Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.mft
File: MKJ1gGSamS5B4yz4wSJF4H_5-cU.mft (raw, json)
Hash identifier: LWSJIaB3l14voZCBiEsw1nVKjzWPEC/AVuUrEryxh+M=
Subject key identifier: CE:3D:E4:06:B9:1A:22:1F:4C:7A:2E:AB:AD:03:0C:B0:87:9E:32:78
Authority key identifier: 30:A2:75:80:64:9A:99:2E:41:E3:2C:F8:C1:22:45:E0:7F:F9:F9:C5
Certificate issuer: /CN=30a27580649a992e41e32cf8c12245e07ff9f9c5
Certificate serial: 0197B7EA8B77F8A914664D9EEA61875479D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MKJ1gGSamS5B4yz4wSJF4H_5-cU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.mft
Manifest number: 0C9B
Signing time: Sat 28 Jun 2025 19:01:31 +0000
Manifest this update: Sat 28 Jun 2025 19:01:31 +0000
Manifest next update: Sun 29 Jun 2025 19:01:31 +0000
Files and hashes: 1: MKJ1gGSamS5B4yz4wSJF4H_5-cU.crl (hash: R2PE2DJ3GTc6imKi41uuWTJeP9bKMubk4owtxKTw/38=)
2: WZEbVkL7G2Qj36QisnZkv8BFkNA.roa (hash: f7XKUwdOUxo0bFV2++z3NCiuNhXfpczYvfcpVS/l/Jk=)
3: yCz-ewAMqZx7lCDPn4Ya6LAQnZ4.roa (hash: biH7dwZg2HQ2zwVaqcwP5LR/5HOneIgO7AJ9Gj1riJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.mft
rsync://rpki.ripe.net/repository/DEFAULT/MKJ1gGSamS5B4yz4wSJF4H_5-cU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:8b:77:f8:a9:14:66:4d:9e:ea:61:87:54:79:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30a27580649a992e41e32cf8c12245e07ff9f9c5
Validity
Not Before: Jun 28 19:01:31 2025 GMT
Not After : Jun 29 19:01:31 2025 GMT
Subject: CN=ce3de406b91a221f4c7a2eabad030cb0879e3278
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e9:49:27:64:f5:39:d5:da:8f:42:80:39:6c:
b9:d2:4f:af:e0:a0:cf:20:b5:37:1b:0a:12:a1:cf:
72:df:b4:07:f6:6f:dd:d3:cc:0d:19:a7:66:65:3d:
4d:65:1c:d2:a2:11:83:84:64:f1:e7:82:c6:0d:ef:
d4:92:ba:30:69:cf:2e:73:36:38:6a:7c:f8:63:1d:
79:1c:2c:cd:86:d6:71:52:90:fd:c5:b2:6c:2e:2b:
81:6c:15:61:55:87:1b:fa:36:89:d3:a7:fe:fc:7e:
e2:7e:7b:b9:5f:13:9f:3c:55:e8:73:2a:86:3b:f1:
08:02:95:fb:01:9a:ce:e7:67:69:83:d7:27:a7:7e:
95:e6:d7:f9:db:b9:27:61:be:d7:cd:78:2c:46:7a:
ab:4b:8a:dd:33:7b:e9:e6:5f:96:b2:27:e3:4a:78:
9e:c1:86:07:f6:de:26:cd:8e:1d:79:27:e8:7c:29:
33:28:30:36:f9:cb:9f:63:4b:63:e8:d6:a4:7f:fe:
f2:bb:09:c7:bc:57:22:3a:6e:23:84:83:33:13:08:
9f:a7:23:2a:c6:79:48:63:06:d1:a7:1d:1a:7f:43:
0b:20:8f:32:d6:bd:71:d2:85:45:28:51:c3:26:07:
05:3d:36:56:b4:f3:d2:fc:1c:98:1f:18:c5:a7:df:
e0:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:3D:E4:06:B9:1A:22:1F:4C:7A:2E:AB:AD:03:0C:B0:87:9E:32:78
X509v3 Authority Key Identifier:
keyid:30:A2:75:80:64:9A:99:2E:41:E3:2C:F8:C1:22:45:E0:7F:F9:F9:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MKJ1gGSamS5B4yz4wSJF4H_5-cU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:ec:21:e5:20:d9:22:38:ac:7b:a9:e0:ce:98:94:b8:de:38:
bf:b1:78:a9:b7:a1:80:8a:e7:2b:98:e1:9b:d9:78:e5:3f:25:
12:c4:25:a1:69:98:25:b2:03:2d:14:9f:9a:ca:24:58:21:83:
e0:b2:ac:d4:32:61:37:a4:6a:08:5c:5d:99:4e:46:8c:d9:06:
62:8b:93:b5:c1:5f:32:4b:d3:01:65:47:21:55:a2:94:48:15:
e4:e2:f1:79:cd:fb:58:2a:5a:38:dd:f2:5a:c0:97:0a:49:6f:
63:27:af:02:30:2f:1b:94:82:a3:d4:d3:f6:f8:20:0a:20:91:
c0:44:a2:b3:a5:0c:c9:0c:d1:3a:d6:d9:44:31:dc:8c:ec:37:
86:9b:8f:9a:52:99:6a:d0:30:ea:c0:b5:7e:d0:68:b4:1d:88:
17:b1:1d:9e:eb:84:22:b0:51:a9:da:27:50:b8:8a:28:65:c0:
16:c2:fd:ce:f9:f7:21:d8:aa:e9:f2:6d:51:cf:c4:c9:2c:0f:
11:b3:b5:c4:4a:87:ff:41:af:03:f4:80:db:c4:6b:29:6d:75:
d9:4d:8a:cf:72:05:d7:dd:37:c9:15:67:a4:d3:cb:d1:5a:a2:
dc:9e:a7:3c:69:c3:45:ae:20:ed:a6:f3:e5:9d:dc:ea:f5:6b:
7f:3f:09:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:51:12 2025 by rpki-client