Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/9479ca-3db5-4f62-8e23-730b17f069ab/1/MkZ5WtaKa63Vr8trpGU-nAkPyFo.mft
File: MkZ5WtaKa63Vr8trpGU-nAkPyFo.mft (raw, json)
Hash identifier: UuSz91q7gh8/7kNZuDvLZyLzAZR4O9Ogls/ulVnlHuE=
Subject key identifier: E9:8F:58:E8:F0:9C:52:AD:57:7C:43:AF:5C:BE:9A:4A:E1:61:25:8A
Authority key identifier: 32:46:79:5A:D6:8A:6B:AD:D5:AF:CB:6B:A4:65:3E:9C:09:0F:C8:5A
Certificate issuer: /CN=3246795ad68a6badd5afcb6ba4653e9c090fc85a
Certificate serial: 0199FB7CFD05DA55B3ABABBBFE58162AFE09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MkZ5WtaKa63Vr8trpGU-nAkPyFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/9479ca-3db5-4f62-8e23-730b17f069ab/1/MkZ5WtaKa63Vr8trpGU-nAkPyFo.mft
Manifest number: 1480
Signing time: Sun 19 Oct 2025 08:01:36 +0000
Manifest this update: Sun 19 Oct 2025 08:01:36 +0000
Manifest next update: Mon 20 Oct 2025 08:01:36 +0000
Files and hashes: 1: LZ8uAkntmN0c-t2Y6sQNZXRHvWc.roa (hash: pnKmEkhVyamHT8q5re1u8FHw0CqLvJSlSrJsXdTnczY=)
2: MkZ5WtaKa63Vr8trpGU-nAkPyFo.crl (hash: fjMQbY7CDqAehV3crfRbd/Q5FXf/JQrMAOG11+ZCgKw=)
3: RB-1Fy5sD5ZVDFZv751PSyh3H9Q.roa (hash: mxQ53KQYRRHLBJuqI/DtJ482oAxxveSfP/pLhygbyl4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/9479ca-3db5-4f62-8e23-730b17f069ab/1/MkZ5WtaKa63Vr8trpGU-nAkPyFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/9479ca-3db5-4f62-8e23-730b17f069ab/1/MkZ5WtaKa63Vr8trpGU-nAkPyFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/MkZ5WtaKa63Vr8trpGU-nAkPyFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:fd:05:da:55:b3:ab:ab:bb:fe:58:16:2a:fe:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3246795ad68a6badd5afcb6ba4653e9c090fc85a
Validity
Not Before: Oct 19 08:01:36 2025 GMT
Not After : Oct 20 08:01:36 2025 GMT
Subject: CN=e98f58e8f09c52ad577c43af5cbe9a4ae161258a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5e:69:d9:b1:b8:8b:7a:b0:32:ce:78:b7:98:
64:2c:3b:cb:c8:7d:2e:47:81:aa:85:a9:3e:ab:9e:
82:53:2d:9e:2d:f5:46:0d:74:1a:20:e2:c0:39:62:
2e:79:dc:1b:90:98:e8:c5:06:30:68:6d:d7:a7:51:
6c:58:42:13:24:b8:d0:e3:ae:89:82:be:dc:d1:94:
68:d0:54:e4:af:0a:13:40:16:50:77:87:55:8b:c6:
aa:47:4d:1f:f0:57:07:b6:8d:fc:ca:1c:06:b9:3d:
4b:23:65:e6:04:01:f8:8f:bb:98:e4:27:13:7f:42:
d3:20:ea:21:a7:43:c8:fd:b9:3f:5d:fc:14:75:1d:
47:4d:95:f1:7c:3a:91:19:ed:8b:27:95:fd:9b:6b:
1f:f5:6d:81:55:1d:21:cf:60:58:6a:5a:40:fe:54:
35:99:fe:03:d2:bb:66:74:b8:24:b4:ce:00:33:7d:
74:0b:1c:2f:33:c9:4c:25:4b:f7:54:6c:4c:e6:8d:
41:90:4c:0a:0a:2f:73:7d:42:5f:dc:67:a1:55:0e:
2e:41:d2:7f:58:6f:63:22:b4:65:1d:6f:a9:65:58:
88:07:a7:29:f2:75:6e:14:26:fa:95:3b:12:2d:9d:
9d:dc:ce:e2:36:fc:04:cd:7a:30:4b:4d:4f:1d:ed:
70:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:8F:58:E8:F0:9C:52:AD:57:7C:43:AF:5C:BE:9A:4A:E1:61:25:8A
X509v3 Authority Key Identifier:
keyid:32:46:79:5A:D6:8A:6B:AD:D5:AF:CB:6B:A4:65:3E:9C:09:0F:C8:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MkZ5WtaKa63Vr8trpGU-nAkPyFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/9479ca-3db5-4f62-8e23-730b17f069ab/1/MkZ5WtaKa63Vr8trpGU-nAkPyFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/9479ca-3db5-4f62-8e23-730b17f069ab/1/MkZ5WtaKa63Vr8trpGU-nAkPyFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:2f:f1:1e:04:b7:88:55:ec:38:0d:6e:65:c3:46:da:99:9f:
81:9d:78:58:94:0f:1b:bc:29:d0:cf:df:09:47:2d:d1:7b:73:
77:35:78:2e:6e:12:d8:09:8f:cc:76:cf:95:0a:89:cb:4e:bc:
cc:b9:78:29:78:46:a4:3e:7c:b8:a3:0a:0e:da:6c:46:c3:20:
71:82:c7:6a:c6:30:d8:0e:86:20:2f:3a:af:02:f2:fe:b2:fe:
4e:86:6f:04:2d:3d:f5:1d:e5:0f:43:c9:d1:0e:c3:98:15:6f:
95:82:ca:6c:2d:46:e1:9e:02:63:84:e2:6a:d4:25:b9:29:55:
3e:2f:f7:5f:2e:cf:65:e1:56:ab:e2:d1:c2:dc:4f:7c:55:45:
f7:f7:f1:76:d4:65:c7:05:75:25:2b:4c:25:7a:5f:44:82:b8:
64:ef:f0:b1:a7:8c:d8:89:c3:0c:c4:08:6e:20:64:b0:5a:8c:
bb:7f:56:97:6f:e3:18:4c:90:d7:f2:b9:20:5b:9b:b0:3e:e1:
85:07:65:0d:32:97:10:dc:67:be:f8:20:be:dc:a8:a7:ed:6d:
45:61:fe:69:af:d5:bb:2a:71:33:6c:d5:37:c0:33:ea:7d:25:
ff:82:5a:d9:50:20:b5:f3:0c:a1:58:e8:3a:77:8b:f6:f3:a8:
91:89:2c:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:14:08 2025 by rpki-client