Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.mft
File: MK_3UgloSjVGaQYdI9op-OovHV4.mft (raw, json)
Hash identifier: etjQG5glf4ey8xec/Y/A8136+Vfm/PrzRfJPsmkUakI=
Subject key identifier: E2:39:B1:CF:19:16:DA:B5:FC:24:61:7F:83:99:3A:64:BB:BF:DD:7A
Authority key identifier: 30:AF:F7:52:09:68:4A:35:46:69:06:1D:23:DA:29:F8:EA:2F:1D:5E
Certificate issuer: /CN=30aff75209684a354669061d23da29f8ea2f1d5e
Certificate serial: 0197B70E8E16BA38D9CB52D915EAA36550D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MK_3UgloSjVGaQYdI9op-OovHV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 15:01:13 +0000
Manifest this update: Sat 28 Jun 2025 15:01:13 +0000
Manifest next update: Sun 29 Jun 2025 15:01:13 +0000
Files and hashes: 1: C-bdkM4lL8tTpeZXpiv45nhPUuM.roa (hash: dO9wg4oa3fmXkWxOi24v6xA9xh5CDmqHbzYIcdtWFXo=)
2: IbRWuE5EQO-8LgU2mAsS5QizVAY.roa (hash: s+vcUKeYVky97TEOonv9opKh34KAYu2tRcLDRkyQ5gI=)
3: MK_3UgloSjVGaQYdI9op-OovHV4.crl (hash: UoJUnltnMZrK+u7xu1a8GWRfTr0nWhFBG0+2bo17+AE=)
4: jBuJavuseI2B0_WgKkHYJZFvr_Q.roa (hash: tLuargg/vipoJVRdIR5x9HBU5Ji9GHfTNJavehQ1uxE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/MK_3UgloSjVGaQYdI9op-OovHV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:8e:16:ba:38:d9:cb:52:d9:15:ea:a3:65:50:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30aff75209684a354669061d23da29f8ea2f1d5e
Validity
Not Before: Jun 28 15:01:13 2025 GMT
Not After : Jun 29 15:01:13 2025 GMT
Subject: CN=e239b1cf1916dab5fc24617f83993a64bbbfdd7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:84:3a:7a:7f:13:e8:02:26:dc:22:6c:c5:b8:
c3:e2:e0:d6:2a:29:ca:d8:07:f3:9d:2a:73:b9:f8:
a9:06:53:1b:f6:80:1e:ae:21:0b:8f:f5:be:d6:6f:
27:69:9e:c1:94:0c:cd:02:6a:cd:47:cb:db:6e:47:
c7:44:fc:d2:76:30:45:02:67:49:c4:ee:a8:ac:ce:
06:ff:92:c1:94:d1:36:e0:9d:d0:78:49:87:82:a0:
58:91:38:b5:ee:d9:45:a4:f8:0b:84:f6:0f:81:7c:
99:51:c2:28:71:b0:3a:c9:e5:33:c5:08:7b:81:67:
37:42:d1:d4:da:8e:32:e5:72:67:67:24:82:0f:5a:
13:68:7b:d7:e1:fe:ea:e4:e4:c3:fb:0b:0b:3a:e1:
45:7c:07:fd:e4:d3:cb:0d:2f:9b:86:fd:e0:26:8a:
eb:4b:29:1c:32:e1:71:2e:dc:30:e1:c3:5f:13:a9:
46:09:1a:c2:42:c8:ad:3a:0d:a2:5b:7f:1c:a1:c1:
85:25:15:c1:31:ae:92:d8:2a:cf:9c:09:65:f5:b3:
6c:7a:ef:78:50:4b:ce:86:3f:55:cf:bf:96:5b:13:
2f:02:8f:64:12:cd:b3:16:e3:3c:ab:32:b7:0e:da:
37:6d:a0:b4:2e:7a:04:ec:94:a6:35:12:42:f0:e8:
ce:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:39:B1:CF:19:16:DA:B5:FC:24:61:7F:83:99:3A:64:BB:BF:DD:7A
X509v3 Authority Key Identifier:
