Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/mk123S9GBosIca1FAKxuV3r-Rpw.mft
File: mk123S9GBosIca1FAKxuV3r-Rpw.mft (raw, json)
Hash identifier: 9WWzoGW8SXHoyN/+qKRDy+pHbm/BGuhOFNCFnUgMARk=
Subject key identifier: AD:40:39:8D:97:34:17:C8:8B:84:06:BB:9A:66:F0:93:1F:B2:F6:9D
Authority key identifier: 9A:4D:76:DD:2F:46:06:8B:08:71:AD:45:00:AC:6E:57:7A:FE:46:9C
Certificate issuer: /CN=9a4d76dd2f46068b0871ad4500ac6e577afe469c
Certificate serial: 019939157BA967B65A87103B379A87E40C41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mk123S9GBosIca1FAKxuV3r-Rpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/mk123S9GBosIca1FAKxuV3r-Rpw.mft
Manifest number: 1688
Signing time: Thu 11 Sep 2025 14:02:13 +0000
Manifest this update: Thu 11 Sep 2025 14:02:13 +0000
Manifest next update: Fri 12 Sep 2025 14:02:13 +0000
Files and hashes: 1: g_4HQ6dPEqLM5A1GtfThJC294J4.roa (hash: LZYhI0FV7wY5oWB7xQyZ5bQSIIqgJBDQ7uNwEne/gVE=)
2: j-Wf3znAxyHVOa1yHEzX6v3sp9U.roa (hash: OwOwX0XTVGFVpqs+QebopX8jgHz3h7KxGANJ/Crp1oA=)
3: mk123S9GBosIca1FAKxuV3r-Rpw.crl (hash: 3+HNveqldUxFIh/Oqq2vOhsJTachL/oFmJd8utu77YA=)
4: vscV7GZRMa0CPUTvFLBuSp-lIJ8.roa (hash: 2C3QYWkPGEbQmt4ETFEFUqH1R92qUMl/4nE7fTPMPhA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/mk123S9GBosIca1FAKxuV3r-Rpw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/mk123S9GBosIca1FAKxuV3r-Rpw.mft
rsync://rpki.ripe.net/repository/DEFAULT/mk123S9GBosIca1FAKxuV3r-Rpw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 14:02:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:39:15:7b:a9:67:b6:5a:87:10:3b:37:9a:87:e4:0c:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a4d76dd2f46068b0871ad4500ac6e577afe469c
Validity
Not Before: Sep 11 14:02:13 2025 GMT
Not After : Sep 12 14:02:13 2025 GMT
Subject: CN=ad40398d973417c88b8406bb9a66f0931fb2f69d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:4b:a2:84:f8:dd:3f:44:93:e1:53:5c:fc:49:
e4:bd:47:97:09:b5:5b:ad:4d:d6:f2:a3:f7:e4:c5:
40:37:5b:93:16:9a:8e:f2:81:e1:6c:0d:65:93:06:
ef:4a:46:55:70:94:62:ef:cd:32:f0:c5:0a:aa:b7:
70:4b:1c:35:b6:28:14:5c:b3:51:5a:89:ec:d8:f8:
62:53:b0:8c:38:1b:23:88:82:d8:e1:94:f7:26:38:
e9:11:ca:51:c6:d0:71:0c:44:d1:63:28:ef:80:44:
9f:81:db:5b:5e:5c:dd:e3:50:b4:fe:e7:ad:4b:9e:
79:e0:6d:d4:6f:22:fa:e4:3c:68:51:fa:ee:52:70:
51:c0:58:28:53:8e:19:8a:4b:30:da:d4:f6:7c:18:
aa:ac:e5:d0:49:5a:3d:1d:74:17:80:f4:9f:2e:97:
a8:51:4e:8c:c1:55:f4:68:12:a7:63:03:25:be:65:
36:88:e0:f5:9d:6b:87:bd:d7:d5:0b:cf:44:a3:29:
a2:99:6a:73:a2:ef:14:5b:06:36:df:1b:dc:30:3b:
ff:26:da:fa:d6:e1:0a:3f:a4:86:5b:fb:8c:60:35:
e8:8a:ca:65:7e:d2:cc:87:7c:d3:d1:7c:aa:3f:1d:
7d:64:49:00:e8:04:5b:2d:df:a7:a4:ad:d1:b9:cc:
e0:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:40:39:8D:97:34:17:C8:8B:84:06:BB:9A:66:F0:93:1F:B2:F6:9D
X509v3 Authority Key Identifier:
keyid:9A:4D:76:DD:2F:46:06:8B:08:71:AD:45:00:AC:6E:57:7A:FE:46:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mk123S9GBosIca1FAKxuV3r-Rpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/mk123S9GBosIca1FAKxuV3r-Rpw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/mk123S9GBosIca1FAKxuV3r-Rpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:7a:a5:4d:92:c8:d4:05:9a:24:53:b0:75:a6:49:10:a6:71:
0f:7e:fd:0c:d1:33:ec:a0:82:61:e4:84:ab:97:f2:a1:8b:3e:
48:3d:dd:43:2a:bb:f0:fb:d4:87:e1:4c:f4:5f:a9:b3:ec:a7:
a6:67:82:3d:e3:25:96:74:e4:ce:5b:03:dc:89:f2:46:f7:09:
0d:2e:e2:87:96:e8:1b:bb:24:85:0e:4b:23:52:9d:b2:2d:04:
77:10:c3:12:51:d1:39:b2:c7:0e:9d:b5:44:6d:c8:3d:af:81:
ab:ac:ad:9f:74:20:f5:6e:59:b5:e8:4a:06:49:6b:0d:7a:5c:
f1:38:fe:ed:b5:cb:07:2b:df:22:f8:a7:fe:6f:fb:8f:f9:19:
41:bd:7b:42:2c:40:0b:88:3f:20:91:b4:4b:91:df:35:5a:61:
d5:37:bf:37:c9:a4:cf:4e:f3:0d:30:6b:c7:f8:16:a3:23:ed:
c9:79:20:f4:e9:01:57:3a:eb:48:ba:c0:34:08:53:95:94:da:
a9:c4:93:8b:58:af:59:1e:d0:38:21:d4:80:de:76:d6:ce:04:
6d:bb:d4:b8:53:fa:41:d8:b8:86:3c:cd:58:cb:5d:dd:d1:49:
11:70:90:47:82:f0:01:db:ca:68:e2:75:48:de:bc:3e:9e:74:
d3:5d:01:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 16:58:24 2025 by rpki-client