Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/512313-afcd-4e9a-bb70-71005f7f02a8/1/mGkK8GLqmzrl9kz5qf6lYyTGvZc.mft
File: mGkK8GLqmzrl9kz5qf6lYyTGvZc.mft (raw, json)
Hash identifier: RdLUNiStPA+ky4Swl+iCHj9dcoR4R5t23XVdCZr9/EQ=
Subject key identifier: 5E:55:92:DA:8C:30:6E:E6:04:F2:7B:03:77:9C:27:FA:C6:D7:A7:F8
Authority key identifier: 98:69:0A:F0:62:EA:9B:3A:E5:F6:4C:F9:A9:FE:A5:63:24:C6:BD:97
Certificate issuer: /CN=98690af062ea9b3ae5f64cf9a9fea56324c6bd97
Certificate serial: 0198D47369EF2E200A8B11E242AF29099EA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGkK8GLqmzrl9kz5qf6lYyTGvZc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/512313-afcd-4e9a-bb70-71005f7f02a8/1/mGkK8GLqmzrl9kz5qf6lYyTGvZc.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 01:03:10 +0000
Manifest this update: Sat 23 Aug 2025 01:03:10 +0000
Manifest next update: Sun 24 Aug 2025 01:03:10 +0000
Files and hashes: 1: CxGOoBY5YoTyd6Nu8KyBbb6HwB4.roa (hash: W6T/EKpt1B07PivG7xwB9X1O2PEBzOLgzqiyKvlh3q4=)
2: mGkK8GLqmzrl9kz5qf6lYyTGvZc.crl (hash: pbFj4yrYt16ZTHaI5PtMxMNof7/pvVrjA/dt1S8hN74=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/512313-afcd-4e9a-bb70-71005f7f02a8/1/mGkK8GLqmzrl9kz5qf6lYyTGvZc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/512313-afcd-4e9a-bb70-71005f7f02a8/1/mGkK8GLqmzrl9kz5qf6lYyTGvZc.mft
rsync://rpki.ripe.net/repository/DEFAULT/mGkK8GLqmzrl9kz5qf6lYyTGvZc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:69:ef:2e:20:0a:8b:11:e2:42:af:29:09:9e:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98690af062ea9b3ae5f64cf9a9fea56324c6bd97
Validity
Not Before: Aug 23 01:03:10 2025 GMT
Not After : Aug 24 01:03:10 2025 GMT
Subject: CN=5e5592da8c306ee604f27b03779c27fac6d7a7f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:a7:fb:fa:ba:83:3f:40:12:c0:77:98:23:a7:
a1:fb:bd:a2:58:4e:e2:56:bb:d2:74:38:f4:30:09:
65:34:98:db:ba:ea:2a:e1:71:de:84:89:fa:48:79:
24:49:b3:ec:50:d4:19:2a:69:fc:b0:31:3f:98:3a:
14:13:43:cf:5d:1d:d0:cf:51:0c:f0:0f:7f:88:0e:
e1:fb:6d:2a:ca:8a:d5:24:10:7a:0f:68:92:b7:36:
d0:b2:e1:0d:ee:97:b6:1c:f0:7c:2f:cc:1d:28:6c:
b5:8b:41:22:20:68:67:1b:a4:e0:2b:67:ad:e8:46:
f2:a1:81:3e:38:66:d4:22:06:69:8a:60:18:35:d5:
82:dd:8c:28:a3:ef:76:fe:37:d5:38:fa:fe:0e:4c:
3c:25:d0:3f:23:a8:10:21:e6:3c:99:f9:65:12:86:
8e:dc:82:98:80:3d:3d:1a:9a:6d:9e:fa:87:c6:8a:
ae:9f:b1:a4:a4:9a:7b:61:e5:f5:50:09:f2:72:68:
e9:8b:05:0b:a7:a4:f0:8e:77:af:71:2d:be:4b:e0:
81:2f:72:db:08:f7:f1:95:c6:94:e2:b1:b8:7d:4d:
1c:a0:9c:8a:12:18:2d:dc:bd:7d:46:9b:c4:51:4f:
2e:b4:0f:6b:d2:63:c2:2e:a6:60:4e:a7:bb:62:6a:
94:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:55:92:DA:8C:30:6E:E6:04:F2:7B:03:77:9C:27:FA:C6:D7:A7:F8
X509v3 Authority Key Identifier:
keyid:98:69:0A:F0:62:EA:9B:3A:E5:F6:4C:F9:A9:FE:A5:63:24:C6:BD:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGkK8GLqmzrl9kz5qf6lYyTGvZc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/512313-afcd-4e9a-bb70-71005f7f02a8/1/mGkK8GLqmzrl9kz5qf6lYyTGvZc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/512313-afcd-4e9a-bb70-71005f7f02a8/1/mGkK8GLqmzrl9kz5qf6lYyTGvZc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:84:d3:4c:90:fb:4e:0b:75:f9:03:75:6c:db:0c:ff:6c:41:
bc:49:43:3e:6f:4a:c9:42:7b:a2:66:83:cf:19:56:9c:2d:a7:
75:e5:9c:ae:6d:3c:4f:21:0b:2f:f5:82:98:a9:a6:70:23:bb:
3f:04:82:c2:66:4e:17:7a:ed:b6:54:25:3c:86:56:21:0b:21:
79:02:67:95:6c:1b:07:cc:35:bc:5e:7b:f2:f9:bb:f4:8d:da:
81:64:48:ab:6e:7f:dc:1c:39:29:4d:c2:3d:07:7b:92:cb:7a:
1f:19:85:a5:75:af:66:db:84:8b:c6:db:0b:12:94:8b:a5:f4:
da:2a:50:c5:52:57:75:e2:e1:4b:28:05:97:18:06:a4:6a:b5:
e4:8c:83:fe:0f:f3:84:e5:1d:0d:0a:29:e2:d2:24:07:1d:bc:
02:b9:d7:a1:12:c1:bf:20:a9:5f:48:93:31:2c:db:9c:a5:2a:
ff:f0:a3:60:6c:a3:6a:c4:3d:d7:03:37:01:6e:bb:f9:d0:79:
c2:e1:ce:cd:17:6e:28:5e:a8:63:4f:79:49:be:cd:36:16:8c:
a0:c1:d6:77:26:6d:30:94:69:1d:48:3c:45:cb:19:8f:d3:1b:
6f:a7:2c:18:0c:72:2f:65:6f:ec:e4:6c:31:8d:ea:53:95:4e:
ed:a8:f2:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:31:32 2025 by rpki-client