Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/db5101-015c-40c5-905b-657b3a7d9676/1/MPkNJSCtYZrDBgs5-9LCBOKaKhQ.mft
File: MPkNJSCtYZrDBgs5-9LCBOKaKhQ.mft (raw, json)
Hash identifier: zq5/gzDz3IP4v1uiCl+NtZJ2GvbdOcZAYdNK1OZn7bE=
Subject key identifier: 90:3F:72:34:31:4B:D0:87:48:2D:69:F3:BC:82:4E:46:4B:E9:35:2C
Authority key identifier: 30:F9:0D:25:20:AD:61:9A:C3:06:0B:39:FB:D2:C2:04:E2:9A:2A:14
Certificate issuer: /CN=30f90d2520ad619ac3060b39fbd2c204e29a2a14
Certificate serial: 019774C0032A9F9138D95A7A3AF799603E7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MPkNJSCtYZrDBgs5-9LCBOKaKhQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/db5101-015c-40c5-905b-657b3a7d9676/1/MPkNJSCtYZrDBgs5-9LCBOKaKhQ.mft
Manifest number: 1593
Signing time: Sun 15 Jun 2025 18:00:30 +0000
Manifest this update: Sun 15 Jun 2025 18:00:30 +0000
Manifest next update: Mon 16 Jun 2025 18:00:30 +0000
Files and hashes: 1: 9iuKUiRNNk0yJqP9x1MG2I_7d9s.roa (hash: OJC+CIaFp/mpbSmO0wI1lGEv8Ek7U6QE2MP4Wm3PDaM=)
2: MPkNJSCtYZrDBgs5-9LCBOKaKhQ.crl (hash: Wfa2jry/4Ad4/AEu8KgepYW2zObhMDO1CaeIn/YB7/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/db5101-015c-40c5-905b-657b3a7d9676/1/MPkNJSCtYZrDBgs5-9LCBOKaKhQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/db5101-015c-40c5-905b-657b3a7d9676/1/MPkNJSCtYZrDBgs5-9LCBOKaKhQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/MPkNJSCtYZrDBgs5-9LCBOKaKhQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 18:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:74:c0:03:2a:9f:91:38:d9:5a:7a:3a:f7:99:60:3e:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30f90d2520ad619ac3060b39fbd2c204e29a2a14
Validity
Not Before: Jun 15 18:00:30 2025 GMT
Not After : Jun 16 18:00:30 2025 GMT
Subject: CN=903f7234314bd087482d69f3bc824e464be9352c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:dc:7f:8f:e1:a3:30:5b:6e:5c:59:97:da:4e:
a4:a7:28:02:43:2c:42:30:eb:1f:4d:31:3c:54:7c:
ab:77:75:aa:99:16:e0:a7:9a:d2:d0:ff:a5:87:1a:
d9:6a:9a:c7:44:79:ae:d2:d5:49:24:12:a9:a4:33:
b5:75:b7:e8:32:0c:56:00:6d:dd:77:aa:58:a5:86:
fa:80:9a:46:31:4d:ec:3c:82:82:c7:c6:93:83:0d:
fd:dc:d4:5f:41:a7:52:72:c9:4a:0e:a4:91:14:c7:
33:5e:cd:fe:1c:38:a2:0a:de:ed:e3:aa:2c:61:ce:
07:d7:3b:34:e2:44:15:e1:81:9c:c4:6c:23:61:70:
a6:d3:2c:e9:b4:a6:55:9e:5d:0d:3e:6d:57:a2:23:
22:ed:db:1d:a1:da:46:ec:d3:8c:d2:b4:ca:1c:16:
6f:5d:84:2e:5b:ea:72:20:a0:6e:f0:ba:54:1c:ea:
8e:e6:a7:79:34:7b:66:b9:ab:38:ba:78:e3:26:2a:
e4:da:98:3e:43:3a:ec:d0:10:5d:5b:e4:ed:95:1e:
ff:69:c0:3f:60:7d:41:26:96:24:e9:10:f1:59:5d:
8f:51:29:25:c0:f3:eb:9a:84:c9:25:63:53:19:1c:
bf:bf:3f:b1:7c:22:12:15:34:91:89:36:36:d9:00:
e9:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:3F:72:34:31:4B:D0:87:48:2D:69:F3:BC:82:4E:46:4B:E9:35:2C
X509v3 Authority Key Identifier:
keyid:30:F9:0D:25:20:AD:61:9A:C3:06:0B:39:FB:D2:C2:04:E2:9A:2A:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MPkNJSCtYZrDBgs5-9LCBOKaKhQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/db5101-015c-40c5-905b-657b3a7d9676/1/MPkNJSCtYZrDBgs5-9LCBOKaKhQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/db5101-015c-40c5-905b-657b3a7d9676/1/MPkNJSCtYZrDBgs5-9LCBOKaKhQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:fa:de:1b:b3:16:0f:29:ed:b8:a7:34:03:5b:56:13:97:3f:
35:b5:ab:b5:0d:7f:ac:3c:87:ac:aa:39:61:fe:7e:2f:03:4d:
43:6b:3e:0a:c6:ac:3e:39:15:4a:cd:6a:42:99:e5:6c:a3:b0:
35:64:fd:15:da:97:69:a2:ec:33:92:87:34:e1:57:5e:41:f3:
8e:10:a9:9a:b0:b5:a2:1f:f4:11:8c:43:04:9b:2f:37:dd:8a:
ce:20:90:79:5b:db:00:e7:5c:4b:e6:00:ba:c6:8e:b1:eb:bc:
45:bf:57:db:61:d5:44:82:ae:e0:df:18:57:90:15:56:65:c9:
7e:22:8a:c1:c6:7b:0f:bd:35:b0:30:50:07:68:80:f8:a2:dd:
e8:b7:7d:1a:b9:9d:fa:05:bc:6f:e5:98:f5:94:56:0d:cc:47:
0a:93:ea:10:1e:3d:7d:be:5a:90:b9:e6:55:71:3f:ea:c9:67:
02:c3:e6:ca:07:ce:b8:06:29:11:bc:84:4b:7b:b5:6b:14:af:
e8:8c:b5:05:1b:c1:0f:fb:4c:47:85:a2:3e:9f:d9:05:c9:89:
ff:2d:a2:9b:01:31:12:90:5a:37:0d:b3:92:fe:22:c5:30:86:
3c:7d:2c:45:92:7c:9c:77:8d:34:87:d1:be:cf:00:d9:39:9e:
01:5d:b4:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 02:29:04 2025 by rpki-client