Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/mk123S9GBosIca1FAKxuV3r-Rpw.mft
File: mk123S9GBosIca1FAKxuV3r-Rpw.mft (raw, json)
Hash identifier: pkP2xwfGiVj/FSR/TV8Y6IHiZAWowCQ5xy0eX4qYIlE=
Subject key identifier: 57:D8:10:60:62:EB:19:DE:7F:ED:9C:04:3C:85:65:4C:3C:FD:C3:BD
Authority key identifier: 9A:4D:76:DD:2F:46:06:8B:08:71:AD:45:00:AC:6E:57:7A:FE:46:9C
Certificate issuer: /CN=9a4d76dd2f46068b0871ad4500ac6e577afe469c
Certificate serial: 0198499BFB4B6657D3C2631E2E4BD12F0C09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mk123S9GBosIca1FAKxuV3r-Rpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/mk123S9GBosIca1FAKxuV3r-Rpw.mft
Manifest number: 160C
Signing time: Sun 27 Jul 2025 02:00:15 +0000
Manifest this update: Sun 27 Jul 2025 02:00:15 +0000
Manifest next update: Mon 28 Jul 2025 02:00:15 +0000
Files and hashes: 1: g_4HQ6dPEqLM5A1GtfThJC294J4.roa (hash: LZYhI0FV7wY5oWB7xQyZ5bQSIIqgJBDQ7uNwEne/gVE=)
2: j-Wf3znAxyHVOa1yHEzX6v3sp9U.roa (hash: OwOwX0XTVGFVpqs+QebopX8jgHz3h7KxGANJ/Crp1oA=)
3: mk123S9GBosIca1FAKxuV3r-Rpw.crl (hash: SPGEfszORnTQuh22LdeEtEVVafvroo1AtqZhvvB37WQ=)
4: vscV7GZRMa0CPUTvFLBuSp-lIJ8.roa (hash: 2C3QYWkPGEbQmt4ETFEFUqH1R92qUMl/4nE7fTPMPhA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/mk123S9GBosIca1FAKxuV3r-Rpw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/mk123S9GBosIca1FAKxuV3r-Rpw.mft
rsync://rpki.ripe.net/repository/DEFAULT/mk123S9GBosIca1FAKxuV3r-Rpw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:9b:fb:4b:66:57:d3:c2:63:1e:2e:4b:d1:2f:0c:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a4d76dd2f46068b0871ad4500ac6e577afe469c
Validity
Not Before: Jul 27 02:00:15 2025 GMT
Not After : Jul 28 02:00:15 2025 GMT
Subject: CN=57d8106062eb19de7fed9c043c85654c3cfdc3bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:1a:09:ed:fa:55:57:c9:e3:f6:63:32:94:64:
6d:0a:17:75:2d:16:32:1d:6e:fa:c8:11:6d:aa:32:
76:46:92:6e:80:d1:ae:37:ac:d7:26:de:3d:05:de:
75:f6:a2:1a:fd:00:01:70:3e:ee:ad:6d:be:19:9b:
9d:26:94:55:fc:aa:61:f0:06:7e:de:1c:02:c7:bf:
27:5e:08:65:9b:45:17:cd:48:b4:c9:3a:c1:35:d5:
2c:ac:96:4e:cd:eb:a5:bc:cc:6e:da:0c:04:cc:b4:
45:a9:4b:97:2e:0b:02:bc:dd:71:bc:ca:4d:3f:c4:
06:bf:7b:da:b8:fe:53:e3:e3:32:d2:51:3e:21:c0:
bf:bd:85:34:67:c6:05:86:61:d8:8e:bc:c2:c2:0f:
ec:0b:fd:49:05:da:7d:e0:b2:c5:69:73:1d:4a:6b:
5a:75:85:99:e4:02:82:f4:98:87:d6:7e:90:bb:ea:
3c:db:12:63:61:69:aa:91:bb:ae:1d:93:96:92:49:
fd:49:91:0a:84:18:da:5c:ac:fd:55:4b:05:dc:5b:
26:e8:f4:22:74:0b:9a:d8:7f:06:ca:bd:94:09:a4:
44:30:60:13:db:84:87:5d:97:cf:eb:66:ec:4f:07:
4c:43:e1:86:da:4e:f3:f8:39:30:85:56:91:f9:76:
f9:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:D8:10:60:62:EB:19:DE:7F:ED:9C:04:3C:85:65:4C:3C:FD:C3:BD
X509v3 Authority Key Identifier:
keyid:9A:4D:76:DD:2F:46:06:8B:08:71:AD:45:00:AC:6E:57:7A:FE:46:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mk123S9GBosIca1FAKxuV3r-Rpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/mk123S9GBosIca1FAKxuV3r-Rpw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/mk123S9GBosIca1FAKxuV3r-Rpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:ba:e4:39:7a:f8:d7:62:21:cd:ee:d9:22:c0:7e:6e:bf:06:
f9:f9:38:42:8c:12:2f:44:fe:d6:10:55:20:ef:30:f1:6f:33:
fc:16:4c:ca:ba:44:3f:58:00:f5:3a:52:79:79:ee:bc:50:a9:
fb:7d:3e:b3:5b:5f:f4:5a:c0:94:f1:28:44:0e:82:22:7f:c4:
65:06:de:c9:00:8c:c9:c7:f4:74:2c:48:a3:af:d0:2c:14:89:
cd:82:db:26:85:c1:33:3d:d5:44:5d:0c:58:64:0b:09:79:c0:
aa:ed:6a:00:fb:55:21:10:be:3d:d9:a1:fe:09:3a:ec:02:f7:
96:93:f4:7d:76:71:2f:62:23:cd:9b:86:86:ab:d4:98:64:8d:
7e:00:4f:13:aa:9e:ac:21:f2:b4:1e:bb:b3:eb:31:c8:98:18:
77:95:7c:1a:c4:fe:0a:cd:40:d4:6a:1c:03:1b:10:b7:16:f5:
e6:8c:8f:ec:f4:7e:b3:f0:7b:4e:73:8d:4b:91:22:e5:bc:ed:
a2:9d:c5:65:b6:55:9b:bc:36:80:f6:39:30:75:d8:81:ef:25:
68:29:7e:81:f7:05:75:44:8c:43:af:d3:49:0e:16:e1:ce:e5:
19:c3:78:94:d9:83:f6:9a:36:5f:3d:33:ff:d0:be:2e:e1:3b:
bd:49:76:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:08:50 2025 by rpki-client