keyid:30:AF:F7:52:09:68:4A:35:46:69:06:1D:23:DA:29:F8:EA:2F:1D:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MK_3UgloSjVGaQYdI9op-OovHV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:e9:2d:cf:22:fb:56:f8:a7:88:00:10:60:75:6a:a6:c4:7c:
7c:32:c1:d6:4e:6b:2c:ce:02:da:5e:92:7a:9f:36:03:c1:43:
08:16:d4:ed:47:54:03:e5:fc:e3:b5:1e:33:4e:44:45:90:cf:
28:12:02:08:6f:80:45:7a:bf:f4:9a:ac:ce:7f:4f:83:3a:bb:
e7:f7:16:a2:46:8d:d7:58:ac:ef:d2:42:82:1c:bb:f6:14:b1:
48:de:50:e0:4b:70:29:a4:86:b2:5f:f6:03:8b:81:4d:c8:15:
9b:14:d5:15:49:ee:13:42:5e:1c:da:23:98:8d:7e:bd:e0:f1:
f9:25:ab:59:fa:a7:04:df:5e:54:1c:05:0e:fe:d2:91:3e:52:
33:c4:fd:16:9a:1c:be:bd:22:9b:b2:6b:a9:d5:0f:54:52:52:
dc:e0:4d:9c:c2:b3:70:7f:7d:be:26:9c:c6:1c:1b:82:72:65:
a3:57:a6:cb:f5:39:16:a5:3c:0e:52:e9:a3:ef:2a:c7:4d:b3:
3e:26:f9:e8:ac:57:45:de:53:5c:04:4d:b7:05:12:ab:f9:09:
04:5b:be:cb:27:9f:1a:43:f3:d6:9e:d6:e7:7c:af:b2:56:f6:
6e:24:6a:d0:f0:5b:c0:01:a1:8e:d5:de:86:73:67:bc:8d:a1:
97:12:c6:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3Do4WujjZy1LZFeqjZVDVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwYWZmNzUyMDk2ODRhMzU0NjY5MDYxZDIzZGEyOWY4ZWEy
ZjFkNWUwHhcNMjUwNjI4MTUwMTEzWhcNMjUwNjI5MTUwMTEzWjAzMTEwLwYDVQQD
EyhlMjM5YjFjZjE5MTZkYWI1ZmMyNDYxN2Y4Mzk5M2E2NGJiYmZkZDdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYQ6en8T6AIm3CJsxbjD4uDWKinK
2AfznSpzufipBlMb9oAeriELj/W+1m8naZ7BlAzNAmrNR8vbbkfHRPzSdjBFAmdJ
xO6orM4G/5LBlNE24J3QeEmHgqBYkTi17tlFpPgLhPYPgXyZUcIocbA6yeUzxQh7
gWc3QtHU2o4y5XJnZySCD1oTaHvX4f7q5OTD+wsLOuFFfAf95NPLDS+bhv3gJorr
SykcMuFxLtww4cNfE6lGCRrCQsitOg2iW38cocGFJRXBMa6S2CrPnAll9bNseu94
UEvOhj9Vz7+WWxMvAo9kEs2zFuM8qzK3Dto3baC0LnoE7JSmNRJC8OjO6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOI5sc8ZFtq1/CRhf4OZOmS7v916MB8GA1UdIwQY
MBaAFDCv91IJaEo1RmkGHSPaKfjqLx1eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUtfM1VnbG9TalZHYVFZZEk5b3AtT292SFY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS84NDRhMjUtYThkZi00NTYxLWIzZTct
OTc4NWEzMzU1NDJhLzEvTUtfM1VnbG9TalZHYVFZZEk5b3AtT292SFY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS84NDRhMjUtYThkZi00NTYxLWIzZTctOTc4NWEzMzU1NDJh
LzEvTUtfM1VnbG9TalZHYVFZZEk5b3AtT292SFY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIektzyL7
VviniAAQYHVqpsR8fDLB1k5rLM4C2l6Sep82A8FDCBbU7UdUA+X847UeM05ERZDP
KBICCG+ARXq/9Jqszn9Pgzq75/cWokaN11is79JCghy79hSxSN5Q4EtwKaSGsl/2
A4uBTcgVmxTVFUnuE0JeHNojmI1+veDx+SWrWfqnBN9eVBwFDv7SkT5SM8T9Fpoc
vr0im7JrqdUPVFJS3OBNnMKzcH99viacxhwbgnJlo1emy/U5FqU8DlLpo+8qx02z
Pib56KxXRd5TXARNtwUSq/kJBFu+yyefGkPz1p7W53yvslb2biRq0PBbwAGhjtXe
hnNnvI2hlxLGag==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:11:00 2025 by rpki-client