Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/850024-84ee-44c8-b2d9-7d20eb063455/1/MKVWMuyQNMm5o_KQquzZoHwfJqs.mft
File: MKVWMuyQNMm5o_KQquzZoHwfJqs.mft (raw, json)
Hash identifier: R/H1NMWWsWXIPeSza68sbu3vkDUg9MRXNtdVJMMRqKs=
Subject key identifier: 60:B3:84:6B:C9:AA:86:BB:F6:51:09:90:69:89:FF:2E:DA:FC:3C:A0
Authority key identifier: 30:A5:56:32:EC:90:34:C9:B9:A3:F2:90:AA:EC:D9:A0:7C:1F:26:AB
Certificate issuer: /CN=30a55632ec9034c9b9a3f290aaecd9a07c1f26ab
Certificate serial: 0198D65FDCE0BE9EAD7F5B6E24AAEA28A377
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MKVWMuyQNMm5o_KQquzZoHwfJqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/850024-84ee-44c8-b2d9-7d20eb063455/1/MKVWMuyQNMm5o_KQquzZoHwfJqs.mft
Manifest number: 0A1D
Signing time: Sat 23 Aug 2025 10:01:03 +0000
Manifest this update: Sat 23 Aug 2025 10:01:03 +0000
Manifest next update: Sun 24 Aug 2025 10:01:03 +0000
Files and hashes: 1: MKVWMuyQNMm5o_KQquzZoHwfJqs.crl (hash: 61nKLs6fFMi5eNKzE3d12Y/uN3Z51MO0+g0eKfqFJ0A=)
2: mjst7aUax91GFptXcthnYyUXm5M.roa (hash: yt+uoK2SV82Kw1H7pGPHZ6f9URufEVmNUwV6zXvjHTc=)
3: yVy6K3-_uaSKa1-_oqUp0tf_Xgk.roa (hash: 7YTmf2c9OYfpZTmIIrXdtXUx4tpHodV4viOENQQMD4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/850024-84ee-44c8-b2d9-7d20eb063455/1/MKVWMuyQNMm5o_KQquzZoHwfJqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/850024-84ee-44c8-b2d9-7d20eb063455/1/MKVWMuyQNMm5o_KQquzZoHwfJqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/MKVWMuyQNMm5o_KQquzZoHwfJqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:dc:e0:be:9e:ad:7f:5b:6e:24:aa:ea:28:a3:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30a55632ec9034c9b9a3f290aaecd9a07c1f26ab
Validity
Not Before: Aug 23 10:01:03 2025 GMT
Not After : Aug 24 10:01:03 2025 GMT
Subject: CN=60b3846bc9aa86bbf65109906989ff2edafc3ca0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:42:f6:c1:87:1e:31:db:8f:d3:7a:a6:01:ed:
61:9a:5e:e1:c6:f3:ee:22:3b:67:73:02:f1:e5:90:
fb:82:32:23:32:9a:ef:0b:7d:b2:f5:40:db:66:a1:
c0:7e:d0:87:59:ec:d1:58:24:2f:9b:96:c1:17:33:
b3:49:af:aa:9a:5d:a2:98:f1:dd:bc:8a:98:b0:cf:
16:a3:5f:5a:29:fc:64:20:30:c8:02:c8:6d:29:b6:
33:40:b2:ae:03:c6:fe:6c:dd:f6:b1:6f:5b:09:e5:
db:95:e9:14:0f:1e:78:f0:af:59:a5:09:ef:5f:19:
36:fc:bb:56:b5:06:dc:f9:99:7d:99:20:2d:bd:8a:
6e:86:0e:03:f2:14:2a:13:85:ee:42:bd:04:a9:3a:
3d:42:29:c2:2c:eb:ea:77:38:81:b7:6d:d9:08:cf:
90:95:58:9e:17:fe:43:2a:de:d9:0d:79:01:42:64:
f0:06:1a:ee:5c:95:70:37:bc:c3:9b:1b:76:dc:19:
f8:0f:cf:27:49:94:59:32:85:c7:1c:85:8c:03:f8:
79:2c:aa:c1:dd:15:44:33:91:0f:ec:90:c2:06:2d:
6e:00:5f:d3:81:d9:4c:ad:73:a0:7f:2c:01:96:df:
f7:4f:77:ed:85:97:65:8b:48:b2:0b:41:ad:cc:b9:
b0:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:B3:84:6B:C9:AA:86:BB:F6:51:09:90:69:89:FF:2E:DA:FC:3C:A0
X509v3 Authority Key Identifier:
keyid:30:A5:56:32:EC:90:34:C9:B9:A3:F2:90:AA:EC:D9:A0:7C:1F:26:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MKVWMuyQNMm5o_KQquzZoHwfJqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/850024-84ee-44c8-b2d9-7d20eb063455/1/MKVWMuyQNMm5o_KQquzZoHwfJqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/850024-84ee-44c8-b2d9-7d20eb063455/1/MKVWMuyQNMm5o_KQquzZoHwfJqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:c6:34:98:f4:a6:28:7f:55:b4:75:c1:b7:6e:41:86:57:4b:
dd:85:12:58:42:85:dd:d4:e4:4f:42:d2:b5:7c:6a:83:e5:34:
1c:b9:d5:0a:97:60:b2:1e:ea:00:4b:34:fa:c4:5d:cf:1d:0a:
44:20:24:1e:b5:62:b0:7d:c6:6b:4a:0a:ee:35:55:62:8f:26:
71:70:16:93:7e:5b:cf:63:3d:2a:64:66:06:90:e6:f4:05:72:
7b:3a:8b:5c:a5:97:fa:9c:69:7c:59:32:6c:48:12:eb:9f:bb:
c8:58:88:a0:1c:1e:ab:c3:2a:50:c1:c0:57:af:0e:19:bd:74:
1d:4b:96:3c:23:06:0c:28:97:1e:b1:e9:bc:96:3d:b3:18:1e:
17:2b:df:ea:62:f3:14:58:c7:71:a9:8f:a3:a9:36:36:c1:47:
95:82:52:8b:11:df:59:e4:5a:d1:e6:00:19:20:2b:49:5b:55:
fd:23:a8:89:0c:18:a3:25:56:e5:c4:6b:ef:e6:ed:c4:b7:60:
43:de:2a:2b:76:ff:42:a7:c4:24:b2:98:d0:91:13:ac:92:7b:
5c:95:9e:0c:fb:00:e9:35:c0:63:e4:01:a0:c2:4e:89:55:2f:
6f:47:e2:ac:ad:dd:9f:88:6d:d0:54:54:bd:f0:33:1a:ce:76:
4e:08:8e:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:19:50 2025 by rpki-client