Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/d4b542-6392-43d0-a8c2-2cadcf6658ca/1/Mk73breQdOacczAs5MLgr0f0Uwc.mft
File: Mk73breQdOacczAs5MLgr0f0Uwc.mft (raw, json)
Hash identifier: Y6WRlqjZWCOAbUe/8PhAIlx4LB7OveCbhyUTvvvNiD4=
Subject key identifier: 10:F7:A7:7C:C8:1B:7D:EE:DF:06:B2:63:FF:01:97:01:B9:32:C1:C6
Authority key identifier: 32:4E:F7:6E:B7:90:74:E6:9C:73:30:2C:E4:C2:E0:AF:47:F4:53:07
Certificate issuer: /CN=324ef76eb79074e69c73302ce4c2e0af47f45307
Certificate serial: 0199239ECF3176845D73C5A9897732974BA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mk73breQdOacczAs5MLgr0f0Uwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/d4b542-6392-43d0-a8c2-2cadcf6658ca/1/Mk73breQdOacczAs5MLgr0f0Uwc.mft
Manifest number: 04BB
Signing time: Sun 07 Sep 2025 10:00:34 +0000
Manifest this update: Sun 07 Sep 2025 10:00:34 +0000
Manifest next update: Mon 08 Sep 2025 10:00:34 +0000
Files and hashes: 1: I9UkQ41YeX1efTDwQLbD_CMYPDQ.roa (hash: iSNpeYLJZVe6ucEI95ka4RakvFZqRgRE032Te/mBPRQ=)
2: Mk73breQdOacczAs5MLgr0f0Uwc.crl (hash: gvOPwlH76m5n4CWuuCvgsV/oTAk3BkjEAGtUySQO1ZE=)
3: x8qUgYPzT7g1nXs61F1j3vP06ZA.roa (hash: /RVMiuVCMeWyNuJCZhsV4JVmBiQgFuEHvbUPa8p74t4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/d4b542-6392-43d0-a8c2-2cadcf6658ca/1/Mk73breQdOacczAs5MLgr0f0Uwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/d4b542-6392-43d0-a8c2-2cadcf6658ca/1/Mk73breQdOacczAs5MLgr0f0Uwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mk73breQdOacczAs5MLgr0f0Uwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9e:cf:31:76:84:5d:73:c5:a9:89:77:32:97:4b:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=324ef76eb79074e69c73302ce4c2e0af47f45307
Validity
Not Before: Sep 7 10:00:34 2025 GMT
Not After : Sep 8 10:00:34 2025 GMT
Subject: CN=10f7a77cc81b7deedf06b263ff019701b932c1c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a5:aa:74:6b:de:6f:ad:05:cf:fc:ee:83:02:
c5:11:d0:54:bb:b6:35:62:c0:6b:56:d6:84:ee:0c:
2e:ec:f7:40:42:3e:d1:94:d0:9f:2e:28:31:4f:63:
21:91:ff:42:d6:9f:60:cb:91:fc:15:c8:8d:72:26:
d8:94:9e:47:54:47:cf:29:95:35:79:67:ec:05:b0:
6a:31:65:e9:b3:75:b7:16:68:38:a4:36:44:ac:0f:
ac:ff:fd:60:fb:24:91:33:6c:94:b2:e3:65:68:98:
57:4b:50:35:6a:0c:ca:c2:e2:88:d2:31:1f:66:e5:
2a:55:da:66:ca:90:2a:35:05:34:fd:2c:51:a7:0b:
c8:17:0b:a7:64:cd:a3:36:0c:40:62:f9:fa:3f:69:
55:ab:41:fc:73:44:45:c4:85:53:59:35:6b:a6:89:
7f:d0:06:a0:7f:dc:94:c1:6d:95:01:7e:ce:02:ff:
55:76:50:0d:1a:5b:a4:d4:a2:14:af:ec:fd:a3:28:
13:5a:e0:12:95:36:3b:dd:55:7b:e6:93:ce:47:cf:
ce:70:81:7e:16:ae:e7:6a:02:ad:4e:a0:88:1a:90:
11:74:1f:82:7f:2a:a5:b2:05:fb:5d:54:10:26:70:
b1:63:78:71:51:ac:ae:8a:d2:ca:91:c9:ff:d7:92:
46:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:F7:A7:7C:C8:1B:7D:EE:DF:06:B2:63:FF:01:97:01:B9:32:C1:C6
X509v3 Authority Key Identifier:
keyid:32:4E:F7:6E:B7:90:74:E6:9C:73:30:2C:E4:C2:E0:AF:47:F4:53:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mk73breQdOacczAs5MLgr0f0Uwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/d4b542-6392-43d0-a8c2-2cadcf6658ca/1/Mk73breQdOacczAs5MLgr0f0Uwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/d4b542-6392-43d0-a8c2-2cadcf6658ca/1/Mk73breQdOacczAs5MLgr0f0Uwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:a0:29:f3:a4:70:5f:ba:5c:3d:f3:9a:d7:c4:ca:a9:17:b0:
ea:9b:56:79:4f:d9:22:ad:08:c7:0d:ea:51:07:6d:cc:74:2c:
5a:6f:79:f6:3d:9e:0d:d4:75:40:3e:8f:fe:c6:83:46:aa:33:
41:30:af:e7:01:88:22:86:c0:32:e3:7e:ad:71:97:a7:e3:a9:
9f:ab:ad:88:dd:06:0f:d4:1a:da:8f:03:d3:4f:d3:1c:e0:66:
b8:db:75:54:37:66:70:44:ec:4d:4e:80:d7:20:0b:47:66:ce:
7a:a1:c9:3c:f0:35:eb:db:e1:03:0b:ea:dc:b1:5f:56:95:ce:
55:b0:10:f2:cd:55:b7:7d:7a:b8:ec:fc:fa:a8:c4:1c:00:63:
0b:59:19:17:ce:45:34:bc:6c:0f:e6:0c:c8:02:fe:d2:24:e7:
4e:d8:d2:c3:41:97:1a:19:fc:27:95:02:ec:12:64:c2:af:c0:
1a:ec:00:2e:70:fc:6f:54:ac:44:c4:31:dd:4c:ed:da:dc:c1:
24:4d:5e:d2:29:7f:1e:2b:31:fa:4d:87:b8:78:8f:5c:27:17:
06:21:c0:c6:07:7d:e6:a7:bf:71:cf:86:b0:54:17:b7:92:67:
77:53:c6:a8:34:d8:8c:50:75:ff:5f:1b:e1:5a:4c:97:63:c7:
4a:d9:9a:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:48:38 2025 by rpki-client