Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/122ff4-c4a7-4698-879f-ecab70ef32da/1/mK9kDIIO61-8kigcYRRPEae9cH4.mft
File: mK9kDIIO61-8kigcYRRPEae9cH4.mft (raw, json)
Hash identifier: /8DnB/zLtPkC5Now9ig9CLfY3QWdcjaOI+bSB+97Lc0=
Subject key identifier: 58:E4:89:23:E2:11:F8:50:7D:E2:D4:5C:CE:D3:26:1B:57:AB:FC:0D
Authority key identifier: 98:AF:64:0C:82:0E:EB:5F:BC:92:28:1C:61:14:4F:11:A7:BD:70:7E
Certificate issuer: /CN=98af640c820eeb5fbc92281c61144f11a7bd707e
Certificate serial: 0198439ACBFAF838559BDCC768F1B407EA5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mK9kDIIO61-8kigcYRRPEae9cH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/122ff4-c4a7-4698-879f-ecab70ef32da/1/mK9kDIIO61-8kigcYRRPEae9cH4.mft
Manifest number: 0355
Signing time: Fri 25 Jul 2025 22:01:14 +0000
Manifest this update: Fri 25 Jul 2025 22:01:14 +0000
Manifest next update: Sat 26 Jul 2025 22:01:14 +0000
Files and hashes: 1: OWXYykmlPDxYaUK6ibOA62-hDng.roa (hash: x4BvE6J+LBS4eTxuz/ILECCYgRYsxbKFwFccG0CtiDI=)
2: mK9kDIIO61-8kigcYRRPEae9cH4.crl (hash: pVpQtapCGpb+Wdqv6v+nJpVmywYzmSY+WZE2ugxqjO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/122ff4-c4a7-4698-879f-ecab70ef32da/1/mK9kDIIO61-8kigcYRRPEae9cH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/122ff4-c4a7-4698-879f-ecab70ef32da/1/mK9kDIIO61-8kigcYRRPEae9cH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/mK9kDIIO61-8kigcYRRPEae9cH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 21:50:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:43:9a:cb:fa:f8:38:55:9b:dc:c7:68:f1:b4:07:ea:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98af640c820eeb5fbc92281c61144f11a7bd707e
Validity
Not Before: Jul 25 22:01:14 2025 GMT
Not After : Jul 26 22:01:14 2025 GMT
Subject: CN=58e48923e211f8507de2d45cced3261b57abfc0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:37:2a:f2:72:cc:4f:2d:f8:22:d6:94:0c:87:
98:f0:86:e4:d6:fd:94:41:8e:f2:6f:85:42:5c:b5:
24:64:26:9d:11:5e:5f:0f:a2:a0:59:e2:b2:cf:ab:
21:50:6d:34:1b:07:57:fa:e6:79:09:07:d2:19:fe:
00:9f:e1:dd:8c:1f:fe:34:74:43:cf:3a:dc:8e:58:
37:fb:ef:2b:39:9d:1d:07:a1:5c:d6:77:ca:36:ef:
24:08:36:d7:bd:b2:04:f8:95:47:9c:51:1e:72:43:
70:8d:61:d4:cc:a9:a1:be:f0:48:ba:38:b7:30:c1:
63:1b:11:88:1e:8f:06:6c:09:f5:d4:24:0b:d6:4e:
ad:d1:46:5d:c9:d2:7e:dc:69:8b:6a:e4:94:78:fc:
7c:62:13:c0:01:ab:47:d9:41:77:2e:b5:66:3c:ba:
78:e3:3d:08:8a:50:46:57:ff:12:09:8d:f3:d0:d8:
92:b4:46:a5:94:ec:52:c0:bb:06:88:dd:6d:6e:99:
30:80:c2:f6:4f:77:ff:df:0e:87:ba:51:e3:7d:17:
5d:79:da:36:83:e2:f7:c0:fc:7c:5f:70:cc:fa:e8:
b4:e5:1c:b5:69:1a:3f:b8:2f:37:dd:ef:c2:60:94:
6c:e1:4a:e7:23:23:08:2d:4d:15:3c:0d:a1:d4:90:
44:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:E4:89:23:E2:11:F8:50:7D:E2:D4:5C:CE:D3:26:1B:57:AB:FC:0D
X509v3 Authority Key Identifier:
keyid:98:AF:64:0C:82:0E:EB:5F:BC:92:28:1C:61:14:4F:11:A7:BD:70:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mK9kDIIO61-8kigcYRRPEae9cH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/122ff4-c4a7-4698-879f-ecab70ef32da/1/mK9kDIIO61-8kigcYRRPEae9cH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/122ff4-c4a7-4698-879f-ecab70ef32da/1/mK9kDIIO61-8kigcYRRPEae9cH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:a9:e1:36:1f:ca:52:41:96:f8:bd:e9:74:44:62:1a:73:b1:
9d:6e:11:7b:11:b4:12:03:96:2d:ec:63:f1:ea:b4:b6:6d:83:
37:09:f8:ec:3b:b2:67:2e:42:bd:db:94:dd:2e:62:ca:cd:70:
5e:72:cf:78:a3:5b:85:9b:5a:da:18:d0:e8:72:67:0e:51:5e:
a3:03:5f:1e:81:92:5b:6f:8a:c7:68:5c:46:21:69:67:ea:6e:
4c:bf:c3:0e:a6:8f:12:7d:31:b9:f0:af:f4:b6:d4:f4:20:b7:
47:47:66:03:db:a8:15:48:24:02:c5:fe:59:f1:70:6f:c1:dc:
85:73:cc:3e:65:6c:d6:30:e8:35:2a:bd:32:15:9e:1d:61:55:
51:cc:84:fc:52:0c:b1:e8:b6:6e:6a:c5:73:15:e0:b8:e7:f8:
b4:11:4e:91:86:4b:92:b2:32:dd:51:46:7b:24:22:44:38:e7:
1c:1d:f0:f2:42:03:20:31:0b:1c:12:bf:67:fd:c5:1d:78:44:
23:41:cf:6f:69:cd:3c:0f:12:0a:e5:25:a0:0b:6c:1a:0c:ef:
9b:4d:14:a2:a4:c2:c0:7a:fe:d5:87:00:39:7a:72:34:0a:f6:
71:e7:8d:3f:e5:13:86:1e:f8:5f:4d:ee:85:ad:96:0a:ef:b7:
50:e6:d5:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 06:38:07 2025 by rpki-client