Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/pk-mS7PC3keIMGMSxlLedJ7JNRc.mft
File: pk-mS7PC3keIMGMSxlLedJ7JNRc.mft (raw, json)
Hash identifier: ISYSwk3dDKPgJtWPDnezI2b/YEMx+9EmmsPiKNPQTOQ=
Subject key identifier: CA:EE:3F:0C:8B:E7:A3:52:0C:0C:D1:92:89:AD:6C:45:18:4C:D4:4C
Authority key identifier: A6:4F:A6:4B:B3:C2:DE:47:88:30:63:12:C6:52:DE:74:9E:C9:35:17
Certificate issuer: /CN=a64fa64bb3c2de4788306312c652de749ec93517
Certificate serial: 01992D4834EE071596240CA8423D55F4C366
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pk-mS7PC3keIMGMSxlLedJ7JNRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/pk-mS7PC3keIMGMSxlLedJ7JNRc.mft
Manifest number: 0FB6
Signing time: Tue 09 Sep 2025 07:02:10 +0000
Manifest this update: Tue 09 Sep 2025 07:02:10 +0000
Manifest next update: Wed 10 Sep 2025 07:02:10 +0000
Files and hashes: 1: DGbM08ZTsAqYw2-cwkwYARO53tE.roa (hash: vRmKPjIDxHKM6g2DoHk9sDKKAGwsNzCt7i6bkh/HxXk=)
2: pk-mS7PC3keIMGMSxlLedJ7JNRc.crl (hash: Tk3dwSHOCgJEwXej9CjJixQNlwGitFMxreao6vCHRp4=)
3: rXPM57-D6wTVhLckZD7CZVwkBW8.roa (hash: fUjK4fhETtHvQdYsLgWmfiWiFboo/MkwlvPD3alJWYc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/pk-mS7PC3keIMGMSxlLedJ7JNRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/pk-mS7PC3keIMGMSxlLedJ7JNRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/pk-mS7PC3keIMGMSxlLedJ7JNRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 07:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2d:48:34:ee:07:15:96:24:0c:a8:42:3d:55:f4:c3:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a64fa64bb3c2de4788306312c652de749ec93517
Validity
Not Before: Sep 9 07:02:10 2025 GMT
Not After : Sep 10 07:02:10 2025 GMT
Subject: CN=caee3f0c8be7a3520c0cd19289ad6c45184cd44c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:cb:e1:8d:3b:e8:08:1b:ba:29:30:f9:4e:09:
d6:b1:55:5f:b4:40:f2:2a:62:6e:d6:b5:d3:59:e3:
e5:e4:60:25:1c:0e:96:55:7b:7f:c2:1d:35:10:59:
5f:09:25:c9:58:96:e5:e9:5c:73:b8:83:39:ec:df:
cb:53:8e:29:c8:28:1c:f4:75:96:94:d4:e9:58:dc:
a2:a9:55:1e:dc:f3:e4:86:4b:4c:5c:89:f5:06:62:
b5:9c:dd:34:b6:25:02:24:2a:9d:48:76:67:71:16:
c0:5c:41:58:8c:35:36:71:aa:51:8b:eb:3d:7a:56:
be:17:24:6a:a7:95:91:e1:4b:2e:b0:6b:ef:19:40:
44:53:b7:3b:1e:df:82:90:a1:61:b6:81:74:e1:ce:
d0:48:7a:75:ef:c2:53:dd:c8:3d:d2:52:c1:bd:11:
03:f7:fa:24:a5:f8:ea:ae:66:88:2d:7b:2e:48:9b:
f6:a5:cd:4b:98:4c:61:1c:b0:1e:51:98:54:67:9e:
6b:c0:44:8f:41:50:5e:a3:56:d8:63:d8:f1:ed:66:
3c:c1:cc:27:99:d3:a3:f7:47:b4:57:c0:ae:35:f0:
a1:70:29:8a:17:5e:2c:08:fb:0b:fd:87:88:bb:66:
72:c4:6f:14:82:c7:b3:c8:ec:c0:22:8e:04:30:b3:
d3:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:EE:3F:0C:8B:E7:A3:52:0C:0C:D1:92:89:AD:6C:45:18:4C:D4:4C
X509v3 Authority Key Identifier:
keyid:A6:4F:A6:4B:B3:C2:DE:47:88:30:63:12:C6:52:DE:74:9E:C9:35:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pk-mS7PC3keIMGMSxlLedJ7JNRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/pk-mS7PC3keIMGMSxlLedJ7JNRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/pk-mS7PC3keIMGMSxlLedJ7JNRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:14:35:bd:07:a5:12:ad:94:66:21:00:e7:e3:0b:80:14:52:
66:51:ee:07:87:6a:24:0b:1d:c5:76:80:eb:0c:83:7e:57:ae:
52:27:cf:74:bd:40:28:7e:14:df:54:59:c2:f4:2c:0f:86:eb:
0c:b3:8b:fa:2a:b8:97:b5:bb:43:8a:45:a7:a7:71:39:12:01:
43:0a:be:af:9e:bd:30:b0:ab:49:cf:04:13:d5:07:23:e7:1b:
2c:8f:51:50:fd:95:6b:38:41:a5:2e:74:52:46:cb:d0:5a:14:
4d:82:f1:57:d3:8e:05:64:7a:5c:66:1f:ce:4e:e1:53:af:43:
fb:60:8b:17:0c:4a:bb:25:12:11:af:d5:bb:60:40:19:63:6e:
a5:76:8f:49:e6:89:bc:5b:98:79:65:d3:88:0a:1f:0e:55:44:
07:b7:61:10:db:d1:cf:20:6a:1a:2e:00:65:5a:20:00:51:d8:
4b:a3:c6:02:fe:31:e0:94:39:e4:49:b0:d4:d9:46:c1:d7:c5:
80:81:3a:ab:08:c2:27:6a:be:3a:de:8a:4c:f4:c7:bc:0b:f9:
58:99:cc:23:12:61:de:b5:2b:40:8d:cc:18:bc:59:9a:cf:8b:
54:5c:84:7b:49:49:6f:bd:6e:ef:d8:4a:89:ee:c9:e0:29:ac:
73:35:25:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 09:57:50 2025 by rpki-client