Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/pk-mS7PC3keIMGMSxlLedJ7JNRc.mft
File: pk-mS7PC3keIMGMSxlLedJ7JNRc.mft (raw, json)
Hash identifier: bATcGnfvcVgaOKTypzv9uKt18NY2hb+pbCCZMOJw3nc=
Subject key identifier: 63:47:A9:04:87:AA:98:B8:FC:C5:08:3B:94:3E:47:06:29:69:85:37
Authority key identifier: A6:4F:A6:4B:B3:C2:DE:47:88:30:63:12:C6:52:DE:74:9E:C9:35:17
Certificate issuer: /CN=a64fa64bb3c2de4788306312c652de749ec93517
Certificate serial: 019A2A440A24EEE2018C0517B5BAFFB0019B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pk-mS7PC3keIMGMSxlLedJ7JNRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/pk-mS7PC3keIMGMSxlLedJ7JNRc.mft
Manifest number: 1039
Signing time: Tue 28 Oct 2025 10:01:33 +0000
Manifest this update: Tue 28 Oct 2025 10:01:33 +0000
Manifest next update: Wed 29 Oct 2025 10:01:33 +0000
Files and hashes: 1: DGbM08ZTsAqYw2-cwkwYARO53tE.roa (hash: vRmKPjIDxHKM6g2DoHk9sDKKAGwsNzCt7i6bkh/HxXk=)
2: pk-mS7PC3keIMGMSxlLedJ7JNRc.crl (hash: 8ix+6M6Y4Wwy3zaeIJWJ4hI61L/EZDpuQXAps72KMv0=)
3: rXPM57-D6wTVhLckZD7CZVwkBW8.roa (hash: fUjK4fhETtHvQdYsLgWmfiWiFboo/MkwlvPD3alJWYc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/pk-mS7PC3keIMGMSxlLedJ7JNRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/pk-mS7PC3keIMGMSxlLedJ7JNRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/pk-mS7PC3keIMGMSxlLedJ7JNRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2a:44:0a:24:ee:e2:01:8c:05:17:b5:ba:ff:b0:01:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a64fa64bb3c2de4788306312c652de749ec93517
Validity
Not Before: Oct 28 10:01:33 2025 GMT
Not After : Oct 29 10:01:33 2025 GMT
Subject: CN=6347a90487aa98b8fcc5083b943e470629698537
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9e:ef:20:8d:d9:74:08:b6:31:cd:a7:44:10:
3a:14:ed:f5:0c:d9:f4:85:4f:e7:47:82:0d:46:e1:
f0:9c:34:c9:9f:e9:a3:10:26:cd:37:32:ca:a6:4d:
ec:b3:4a:59:76:45:77:fd:e1:32:2e:52:54:65:bb:
53:58:63:77:f9:9b:e4:07:11:2c:21:b3:63:04:4a:
15:f0:57:87:ee:ea:3e:68:6b:3c:b1:28:d8:fa:9c:
fd:9b:19:b2:cd:d3:f9:60:92:6a:44:4d:ba:a8:ac:
ae:23:47:3c:a5:aa:91:38:ab:4a:e2:fd:8a:17:ab:
a5:d1:af:a4:a5:03:cf:5c:67:62:50:d2:64:bc:ce:
66:fc:63:dc:25:f2:7a:78:44:3b:22:43:20:ef:78:
99:30:4f:30:bd:8c:b9:8b:dc:1f:af:cd:53:cc:77:
20:74:a9:ee:05:aa:0b:e8:5b:d6:ba:06:29:75:67:
76:77:e9:59:92:9f:e9:7c:9b:b6:f0:ad:15:49:96:
6f:55:cd:5e:be:a7:2e:25:7d:85:28:9f:c7:2a:b3:
6a:4e:ed:69:42:fd:47:2a:39:9b:33:7a:e6:51:7f:
a8:b0:82:b4:d6:bf:17:a4:84:3b:11:02:e1:d0:92:
79:ac:9c:78:ed:84:e0:fb:8d:03:95:ea:d2:ee:d0:
5f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:47:A9:04:87:AA:98:B8:FC:C5:08:3B:94:3E:47:06:29:69:85:37
X509v3 Authority Key Identifier:
keyid:A6:4F:A6:4B:B3:C2:DE:47:88:30:63:12:C6:52:DE:74:9E:C9:35:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pk-mS7PC3keIMGMSxlLedJ7JNRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/pk-mS7PC3keIMGMSxlLedJ7JNRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/pk-mS7PC3keIMGMSxlLedJ7JNRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:05:e5:19:3b:a6:57:1a:d0:1c:a9:ab:2c:aa:d0:09:fa:28:
6e:63:a5:ff:b1:33:0a:7c:fc:a8:27:e1:67:28:c4:f0:56:9d:
53:d6:14:20:7f:21:65:da:ce:85:f4:d8:56:43:00:d5:8b:a9:
f8:d3:39:f6:30:c1:11:5d:4d:ec:2e:dd:10:14:ab:be:91:61:
c1:17:11:8a:3b:2d:f8:a2:a5:61:fd:b3:bc:fb:ac:8e:1d:8e:
e1:7f:10:96:ec:e9:9a:6f:26:46:be:e1:52:fb:e5:6a:e1:79:
96:aa:95:fb:45:28:71:e8:eb:22:06:a7:9e:90:33:09:b7:e5:
82:be:2a:a9:72:3b:32:89:cc:d1:f6:9a:86:74:03:2e:85:fe:
0b:ec:30:13:84:d2:5d:85:87:5e:98:ba:e6:c1:92:53:13:f1:
86:35:59:f9:dd:8f:2c:aa:7c:ba:f0:5d:32:ea:21:f8:6b:4b:
3b:76:e1:e4:02:0d:c5:c7:ef:19:d0:e3:3b:12:77:83:89:c7:
c7:4e:6f:58:67:fb:6a:e0:4e:7e:ad:ee:51:e0:4b:c3:90:5f:
2e:4f:f6:94:68:f5:f1:9a:e9:5a:13:14:4e:9e:f3:23:81:23:
7c:ed:1c:56:c9:e0:d1:92:44:f6:24:ca:8a:af:c9:3e:eb:eb:
94:41:bb:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 13:39:55 2025 by rpki-client