Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/125b9d-2a1f-463a-965e-7cfeaf086e14/1/MkxxBGxUn7PH1OvEz5UZ0ALnbfE.mft
File: MkxxBGxUn7PH1OvEz5UZ0ALnbfE.mft (raw, json)
Hash identifier: KWub8MC9hra79xY7pG+WzP1t5HTeGfSqSkeX2SLj5yo=
Subject key identifier: 77:1A:EF:9B:76:6E:9D:61:85:20:09:C3:C7:79:3E:A3:A2:9C:45:58
Authority key identifier: 32:4C:71:04:6C:54:9F:B3:C7:D4:EB:C4:CF:95:19:D0:02:E7:6D:F1
Certificate issuer: /CN=324c71046c549fb3c7d4ebc4cf9519d002e76df1
Certificate serial: 0198D5F157B8C92DCEA8DA13507B541BAE7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MkxxBGxUn7PH1OvEz5UZ0ALnbfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/125b9d-2a1f-463a-965e-7cfeaf086e14/1/MkxxBGxUn7PH1OvEz5UZ0ALnbfE.mft
Manifest number: 0B12
Signing time: Sat 23 Aug 2025 08:00:20 +0000
Manifest this update: Sat 23 Aug 2025 08:00:20 +0000
Manifest next update: Sun 24 Aug 2025 08:00:20 +0000
Files and hashes: 1: 2W4Y0bQNlvS93LoW6fNHPM7BKLQ.roa (hash: I9C4k+xseXfObTJ4huNUkRHHI0jQTaqLFqDJffjcwOE=)
2: MkxxBGxUn7PH1OvEz5UZ0ALnbfE.crl (hash: LegzLLqGhmxcQQSi+4qkocO8H4gzS6MgmIcbrHp8zwM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/125b9d-2a1f-463a-965e-7cfeaf086e14/1/MkxxBGxUn7PH1OvEz5UZ0ALnbfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/125b9d-2a1f-463a-965e-7cfeaf086e14/1/MkxxBGxUn7PH1OvEz5UZ0ALnbfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/MkxxBGxUn7PH1OvEz5UZ0ALnbfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:57:b8:c9:2d:ce:a8:da:13:50:7b:54:1b:ae:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=324c71046c549fb3c7d4ebc4cf9519d002e76df1
Validity
Not Before: Aug 23 08:00:20 2025 GMT
Not After : Aug 24 08:00:20 2025 GMT
Subject: CN=771aef9b766e9d61852009c3c7793ea3a29c4558
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:2f:3e:7f:0f:13:8b:a5:e0:12:84:a6:e0:d9:
bd:1f:e9:63:4b:88:25:9b:91:9f:53:58:59:f8:34:
2d:0e:b2:aa:95:16:b0:35:25:de:f5:cf:1b:7a:d0:
a7:f7:1d:83:9e:54:0e:2c:de:75:80:cc:09:22:e9:
46:06:e0:c2:0b:8f:64:13:ba:fb:0d:f4:ad:f5:47:
5e:b1:c8:c4:73:e8:f9:ec:71:c3:f2:a3:79:55:f7:
6e:5f:c0:03:af:c8:3d:ed:3a:7b:43:01:80:c5:1b:
67:34:3f:eb:94:9f:09:98:57:62:ef:01:2c:e0:19:
01:a0:f0:c8:80:af:f2:e1:72:3e:5c:43:12:07:cf:
02:52:d2:08:ac:27:af:0b:8b:21:c5:c7:3f:a5:ce:
00:37:13:96:b4:9a:dc:86:5c:50:94:b5:a4:87:01:
10:f6:58:96:37:b2:12:94:23:5f:07:e4:79:9a:8a:
68:57:07:83:aa:c4:84:46:8f:55:41:bf:96:94:7e:
e4:03:15:c6:8e:a6:4f:28:89:ac:cb:1b:d0:fc:9e:
cb:09:98:32:02:b8:93:89:1e:0d:b5:aa:a7:6d:9e:
6f:c6:33:ef:1d:6b:40:b6:61:fd:28:0e:c3:d9:00:
0d:18:2f:f7:5a:2b:a3:f0:d5:34:ed:81:84:f3:25:
09:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:1A:EF:9B:76:6E:9D:61:85:20:09:C3:C7:79:3E:A3:A2:9C:45:58
X509v3 Authority Key Identifier:
keyid:32:4C:71:04:6C:54:9F:B3:C7:D4:EB:C4:CF:95:19:D0:02:E7:6D:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MkxxBGxUn7PH1OvEz5UZ0ALnbfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/125b9d-2a1f-463a-965e-7cfeaf086e14/1/MkxxBGxUn7PH1OvEz5UZ0ALnbfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/125b9d-2a1f-463a-965e-7cfeaf086e14/1/MkxxBGxUn7PH1OvEz5UZ0ALnbfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:36:8e:18:df:45:d4:be:a0:57:48:02:51:60:f5:a9:34:b2:
6b:0a:15:3f:f0:fb:ca:53:99:48:20:33:07:18:ba:fb:77:6e:
e4:dd:8f:f3:68:f7:0f:30:f6:f8:88:2a:93:f7:44:2c:7f:3a:
5d:09:d7:6b:2a:86:4b:e4:b9:4b:99:f3:14:ed:bb:d6:69:45:
f0:6e:b6:f7:c8:b3:17:8c:9c:6d:be:d3:4a:2f:ad:d5:1d:61:
ee:f0:3e:be:e0:d1:3a:37:36:61:7e:16:63:e2:2b:7c:78:72:
c2:07:1e:59:08:2e:9e:6d:23:85:19:63:4e:47:ea:06:e2:40:
53:84:36:66:5a:26:f1:6a:d0:92:51:de:ce:e6:b6:5d:10:87:
83:f8:1f:08:0c:1f:1b:8c:0c:24:2a:68:35:66:99:09:4c:7a:
c8:e7:a6:69:bd:55:a1:bb:31:b1:f9:3e:37:79:53:b0:c2:05:
64:af:67:61:79:a8:40:3d:3b:ff:c9:77:06:ea:02:90:11:95:
ed:f1:f2:f7:e2:cb:d6:b9:bf:9a:64:3a:f3:2a:9e:ed:43:1d:
3e:39:cb:b2:4f:3f:2e:22:09:e0:d8:fa:fc:d4:81:75:cc:ce:
52:ee:d7:f3:f8:bf:1a:3f:bf:8d:f0:76:f0:6d:8c:9b:df:25:
94:5e:84:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:46:03 2025 by rpki-client