Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/5b0494-5ad6-4ea4-95fa-a83d9d920d31/1/mk-ppgpaJP_mFLbftYgT2SWjsxg.mft
File: mk-ppgpaJP_mFLbftYgT2SWjsxg.mft (raw, json)
Hash identifier: eZqgFJTDDqfWoWXxi6rQ9CpmYLpYo6oN61SUJhxL6sQ=
Subject key identifier: E9:39:FB:8C:42:6C:1F:31:C6:47:1B:FF:35:12:8A:A4:0A:E7:9D:34
Authority key identifier: 9A:4F:A9:A6:0A:5A:24:FF:E6:14:B6:DF:B5:88:13:D9:25:A3:B3:18
Certificate issuer: /CN=9a4fa9a60a5a24ffe614b6dfb58813d925a3b318
Certificate serial: 019A71EEC22B57CDFCA29EB885EC7C180B70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mk-ppgpaJP_mFLbftYgT2SWjsxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/5b0494-5ad6-4ea4-95fa-a83d9d920d31/1/mk-ppgpaJP_mFLbftYgT2SWjsxg.mft
Manifest number: 0E34
Signing time: Tue 11 Nov 2025 08:01:03 +0000
Manifest this update: Tue 11 Nov 2025 08:01:03 +0000
Manifest next update: Wed 12 Nov 2025 08:01:03 +0000
Files and hashes: 1: WF_UUzJyBXVRYaWBRz9A5RqP7uM.roa (hash: fXJDB7viVboUYMb0Tq5yYms1zX+sjGa50QbTOcD6d1o=)
2: mk-ppgpaJP_mFLbftYgT2SWjsxg.crl (hash: SqTpsFVQCx8MYTOr+9ewt5mIdeUhbuWKgt0SNf1PA+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/5b0494-5ad6-4ea4-95fa-a83d9d920d31/1/mk-ppgpaJP_mFLbftYgT2SWjsxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/5b0494-5ad6-4ea4-95fa-a83d9d920d31/1/mk-ppgpaJP_mFLbftYgT2SWjsxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/mk-ppgpaJP_mFLbftYgT2SWjsxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:c2:2b:57:cd:fc:a2:9e:b8:85:ec:7c:18:0b:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a4fa9a60a5a24ffe614b6dfb58813d925a3b318
Validity
Not Before: Nov 11 08:01:03 2025 GMT
Not After : Nov 12 08:01:03 2025 GMT
Subject: CN=e939fb8c426c1f31c6471bff35128aa40ae79d34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:37:29:24:fc:8b:06:e0:de:74:ba:a5:a3:d6:
9c:9a:ff:a3:24:cf:51:1f:62:e1:4f:58:03:20:e3:
f7:61:fc:d2:4e:12:a3:00:24:27:7e:12:c3:51:39:
74:b3:0e:45:10:d8:5b:76:06:78:60:2c:e0:c2:e1:
e9:4f:22:73:3b:a7:23:50:d5:8f:fe:22:73:9f:a2:
96:86:5e:1b:6b:74:53:23:68:fd:2c:4d:8b:f1:69:
d2:6a:58:ce:fd:c7:64:2d:9d:b6:e4:2a:b9:36:4c:
8c:51:d5:aa:bd:80:b6:f0:4c:60:f8:5d:06:24:50:
2a:bf:a4:cf:bb:99:8c:0c:b9:44:31:03:a7:b1:ae:
60:6a:9c:3e:dd:f3:86:95:1b:35:58:d8:5b:a8:c6:
64:4b:7f:9b:d0:f7:0a:73:9a:ae:95:22:ae:6a:7f:
13:33:c3:d9:55:f9:7d:bc:23:60:6c:90:77:a7:de:
54:a4:63:34:23:68:83:b1:dc:cb:2b:d2:57:40:41:
b8:d8:8d:e8:92:c5:8f:f5:58:c2:9e:02:71:b2:f4:
e9:82:02:c3:a2:a4:70:c4:57:2e:f6:05:ec:c6:ae:
2f:28:e1:20:8c:36:f5:c4:39:18:db:7c:8d:dd:c2:
aa:43:6c:79:46:c1:8d:0d:99:8c:ae:59:14:13:8e:
71:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:39:FB:8C:42:6C:1F:31:C6:47:1B:FF:35:12:8A:A4:0A:E7:9D:34
X509v3 Authority Key Identifier:
