Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/512313-afcd-4e9a-bb70-71005f7f02a8/1/mGkK8GLqmzrl9kz5qf6lYyTGvZc.mft
File: mGkK8GLqmzrl9kz5qf6lYyTGvZc.mft (raw, json)
Hash identifier: rPzsRNB8dz4OS8ubFLRl7QqRISuwm+t8Avm4Hz3HIEM=
Subject key identifier: E1:0E:E3:76:C1:01:25:B3:30:6F:F9:AE:76:7B:ED:5B:41:DB:98:4C
Authority key identifier: 98:69:0A:F0:62:EA:9B:3A:E5:F6:4C:F9:A9:FE:A5:63:24:C6:BD:97
Certificate issuer: /CN=98690af062ea9b3ae5f64cf9a9fea56324c6bd97
Certificate serial: 0199239FBED8D4DCFCA26EA6E67DC53F6024
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGkK8GLqmzrl9kz5qf6lYyTGvZc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/512313-afcd-4e9a-bb70-71005f7f02a8/1/mGkK8GLqmzrl9kz5qf6lYyTGvZc.mft
Manifest number: 1674
Signing time: Sun 07 Sep 2025 10:01:35 +0000
Manifest this update: Sun 07 Sep 2025 10:01:35 +0000
Manifest next update: Mon 08 Sep 2025 10:01:35 +0000
Files and hashes: 1: CxGOoBY5YoTyd6Nu8KyBbb6HwB4.roa (hash: W6T/EKpt1B07PivG7xwB9X1O2PEBzOLgzqiyKvlh3q4=)
2: mGkK8GLqmzrl9kz5qf6lYyTGvZc.crl (hash: XUP0BMhOTlVr6/hnJeewW3Z4NkjWbqba9oAC2JKoumI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/512313-afcd-4e9a-bb70-71005f7f02a8/1/mGkK8GLqmzrl9kz5qf6lYyTGvZc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/512313-afcd-4e9a-bb70-71005f7f02a8/1/mGkK8GLqmzrl9kz5qf6lYyTGvZc.mft
rsync://rpki.ripe.net/repository/DEFAULT/mGkK8GLqmzrl9kz5qf6lYyTGvZc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:be:d8:d4:dc:fc:a2:6e:a6:e6:7d:c5:3f:60:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98690af062ea9b3ae5f64cf9a9fea56324c6bd97
Validity
Not Before: Sep 7 10:01:35 2025 GMT
Not After : Sep 8 10:01:35 2025 GMT
Subject: CN=e10ee376c10125b3306ff9ae767bed5b41db984c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ab:fb:bb:77:be:a5:bf:c4:06:68:ef:a3:55:
78:63:9b:6a:d6:da:15:00:4a:79:19:6a:fe:de:99:
f1:b4:ab:18:59:62:c5:63:18:84:2b:5c:d2:d3:9d:
bc:06:4a:1b:e4:23:62:ec:8e:40:e0:dc:8f:41:8f:
23:b9:75:c5:f5:b2:aa:64:c9:d7:b6:ee:2f:96:55:
d9:4b:db:bf:a8:52:9d:a9:5a:1a:69:a0:ff:e2:24:
a5:d4:26:70:d2:db:b6:48:5d:bf:96:90:fa:87:ad:
07:83:be:38:07:49:c4:f7:0a:09:0c:89:76:00:74:
04:53:88:50:42:66:94:f2:54:12:84:f2:dc:3e:c7:
c2:6c:4f:e5:b2:5a:05:c2:35:2f:f0:94:9a:2a:cd:
10:3e:09:1a:0e:2b:48:bb:a3:0a:ca:ed:d7:99:48:
08:3f:99:8f:9c:53:4f:12:fe:6e:54:df:a3:11:7a:
c4:ce:6d:51:5e:9d:fc:10:e3:44:1f:7c:e3:25:4b:
25:ac:6a:cc:34:f9:e3:b9:c6:65:3f:c4:10:27:c9:
3e:a1:c1:17:b5:7e:12:cf:d4:52:d7:2f:4b:81:ab:
df:67:66:ff:51:5b:ca:1e:fa:9c:bd:ea:ad:3e:70:
e0:6f:81:11:0c:d6:36:92:3d:ee:d6:b3:65:85:dc:
4f:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:0E:E3:76:C1:01:25:B3:30:6F:F9:AE:76:7B:ED:5B:41:DB:98:4C
X509v3 Authority Key Identifier:
keyid:98:69:0A:F0:62:EA:9B:3A:E5:F6:4C:F9:A9:FE:A5:63:24:C6:BD:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGkK8GLqmzrl9kz5qf6lYyTGvZc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/512313-afcd-4e9a-bb70-71005f7f02a8/1/mGkK8GLqmzrl9kz5qf6lYyTGvZc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/512313-afcd-4e9a-bb70-71005f7f02a8/1/mGkK8GLqmzrl9kz5qf6lYyTGvZc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:b9:1c:79:d2:98:33:d0:3b:ab:df:01:7d:17:cd:ef:f0:d7:
64:60:e3:4b:03:03:bb:61:7f:01:14:a4:f6:c9:78:80:e5:c9:
34:b8:16:db:86:27:88:92:0f:02:76:ef:b5:bd:56:b0:2a:77:
f3:d9:e9:fd:7e:4e:25:07:04:25:52:ef:9b:3a:da:ff:de:5d:
47:67:40:80:c9:8a:58:e0:38:3e:cd:86:d7:4d:35:64:e5:15:
c9:54:c8:3f:43:74:98:2b:ed:31:09:5a:c1:d5:b8:a7:62:d0:
b1:b6:d4:72:88:bc:c9:e2:61:13:e8:12:79:71:d3:05:cb:16:
44:41:57:70:78:00:af:7a:b6:a5:10:40:cf:65:b3:0d:35:78:
b0:d1:72:8b:9c:6f:52:b2:d3:60:cb:c4:ce:35:7f:1b:22:3c:
28:6f:2a:6f:42:ab:92:6f:5e:bb:40:51:2c:98:1c:a5:77:c7:
8a:7a:88:88:37:90:c2:01:50:5e:43:d1:5b:f7:02:8f:7f:e1:
c6:5b:26:c9:5d:24:29:ce:f4:56:03:4c:69:be:09:bd:f0:2b:
d8:d0:8e:aa:c5:11:05:30:a3:5a:7a:9c:9f:7d:bd:67:2d:a4:
27:ca:8e:5c:7f:00:25:b4:04:90:bd:04:00:77:44:59:49:96:
d7:69:8d:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:47:23 2025 by rpki-client