Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.mft
File: mkjB2ACM3AWdsLJ6qVFHmcBtVEM.mft (raw, json)
Hash identifier: Ly/3kSqW7uhGqmDuKZZ7yQeIXKkX7u9LZuvMSEb4TnQ=
Subject key identifier: 9D:AF:E2:9E:F5:09:FD:88:8F:A9:5A:87:F1:71:10:08:80:D2:05:2C
Authority key identifier: 9A:48:C1:D8:00:8C:DC:05:9D:B0:B2:7A:A9:51:47:99:C0:6D:54:43
Certificate issuer: /CN=9a48c1d8008cdc059db0b27aa9514799c06d5443
Certificate serial: 0199D28047C8800C27FCB6A703BEDF30A48E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.mft
Manifest number: 123D
Signing time: Sat 11 Oct 2025 09:00:46 +0000
Manifest this update: Sat 11 Oct 2025 09:00:46 +0000
Manifest next update: Sun 12 Oct 2025 09:00:46 +0000
Files and hashes: 1: GS3n997-WSAnBFI5sxW4oYhya68.roa (hash: 9uLSgMiqXXeu2TS+gBYSbYKO48DlZM21pWe2MUShNG8=)
2: K1RZ-_Fg9dSZIebCMUhpe6gbgJc.roa (hash: DeEJ/lwM2EUWvyFmV2osr5NnI9rnfMu9oAVwUv2cQPg=)
3: mkjB2ACM3AWdsLJ6qVFHmcBtVEM.crl (hash: YNtPEIanyqkuR2TakH4ptH4kptkicJ/sDvP132/Pqzs=)
4: tKjpgYt3F1U92FlxxtExmwv_VJA.roa (hash: PCobIxyuHsntJ/hl1UTuu1qlban1/mIdUKP0z5QY3l0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 Oct 2025 09:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:d2:80:47:c8:80:0c:27:fc:b6:a7:03:be:df:30:a4:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a48c1d8008cdc059db0b27aa9514799c06d5443
Validity
Not Before: Oct 11 09:00:46 2025 GMT
Not After : Oct 12 09:00:46 2025 GMT
Subject: CN=9dafe29ef509fd888fa95a87f171100880d2052c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c7:46:ef:bf:63:d0:53:04:60:f4:3b:93:83:
ab:45:6a:c9:72:41:16:43:2a:2e:21:6a:24:e7:5d:
c8:23:ea:a1:6f:ce:8e:63:76:22:23:9f:17:c0:4b:
f0:46:60:b0:6c:55:51:55:7c:da:cf:33:51:45:68:
c5:5f:47:68:3c:e8:9c:3c:7d:23:d7:d1:23:e2:26:
c2:84:73:a3:20:72:65:1f:e7:e8:d2:df:51:db:46:
0a:76:80:72:86:f3:80:08:76:c0:26:48:c1:b0:5b:
63:c9:3c:f9:4a:44:25:8f:d4:b6:53:b3:59:e7:0f:
da:cf:e1:6c:50:e8:04:66:c0:36:34:08:60:55:a0:
72:05:2e:e0:bd:2b:1f:b6:5d:85:9b:aa:3d:ac:f6:
87:9d:24:ea:f8:57:40:c7:ba:78:7d:c7:2d:9f:a3:
bd:98:8d:78:a8:36:24:b6:b7:5e:e4:13:17:8f:72:
a0:e1:8b:4d:e7:b4:2f:04:0c:2c:8c:2d:c7:4d:c0:
b9:30:b6:b7:8e:29:2a:c9:ae:2c:cb:d8:0d:d3:75:
c9:c5:0d:20:2f:d6:de:9f:b0:65:f9:c6:d7:94:f4:
43:31:df:68:9c:a2:36:ef:60:c4:3d:90:22:36:e7:
42:a5:a3:ea:db:b1:f3:43:59:1b:40:e2:5a:66:bf:
2d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:AF:E2:9E:F5:09:FD:88:8F:A9:5A:87:F1:71:10:08:80:D2:05:2C
X509v3 Authority Key Identifier:
keyid:9A:48:C1:D8:00:8C:DC:05:9D:B0:B2:7A:A9:51:47:99:C0:6D:54:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:f9:92:b4:e6:e0:4d:af:b6:fa:71:8b:92:2a:ce:46:97:f0:
25:62:d8:d3:ec:bb:b4:6f:a9:4b:8a:63:6d:9c:c9:bc:5d:1f:
dc:14:05:2f:23:b0:21:cd:f0:83:19:92:47:28:ff:3a:a3:d4:
b6:52:ae:11:a4:c2:1d:9c:71:48:f2:9c:22:0e:ba:6b:b5:d5:
af:45:c3:a9:97:cb:5b:ab:1c:d0:29:0b:7d:7f:86:9d:49:08:
a1:6d:fe:2e:8f:3f:20:a7:66:c0:49:4a:da:4f:e4:c9:67:44:
cd:1c:64:bc:79:69:49:c0:ea:e8:56:8a:84:1b:51:5c:97:a5:
80:8a:b0:1f:6c:08:46:6a:02:25:d9:aa:24:7b:fd:d9:17:8e:
3b:ef:ef:8e:6f:23:a0:2d:9d:18:40:17:7e:48:e5:9d:2b:64:
dc:1d:6d:53:7a:69:1b:55:62:78:cb:50:76:b9:52:93:e9:2b:
ec:7a:01:29:5b:26:80:3f:82:3e:d0:56:88:bc:fb:db:02:55:
3d:54:ed:98:48:87:39:c4:53:be:a7:c2:ab:78:87:13:b9:0e:
45:52:ca:3a:3f:aa:49:4a:a2:4f:47:58:7b:f3:3c:63:71:63:
20:52:e5:41:1b:3f:24:09:29:a2:34:a5:60:45:75:77:8f:74:
21:4f:40:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 13:01:50 2025 by rpki-client