Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.mft
File: MKJ1gGSamS5B4yz4wSJF4H_5-cU.mft (raw, json)
Hash identifier: /qaiREte97rihmw+YivL8F3oWhAbL+2l55bGCxM+sU0=
Subject key identifier: 0C:4A:F7:3E:A7:47:2B:CC:82:1B:2D:1F:E1:3E:7F:DD:4F:1D:A8:35
Authority key identifier: 30:A2:75:80:64:9A:99:2E:41:E3:2C:F8:C1:22:45:E0:7F:F9:F9:C5
Certificate issuer: /CN=30a27580649a992e41e32cf8c12245e07ff9f9c5
Certificate serial: 019A503DB0569EDD9E4C302FC2828E239778
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MKJ1gGSamS5B4yz4wSJF4H_5-cU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.mft
Manifest number: 0DF3
Signing time: Tue 04 Nov 2025 19:00:11 +0000
Manifest this update: Tue 04 Nov 2025 19:00:11 +0000
Manifest next update: Wed 05 Nov 2025 19:00:11 +0000
Files and hashes: 1: MKJ1gGSamS5B4yz4wSJF4H_5-cU.crl (hash: xeEfYtpTbQfaEFHkEOrbHsk1UwNQwad303lPO/hN1CI=)
2: WZEbVkL7G2Qj36QisnZkv8BFkNA.roa (hash: f7XKUwdOUxo0bFV2++z3NCiuNhXfpczYvfcpVS/l/Jk=)
3: yCz-ewAMqZx7lCDPn4Ya6LAQnZ4.roa (hash: biH7dwZg2HQ2zwVaqcwP5LR/5HOneIgO7AJ9Gj1riJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.mft
rsync://rpki.ripe.net/repository/DEFAULT/MKJ1gGSamS5B4yz4wSJF4H_5-cU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3d:b0:56:9e:dd:9e:4c:30:2f:c2:82:8e:23:97:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30a27580649a992e41e32cf8c12245e07ff9f9c5
Validity
Not Before: Nov 4 19:00:11 2025 GMT
Not After : Nov 5 19:00:11 2025 GMT
Subject: CN=0c4af73ea7472bcc821b2d1fe13e7fdd4f1da835
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3c:81:6f:9f:09:38:9a:bc:e1:e4:13:e9:48:
d2:73:50:85:06:01:d9:79:0d:94:f8:e0:15:5b:f2:
e3:48:91:7e:cb:56:e0:9f:8e:d4:9a:89:0d:59:c8:
97:51:78:ba:e1:05:64:6a:dd:8d:4f:63:f5:34:67:
42:fd:8e:71:99:18:9d:2d:e4:1d:d5:ba:1a:6f:70:
3c:8d:a7:30:e7:4e:4e:2b:29:31:8d:ec:b1:72:d7:
a2:a2:71:02:67:a9:49:ed:d2:d0:21:8d:2c:9d:3e:
5e:63:31:9d:f1:b9:85:37:40:d9:63:c6:7b:26:3c:
46:d3:a6:f3:5a:7c:3d:35:9a:e4:7e:4b:fc:d4:88:
d1:24:4e:10:9d:96:03:6b:0e:62:28:17:11:02:b9:
aa:ff:a2:42:59:f4:34:54:0f:ba:2b:08:c4:67:cd:
c3:e3:36:fa:f6:42:26:fa:bf:51:21:02:f8:0d:6e:
24:b2:5c:fd:96:9e:d9:d4:54:22:02:b9:67:04:f4:
e5:2d:c0:4e:d5:49:e4:01:bb:02:df:56:f4:c6:cf:
3a:06:54:20:87:e3:d2:c4:3a:5a:8d:75:c4:60:4e:
0f:a4:86:37:77:1b:73:90:e8:e7:98:48:a8:6d:3a:
fb:7f:04:52:b1:20:dd:a3:73:6c:ec:90:ee:1e:4d:
44:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:4A:F7:3E:A7:47:2B:CC:82:1B:2D:1F:E1:3E:7F:DD:4F:1D:A8:35
X509v3 Authority Key Identifier:
keyid:30:A2:75:80:64:9A:99:2E:41:E3:2C:F8:C1:22:45:E0:7F:F9:F9:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MKJ1gGSamS5B4yz4wSJF4H_5-cU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:a4:58:af:99:b6:49:4b:0e:d8:60:ae:09:ff:3a:67:35:59:
da:7d:fa:ce:29:06:78:d8:87:cf:6f:ef:61:e4:51:b6:9e:00:
3d:63:16:d8:a7:82:0e:e3:87:e2:50:c1:5b:5a:c2:48:2e:de:
92:d7:66:77:61:22:2b:39:d9:2d:4c:2a:d9:f9:b7:a9:13:e5:
77:02:4b:df:eb:21:a7:b0:bd:53:70:0b:77:2a:9f:b9:45:7a:
60:16:64:02:fa:8d:bf:a5:fb:ca:76:b0:8f:e9:38:c1:be:9b:
66:81:1d:22:66:46:89:4d:a9:21:4a:15:62:9c:08:77:14:f4:
bc:a7:bc:b0:42:24:28:4f:5c:cd:40:2f:fe:e5:e9:f3:f0:9f:
01:c3:f8:54:ce:a0:67:ff:b3:ea:07:0f:90:b0:2d:db:c6:17:
ee:71:6c:1a:37:38:d2:aa:7c:b6:80:88:0a:81:8b:a3:54:7a:
ac:55:91:f3:40:01:44:28:58:c9:1f:7b:e8:28:06:84:db:c7:
7d:45:3f:8c:9b:1f:ce:ff:5f:73:1c:9d:53:29:9d:4d:72:d4:
1b:0a:02:3c:87:65:e3:c2:f3:4d:21:37:74:db:e0:bd:01:75:
fe:fb:f8:3c:f0:ad:fc:1b:f9:48:a3:58:2e:00:dd:dd:57:6f:
66:0b:b1:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:42:15 2025 by rpki-client