Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.mft
File: mkjB2ACM3AWdsLJ6qVFHmcBtVEM.mft (raw, json)
Hash identifier: n0TfBhbltrJC3U92hNkqdaTtTW9zCjCqzGsgcdE8hfk=
Subject key identifier: 5D:E1:0A:06:1A:CE:F9:19:01:6F:79:C0:F5:ED:B7:FD:55:B0:15:73
Authority key identifier: 9A:48:C1:D8:00:8C:DC:05:9D:B0:B2:7A:A9:51:47:99:C0:6D:54:43
Certificate issuer: /CN=9a48c1d8008cdc059db0b27aa9514799c06d5443
Certificate serial: 0197B9A1E93E2AE3903AE0B3FE00735C1F89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.mft
Manifest number: 1127
Signing time: Sun 29 Jun 2025 03:01:25 +0000
Manifest this update: Sun 29 Jun 2025 03:01:25 +0000
Manifest next update: Mon 30 Jun 2025 03:01:25 +0000
Files and hashes: 1: GS3n997-WSAnBFI5sxW4oYhya68.roa (hash: 9uLSgMiqXXeu2TS+gBYSbYKO48DlZM21pWe2MUShNG8=)
2: K1RZ-_Fg9dSZIebCMUhpe6gbgJc.roa (hash: DeEJ/lwM2EUWvyFmV2osr5NnI9rnfMu9oAVwUv2cQPg=)
3: mkjB2ACM3AWdsLJ6qVFHmcBtVEM.crl (hash: F1o054qnpnT47ZWdowhphQ320+ZMPp6jKllT7BjGRCQ=)
4: tKjpgYt3F1U92FlxxtExmwv_VJA.roa (hash: PCobIxyuHsntJ/hl1UTuu1qlban1/mIdUKP0z5QY3l0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:a1:e9:3e:2a:e3:90:3a:e0:b3:fe:00:73:5c:1f:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a48c1d8008cdc059db0b27aa9514799c06d5443
Validity
Not Before: Jun 29 03:01:25 2025 GMT
Not After : Jun 30 03:01:25 2025 GMT
Subject: CN=5de10a061acef919016f79c0f5edb7fd55b01573
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:b8:77:0d:89:d8:19:9a:f7:e2:a8:72:22:bd:
b7:1d:14:f5:d9:c4:7b:d8:06:fb:b1:66:25:63:c5:
47:59:51:e7:5c:6a:24:5b:e6:cf:dd:60:4b:d8:42:
72:5f:f5:7b:9d:eb:25:d9:d8:69:e2:15:2c:e3:48:
b3:7b:a0:de:b4:25:8f:12:6e:7d:99:68:de:74:e2:
93:e5:44:6d:86:ca:a2:19:c2:ab:14:f6:92:9b:34:
1a:37:f1:f1:67:3e:81:89:cc:b1:a0:1c:59:a6:5c:
33:3d:2b:5f:b1:02:0a:3b:f3:02:4e:18:e3:24:b6:
4d:25:2a:40:df:e1:29:2d:a5:58:85:22:66:ec:7f:
b3:55:32:01:ec:6e:a8:f2:6f:79:e7:b0:3c:33:14:
18:7b:7f:48:29:10:36:52:00:a4:7c:c0:e1:a3:6b:
40:7d:71:1d:2d:72:8f:11:d5:5d:27:0e:22:ae:0e:
a1:50:86:f6:3c:3a:5d:42:00:f7:fa:89:7a:d0:dc:
dc:87:ca:0a:7e:5a:98:ee:86:a6:72:2d:55:4a:31:
cf:70:d5:bc:be:c4:dc:bb:90:fe:4c:eb:da:d6:3b:
e4:94:76:bd:f1:da:e1:f3:e0:95:74:70:57:50:a9:
2c:80:9a:7c:fb:f5:f7:0d:33:47:11:61:e9:ba:52:
88:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:E1:0A:06:1A:CE:F9:19:01:6F:79:C0:F5:ED:B7:FD:55:B0:15:73
X509v3 Authority Key Identifier:
keyid:9A:48:C1:D8:00:8C:DC:05:9D:B0:B2:7A:A9:51:47:99:C0:6D:54:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:39:2b:36:91:24:50:e0:e6:9c:ed:3c:ca:6f:34:11:91:63:
