Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/mk123S9GBosIca1FAKxuV3r-Rpw.mft
File: mk123S9GBosIca1FAKxuV3r-Rpw.mft (raw, json)
Hash identifier: cOGJKygHRKA4h2kXu56gM5YBkLc7G5lvGeI9gRcEvBM=
Subject key identifier: 43:3B:0A:1B:55:11:CC:8C:9C:91:09:D1:C8:20:8E:5D:44:00:29:EE
Authority key identifier: 9A:4D:76:DD:2F:46:06:8B:08:71:AD:45:00:AC:6E:57:7A:FE:46:9C
Certificate issuer: /CN=9a4d76dd2f46068b0871ad4500ac6e577afe469c
Certificate serial: 0198D6983D8DCE6C57F514C7B4EA401D6257
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mk123S9GBosIca1FAKxuV3r-Rpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/mk123S9GBosIca1FAKxuV3r-Rpw.mft
Manifest number: 1655
Signing time: Sat 23 Aug 2025 11:02:38 +0000
Manifest this update: Sat 23 Aug 2025 11:02:38 +0000
Manifest next update: Sun 24 Aug 2025 11:02:38 +0000
Files and hashes: 1: g_4HQ6dPEqLM5A1GtfThJC294J4.roa (hash: LZYhI0FV7wY5oWB7xQyZ5bQSIIqgJBDQ7uNwEne/gVE=)
2: j-Wf3znAxyHVOa1yHEzX6v3sp9U.roa (hash: OwOwX0XTVGFVpqs+QebopX8jgHz3h7KxGANJ/Crp1oA=)
3: mk123S9GBosIca1FAKxuV3r-Rpw.crl (hash: uRfivGh11Sb9AGv+J5yVjMT6zFqUSpztLzRWsRK5uIQ=)
4: vscV7GZRMa0CPUTvFLBuSp-lIJ8.roa (hash: 2C3QYWkPGEbQmt4ETFEFUqH1R92qUMl/4nE7fTPMPhA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/mk123S9GBosIca1FAKxuV3r-Rpw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/mk123S9GBosIca1FAKxuV3r-Rpw.mft
rsync://rpki.ripe.net/repository/DEFAULT/mk123S9GBosIca1FAKxuV3r-Rpw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:3d:8d:ce:6c:57:f5:14:c7:b4:ea:40:1d:62:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a4d76dd2f46068b0871ad4500ac6e577afe469c
Validity
Not Before: Aug 23 11:02:38 2025 GMT
Not After : Aug 24 11:02:38 2025 GMT
Subject: CN=433b0a1b5511cc8c9c9109d1c8208e5d440029ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ac:82:5a:0f:28:9d:a5:5c:a4:10:7b:33:6f:
a9:63:9a:50:49:72:1d:3c:ad:bc:07:f9:c1:cc:06:
e0:c0:37:4b:05:86:73:60:80:9a:9a:b1:3c:88:98:
03:c2:8a:ce:82:b1:aa:30:7c:8f:62:9f:fc:0d:f2:
0b:f6:eb:eb:07:69:d5:f1:39:41:e6:87:71:1e:ba:
c4:51:b6:b3:cd:40:0f:94:55:15:d6:ec:d1:e0:7d:
89:97:5c:26:1d:48:ed:82:a9:d1:99:3f:2a:50:fc:
25:8d:0c:31:8b:0e:f4:0a:fa:09:d6:6b:63:57:fe:
f5:6e:08:dd:93:1a:77:cd:58:8e:f1:ca:b7:75:99:
b1:57:0a:d0:ec:ce:67:37:b8:2f:20:76:a5:9e:6d:
6b:05:92:09:50:d3:79:00:29:27:9d:82:d6:bc:f1:
30:f5:a1:61:71:86:95:e5:e5:02:79:43:3b:86:ba:
91:5a:93:33:4d:ec:3f:f1:bb:21:73:eb:7f:18:9b:
97:c3:55:00:20:c8:a6:9b:a2:09:04:cd:61:09:e0:
a3:f9:bf:ab:08:53:a6:2b:a5:92:de:4c:66:9b:ea:
2e:36:f6:2a:a5:3a:ce:c8:31:6d:be:fe:81:9c:67:
d5:55:de:89:fd:e4:64:39:cb:5f:9a:5e:48:bf:b9:
77:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:3B:0A:1B:55:11:CC:8C:9C:91:09:D1:C8:20:8E:5D:44:00:29:EE
X509v3 Authority Key Identifier:
keyid:9A:4D:76:DD:2F:46:06:8B:08:71:AD:45:00:AC:6E:57:7A:FE:46:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mk123S9GBosIca1FAKxuV3r-Rpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/mk123S9GBosIca1FAKxuV3r-Rpw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/mk123S9GBosIca1FAKxuV3r-Rpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:a9:66:66:30:c4:7f:3f:d2:d5:d0:29:01:10:a3:80:d3:3b:
aa:61:07:9f:d0:ad:1a:a2:9d:da:28:c3:1d:f0:df:32:50:33:
93:50:58:44:ee:63:a7:c9:44:6c:5d:82:6d:b2:e4:83:ee:5f:
98:c8:7f:7a:39:4a:13:3e:88:60:8e:a7:9d:6b:a8:cb:87:22:
ae:1a:f2:5f:e6:84:30:ec:ef:04:4e:ef:60:cc:7d:36:c5:82:
63:75:ae:5a:07:e2:e8:36:76:3b:e9:a1:db:b4:69:f4:b5:23:
8b:79:93:87:2f:95:29:ec:ae:c8:93:d8:b9:ad:d3:f5:cb:e4:
26:3f:74:28:7b:a0:7f:2b:74:bd:8f:ff:e2:27:9b:dd:59:96:
3a:3b:f0:10:20:97:ef:7e:26:39:b6:ba:73:77:65:1e:3d:ac:
e9:f7:18:79:08:f6:fe:60:e5:b6:7f:b0:24:b1:24:b4:ca:83:
4a:a5:89:56:fb:8a:98:d9:8a:bb:4f:81:78:1f:16:a8:85:ca:
fb:7a:26:52:bb:a7:d6:c9:b6:3c:3a:ea:1f:e2:c7:ff:52:65:
7e:fb:90:3b:e0:f7:c2:fe:45:56:b1:32:78:8b:3b:d4:1a:e9:
76:8b:b6:b2:6b:11:f3:eb:d7:61:74:fc:d6:f6:56:7d:c2:c5:
f7:50:32:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:12:18 2025 by rpki-client