Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/ab8307-5f9c-49c6-8a0b-f3b45819f2b0/1/mKmHxs0KNvlNvvEO8qLGYCCpVhE.mft
File: mKmHxs0KNvlNvvEO8qLGYCCpVhE.mft (raw, json)
Hash identifier: kjI2rqstd60OaF339SQS603W1BjDks9/WNs64aZdtF8=
Subject key identifier: 27:BC:88:68:69:C3:68:DE:F1:BC:FF:F6:BD:39:04:99:5C:9B:0A:FD
Authority key identifier: 98:A9:87:C6:CD:0A:36:F9:4D:BE:F1:0E:F2:A2:C6:60:20:A9:56:11
Certificate issuer: /CN=98a987c6cd0a36f94dbef10ef2a2c66020a95611
Certificate serial: 0199C7C59F5690319921F278D73EE30AB888
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mKmHxs0KNvlNvvEO8qLGYCCpVhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/ab8307-5f9c-49c6-8a0b-f3b45819f2b0/1/mKmHxs0KNvlNvvEO8qLGYCCpVhE.mft
Manifest number: 125B
Signing time: Thu 09 Oct 2025 07:00:41 +0000
Manifest this update: Thu 09 Oct 2025 07:00:41 +0000
Manifest next update: Fri 10 Oct 2025 07:00:41 +0000
Files and hashes: 1: KkXU6YkVywPte3FQKPTwmXq43Jw.roa (hash: +grv15uxretevWYIDb50yFoisYnL85l43pH++WpX3xI=)
2: mKmHxs0KNvlNvvEO8qLGYCCpVhE.crl (hash: PEaxJVOKN/9gyNrPVgLlvoQAj0QXW7VAgVoSHamTIGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/ab8307-5f9c-49c6-8a0b-f3b45819f2b0/1/mKmHxs0KNvlNvvEO8qLGYCCpVhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/ab8307-5f9c-49c6-8a0b-f3b45819f2b0/1/mKmHxs0KNvlNvvEO8qLGYCCpVhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/mKmHxs0KNvlNvvEO8qLGYCCpVhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 10 Oct 2025 07:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c7:c5:9f:56:90:31:99:21:f2:78:d7:3e:e3:0a:b8:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98a987c6cd0a36f94dbef10ef2a2c66020a95611
Validity
Not Before: Oct 9 07:00:41 2025 GMT
Not After : Oct 10 07:00:41 2025 GMT
Subject: CN=27bc886869c368def1bcfff6bd3904995c9b0afd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c6:d4:8c:59:12:8f:34:92:e7:ed:fc:34:87:
04:7a:9e:b2:dd:57:8f:95:d9:b0:d0:70:68:e4:50:
1b:c1:46:1e:fc:b9:2f:da:02:ec:c4:77:d8:1f:c9:
bc:18:8f:39:3b:b3:e0:05:a9:19:e3:ed:6d:04:20:
b4:7f:11:9c:d7:f7:22:c2:2b:05:ba:ec:33:29:99:
88:74:b9:ab:69:78:2c:5e:99:0e:d5:05:08:59:5c:
3c:4f:e6:40:56:66:09:b7:89:96:d4:e8:09:f4:75:
9d:83:8a:00:81:e3:9f:c2:35:49:d5:78:56:86:fc:
a8:f4:21:34:a9:8f:3f:fd:bc:a8:fe:07:ae:38:fe:
79:92:78:45:aa:64:57:5c:7c:74:0c:ba:ea:aa:ce:
b4:4c:71:7f:73:15:a8:4b:55:f2:6a:9a:fb:03:87:
a2:68:c0:d0:a3:eb:41:35:e5:b6:42:35:8b:37:35:
84:53:97:93:4a:4a:5c:2f:49:f6:ec:e8:c4:52:d5:
88:94:bc:2a:12:1c:6e:2f:27:c4:3a:72:bb:5f:0d:
fa:5f:1e:6c:c2:e0:de:18:37:a8:25:a6:f2:3d:05:
f5:d2:36:87:91:76:cb:b1:cb:08:19:93:3a:92:bc:
d1:37:99:d4:b7:60:64:b4:ec:6f:09:04:3b:f3:08:
a0:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:BC:88:68:69:C3:68:DE:F1:BC:FF:F6:BD:39:04:99:5C:9B:0A:FD
X509v3 Authority Key Identifier:
keyid:98:A9:87:C6:CD:0A:36:F9:4D:BE:F1:0E:F2:A2:C6:60:20:A9:56:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mKmHxs0KNvlNvvEO8qLGYCCpVhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ab8307-5f9c-49c6-8a0b-f3b45819f2b0/1/mKmHxs0KNvlNvvEO8qLGYCCpVhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ab8307-5f9c-49c6-8a0b-f3b45819f2b0/1/mKmHxs0KNvlNvvEO8qLGYCCpVhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:a1:0f:78:f7:81:f6:50:a4:a0:34:61:e4:50:13:59:f0:b4:
74:04:34:a6:96:fd:64:e9:65:ea:56:5b:00:46:f8:a8:fa:62:
81:1a:f5:0d:90:fc:79:21:1b:cd:2c:9d:f1:68:ba:6a:fe:5e:
6e:7e:96:8d:19:9c:97:49:35:9b:30:3c:db:1d:3f:68:f2:30:
c2:a0:a6:0d:0f:f9:ad:14:14:f5:52:49:90:09:f9:31:b2:10:
a5:fa:cc:0f:bc:9f:24:46:19:57:76:ba:44:dc:a2:c5:50:67:
17:07:1c:7d:45:bd:8f:b2:98:80:6c:a7:47:44:37:51:8b:28:
f9:0c:ed:f1:43:16:ce:07:62:1d:86:33:bd:f5:52:b2:91:59:
1f:8e:36:56:38:3c:85:82:21:4b:72:7f:ac:d0:b8:37:f9:70:
e5:4f:5d:2d:35:17:cd:23:a4:57:e3:e0:55:2c:00:41:14:a3:
50:6b:23:f2:ac:c9:be:dd:5e:42:d7:ef:f2:fc:22:c1:d2:6d:
c2:75:b6:0f:bf:77:55:05:34:2e:e6:70:d2:87:c4:fc:a1:e2:
ed:33:f8:3e:b3:e6:12:3c:7f:44:ce:d8:c5:7f:d7:98:bb:e7:
6e:8c:a4:4a:c8:a2:f8:13:f3:60:79:16:4e:a5:72:d1:f5:bc:
4d:84:f4:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 14:47:15 2025 by rpki-client