6f:65:65:e3:c9:62:6a:27:b1:90:2e:1f:b5:af:34:05:2f:d1:
77:75:a7:28:68:f5:4c:a7:97:a6:1f:9f:ac:b9:46:f9:58:51:
4d:dd:60:d6:3a:cc:49:7f:59:27:1f:b9:90:37:c9:aa:fa:7f:
b1:06:31:95:54:33:22:d5:b5:70:cf:0e:a6:78:05:1e:40:99:
13:d6:f7:0a:e1:68:44:2e:ff:52:31:c7:52:0c:cf:96:93:bc:
99:e1:6d:d4:cf:38:d6:50:ee:ea:a5:ad:67:7c:28:63:25:22:
35:26:1f:a9:ff:12:63:eb:be:80:6c:9c:1a:2d:e6:06:07:ab:
8d:a3:a8:e6:5e:42:38:8c:2e:d2:fd:2a:00:f7:0d:99:11:a1:
1a:d7:55:52:1f:69:40:e6:03:b2:16:6a:fb:9d:ff:26:be:d3:
b1:f8:03:af:4d:48:b1:81:e8:fc:5b:51:38:50:dd:76:9a:98:
7f:02:a0:87:02:66:a5:db:0f:de:4a:62:c9:5b:29:fc:f4:cc:
c4:23:94:df:79:70:2d:26:70:8a:74:74:ff:6f:99:2f:d6:ff:
e2:81:44:7b:d9:77:59:16:0b:4d:49:89:07:e2:65:ef:25:e5:
47:5e:72:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe5oek+KuOQOuCz/gBzXB+JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhNDhjMWQ4MDA4Y2RjMDU5ZGIwYjI3YWE5NTE0Nzk5YzA2
ZDU0NDMwHhcNMjUwNjI5MDMwMTI1WhcNMjUwNjMwMDMwMTI1WjAzMTEwLwYDVQQD
Eyg1ZGUxMGEwNjFhY2VmOTE5MDE2Zjc5YzBmNWVkYjdmZDU1YjAxNTczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA67h3DYnYGZr34qhyIr23HRT12cR7
2Ab7sWYlY8VHWVHnXGokW+bP3WBL2EJyX/V7nesl2dhp4hUs40ize6DetCWPEm59
mWjedOKT5URthsqiGcKrFPaSmzQaN/HxZz6BicyxoBxZplwzPStfsQIKO/MCThjj
JLZNJSpA3+EpLaVYhSJm7H+zVTIB7G6o8m9557A8MxQYe39IKRA2UgCkfMDho2tA
fXEdLXKPEdVdJw4irg6hUIb2PDpdQgD3+ol60Nzch8oKflqY7oamci1VSjHPcNW8
vsTcu5D+TOva1jvklHa98drh8+CVdHBXUKksgJp8+/X3DTNHEWHpulKIdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF3hCgYazvkZAW95wPXtt/1VsBVzMB8GA1UdIwQY
MBaAFJpIwdgAjNwFnbCyeqlRR5nAbVRDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWtqQjJBQ00zQVdkc0xKNnFWRkhtY0J0VkVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy9jYjYxNGMtNDk1ZS00MTBlLTg3MzAt
NWEzNjYzMTVjMTY2LzEvbWtqQjJBQ00zQVdkc0xKNnFWRkhtY0J0VkVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy9jYjYxNGMtNDk1ZS00MTBlLTg3MzAtNWEzNjYzMTVjMTY2
LzEvbWtqQjJBQ00zQVdkc0xKNnFWRkhtY0J0VkVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACzkrNpEk
UODmnO08ym80EZFjb2Vl48liaiexkC4fta80BS/Rd3WnKGj1TKeXph+frLlG+VhR
Td1g1jrMSX9ZJx+5kDfJqvp/sQYxlVQzItW1cM8OpngFHkCZE9b3CuFoRC7/UjHH
UgzPlpO8meFt1M841lDu6qWtZ3woYyUiNSYfqf8SY+u+gGycGi3mBgerjaOo5l5C
OIwu0v0qAPcNmRGhGtdVUh9pQOYDshZq+53/Jr7TsfgDr01IsYHo/FtROFDddpqY
fwKghwJmpdsP3kpiyVsp/PTMxCOU33lwLSZwinR0/2+ZL9b/4oFEe9l3WRYLTUmJ
B+Jl7yXlR15yQQ==
-----END CERTIFICATE-----
Generated at Sun Jun 29 06:56:42 2025 by rpki-client