Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.mft
File: MK_3UgloSjVGaQYdI9op-OovHV4.mft (raw, json)
Hash identifier: 9Fr3nHwN3g96dV5MklB8Ybd+LPz7iX5DF9RA/3Btay0=
Subject key identifier: 5E:3E:C7:06:13:A8:20:7F:40:3D:B3:3B:9D:E8:DD:98:B7:52:A3:AB
Authority key identifier: 30:AF:F7:52:09:68:4A:35:46:69:06:1D:23:DA:29:F8:EA:2F:1D:5E
Certificate issuer: /CN=30aff75209684a354669061d23da29f8ea2f1d5e
Certificate serial: 0199FC5883D2C434586A5AD1BBBAA5B0A18D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MK_3UgloSjVGaQYdI9op-OovHV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 12:01:23 +0000
Manifest this update: Sun 19 Oct 2025 12:01:23 +0000
Manifest next update: Mon 20 Oct 2025 12:01:23 +0000
Files and hashes: 1: C-bdkM4lL8tTpeZXpiv45nhPUuM.roa (hash: dO9wg4oa3fmXkWxOi24v6xA9xh5CDmqHbzYIcdtWFXo=)
2: IbRWuE5EQO-8LgU2mAsS5QizVAY.roa (hash: s+vcUKeYVky97TEOonv9opKh34KAYu2tRcLDRkyQ5gI=)
3: MK_3UgloSjVGaQYdI9op-OovHV4.crl (hash: fvdLMaLLq1IIXQibSPEzYR55wdqMWg999Xlrxi3FE+4=)
4: jBuJavuseI2B0_WgKkHYJZFvr_Q.roa (hash: tLuargg/vipoJVRdIR5x9HBU5Ji9GHfTNJavehQ1uxE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/MK_3UgloSjVGaQYdI9op-OovHV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:83:d2:c4:34:58:6a:5a:d1:bb:ba:a5:b0:a1:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30aff75209684a354669061d23da29f8ea2f1d5e
Validity
Not Before: Oct 19 12:01:23 2025 GMT
Not After : Oct 20 12:01:23 2025 GMT
Subject: CN=5e3ec70613a8207f403db33b9de8dd98b752a3ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:84:d4:93:2d:bf:d3:7d:0a:ff:f0:08:76:9d:
a0:3f:56:c2:d0:d1:66:80:0b:dd:c1:4d:cc:80:88:
14:7b:23:59:42:0f:45:18:dd:6a:59:e0:43:e0:83:
58:38:96:a8:2d:5d:d0:23:61:81:7e:08:2f:6e:60:
23:d2:68:7a:45:ae:a1:c8:4c:ed:ae:fc:a9:7e:de:
0d:65:8d:b0:c9:93:ba:63:2c:62:44:1a:23:f4:49:
65:4f:2c:68:ff:63:34:e4:28:a1:8f:65:81:9a:9a:
77:49:cf:90:62:2f:0f:84:c5:63:f3:7d:f3:4d:58:
a1:85:ff:b4:66:85:22:7c:d6:a7:52:ea:8c:d8:f3:
67:cc:f3:a8:f7:53:99:ce:dd:be:d2:8f:7b:50:50:
b9:1e:25:d3:13:2f:0c:f9:7f:bb:52:3e:1b:e3:d1:
e3:39:ca:9c:77:03:db:31:a2:22:67:b0:62:f2:cd:
9a:d3:71:a4:46:6e:1a:62:13:91:80:63:3f:f3:f1:
98:42:65:31:16:8b:22:44:8c:ee:4b:da:b1:fa:0c:
cd:42:7a:bc:99:b1:f7:fe:d4:eb:a9:95:2c:63:59:
1a:c0:7c:93:c3:a6:ed:ce:43:fb:22:1a:6d:6a:0a:
38:8b:3c:dd:8c:bf:7e:9a:5c:4c:15:c8:bf:90:27:
1b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:3E:C7:06:13:A8:20:7F:40:3D:B3:3B:9D:E8:DD:98:B7:52:A3:AB
X509v3 Authority Key Identifier:
keyid:30:AF:F7:52:09:68:4A:35:46:69:06:1D:23:DA:29:F8:EA:2F:1D:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MK_3UgloSjVGaQYdI9op-OovHV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:92:de:a9:ff:60:34:a0:2a:95:26:da:3b:3c:40:43:92:ad:
2c:3b:e1:5b:45:a6:99:9d:a0:a8:f9:83:5a:a3:28:3d:50:49:
f3:e0:55:01:9a:60:57:cd:57:90:09:7a:04:be:56:c6:5f:89:
43:53:b7:eb:3a:2b:40:1a:fd:59:e6:de:d3:9b:d3:3c:8c:e9:
44:c6:33:b5:24:86:e3:2a:b7:53:dd:32:eb:4f:72:a4:ac:18:
65:76:08:83:ad:90:85:75:ae:08:2d:1a:de:24:e5:50:62:c2:
fa:39:81:66:11:c4:d1:3b:dc:81:a7:fd:e1:69:ba:e7:67:fe:
3a:ec:14:2c:bf:24:76:a2:96:52:82:a6:c6:45:18:68:61:95:
b1:a9:88:09:09:1e:7a:ef:0d:4f:86:39:d6:cf:6e:fd:2f:23:
91:4d:67:3a:c0:93:74:04:83:8a:b1:ef:9f:61:fa:50:cc:f9:
ff:00:9e:76:ec:a1:58:f2:f2:b5:13:6e:ba:6b:d3:8b:44:05:
65:8f:59:7e:82:f0:a7:73:79:ea:30:24:7c:60:e4:ed:f7:74:
20:41:c9:91:d0:87:e5:1b:5f:c8:5f:dd:75:d7:1c:a3:aa:c6:
fa:d1:d8:fa:90:06:13:74:d5:2d:71:3a:dd:fa:a7:93:76:03:
3c:06:32:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:01:31 2025 by rpki-client