keyid:9A:4F:A9:A6:0A:5A:24:FF:E6:14:B6:DF:B5:88:13:D9:25:A3:B3:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mk-ppgpaJP_mFLbftYgT2SWjsxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5b0494-5ad6-4ea4-95fa-a83d9d920d31/1/mk-ppgpaJP_mFLbftYgT2SWjsxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5b0494-5ad6-4ea4-95fa-a83d9d920d31/1/mk-ppgpaJP_mFLbftYgT2SWjsxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:b3:68:a2:5a:c3:7a:8a:e1:94:4c:0a:cd:a2:d4:36:1f:be:
53:3d:71:1a:5b:b8:a2:f2:f1:34:17:24:c3:ad:63:c9:6a:7c:
6c:e6:99:96:f8:7a:72:3e:fe:4a:02:09:4a:1e:0c:ce:36:a0:
16:2f:6c:f0:80:50:c4:47:01:a9:1b:db:12:b5:2b:d3:60:36:
10:1d:29:52:49:09:2b:52:8a:2c:1e:9a:45:9a:6a:66:96:d1:
06:23:80:da:3e:ac:e9:25:05:0c:07:4b:7d:aa:dd:f3:e6:f6:
0c:6b:31:83:b2:f9:c4:1b:d2:6b:b7:fe:ae:1f:62:b3:8e:d7:
b8:09:11:24:ac:9f:11:19:21:85:87:7f:f7:fc:27:70:bc:bc:
6a:c5:9c:1a:89:c9:7b:fe:45:54:76:40:c2:28:dd:5f:10:b1:
74:85:29:44:40:a9:84:a5:69:2d:bd:f2:d0:78:aa:1f:b3:18:
48:de:50:40:ed:f4:ad:fb:4b:5e:77:13:38:f5:a5:3f:3a:98:
1d:55:e0:77:58:3d:e5:2e:bc:5f:3c:ad:65:88:96:b6:fa:bb:
21:d5:98:b3:38:4f:9d:6e:56:ca:56:a8:2b:2b:a6:41:8f:c2:
3c:76:a1:99:8e:65:b3:5e:7f:94:8c:28:e4:e9:eb:86:5a:19:
16:13:06:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpx7sIrV838op64hex8GAtwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhNGZhOWE2MGE1YTI0ZmZlNjE0YjZkZmI1ODgxM2Q5MjVh
M2IzMTgwHhcNMjUxMTExMDgwMTAzWhcNMjUxMTEyMDgwMTAzWjAzMTEwLwYDVQQD
EyhlOTM5ZmI4YzQyNmMxZjMxYzY0NzFiZmYzNTEyOGFhNDBhZTc5ZDM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjcpJPyLBuDedLqlo9acmv+jJM9R
H2LhT1gDIOP3YfzSThKjACQnfhLDUTl0sw5FENhbdgZ4YCzgwuHpTyJzO6cjUNWP
/iJzn6KWhl4ba3RTI2j9LE2L8WnSaljO/cdkLZ225Cq5NkyMUdWqvYC28Exg+F0G
JFAqv6TPu5mMDLlEMQOnsa5gapw+3fOGlRs1WNhbqMZkS3+b0PcKc5qulSKuan8T
M8PZVfl9vCNgbJB3p95UpGM0I2iDsdzLK9JXQEG42I3oksWP9VjCngJxsvTpggLD
oqRwxFcu9gXsxq4vKOEgjDb1xDkY23yN3cKqQ2x5RsGNDZmMrlkUE45xrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOk5+4xCbB8xxkcb/zUSiqQK5500MB8GA1UdIwQY
MBaAFJpPqaYKWiT/5hS237WIE9klo7MYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWstcHBncGFKUF9tRkxiZnRZZ1QyU1dqc3hnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC81YjA0OTQtNWFkNi00ZWE0LTk1ZmEt
YTgzZDlkOTIwZDMxLzEvbWstcHBncGFKUF9tRkxiZnRZZ1QyU1dqc3hnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC81YjA0OTQtNWFkNi00ZWE0LTk1ZmEtYTgzZDlkOTIwZDMx
LzEvbWstcHBncGFKUF9tRkxiZnRZZ1QyU1dqc3hnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfLNoolrD
eorhlEwKzaLUNh++Uz1xGlu4ovLxNBckw61jyWp8bOaZlvh6cj7+SgIJSh4Mzjag
Fi9s8IBQxEcBqRvbErUr02A2EB0pUkkJK1KKLB6aRZpqZpbRBiOA2j6s6SUFDAdL
fard8+b2DGsxg7L5xBvSa7f+rh9is47XuAkRJKyfERkhhYd/9/wncLy8asWcGonJ
e/5FVHZAwijdXxCxdIUpRECphKVpLb3y0HiqH7MYSN5QQO30rftLXncTOPWlPzqY
HVXgd1g95S68XzytZYiWtvq7IdWYszhPnW5WylaoKyumQY/CPHahmY5ls15/lIwo
5OnrhloZFhMG3Q==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:54:54 2025 by rpki-client