Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/125b9d-2a1f-463a-965e-7cfeaf086e14/1/MkxxBGxUn7PH1OvEz5UZ0ALnbfE.mft
File: MkxxBGxUn7PH1OvEz5UZ0ALnbfE.mft (raw, json)
Hash identifier: pOAF2g9bJoqrYK5jAXuzp1AsEGvonfs6oYBsgr9ScZw=
Subject key identifier: 53:3C:CE:DE:90:25:A7:84:96:C7:60:AE:BC:05:AB:AD:16:A4:B1:3E
Authority key identifier: 32:4C:71:04:6C:54:9F:B3:C7:D4:EB:C4:CF:95:19:D0:02:E7:6D:F1
Certificate issuer: /CN=324c71046c549fb3c7d4ebc4cf9519d002e76df1
Certificate serial: 01984AE571FCAF49FA12ADEA34225A91DCCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MkxxBGxUn7PH1OvEz5UZ0ALnbfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/125b9d-2a1f-463a-965e-7cfeaf086e14/1/MkxxBGxUn7PH1OvEz5UZ0ALnbfE.mft
Manifest number: 0ACA
Signing time: Sun 27 Jul 2025 08:00:06 +0000
Manifest this update: Sun 27 Jul 2025 08:00:06 +0000
Manifest next update: Mon 28 Jul 2025 08:00:06 +0000
Files and hashes: 1: 2W4Y0bQNlvS93LoW6fNHPM7BKLQ.roa (hash: I9C4k+xseXfObTJ4huNUkRHHI0jQTaqLFqDJffjcwOE=)
2: MkxxBGxUn7PH1OvEz5UZ0ALnbfE.crl (hash: vZsr/d1aUdjygAaiYjWAC+eM5Q7yguB+fVPpIPvxEkE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/125b9d-2a1f-463a-965e-7cfeaf086e14/1/MkxxBGxUn7PH1OvEz5UZ0ALnbfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/125b9d-2a1f-463a-965e-7cfeaf086e14/1/MkxxBGxUn7PH1OvEz5UZ0ALnbfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/MkxxBGxUn7PH1OvEz5UZ0ALnbfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:e5:71:fc:af:49:fa:12:ad:ea:34:22:5a:91:dc:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=324c71046c549fb3c7d4ebc4cf9519d002e76df1
Validity
Not Before: Jul 27 08:00:06 2025 GMT
Not After : Jul 28 08:00:06 2025 GMT
Subject: CN=533ccede9025a78496c760aebc05abad16a4b13e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5b:f8:cf:32:ed:64:bf:d6:ea:1a:b4:89:54:
74:9d:d3:69:1a:fd:c5:7d:75:c4:32:33:b9:10:f0:
42:d1:d3:c9:91:fb:c8:59:75:f9:7b:b5:61:e7:9e:
3e:ad:89:cd:d5:ab:0d:6c:20:7f:f1:29:1d:5a:cc:
08:86:6e:31:85:37:b3:6f:42:72:a3:69:b9:12:c9:
56:ed:4c:96:28:7d:c5:b9:78:8c:68:44:71:ba:a5:
64:9b:93:c1:19:21:22:4f:12:83:59:7d:27:0f:c7:
fd:31:7c:f0:05:41:59:90:53:8d:ae:2a:af:4d:b8:
be:45:9b:a2:5e:5b:c3:ba:99:d5:ae:95:ed:a3:1c:
a4:ee:5e:b5:fc:bd:74:91:35:8b:f5:65:df:8e:98:
22:54:a9:ce:bb:c4:70:4b:f5:39:11:6d:7d:f7:60:
28:de:f9:55:40:51:43:e6:ce:9b:81:5a:f0:03:44:
f4:47:73:d2:b2:99:ff:71:90:41:db:9f:ca:9c:8c:
86:d2:2a:cc:df:84:94:4a:fa:31:69:8a:a7:1d:2f:
67:81:73:c0:85:f6:8f:93:f9:f3:e6:04:5a:16:ee:
57:a3:3e:2b:51:db:ff:1c:6f:07:03:70:3d:58:fa:
62:1a:d8:bd:fd:77:db:74:50:b5:dc:4c:d4:c2:e7:
a8:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:3C:CE:DE:90:25:A7:84:96:C7:60:AE:BC:05:AB:AD:16:A4:B1:3E
X509v3 Authority Key Identifier:
keyid:32:4C:71:04:6C:54:9F:B3:C7:D4:EB:C4:CF:95:19:D0:02:E7:6D:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MkxxBGxUn7PH1OvEz5UZ0ALnbfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/125b9d-2a1f-463a-965e-7cfeaf086e14/1/MkxxBGxUn7PH1OvEz5UZ0ALnbfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/125b9d-2a1f-463a-965e-7cfeaf086e14/1/MkxxBGxUn7PH1OvEz5UZ0ALnbfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:01:99:99:07:de:88:43:e3:05:f1:2a:61:4f:bd:4e:92:11:
08:50:f1:e6:82:b6:3f:ed:57:aa:99:09:18:6b:e5:5c:3d:f6:
aa:e5:d0:7e:64:2b:53:e4:5f:1a:03:09:8d:87:c8:a3:64:4e:
fb:bb:e1:10:d5:8c:0b:c1:8f:01:dd:fa:15:55:a1:10:8e:79:
87:c2:2e:ff:06:42:8f:89:04:1b:43:97:b7:23:a8:e3:e6:ad:
b8:56:79:5b:82:99:d8:35:b5:4e:65:0c:f2:7e:1d:1e:c0:cc:
bb:96:35:d9:24:c6:d3:3a:78:b2:8f:c3:1b:52:8e:98:e5:c0:
64:ca:61:be:0b:58:24:21:ad:60:1b:c7:26:59:42:bd:1b:a4:
08:51:a0:c3:d2:4c:0e:15:07:39:aa:92:20:bd:a1:60:09:b2:
d7:de:73:4f:7b:4c:e7:4b:1a:34:18:84:99:76:72:14:b3:7a:
71:ae:a1:ad:e0:b1:6d:75:7e:ff:d7:16:83:1c:0b:1d:ae:2b:
a1:18:d3:26:e3:22:25:5f:55:59:7b:de:72:9e:27:e3:13:88:
28:47:a6:73:5c:c0:d4:7c:33:df:8d:7b:5c:d0:37:b3:bc:78:
d7:3f:6e:d3:47:93:f4:4e:a2:17:69:38:f3:0e:e3:17:8d:b0:
a7:95:c1:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:39:50 2025 by rpki-client