Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/mk123S9GBosIca1FAKxuV3r-Rpw.mft
File: mk123S9GBosIca1FAKxuV3r-Rpw.mft (raw, json)
Hash identifier: 2rVVr+V+Vc0ovFkZha0J8t12KYEnnqGoNqObU+jZpYg=
Subject key identifier: 7E:5B:39:1E:38:99:3E:F7:1D:C2:DF:73:7F:42:EA:2B:11:F1:30:FA
Authority key identifier: 9A:4D:76:DD:2F:46:06:8B:08:71:AD:45:00:AC:6E:57:7A:FE:46:9C
Certificate issuer: /CN=9a4d76dd2f46068b0871ad4500ac6e577afe469c
Certificate serial: 01974E8E24BAAA5BF711604336FB55BA62E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mk123S9GBosIca1FAKxuV3r-Rpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/mk123S9GBosIca1FAKxuV3r-Rpw.mft
Manifest number: 158A
Signing time: Sun 08 Jun 2025 08:00:27 +0000
Manifest this update: Sun 08 Jun 2025 08:00:27 +0000
Manifest next update: Mon 09 Jun 2025 08:00:27 +0000
Files and hashes: 1: g_4HQ6dPEqLM5A1GtfThJC294J4.roa (hash: LZYhI0FV7wY5oWB7xQyZ5bQSIIqgJBDQ7uNwEne/gVE=)
2: j-Wf3znAxyHVOa1yHEzX6v3sp9U.roa (hash: OwOwX0XTVGFVpqs+QebopX8jgHz3h7KxGANJ/Crp1oA=)
3: mk123S9GBosIca1FAKxuV3r-Rpw.crl (hash: 1Z92jbgEnvRtamTvcx+MlpshlkIcPD902lQF2+qej5M=)
4: vscV7GZRMa0CPUTvFLBuSp-lIJ8.roa (hash: 2C3QYWkPGEbQmt4ETFEFUqH1R92qUMl/4nE7fTPMPhA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/mk123S9GBosIca1FAKxuV3r-Rpw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/mk123S9GBosIca1FAKxuV3r-Rpw.mft
rsync://rpki.ripe.net/repository/DEFAULT/mk123S9GBosIca1FAKxuV3r-Rpw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:8e:24:ba:aa:5b:f7:11:60:43:36:fb:55:ba:62:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a4d76dd2f46068b0871ad4500ac6e577afe469c
Validity
Not Before: Jun 8 08:00:27 2025 GMT
Not After : Jun 9 08:00:27 2025 GMT
Subject: CN=7e5b391e38993ef71dc2df737f42ea2b11f130fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:90:15:30:a5:00:ad:22:03:10:c5:a1:0e:58:
51:12:55:04:71:cf:39:8c:e2:02:76:ec:ff:be:86:
b2:d6:df:27:9e:05:f1:63:ca:41:a0:09:fd:4b:c6:
9e:d0:64:59:c0:83:06:e3:5a:c6:55:c5:b3:de:04:
e5:ac:c2:5f:aa:3c:56:4d:38:b9:5f:e6:b5:66:78:
6f:da:29:8b:73:3a:95:8e:ce:e9:8b:41:01:74:34:
3c:71:7d:d4:30:12:a6:8c:56:25:48:56:ee:21:c9:
6a:18:3f:a4:7f:cc:bf:f1:9d:21:34:f9:04:cf:cc:
ea:91:8e:a8:7b:ea:bc:43:0c:1f:aa:b7:a0:da:4c:
6d:34:d2:7a:91:5a:23:a3:f9:41:90:7b:5b:a0:f1:
09:0c:9d:2c:9e:61:45:62:a8:26:70:81:69:9c:df:
bc:1b:54:d3:18:01:77:fe:e9:48:8a:77:a3:0d:af:
d1:0b:f9:10:67:f3:a0:ae:61:4a:8b:13:22:73:ac:
b2:6c:6a:9e:d8:e8:e1:b0:a4:7d:d8:2f:6a:c7:2e:
2f:e1:fe:11:d8:e7:a7:9c:26:cd:cd:f4:e9:e5:7b:
e4:68:fe:fc:02:b2:a4:12:31:96:c0:83:97:ab:35:
40:a2:0e:08:14:b8:d3:f8:31:68:82:2a:59:78:4d:
40:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:5B:39:1E:38:99:3E:F7:1D:C2:DF:73:7F:42:EA:2B:11:F1:30:FA
X509v3 Authority Key Identifier:
keyid:9A:4D:76:DD:2F:46:06:8B:08:71:AD:45:00:AC:6E:57:7A:FE:46:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mk123S9GBosIca1FAKxuV3r-Rpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/mk123S9GBosIca1FAKxuV3r-Rpw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/mk123S9GBosIca1FAKxuV3r-Rpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:b3:70:47:b2:7b:d0:c6:b3:2c:8a:ec:e5:53:c7:37:c5:2f:
fb:a1:85:22:80:f5:98:fa:31:64:37:26:c1:aa:f3:b8:7d:b4:
ed:f8:68:42:a9:5a:d0:d0:61:87:18:9b:69:ba:74:5e:d0:f3:
c6:22:f3:b9:04:46:41:e0:67:bd:06:02:8e:ab:bd:94:77:92:
e6:37:55:13:c3:97:e6:9d:5d:30:2e:72:4e:82:6f:86:b8:9a:
ed:ab:ae:24:9f:b7:a8:4f:69:a4:b6:9d:fd:b9:7e:81:3b:99:
66:1b:de:b0:c3:f9:5a:56:11:08:7c:be:f6:75:c9:02:d0:cb:
a4:87:b8:ab:7c:01:b0:b0:f4:b7:47:4f:32:18:79:b3:96:d0:
40:69:67:a1:31:6a:4d:2e:6e:c3:99:38:12:e5:7d:87:7d:a5:
ff:ae:5e:1a:e6:08:bb:8f:c8:b3:df:19:3c:84:9b:00:29:d7:
e4:03:43:b4:56:27:9a:f4:0d:b8:dd:59:3d:4e:fd:c3:2e:e5:
93:14:cc:c9:85:b5:e0:1c:fe:5d:63:84:63:14:99:d3:a9:65:
0e:4a:4b:21:b3:22:70:f5:ba:ef:be:71:c8:22:20:95:d4:00:
2b:96:49:54:08:f1:7f:e8:1d:69:d3:ee:f9:27:54:ab:fe:ba:
a4:66:96:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:22:51 2025 by rpki-client