Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/ab8307-5f9c-49c6-8a0b-f3b45819f2b0/1/mKmHxs0KNvlNvvEO8qLGYCCpVhE.mft
File: mKmHxs0KNvlNvvEO8qLGYCCpVhE.mft (raw, json)
Hash identifier: XVys9JGRvVLbvuLCfDyvDXVq3hKiPYTs1tqsYheZ+AU=
Subject key identifier: DD:56:9E:7C:57:5F:FD:52:09:DB:78:1F:E8:EC:9C:63:A4:E3:06:34
Authority key identifier: 98:A9:87:C6:CD:0A:36:F9:4D:BE:F1:0E:F2:A2:C6:60:20:A9:56:11
Certificate issuer: /CN=98a987c6cd0a36f94dbef10ef2a2c66020a95611
Certificate serial: 01984B542F76462683C56225EB0598B4C71E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mKmHxs0KNvlNvvEO8qLGYCCpVhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/ab8307-5f9c-49c6-8a0b-f3b45819f2b0/1/mKmHxs0KNvlNvvEO8qLGYCCpVhE.mft
Manifest number: 1196
Signing time: Sun 27 Jul 2025 10:01:04 +0000
Manifest this update: Sun 27 Jul 2025 10:01:04 +0000
Manifest next update: Mon 28 Jul 2025 10:01:04 +0000
Files and hashes: 1: KkXU6YkVywPte3FQKPTwmXq43Jw.roa (hash: +grv15uxretevWYIDb50yFoisYnL85l43pH++WpX3xI=)
2: mKmHxs0KNvlNvvEO8qLGYCCpVhE.crl (hash: uuksywN+H8Cc6vf2JZXUNhvZmiHQqXuKSP7CH/hg9jg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/ab8307-5f9c-49c6-8a0b-f3b45819f2b0/1/mKmHxs0KNvlNvvEO8qLGYCCpVhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/ab8307-5f9c-49c6-8a0b-f3b45819f2b0/1/mKmHxs0KNvlNvvEO8qLGYCCpVhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/mKmHxs0KNvlNvvEO8qLGYCCpVhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:54:2f:76:46:26:83:c5:62:25:eb:05:98:b4:c7:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98a987c6cd0a36f94dbef10ef2a2c66020a95611
Validity
Not Before: Jul 27 10:01:04 2025 GMT
Not After : Jul 28 10:01:04 2025 GMT
Subject: CN=dd569e7c575ffd5209db781fe8ec9c63a4e30634
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:0b:a2:58:35:09:6f:d1:58:61:85:b0:e4:e8:
e8:97:e0:60:be:f0:a3:b2:9c:57:e6:a2:51:af:f0:
94:20:e1:fe:65:ab:dc:9d:99:29:f1:27:24:c5:55:
61:8f:25:b5:e9:9b:cb:dd:fa:d8:96:7d:78:ab:6c:
c4:c2:34:3c:31:b8:2f:28:3e:f5:41:a1:a9:5b:21:
e1:59:66:96:8a:52:f9:da:2c:20:2c:ba:a3:ae:c4:
63:1c:6d:67:20:b9:8d:84:35:7d:ec:43:68:20:dd:
53:23:8b:f5:f2:f7:54:f5:f0:22:4a:07:b5:42:2d:
e0:7e:46:c6:a8:fc:04:60:00:7b:b7:d1:d8:8d:1b:
20:d5:11:da:ef:1f:6f:fa:65:a0:b9:3d:ec:e9:22:
bf:e3:cb:df:a5:95:f1:10:e3:4d:3e:90:c1:85:11:
26:37:1f:c6:b7:6b:71:f1:49:13:f0:00:9d:3d:05:
b9:49:e0:13:42:fb:3e:e0:c6:5e:71:80:54:91:ef:
1e:60:69:26:f9:92:34:e0:2d:92:e9:79:d4:b8:75:
08:87:b9:dd:e9:72:85:27:46:dd:c3:86:24:db:ba:
44:dd:16:44:d7:e1:21:81:42:30:6d:c5:b6:1e:7f:
07:a5:f5:5d:2d:85:1a:59:a1:84:e1:51:8c:ca:19:
b9:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:56:9E:7C:57:5F:FD:52:09:DB:78:1F:E8:EC:9C:63:A4:E3:06:34
X509v3 Authority Key Identifier:
keyid:98:A9:87:C6:CD:0A:36:F9:4D:BE:F1:0E:F2:A2:C6:60:20:A9:56:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mKmHxs0KNvlNvvEO8qLGYCCpVhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ab8307-5f9c-49c6-8a0b-f3b45819f2b0/1/mKmHxs0KNvlNvvEO8qLGYCCpVhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ab8307-5f9c-49c6-8a0b-f3b45819f2b0/1/mKmHxs0KNvlNvvEO8qLGYCCpVhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:a8:4b:95:85:85:ab:2c:25:c5:60:fe:48:41:9a:28:96:f8:
d1:85:96:c4:f2:d2:e5:c2:13:4f:30:05:49:b1:f8:46:35:72:
ba:57:03:f8:a2:4d:11:4e:61:74:96:f5:c2:39:3c:ca:29:b9:
3e:75:9c:eb:b0:57:40:39:f9:ff:09:27:b0:17:e3:cc:32:50:
95:4b:5b:80:34:90:74:08:01:03:aa:ff:bd:ff:31:f0:94:b6:
e6:eb:61:27:93:e0:87:cf:27:6f:a2:fb:1c:3c:51:a6:3c:4a:
60:c5:d8:f6:3a:ee:1c:f6:3c:53:23:57:62:8f:b3:31:c2:27:
35:b0:00:9a:ff:b7:a4:34:f5:de:c0:f8:03:02:07:c4:a1:49:
c4:f4:7a:4b:e3:34:22:a3:71:43:df:fe:35:11:a7:20:85:fb:
b2:86:1b:f9:36:97:56:58:dd:4f:9e:b2:e6:05:69:00:eb:30:
49:86:d3:41:91:1d:ee:b3:11:72:3a:88:f9:30:78:57:7b:25:
08:25:fb:34:20:64:48:0b:3a:f4:87:18:9c:d9:11:67:8d:6f:
83:db:d7:56:81:5a:55:11:5d:59:01:63:0d:0e:29:bf:55:e7:
3c:de:15:58:aa:b1:80:11:7c:3e:17:6d:68:e1:a8:cc:84:fb:
05:f3:fa:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:01:24 2025 by rpki-client