Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/9422b0-dc79-4c71-bfd8-fcf99470b985/1/pMK1k9mMCS_TCmAepdJEqr08sU0.mft
File: pMK1k9mMCS_TCmAepdJEqr08sU0.mft (raw, json)
Hash identifier: EcAMILSBB/tAcdEclNfvyJMUPoPwxQdzAwutHDHy27I=
Subject key identifier: D5:92:1B:39:FD:67:F8:6E:BB:48:9B:89:CF:3F:4F:B0:C5:56:17:C7
Authority key identifier: A4:C2:B5:93:D9:8C:09:2F:D3:0A:60:1E:A5:D2:44:AA:BD:3C:B1:4D
Certificate issuer: /CN=a4c2b593d98c092fd30a601ea5d244aabd3cb14d
Certificate serial: 019916BF32123935D150A1682EA31109B824
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pMK1k9mMCS_TCmAepdJEqr08sU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/9422b0-dc79-4c71-bfd8-fcf99470b985/1/pMK1k9mMCS_TCmAepdJEqr08sU0.mft
Manifest number: 1066
Signing time: Thu 04 Sep 2025 22:00:52 +0000
Manifest this update: Thu 04 Sep 2025 22:00:52 +0000
Manifest next update: Fri 05 Sep 2025 22:00:52 +0000
Files and hashes: 1: U7nNEW5XGU3Qw3Z5TlXa8n1A0Xo.roa (hash: El8KNdvpLmelwHnPspzpd+ZkXP2SnewzZSQOjMbCymQ=)
2: pMK1k9mMCS_TCmAepdJEqr08sU0.crl (hash: zBtQhdxAUohmxawKEqrbpChS7NcAC3p24nF53zAn4rI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/9422b0-dc79-4c71-bfd8-fcf99470b985/1/pMK1k9mMCS_TCmAepdJEqr08sU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/9422b0-dc79-4c71-bfd8-fcf99470b985/1/pMK1k9mMCS_TCmAepdJEqr08sU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/pMK1k9mMCS_TCmAepdJEqr08sU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 22:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:16:bf:32:12:39:35:d1:50:a1:68:2e:a3:11:09:b8:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4c2b593d98c092fd30a601ea5d244aabd3cb14d
Validity
Not Before: Sep 4 22:00:52 2025 GMT
Not After : Sep 5 22:00:52 2025 GMT
Subject: CN=d5921b39fd67f86ebb489b89cf3f4fb0c55617c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:63:0d:04:d3:c2:12:37:23:e1:28:de:91:92:
d7:67:56:f6:30:88:5e:fc:1d:80:34:eb:34:d1:19:
fa:08:e2:55:48:1b:a0:26:2e:dc:2d:62:e6:89:a0:
03:18:40:86:de:17:05:48:31:17:09:11:fa:89:ee:
5f:2e:14:2b:66:02:84:74:1b:d1:00:97:b4:c4:8c:
66:e0:31:c0:1a:d1:bf:ea:fd:92:11:57:3a:94:39:
c3:93:e7:3f:9c:65:3a:73:f4:06:d7:38:0b:7d:6c:
e1:16:7f:cd:c0:25:56:5d:79:03:3c:7e:df:b1:57:
94:8c:e6:57:69:b1:e4:81:e1:c8:0a:19:4b:7e:c0:
d0:f9:51:62:01:c3:cf:5a:9d:4d:5b:05:a5:32:7f:
8d:e3:58:be:af:21:ee:8a:f3:df:ee:f0:b6:56:05:
9a:ed:87:25:4e:54:f1:ed:de:fd:16:99:25:fd:e3:
76:17:a5:c8:bc:31:e0:b1:89:d3:b1:e6:2f:f4:cb:
b8:e6:16:a1:d3:74:66:84:60:97:2f:02:df:06:f7:
0e:5b:51:49:bc:22:5d:e3:8e:60:a5:f8:49:92:70:
9c:e4:78:14:21:0f:f9:0d:dc:cc:ca:70:5f:c7:ef:
00:e1:1e:70:de:3c:88:e4:80:f9:f7:c9:2a:f2:f1:
8f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:92:1B:39:FD:67:F8:6E:BB:48:9B:89:CF:3F:4F:B0:C5:56:17:C7
X509v3 Authority Key Identifier:
keyid:A4:C2:B5:93:D9:8C:09:2F:D3:0A:60:1E:A5:D2:44:AA:BD:3C:B1:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pMK1k9mMCS_TCmAepdJEqr08sU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/9422b0-dc79-4c71-bfd8-fcf99470b985/1/pMK1k9mMCS_TCmAepdJEqr08sU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/9422b0-dc79-4c71-bfd8-fcf99470b985/1/pMK1k9mMCS_TCmAepdJEqr08sU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:d5:f3:a9:38:d7:f7:c9:c1:97:bd:ba:e0:34:b0:b2:94:cc:
63:1b:7f:e6:52:62:e4:88:b8:45:ef:24:2f:0d:6d:79:d1:59:
c5:5a:4d:b6:51:1a:e1:2c:f5:fb:81:64:12:d6:1b:71:fd:93:
2b:d0:58:22:0b:6b:7e:46:9f:2d:18:7c:d4:ba:ac:1c:2c:3c:
20:db:9c:95:c5:bf:df:37:05:0c:e2:16:7b:ea:95:d2:d5:60:
c3:ab:92:44:34:27:f5:12:e4:9e:e2:63:ab:75:33:09:75:b5:
49:a4:fb:62:31:72:40:c4:2f:53:2a:06:a8:fb:af:30:cc:01:
fe:0f:bf:e4:91:38:b8:b8:d0:96:7a:b1:38:e3:51:12:46:e3:
fa:6a:ca:41:f4:f9:f4:3b:ce:50:96:aa:19:1c:22:79:92:a2:
ac:30:a8:b9:f3:dc:8d:69:7e:7a:5d:2c:14:0c:0a:a1:ff:29:
bb:df:e8:f3:82:62:be:7b:84:66:bc:93:77:7a:dd:01:37:7d:
68:fe:3c:83:a7:2c:b4:c9:f4:15:a9:b3:cb:19:5d:db:ad:25:
2e:09:79:24:b7:02:53:89:be:2d:84:19:ef:16:b4:f3:8c:b9:
6d:3c:bd:71:a1:3d:e7:39:ee:a1:12:52:f3:aa:5b:65:c8:3b:
cb:93:f0:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 06:05:19 2025 by rpki-client