JNRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/pk-mS7PC3keIMGMSxlLedJ7JNRc.mft
Manifest number: 1023
Signing time: Mon 20 Oct 2025 04:02:37 +0000
Manifest this update: Mon 20 Oct 2025 04:02:37 +0000
Manifest next update: Tue 21 Oct 2025 04:02:37 +0000
Files and hashes: 1: DGbM08ZTsAqYw2-cwkwYARO53tE.roa (hash: vRmKPjIDxHKM6g2DoHk9sDKKAGwsNzCt7i6bkh/HxXk=)
2: pk-mS7PC3keIMGMSxlLedJ7JNRc.crl (hash: 3Ph4iqAk188lElhVZuJWvedrzAjctwnETsaN4svnxO4=)
3: rXPM57-D6wTVhLckZD7CZVwkBW8.roa (hash: fUjK4fhETtHvQdYsLgWmfiWiFboo/MkwlvPD3alJWYc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/pk-mS7PC3keIMGMSxlLedJ7JNRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/pk-mS7PC3keIMGMSxlLedJ7JNRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/pk-mS7PC3keIMGMSxlLedJ7JNRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:8b:a0:80:5e:83:4e:d3:74:05:17:50:34:f3:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a64fa64bb3c2de4788306312c652de749ec93517
Validity
Not Before: Oct 20 04:02:37 2025 GMT
Not After : Oct 21 04:02:37 2025 GMT
Subject: CN=393ef3c1fc57461d8c2fe4b702329de72bd9ff51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:2e:12:5d:6d:8e:82:19:60:02:b4:26:af:87:
c7:ed:c5:e1:b4:27:e2:da:4b:0c:55:a4:6b:24:f3:
6a:f8:c4:26:ee:ea:21:57:24:a6:51:3d:26:31:b7:
4b:fd:35:d5:35:03:fe:0e:9a:26:8d:de:7a:eb:a7:
44:73:bf:77:21:25:75:7c:f1:2c:5a:57:e3:f4:50:
0b:9a:dd:fb:4a:6c:23:d8:b5:e9:fd:91:e5:73:a7:
d3:9c:4f:50:3b:a6:1f:9e:29:bd:6c:e8:19:64:03:
33:3d:60:37:7b:25:11:4a:70:11:03:b4:36:4c:9c:
60:21:12:77:8f:c8:1b:fc:94:0e:cc:88:72:e0:e5:
ff:47:71:38:f6:ed:58:6d:45:a1:53:f3:43:4a:d0:
fb:cb:af:f6:3f:07:8e:f2:a6:de:16:a1:fd:a0:77:
3e:52:1a:23:b6:d4:5b:71:dc:47:f1:ee:32:fd:e9:
52:07:52:85:ff:a1:04:df:91:fa:14:fc:be:0b:33:
6c:91:07:02:24:af:e6:39:d9:63:11:be:e4:e2:09:
e5:28:35:ea:17:b9:95:95:f7:ba:d0:0a:de:c1:33:
ab:4c:fe:3e:1e:16:44:4a:a4:28:48:01:c9:80:66:
af:b9:8d:77:9e:a3:61:f8:2b:64:e9:e0:8b:97:16:
7f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:3E:F3:C1:FC:57:46:1D:8C:2F:E4:B7:02:32:9D:E7:2B:D9:FF:51
X509v3 Authority Key Identifier:
keyid:A6:4F:A6:4B:B3:C2:DE:47:88:30:63:12:C6:52:DE:74:9E:C9:35:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pk-mS7PC3keIMGMSxlLedJ7JNRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/pk-mS7PC3keIMGMSxlLedJ7JNRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/pk-mS7PC3keIMGMSxlLedJ7JNRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:54:d1:5f:f0:ea:84:e8:3e:69:aa:62:38:dd:74:69:f9:3d:
f2:c3:1d:06:d5:ff:25:39:50:4b:f7:f4:49:9b:fb:bd:06:26:
ed:8a:b1:78:a3:95:78:f5:04:5b:a1:f2:6b:d9:3f:13:d0:a3:
73:54:40:fa:6d:30:f7:49:18:bc:6c:69:1f:f9:10:46:8e:db:
86:eb:c6:1a:ad:fc:79:e7:bf:98:35:36:20:05:be:07:97:dc:
d9:fe:2a:4c:0d:fc:e8:4b:55:33:36:c3:0d:13:81:8b:c8:09:
aa:54:82:14:65:02:3c:65:8f:a5:76:65:f5:82:e9:27:c9:dc:
fb:ed:e6:c0:b3:00:92:13:b6:85:39:cb:fd:38:dd:dc:bd:fa:
af:e3:26:0e:b3:83:f4:9a:fb:87:56:6c:70:5a:c6:34:ee:51:
e6:1e:5a:32:2b:0c:07:66:bc:01:ef:a5:54:28:90:52:d3:89:
a3:0c:35:45:54:c4:cc:56:b5:7b:96:df:0f:b7:51:ff:c3:e5:
06:70:21:17:f7:58:1d:4e:aa:bb:85:aa:17:b5:4b:90:5a:2f:
e6:af:6d:61:5b:d1:a4:ae:80:df:ef:d4:b6:a3:f6:f0:18:36:
c1:08:c7:8e:b6:e2:4e:b0:84:16:0f:c4:79:eb:69:b5:1b:d6:
81:a5:7a:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:23:19 2025 by rpki-client