Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/5b0494-5ad6-4ea4-95fa-a83d9d920d31/1/mk-ppgpaJP_mFLbftYgT2SWjsxg.mft
File: mk-ppgpaJP_mFLbftYgT2SWjsxg.mft (raw, json)
Hash identifier: JeTRVax7SaMQXaaNvIPQUH2oDCKzrzBNXzHLrobF8+M=
Subject key identifier: B1:58:2C:BD:38:08:27:F6:D9:88:10:DB:D6:21:DF:F2:90:EB:5D:CD
Authority key identifier: 9A:4F:A9:A6:0A:5A:24:FF:E6:14:B6:DF:B5:88:13:D9:25:A3:B3:18
Certificate issuer: /CN=9a4fa9a60a5a24ffe614b6dfb58813d925a3b318
Certificate serial: 0197B8C60BD05505F5BF2A3C88A2D32F19F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mk-ppgpaJP_mFLbftYgT2SWjsxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/5b0494-5ad6-4ea4-95fa-a83d9d920d31/1/mk-ppgpaJP_mFLbftYgT2SWjsxg.mft
Manifest number: 0CCB
Signing time: Sat 28 Jun 2025 23:01:16 +0000
Manifest this update: Sat 28 Jun 2025 23:01:16 +0000
Manifest next update: Sun 29 Jun 2025 23:01:16 +0000
Files and hashes: 1: WF_UUzJyBXVRYaWBRz9A5RqP7uM.roa (hash: fXJDB7viVboUYMb0Tq5yYms1zX+sjGa50QbTOcD6d1o=)
2: mk-ppgpaJP_mFLbftYgT2SWjsxg.crl (hash: GF9ou9K13Mh069qUOKfM3zmXLa6376b0DUA30ve9/Xk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/5b0494-5ad6-4ea4-95fa-a83d9d920d31/1/mk-ppgpaJP_mFLbftYgT2SWjsxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/5b0494-5ad6-4ea4-95fa-a83d9d920d31/1/mk-ppgpaJP_mFLbftYgT2SWjsxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/mk-ppgpaJP_mFLbftYgT2SWjsxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:c6:0b:d0:55:05:f5:bf:2a:3c:88:a2:d3:2f:19:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a4fa9a60a5a24ffe614b6dfb58813d925a3b318
Validity
Not Before: Jun 28 23:01:16 2025 GMT
Not After : Jun 29 23:01:16 2025 GMT
Subject: CN=b1582cbd380827f6d98810dbd621dff290eb5dcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:a0:89:92:2c:3e:64:1b:a3:af:ae:13:50:28:
92:32:36:ce:39:43:75:c2:a2:db:b7:a8:5d:8f:1b:
a8:d3:a3:98:a3:4c:e6:96:54:2d:f0:12:57:6a:b9:
5c:d5:04:be:34:d3:03:d8:71:7c:ca:22:61:a6:4c:
71:eb:78:e9:e0:7e:49:29:63:19:5b:63:b6:7e:19:
9d:27:9e:95:23:26:a9:72:de:c3:0a:1e:02:d0:ef:
fa:6b:d4:fb:4e:ba:de:c3:3d:c8:ed:00:b9:a7:7c:
f7:53:fc:b4:1c:c4:10:ae:70:1c:5f:d7:7c:dc:70:
a1:c1:3a:e9:b9:77:db:11:53:44:dc:95:29:7c:7e:
a1:32:d4:e0:49:b5:66:c2:84:50:3c:e3:36:aa:95:
e2:23:84:48:8e:0d:59:91:71:cc:19:f8:59:b9:90:
79:29:16:71:a8:86:f2:9e:bb:8e:5c:bc:91:11:e9:
37:c8:3d:ab:70:42:77:a1:bc:6a:7e:e0:5f:ca:64:
c2:d2:44:1c:58:4e:37:fb:dc:47:0a:4e:04:2f:9a:
ee:7e:89:a3:54:63:d3:ce:b3:85:71:f4:17:0e:48:
a1:c6:7a:e1:a0:e7:16:f1:c7:92:d7:44:dd:60:e3:
06:9f:ab:6c:13:ff:80:34:d3:e4:7b:cd:58:dc:91:
9d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:58:2C:BD:38:08:27:F6:D9:88:10:DB:D6:21:DF:F2:90:EB:5D:CD
X509v3 Authority Key Identifier:
keyid:9A:4F:A9:A6:0A:5A:24:FF:E6:14:B6:DF:B5:88:13:D9:25:A3:B3:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mk-ppgpaJP_mFLbftYgT2SWjsxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5b0494-5ad6-4ea4-95fa-a83d9d920d31/1/mk-ppgpaJP_mFLbftYgT2SWjsxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5b0494-5ad6-4ea4-95fa-a83d9d920d31/1/mk-ppgpaJP_mFLbftYgT2SWjsxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:a1:2c:bb:c3:72:d1:7e:16:bd:9f:6a:e4:9c:6a:95:8a:ea:
b9:52:02:6b:21:99:cd:1b:0b:85:4f:6b:db:a2:7b:86:46:1f:
3b:47:f5:ad:cb:cb:0c:ea:1a:c4:45:c2:98:ee:ca:c8:30:5f:
4d:ab:14:80:83:ca:e3:b6:6d:04:2b:6b:fa:b2:ce:38:e5:0c:
ba:88:ae:8f:43:ee:80:65:b7:80:1c:20:b2:d8:c3:da:2b:d0:
ee:a5:7f:04:1a:1b:6c:33:85:c9:9d:83:f1:f5:a5:32:e4:d7:
c7:64:8a:43:0b:db:dd:bc:3b:5f:e0:55:7c:88:a9:07:1c:cd:
df:61:6e:80:a4:e4:9b:68:4c:5c:13:44:77:ee:f0:b2:6b:d9:
cb:9a:88:9c:09:66:79:ac:13:0d:47:a4:4f:5f:b3:b5:59:13:
81:4d:bd:cd:29:a1:fc:6b:0c:4e:ac:88:7c:4a:84:37:d9:62:
fd:1d:20:c9:91:ed:4e:83:ad:79:ee:f4:89:90:06:a0:d6:96:
9e:63:7a:cf:4e:15:d5:68:ab:cf:f3:27:0f:fb:ca:e2:7b:c8:
26:68:25:52:e3:57:56:79:4b:96:67:9d:e8:89:7b:20:a0:67:
5a:20:91:39:70:d4:c1:c2:b1:9a:38:f0:5a:9f:c2:ba:84:1d:
29:f1:58:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:27:37 2025 by rpki-client