Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/9479ca-3db5-4f62-8e23-730b17f069ab/1/MkZ5WtaKa63Vr8trpGU-nAkPyFo.mft
File: MkZ5WtaKa63Vr8trpGU-nAkPyFo.mft (raw, json)
Hash identifier: sCTzwcYesGkdDltf7kBJu0i2kdZl2s2RhHeVkatRS/w=
Subject key identifier: 41:BE:D1:AC:8B:CB:D3:1C:05:01:7F:B1:FE:CC:39:88:D0:ED:56:31
Authority key identifier: 32:46:79:5A:D6:8A:6B:AD:D5:AF:CB:6B:A4:65:3E:9C:09:0F:C8:5A
Certificate issuer: /CN=3246795ad68a6badd5afcb6ba4653e9c090fc85a
Certificate serial: 0198D5F1742E9499473D6CC89F09731E6772
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MkZ5WtaKa63Vr8trpGU-nAkPyFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/9479ca-3db5-4f62-8e23-730b17f069ab/1/MkZ5WtaKa63Vr8trpGU-nAkPyFo.mft
Manifest number: 13E8
Signing time: Sat 23 Aug 2025 08:00:27 +0000
Manifest this update: Sat 23 Aug 2025 08:00:27 +0000
Manifest next update: Sun 24 Aug 2025 08:00:27 +0000
Files and hashes: 1: LZ8uAkntmN0c-t2Y6sQNZXRHvWc.roa (hash: pnKmEkhVyamHT8q5re1u8FHw0CqLvJSlSrJsXdTnczY=)
2: MkZ5WtaKa63Vr8trpGU-nAkPyFo.crl (hash: Yt0kRpZVdyzmFIwr5iRbN3D4xCPH7/gd4/APDjBDIok=)
3: RB-1Fy5sD5ZVDFZv751PSyh3H9Q.roa (hash: mxQ53KQYRRHLBJuqI/DtJ482oAxxveSfP/pLhygbyl4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/9479ca-3db5-4f62-8e23-730b17f069ab/1/MkZ5WtaKa63Vr8trpGU-nAkPyFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/9479ca-3db5-4f62-8e23-730b17f069ab/1/MkZ5WtaKa63Vr8trpGU-nAkPyFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/MkZ5WtaKa63Vr8trpGU-nAkPyFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:74:2e:94:99:47:3d:6c:c8:9f:09:73:1e:67:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3246795ad68a6badd5afcb6ba4653e9c090fc85a
Validity
Not Before: Aug 23 08:00:27 2025 GMT
Not After : Aug 24 08:00:27 2025 GMT
Subject: CN=41bed1ac8bcbd31c05017fb1fecc3988d0ed5631
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d4:fc:40:42:12:38:93:f6:05:07:69:97:4f:
9c:30:3a:61:0a:90:73:ec:52:9a:b0:e3:e2:b1:8b:
06:47:99:25:70:59:c7:9d:dc:ce:22:ae:3b:c0:3c:
de:dd:8d:ab:f6:5a:6e:10:55:0f:f1:1c:25:ab:a6:
19:ab:01:50:9e:e3:52:ab:d5:a9:bb:6b:76:f2:52:
f1:3b:db:9c:22:d8:68:de:18:72:47:5a:22:07:cc:
4f:4f:14:a3:db:0f:72:f4:a5:8d:54:c8:d1:a6:71:
be:40:64:00:c5:ff:fa:39:bf:35:fd:75:c4:f9:f5:
69:cc:30:7c:79:62:53:2b:f6:cb:a1:33:60:9b:9e:
e0:5a:1e:cf:8a:c1:5c:d3:c3:6b:66:83:a2:94:09:
c2:37:e8:08:8d:c5:76:53:eb:6f:7d:26:bc:24:27:
bd:09:8d:85:65:95:4d:99:9d:ac:27:89:82:35:7f:
40:06:0e:0d:82:b6:36:a9:fa:47:ae:b7:51:d2:95:
90:70:96:ea:19:94:b1:e8:55:98:17:44:bc:c9:42:
0c:66:6d:72:1f:97:14:5b:b6:e9:6b:13:2a:60:75:
1b:c0:fe:4e:9b:b7:09:e1:43:28:19:cc:52:6f:1d:
ea:2c:91:b2:4b:46:0c:6b:86:46:49:6c:fe:88:b3:
3f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:BE:D1:AC:8B:CB:D3:1C:05:01:7F:B1:FE:CC:39:88:D0:ED:56:31
X509v3 Authority Key Identifier:
keyid:32:46:79:5A:D6:8A:6B:AD:D5:AF:CB:6B:A4:65:3E:9C:09:0F:C8:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MkZ5WtaKa63Vr8trpGU-nAkPyFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/9479ca-3db5-4f62-8e23-730b17f069ab/1/MkZ5WtaKa63Vr8trpGU-nAkPyFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/9479ca-3db5-4f62-8e23-730b17f069ab/1/MkZ5WtaKa63Vr8trpGU-nAkPyFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:f4:ce:b5:b1:fa:85:ea:c4:f1:e2:d6:02:3a:8d:5c:34:54:
ee:27:23:c8:23:ca:ec:4b:50:1d:8e:58:fc:0d:2f:40:be:41:
8a:57:b2:e1:8b:44:9f:f1:02:1b:6a:df:ce:2e:30:ea:a3:8d:
26:e2:51:92:da:50:96:68:dd:16:79:9d:a9:22:b9:31:8e:fc:
7c:e5:08:c1:a8:55:5d:f3:8d:d8:7e:cc:7d:92:78:bd:34:bc:
ff:ef:1c:73:eb:8f:cb:24:07:56:36:99:28:b2:69:ee:19:4a:
d5:85:dc:39:90:db:2d:c5:fd:d7:85:33:ba:d6:22:65:b6:36:
07:59:3f:24:2d:88:08:87:95:89:b5:e6:d4:35:bc:fc:74:29:
47:6c:a1:2e:66:b8:10:15:8e:50:d1:cb:6c:41:f8:56:c7:14:
44:e8:8a:57:c8:5c:8a:03:d6:cd:f3:c9:69:2b:47:c4:00:aa:
0a:e6:bc:57:1b:e9:44:b8:c9:68:40:42:02:fc:85:64:99:21:
74:ea:8a:cf:dc:ad:04:22:54:96:33:3f:46:64:8c:7f:a6:39:
53:5d:73:be:35:9a:6a:cc:2d:f0:f9:29:a9:0e:13:e2:2b:4d:
cf:ef:ff:23:63:75:40:71:48:31:ea:d8:2b:94:66:67:f0:6b:
b1:78:64:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:50:56 2025 by rpki-client