Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.mft
File: MKJ1gGSamS5B4yz4wSJF4H_5-cU.mft (raw, json)
Hash identifier: Xl6hRELNcOIXKvCXF1EyHrB24eT8dRiWS6tdOVVrxa4=
Subject key identifier: 34:30:F2:36:C7:CD:0A:03:17:69:F7:B7:AE:5E:47:DA:75:A5:84:3D
Authority key identifier: 30:A2:75:80:64:9A:99:2E:41:E3:2C:F8:C1:22:45:E0:7F:F9:F9:C5
Certificate issuer: /CN=30a27580649a992e41e32cf8c12245e07ff9f9c5
Certificate serial: 0198D5BC1AA6B8112909FDEF5E9F483C32F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MKJ1gGSamS5B4yz4wSJF4H_5-cU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.mft
Manifest number: 0D2F
Signing time: Sat 23 Aug 2025 07:02:11 +0000
Manifest this update: Sat 23 Aug 2025 07:02:11 +0000
Manifest next update: Sun 24 Aug 2025 07:02:11 +0000
Files and hashes: 1: MKJ1gGSamS5B4yz4wSJF4H_5-cU.crl (hash: 7soaCvxRMTQb6qmzzIbjGyPkyoXqU7HgSfREOXsiEks=)
2: WZEbVkL7G2Qj36QisnZkv8BFkNA.roa (hash: f7XKUwdOUxo0bFV2++z3NCiuNhXfpczYvfcpVS/l/Jk=)
3: yCz-ewAMqZx7lCDPn4Ya6LAQnZ4.roa (hash: biH7dwZg2HQ2zwVaqcwP5LR/5HOneIgO7AJ9Gj1riJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.mft
rsync://rpki.ripe.net/repository/DEFAULT/MKJ1gGSamS5B4yz4wSJF4H_5-cU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:1a:a6:b8:11:29:09:fd:ef:5e:9f:48:3c:32:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30a27580649a992e41e32cf8c12245e07ff9f9c5
Validity
Not Before: Aug 23 07:02:11 2025 GMT
Not After : Aug 24 07:02:11 2025 GMT
Subject: CN=3430f236c7cd0a031769f7b7ae5e47da75a5843d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f5:1d:57:26:16:a4:9b:2d:b9:9f:4b:c4:d1:
95:06:89:49:7e:f6:42:7b:88:d9:f4:87:3e:04:2a:
d7:ba:71:8c:69:64:dd:e8:18:86:6b:d8:83:d8:c1:
09:a7:39:78:cf:8b:1d:86:58:0f:14:99:a1:dc:6b:
49:9f:c3:3b:c7:f3:c4:df:7b:e2:b9:59:b8:79:b3:
aa:62:2c:9a:12:ed:e7:22:38:9e:53:20:a1:ae:08:
5e:fa:21:0b:68:3b:62:9a:54:87:30:50:53:87:b9:
dd:ed:b3:1a:4c:b7:f0:76:7b:6f:00:6e:6f:75:8a:
ff:7a:24:38:f9:28:8b:a9:26:98:4d:dd:fc:57:dc:
4e:46:0b:46:60:31:7c:77:20:e0:36:d0:ad:fc:ad:
75:01:79:58:80:98:e9:8d:89:1f:62:96:fc:f7:58:
6a:89:da:c7:cf:c1:31:09:d9:9c:e3:53:0b:dd:ca:
b1:41:5b:f9:24:c4:ed:42:fc:fb:bf:32:98:0b:73:
f4:a8:be:f2:28:50:98:e4:80:a3:03:e7:a1:29:fa:
a9:d0:fd:8e:d0:06:f8:42:7f:df:ce:9f:63:d2:cf:
9d:63:8b:ad:f4:ed:b0:29:2e:03:98:74:aa:17:ee:
07:a8:7b:8e:86:7e:0d:34:d3:2c:21:54:26:52:21:
84:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:30:F2:36:C7:CD:0A:03:17:69:F7:B7:AE:5E:47:DA:75:A5:84:3D
X509v3 Authority Key Identifier:
keyid:30:A2:75:80:64:9A:99:2E:41:E3:2C:F8:C1:22:45:E0:7F:F9:F9:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MKJ1gGSamS5B4yz4wSJF4H_5-cU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:eb:d4:9e:9c:2e:e3:52:26:ff:9e:c5:d2:00:cc:0d:34:cb:
ca:5b:19:a5:58:44:bc:12:86:8d:39:94:8d:80:dd:fb:8f:5f:
64:df:b0:5c:d6:7f:72:c5:95:f5:a8:aa:d6:a9:86:4b:ef:b9:
18:2e:c7:db:16:7e:b6:3f:a0:cf:91:04:5b:3e:a9:62:7c:63:
cc:a5:d2:21:ef:3d:19:33:0e:88:1c:20:eb:a1:cf:6b:a7:fe:
b9:56:5f:c5:1d:5e:af:8d:90:8f:0b:38:20:07:af:ef:b6:00:
df:24:82:bf:b6:d3:d6:d5:e7:d1:d1:63:e4:76:f1:18:69:a0:
fd:3d:2d:af:54:30:74:2e:9e:54:98:31:a1:e1:e9:ef:8e:2f:
25:89:16:af:44:c4:ab:1f:ac:7c:25:87:b9:d5:20:cd:0d:4f:
97:47:71:8f:c7:ff:77:a1:22:53:0c:33:ac:a8:85:5e:31:8f:
3a:0c:6f:7c:ee:ac:e4:79:e4:c5:46:13:63:78:f6:da:f4:4d:
2c:4d:d4:11:f7:5a:2f:99:81:d9:87:2e:94:64:d2:d9:84:30:
97:0e:bb:c1:08:6a:bb:73:45:a8:22:f5:03:0b:c8:f7:6e:87:
64:98:c7:af:dd:1a:ae:dd:c6:d4:b1:d6:4e:d3:0b:63:52:c4:
3c:0a:69:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:24:46 2025 by rpki-client