Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/mk123S9GBosIca1FAKxuV3r-Rpw.mft
File: mk123S9GBosIca1FAKxuV3r-Rpw.mft (raw, json)
Hash identifier: SYJ2b6QJ5TM2OZi7ep2l+OxeMXYADr1+I+i0PsK5o5M=
Subject key identifier: E4:E1:4D:EC:B8:98:A5:36:46:E3:1C:94:8A:15:9D:F4:CE:4C:F8:52
Authority key identifier: 9A:4D:76:DD:2F:46:06:8B:08:71:AD:45:00:AC:6E:57:7A:FE:46:9C
Certificate issuer: /CN=9a4d76dd2f46068b0871ad4500ac6e577afe469c
Certificate serial: 019A24AEC928E3C7B586609E768D335A48EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mk123S9GBosIca1FAKxuV3r-Rpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/mk123S9GBosIca1FAKxuV3r-Rpw.mft
Manifest number: 1702
Signing time: Mon 27 Oct 2025 08:00:25 +0000
Manifest this update: Mon 27 Oct 2025 08:00:25 +0000
Manifest next update: Tue 28 Oct 2025 08:00:25 +0000
Files and hashes: 1: g_4HQ6dPEqLM5A1GtfThJC294J4.roa (hash: LZYhI0FV7wY5oWB7xQyZ5bQSIIqgJBDQ7uNwEne/gVE=)
2: j-Wf3znAxyHVOa1yHEzX6v3sp9U.roa (hash: OwOwX0XTVGFVpqs+QebopX8jgHz3h7KxGANJ/Crp1oA=)
3: mk123S9GBosIca1FAKxuV3r-Rpw.crl (hash: fryQVbD9yquFIvqV6F9n8GoMkC3vqN+aDVlCGXZFzrs=)
4: vscV7GZRMa0CPUTvFLBuSp-lIJ8.roa (hash: 2C3QYWkPGEbQmt4ETFEFUqH1R92qUMl/4nE7fTPMPhA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/mk123S9GBosIca1FAKxuV3r-Rpw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/mk123S9GBosIca1FAKxuV3r-Rpw.mft
rsync://rpki.ripe.net/repository/DEFAULT/mk123S9GBosIca1FAKxuV3r-Rpw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 08:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:ae:c9:28:e3:c7:b5:86:60:9e:76:8d:33:5a:48:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a4d76dd2f46068b0871ad4500ac6e577afe469c
Validity
Not Before: Oct 27 08:00:25 2025 GMT
Not After : Oct 28 08:00:25 2025 GMT
Subject: CN=e4e14decb898a53646e31c948a159df4ce4cf852
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:45:3d:aa:53:b8:ce:05:59:54:da:f1:7f:7e:
9c:73:2e:d1:26:f4:3c:6b:31:bf:66:32:40:06:f2:
3e:96:95:5b:5d:2d:df:a5:e8:3a:c1:c3:ce:7a:23:
2e:53:cb:08:9a:fa:7c:7d:c3:e1:71:3d:ec:1f:ef:
55:a0:80:31:f8:93:5f:04:de:11:c2:a7:f1:a9:9e:
51:c2:41:f6:a5:ae:90:8c:65:ca:bc:e0:18:aa:76:
e7:af:8a:c0:35:6d:d5:0a:c9:1b:d2:55:2c:af:39:
1b:bd:aa:c3:b2:57:bb:2d:af:25:08:51:13:20:31:
23:9a:d1:87:e3:10:d5:4a:15:0b:4f:d6:cd:9f:6f:
7e:da:3e:1a:b3:d0:7f:d3:08:06:72:3a:0c:9f:9a:
93:07:48:0a:d1:c2:a6:7d:af:ad:a1:04:c7:85:b7:
df:ac:b9:6c:e8:4d:5c:4a:8d:de:d3:22:9b:be:8e:
17:23:05:5b:c1:b0:58:aa:0a:6a:d3:c3:94:d8:08:
66:22:a2:2b:40:03:37:4f:7a:52:84:c3:5e:83:69:
18:e1:87:4f:90:bd:d7:bc:c9:4e:d0:c8:8a:07:6a:
8b:bd:d5:28:9f:43:92:6d:c5:5e:c7:11:98:dd:12:
c9:c2:d9:2a:51:eb:9f:ad:b1:31:8d:d4:d0:61:dd:
1f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:E1:4D:EC:B8:98:A5:36:46:E3:1C:94:8A:15:9D:F4:CE:4C:F8:52
X509v3 Authority Key Identifier:
keyid:9A:4D:76:DD:2F:46:06:8B:08:71:AD:45:00:AC:6E:57:7A:FE:46:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mk123S9GBosIca1FAKxuV3r-Rpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/mk123S9GBosIca1FAKxuV3r-Rpw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/mk123S9GBosIca1FAKxuV3r-Rpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:a4:a1:2a:3c:9d:05:fc:7b:a8:67:42:09:a3:04:88:ab:4f:
57:4f:87:4d:e9:93:27:82:ed:1b:61:95:a6:eb:b8:10:b1:0b:
20:a7:f3:94:0a:3e:ae:de:1d:31:a8:48:0d:0c:e9:55:ec:27:
88:e7:80:f0:e8:ec:55:c2:90:2f:c1:1f:7f:49:fd:02:6f:55:
d9:65:96:10:25:47:55:7a:b9:85:f3:ce:25:f5:e6:c0:cc:2b:
03:ad:71:80:16:b7:6e:8d:93:84:ef:fd:ee:aa:6d:43:17:6a:
13:06:45:65:13:a5:3f:76:72:98:aa:c0:21:38:be:77:4f:2b:
e6:d6:55:39:c1:da:49:08:dc:46:1e:8f:2d:ec:a1:b4:43:89:
c9:f4:9c:a7:c3:1d:06:02:57:d3:20:2e:79:de:a4:41:c7:f5:
93:88:08:46:7a:04:87:b2:7d:e2:a9:6c:14:5d:45:60:5b:c0:
41:a4:53:c5:e9:6e:92:b8:02:26:76:57:59:35:e7:d9:db:31:
b7:fa:6d:41:3d:a3:e6:56:0e:7f:14:0d:c0:e9:98:9d:9b:64:
64:28:be:60:c2:10:84:49:c9:b0:b6:10:91:00:05:84:7a:a3:
9d:a2:87:ef:68:3b:d1:ab:34:28:05:0b:a9:44:ee:14:be:10:
34:6c:80:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 14:12:02 2025 by rpki-client