
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.mft
File: MKJ1gGSamS5B4yz4wSJF4H_5-cU.mft (raw, json)
Hash identifier: FXRDHiVUWPeMjA5zvxglNFVxsXIdIYEV9GqMDQchp0A=
Subject key identifier: A7:9E:64:2B:74:9B:9D:9F:E6:0F:4F:7C:18:B0:6B:6B:AD:B8:D7:A6
Authority key identifier: 30:A2:75:80:64:9A:99:2E:41:E3:2C:F8:C1:22:45:E0:7F:F9:F9:C5
Certificate issuer: /CN=30a27580649a992e41e32cf8c12245e07ff9f9c5
Certificate serial: 0199FF22473908C269192E48D7D0AEFB5559
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MKJ1gGSamS5B4yz4wSJF4H_5-cU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.mft
Manifest number: 0DC9
Signing time: Mon 20 Oct 2025 01:01:00 +0000
Manifest this update: Mon 20 Oct 2025 01:01:00 +0000
Manifest next update: Tue 21 Oct 2025 01:01:00 +0000
Files and hashes: 1: MKJ1gGSamS5B4yz4wSJF4H_5-cU.crl (hash: OihXD/yKEI3aFgtZgg59MUnMbWexleCuxXciZJER+G8=)
2: WZEbVkL7G2Qj36QisnZkv8BFkNA.roa (hash: f7XKUwdOUxo0bFV2++z3NCiuNhXfpczYvfcpVS/l/Jk=)
3: yCz-ewAMqZx7lCDPn4Ya6LAQnZ4.roa (hash: biH7dwZg2HQ2zwVaqcwP5LR/5HOneIgO7AJ9Gj1riJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.mft
rsync://rpki.ripe.net/repository/DEFAULT/MKJ1gGSamS5B4yz4wSJF4H_5-cU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 01:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:22:47:39:08:c2:69:19:2e:48:d7:d0:ae:fb:55:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30a27580649a992e41e32cf8c12245e07ff9f9c5
Validity
Not Before: Oct 20 01:01:00 2025 GMT
Not After : Oct 21 01:01:00 2025 GMT
Subject: CN=a79e642b749b9d9fe60f4f7c18b06b6badb8d7a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:25:00:86:a9:0c:fb:df:23:08:85:ad:f5:77:
f8:a6:b6:c1:3f:04:e7:7e:05:96:d6:15:57:a9:ad:
df:e2:af:54:bb:1b:ca:55:02:39:dd:0c:69:db:c9:
77:94:50:d6:af:03:f9:69:14:f8:92:17:74:9a:99:
f7:9e:f1:db:cf:8b:a8:51:ff:bf:13:80:ff:c6:0f:
e5:df:14:fe:c9:64:fa:02:e7:d9:3a:73:db:84:51:
72:a0:2e:d2:1f:b9:20:9a:5a:77:cc:4d:d3:22:97:
b8:76:98:08:86:52:ed:ea:12:07:88:a0:bc:7f:e3:
d6:24:4c:1b:e8:31:10:86:7c:d0:a3:ce:29:db:9d:
33:09:19:05:ac:40:03:04:ae:7d:7c:cf:35:a8:1c:
22:8e:91:c4:91:71:ab:f5:7d:a8:81:c5:13:35:d4:
7a:c2:5f:c8:1b:32:09:bc:fe:6b:e9:5d:6f:48:0b:
50:33:79:3d:2a:8f:2f:8e:dd:b5:29:5b:68:80:3c:
e9:2b:5e:75:1d:a0:62:65:1e:8e:92:8d:a0:ac:29:
76:db:73:a3:83:db:1f:e7:d7:56:97:8f:c4:bd:92:
51:ec:1f:c5:5a:2c:81:d1:8a:ae:58:6e:23:5a:cd:
db:b7:05:99:c6:c6:eb:55:52:c5:14:22:9f:38:79:
2e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:9E:64:2B:74:9B:9D:9F:E6:0F:4F:7C:18:B0:6B:6B:AD:B8:D7:A6
X509v3 Authority Key Identifier:
keyid:30:A2:75:80:64:9A:99:2E:41:E3:2C:F8:C1:22:45:E0:7F:F9:F9:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MKJ1gGSamS5B4yz4wSJF4H_5-cU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:06:73:c7:79:f6:e9:b8:ab:c2:68:55:2b:b5:5b:8d:0b:09:
a1:7a:9d:33:1c:1e:69:1a:f1:d4:20:f4:2a:34:5d:f4:95:ac:
f0:88:87:0f:a7:54:8a:cf:1d:5f:db:97:46:90:34:78:68:d1:
c0:e1:32:e7:31:4b:e2:e0:aa:fe:2c:e6:65:81:dc:68:fc:da:
a4:c9:36:f3:c4:10:b2:43:39:1e:e2:92:0e:f0:d2:11:60:a5:
15:e9:06:eb:95:ef:33:a8:68:04:2f:4c:ee:c1:cb:c0:7c:07:
e2:70:d2:fd:c9:e8:b6:cb:e1:8d:f9:35:30:19:49:ca:9a:94:
cb:13:96:61:c0:11:26:ae:eb:d1:86:67:eb:7e:93:a2:4e:31:
c1:80:26:40:df:b8:54:73:68:71:e2:62:b8:60:40:74:2b:af:
10:8b:fd:da:e4:27:90:35:a3:f6:72:87:f8:55:49:e3:db:b2:
c6:fa:a6:7d:8f:c6:36:90:83:4e:c1:e4:ad:63:2d:a1:2a:88:
d2:bf:9e:6b:7f:48:06:0b:9b:69:4f:21:0d:db:fd:89:a5:b8:
1e:f1:46:95:c0:94:fc:ef:8a:53:53:a0:a8:7a:a9:af:ae:0d:
ca:20:c0:ec:e3:7a:7d:4e:cb:27:4d:d0:ff:e7:f5:96:c2:ae:
2b:2b:76:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:13:32 2025 by rpki-client