Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/9479ca-3db5-4f62-8e23-730b17f069ab/1/MkZ5WtaKa63Vr8trpGU-nAkPyFo.mft
File: MkZ5WtaKa63Vr8trpGU-nAkPyFo.mft (raw, json)
Hash identifier: 3a3MEgVNPCN4xqHnyUj0SOOk2HRtdCyuioAobUP1PXA=
Subject key identifier: 47:E7:A1:AB:A2:A7:55:15:D6:96:9C:20:B2:55:98:E4:F4:76:27:97
Authority key identifier: 32:46:79:5A:D6:8A:6B:AD:D5:AF:CB:6B:A4:65:3E:9C:09:0F:C8:5A
Certificate issuer: /CN=3246795ad68a6badd5afcb6ba4653e9c090fc85a
Certificate serial: 0198529F5A48151B6B11E0A650B92F1B63FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MkZ5WtaKa63Vr8trpGU-nAkPyFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/9479ca-3db5-4f62-8e23-730b17f069ab/1/MkZ5WtaKa63Vr8trpGU-nAkPyFo.mft
Manifest number: 13A4
Signing time: Mon 28 Jul 2025 20:00:31 +0000
Manifest this update: Mon 28 Jul 2025 20:00:31 +0000
Manifest next update: Tue 29 Jul 2025 20:00:31 +0000
Files and hashes: 1: LZ8uAkntmN0c-t2Y6sQNZXRHvWc.roa (hash: pnKmEkhVyamHT8q5re1u8FHw0CqLvJSlSrJsXdTnczY=)
2: MkZ5WtaKa63Vr8trpGU-nAkPyFo.crl (hash: qTeO70Jwq90fqfnWjoDeXYdsAkhWtD//CQI6sfGQFsw=)
3: RB-1Fy5sD5ZVDFZv751PSyh3H9Q.roa (hash: mxQ53KQYRRHLBJuqI/DtJ482oAxxveSfP/pLhygbyl4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/9479ca-3db5-4f62-8e23-730b17f069ab/1/MkZ5WtaKa63Vr8trpGU-nAkPyFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/9479ca-3db5-4f62-8e23-730b17f069ab/1/MkZ5WtaKa63Vr8trpGU-nAkPyFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/MkZ5WtaKa63Vr8trpGU-nAkPyFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 20:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:52:9f:5a:48:15:1b:6b:11:e0:a6:50:b9:2f:1b:63:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3246795ad68a6badd5afcb6ba4653e9c090fc85a
Validity
Not Before: Jul 28 20:00:31 2025 GMT
Not After : Jul 29 20:00:31 2025 GMT
Subject: CN=47e7a1aba2a75515d6969c20b25598e4f4762797
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:07:34:ac:4d:49:34:d7:91:f1:56:f5:6a:5d:
47:3c:dc:a1:85:9c:4d:85:80:c6:5c:3f:46:d0:88:
6f:10:e6:41:ba:5e:63:cf:b1:35:df:33:8f:a3:e6:
bf:50:1f:6b:2d:f1:aa:e4:9f:02:bf:26:5c:7e:c9:
9f:5a:6b:65:d8:19:56:55:3d:73:cc:10:c8:95:0c:
8d:6e:b2:e2:42:7a:83:07:93:1a:a5:8a:ae:77:48:
61:43:d7:ca:99:af:37:5b:77:f0:67:11:fc:2e:b3:
eb:05:da:ce:d0:a7:fd:0b:1c:9f:7b:01:c6:dd:96:
0d:1a:37:4b:3f:87:fa:2f:1c:1f:a9:88:ab:56:fd:
39:5a:68:7a:1f:e6:87:da:d9:60:b5:a0:66:e4:94:
b7:af:4b:69:5c:6c:fd:bd:4d:6b:30:22:b2:e3:d7:
1c:92:71:b3:80:80:cf:62:ae:40:27:f5:33:ea:e6:
b5:57:40:94:9a:7e:60:65:f7:c2:0d:71:78:b9:d7:
98:6b:36:e1:46:21:fd:cf:72:ea:1d:88:d5:9e:3f:
87:b7:af:fb:fd:6e:85:92:e6:90:4d:ca:5a:a8:80:
c7:f3:8c:f1:d4:07:c3:29:b7:2c:01:fd:a5:c7:76:
e7:fd:09:99:86:b3:6c:51:51:60:2e:64:07:a3:a2:
57:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:E7:A1:AB:A2:A7:55:15:D6:96:9C:20:B2:55:98:E4:F4:76:27:97
X509v3 Authority Key Identifier:
keyid:32:46:79:5A:D6:8A:6B:AD:D5:AF:CB:6B:A4:65:3E:9C:09:0F:C8:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MkZ5WtaKa63Vr8trpGU-nAkPyFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/9479ca-3db5-4f62-8e23-730b17f069ab/1/MkZ5WtaKa63Vr8trpGU-nAkPyFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/9479ca-3db5-4f62-8e23-730b17f069ab/1/MkZ5WtaKa63Vr8trpGU-nAkPyFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:5c:22:ce:4f:ff:97:25:ce:a3:e2:57:3b:b8:0f:3d:45:3f:
b5:d8:6a:8a:11:3d:49:5f:c7:7d:d6:71:09:9f:b9:4c:92:1d:
8a:0f:c8:9b:81:12:35:13:61:fa:2e:7d:54:61:64:e6:85:5d:
02:b8:de:31:d0:28:1f:a3:14:92:45:e3:b2:99:16:e2:e7:a5:
9a:55:07:78:a7:7f:ee:26:6e:34:06:44:cd:62:b6:02:35:0f:
cb:1c:5e:08:67:71:0c:4d:8d:bb:2a:22:0f:31:70:46:6f:9e:
4e:37:8f:2b:c8:c5:14:3e:f6:0c:3a:40:a8:63:a2:07:50:62:
cc:af:26:17:aa:59:42:29:11:b2:01:c4:bc:5e:7c:d8:0d:c9:
07:27:4b:ac:2c:57:c6:06:fd:ff:b3:c0:66:7c:6e:64:70:a9:
53:f3:c2:1d:a4:88:91:89:5d:54:04:cb:4a:41:68:18:4b:ed:
37:87:5a:cf:c9:04:0d:38:c4:ca:e2:92:fc:9f:b9:79:4f:4f:
78:bd:4f:c9:4a:b9:4b:59:74:81:16:76:72:c8:b1:a4:54:af:
72:5d:4e:f9:15:e8:2b:27:2f:d2:e6:2a:de:b1:8b:cd:23:a6:
a2:df:97:04:83:3e:47:b6:08:5e:2b:e1:60:53:d5:c8:ae:3b:
02:51:54:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:02:05 2025 by rpki-client