Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/MKNPnR29IKqH-w9ivStsXjDGFKI.mft
File: MKNPnR29IKqH-w9ivStsXjDGFKI.mft (raw, json)
Hash identifier: osSCCCBPQBZ0+RlXQYthQcauai1a6GlVExvD6c8GCMs=
Subject key identifier: 53:32:67:5F:96:2E:18:9B:7D:4A:D9:B7:52:E2:9C:FB:16:0F:0D:BD
Authority key identifier: 30:A3:4F:9D:1D:BD:20:AA:87:FB:0F:62:BD:2B:6C:5E:30:C6:14:A2
Certificate issuer: /CN=30a34f9d1dbd20aa87fb0f62bd2b6c5e30c614a2
Certificate serial: 0197B7EA108C1D14A546C4B79C0D62EB24AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MKNPnR29IKqH-w9ivStsXjDGFKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/MKNPnR29IKqH-w9ivStsXjDGFKI.mft
Manifest number: 0669
Signing time: Sat 28 Jun 2025 19:00:59 +0000
Manifest this update: Sat 28 Jun 2025 19:00:59 +0000
Manifest next update: Sun 29 Jun 2025 19:00:59 +0000
Files and hashes: 1: MKNPnR29IKqH-w9ivStsXjDGFKI.crl (hash: 1tXQPfCtX1M6GngLr3mU29+SYhhkqZIcxNOstAIqTds=)
2: lblIM2FJQ_WVf-a4mFWu5Otgr-A.roa (hash: dTACe68AOYRTGOWM2bf2NFYllivUWP/q40LE4fNKxno=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/MKNPnR29IKqH-w9ivStsXjDGFKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/MKNPnR29IKqH-w9ivStsXjDGFKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MKNPnR29IKqH-w9ivStsXjDGFKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:10:8c:1d:14:a5:46:c4:b7:9c:0d:62:eb:24:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30a34f9d1dbd20aa87fb0f62bd2b6c5e30c614a2
Validity
Not Before: Jun 28 19:00:59 2025 GMT
Not After : Jun 29 19:00:59 2025 GMT
Subject: CN=5332675f962e189b7d4ad9b752e29cfb160f0dbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:f8:3c:8c:c2:79:ff:d5:dc:c6:42:eb:13:3c:
75:95:de:b2:6b:13:06:9c:82:8c:2e:60:79:fe:72:
23:5f:4e:5f:7c:81:35:a4:8c:dd:05:9c:57:f8:9d:
41:ef:09:d0:e4:15:4e:23:e9:99:bd:13:2f:a5:f3:
df:14:95:6d:e5:d9:c0:b9:8b:dd:aa:1b:52:2f:57:
0a:0b:98:b1:a5:c3:61:f3:b1:7f:5a:c6:84:63:26:
a6:e3:17:8a:4a:f0:35:67:ff:16:97:25:b3:63:ce:
f9:45:b8:f5:34:09:60:0e:00:b6:48:ec:84:48:00:
42:b8:da:4c:98:2c:af:93:32:ff:5a:e7:94:7c:5e:
2f:a2:74:96:8a:58:5d:b8:35:e4:c7:e8:0e:8c:13:
2f:a7:e6:37:16:dd:3c:c8:de:9f:69:49:0d:6f:9b:
95:ca:26:42:3f:05:6a:42:a3:8c:dd:bb:65:34:9a:
d6:69:f9:cc:08:72:b0:fc:99:5e:9f:4d:db:8f:4d:
73:e8:2a:ab:9f:cf:6f:a5:a7:ae:80:61:42:cb:a0:
d9:2e:4f:df:ef:f7:32:19:10:74:95:c4:f4:44:63:
7e:dc:00:d5:00:26:53:de:34:ae:2f:b6:e9:a4:d1:
78:75:5b:e0:00:3b:c7:d8:9f:26:2c:6f:25:33:9b:
0c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:32:67:5F:96:2E:18:9B:7D:4A:D9:B7:52:E2:9C:FB:16:0F:0D:BD
X509v3 Authority Key Identifier:
keyid:30:A3:4F:9D:1D:BD:20:AA:87:FB:0F:62:BD:2B:6C:5E:30:C6:14:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MKNPnR29IKqH-w9ivStsXjDGFKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/MKNPnR29IKqH-w9ivStsXjDGFKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/MKNPnR29IKqH-w9ivStsXjDGFKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:19:e4:b0:3c:22:08:d0:30:b9:76:88:10:7c:97:76:f3:8c:
cf:33:e6:ea:50:34:b1:02:8d:7d:32:72:28:16:ce:84:81:62:
61:33:ab:c0:ac:bc:25:54:55:b2:05:31:b4:dd:02:7e:b7:8d:
33:c3:8b:c1:97:ca:78:d5:3e:f7:f3:45:0e:ee:7e:41:7a:82:
c7:25:35:e2:c2:3f:ce:79:31:84:4f:48:ad:13:8f:f9:05:44:
59:c8:60:96:bc:4a:2c:d4:f6:4f:ae:07:db:31:12:80:d9:85:
27:17:58:4e:ff:9b:39:8c:68:23:f2:fb:b0:cb:14:da:5b:9c:
30:cc:cd:26:6b:35:e3:e9:f0:41:34:9e:63:99:d5:cf:57:b7:
e7:4d:b5:2e:7b:92:73:33:50:f5:ca:e6:4e:83:e4:36:35:5b:
e5:ac:bd:c9:80:cf:e1:2c:b2:df:4c:22:2f:c2:56:55:77:8c:
59:7d:54:ed:86:bd:cc:ff:6d:7d:91:e0:ee:e8:0e:dc:74:e5:
8c:37:5c:31:1d:5f:38:ff:0c:58:73:6a:5f:c9:7a:1c:54:96:
58:48:98:a4:f6:1f:0d:4f:16:5a:6e:f6:ad:85:c0:e8:ef:ce:
cb:18:bf:98:14:ee:92:33:f1:91:ac:84:a8:14:2c:a6:90:80:
33:bf:75:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:36:02 2025 by rpki-client