Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/pk-mS7PC3keIMGMSxlLedJ7JNRc.mft
File: pk-mS7PC3keIMGMSxlLedJ7JNRc.mft (raw, json)
Hash identifier: h8nHXWg6XaHH30H0yGRd6w46bPqrtNH1vzxYk4gWfrI=
Subject key identifier: 7C:5E:E8:CC:23:D1:50:7F:16:AB:64:41:06:87:8A:D7:7D:AB:C8:8F
Authority key identifier: A6:4F:A6:4B:B3:C2:DE:47:88:30:63:12:C6:52:DE:74:9E:C9:35:17
Certificate issuer: /CN=a64fa64bb3c2de4788306312c652de749ec93517
Certificate serial: 01983FBE39FC8D5A08B8F47789E7110EF735
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pk-mS7PC3keIMGMSxlLedJ7JNRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/pk-mS7PC3keIMGMSxlLedJ7JNRc.mft
Manifest number: 0F3B
Signing time: Fri 25 Jul 2025 04:01:27 +0000
Manifest this update: Fri 25 Jul 2025 04:01:27 +0000
Manifest next update: Sat 26 Jul 2025 04:01:27 +0000
Files and hashes: 1: DGbM08ZTsAqYw2-cwkwYARO53tE.roa (hash: vRmKPjIDxHKM6g2DoHk9sDKKAGwsNzCt7i6bkh/HxXk=)
2: pk-mS7PC3keIMGMSxlLedJ7JNRc.crl (hash: PqbVqejGyiCJOFLDlSPc01CrQguQxJ/iOAwsYDbek1s=)
3: rXPM57-D6wTVhLckZD7CZVwkBW8.roa (hash: fUjK4fhETtHvQdYsLgWmfiWiFboo/MkwlvPD3alJWYc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/pk-mS7PC3keIMGMSxlLedJ7JNRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/pk-mS7PC3keIMGMSxlLedJ7JNRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/pk-mS7PC3keIMGMSxlLedJ7JNRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 04:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3f:be:39:fc:8d:5a:08:b8:f4:77:89:e7:11:0e:f7:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a64fa64bb3c2de4788306312c652de749ec93517
Validity
Not Before: Jul 25 04:01:27 2025 GMT
Not After : Jul 26 04:01:27 2025 GMT
Subject: CN=7c5ee8cc23d1507f16ab644106878ad77dabc88f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b6:49:60:f6:1e:6b:cd:a1:d0:51:98:c3:5f:
45:22:ec:d7:20:8f:f3:c8:9b:f2:71:6f:84:ba:be:
7a:91:13:25:69:68:a7:6f:97:8c:49:73:28:9f:33:
34:ca:7c:1a:e4:87:06:95:3a:1a:d5:23:11:de:43:
17:ab:f0:45:b1:64:40:78:d9:62:d6:c9:1e:20:f0:
06:73:8f:fe:7e:26:f6:af:58:5b:42:5e:dd:4a:cd:
9c:e3:95:50:9e:71:b9:39:d3:17:a7:69:cf:3b:51:
c0:72:e0:89:13:0a:8b:28:ab:30:59:2c:84:46:aa:
fa:a6:8c:37:bf:af:9a:89:09:5f:94:ce:31:b5:04:
61:86:b6:05:be:a2:b7:3e:74:77:fd:40:93:4e:2a:
bc:ac:49:42:eb:8d:0b:4c:2f:bf:2d:e0:85:ba:cc:
3c:95:c1:1c:e3:1c:e2:69:25:31:4f:95:e5:f0:62:
62:38:34:70:c4:06:3b:e3:88:8c:7b:2c:b8:0a:97:
6f:24:6f:77:d7:1b:df:44:e1:e0:df:18:2f:f4:24:
23:87:a3:bd:a8:05:45:de:7c:66:17:67:76:17:e4:
c6:55:3a:d4:bf:02:5d:ea:67:3c:f3:5e:57:fb:1b:
27:d0:89:a9:f2:5e:7b:a1:11:37:42:bc:db:34:c3:
c6:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:5E:E8:CC:23:D1:50:7F:16:AB:64:41:06:87:8A:D7:7D:AB:C8:8F
X509v3 Authority Key Identifier:
keyid:A6:4F:A6:4B:B3:C2:DE:47:88:30:63:12:C6:52:DE:74:9E:C9:35:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pk-mS7PC3keIMGMSxlLedJ7JNRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/pk-mS7PC3keIMGMSxlLedJ7JNRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/pk-mS7PC3keIMGMSxlLedJ7JNRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:84:33:58:be:9e:67:a2:ff:34:da:8c:a2:90:e1:bf:ac:01:
aa:75:c0:74:75:0c:2b:90:52:4d:75:ae:9f:5e:89:ed:80:cf:
03:6d:d1:5b:a1:7b:f1:3b:a1:d7:dc:a1:92:8f:bc:ed:68:75:
2a:5b:d9:b0:b4:5e:c9:b2:d0:ba:92:71:59:0a:8e:a5:af:92:
f3:22:57:0e:1c:e6:d1:b8:02:57:21:4e:1c:4b:ae:0d:96:15:
7a:ff:42:5c:0c:a0:af:a0:6f:df:3f:e8:09:f6:ed:cd:49:36:
5b:19:4f:a3:f4:7f:20:d5:63:0e:fe:dc:42:12:f4:20:6e:c5:
c9:3d:e2:fd:e5:57:a5:3d:f0:4d:33:2d:fd:48:09:cf:75:ca:
24:b9:6f:8b:4d:59:97:21:f9:0a:02:13:6d:92:da:79:29:55:
0e:6a:50:f5:3f:c2:82:7d:9c:f7:41:d0:c1:1d:ad:94:40:91:
ed:17:79:8c:9d:78:73:b0:29:83:e4:3f:22:e5:ef:6e:9b:62:
49:a5:a1:36:fa:8d:c7:56:e7:41:41:55:58:df:05:61:0d:69:
49:78:9b:0a:67:c6:12:4f:69:c0:2e:18:9b:5e:1d:38:1d:73:
a8:12:73:00:9d:21:bf:69:9f:25:91:30:9e:ee:84:e0:ff:a0:
4f:5c:55:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 13:00:33 2025 by rpki-client