Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.mft
File: MKJ1gGSamS5B4yz4wSJF4H_5-cU.mft (raw, json)
Hash identifier: 7Og/XxQV8+8VOv7GxbynlOeyY/wc07M/i0JS51EcsAA=
Subject key identifier: E9:21:FC:E0:54:64:98:B4:54:54:1A:1B:BF:4E:AC:7B:12:F2:8C:CB
Authority key identifier: 30:A2:75:80:64:9A:99:2E:41:E3:2C:F8:C1:22:45:E0:7F:F9:F9:C5
Certificate issuer: /CN=30a27580649a992e41e32cf8c12245e07ff9f9c5
Certificate serial: 01987CE57662DDE197A9C6B62E9843458258
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MKJ1gGSamS5B4yz4wSJF4H_5-cU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.mft
Manifest number: 0D01
Signing time: Wed 06 Aug 2025 01:01:09 +0000
Manifest this update: Wed 06 Aug 2025 01:01:09 +0000
Manifest next update: Thu 07 Aug 2025 01:01:09 +0000
Files and hashes: 1: MKJ1gGSamS5B4yz4wSJF4H_5-cU.crl (hash: 2RjDNzTfJp24705kerKUMUOEBjVVttphn0fMwjX8gQk=)
2: WZEbVkL7G2Qj36QisnZkv8BFkNA.roa (hash: f7XKUwdOUxo0bFV2++z3NCiuNhXfpczYvfcpVS/l/Jk=)
3: yCz-ewAMqZx7lCDPn4Ya6LAQnZ4.roa (hash: biH7dwZg2HQ2zwVaqcwP5LR/5HOneIgO7AJ9Gj1riJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.mft
rsync://rpki.ripe.net/repository/DEFAULT/MKJ1gGSamS5B4yz4wSJF4H_5-cU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:e5:76:62:dd:e1:97:a9:c6:b6:2e:98:43:45:82:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30a27580649a992e41e32cf8c12245e07ff9f9c5
Validity
Not Before: Aug 6 01:01:09 2025 GMT
Not After : Aug 7 01:01:09 2025 GMT
Subject: CN=e921fce0546498b454541a1bbf4eac7b12f28ccb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e1:c6:db:d0:3b:33:9e:c1:c6:34:73:9a:bc:
1b:29:3d:28:fd:08:27:63:3b:83:bd:5b:e6:6e:ba:
99:12:e1:20:6d:f8:89:7e:a6:6b:67:ee:7a:e4:08:
56:89:b8:ff:0f:d2:63:88:ee:00:58:e3:15:00:6b:
a6:67:ac:c7:52:01:89:b8:26:74:59:5a:0e:9b:0a:
35:f1:09:4b:20:b0:82:48:e6:79:e1:98:55:ab:bc:
ba:5e:4f:af:0f:b4:12:3b:da:3d:6c:55:b8:34:8f:
43:eb:f5:4f:df:c6:92:ea:c8:2a:ab:72:1e:63:ce:
b5:f2:2e:63:0e:19:12:f8:ab:71:84:fb:1b:3d:fa:
c6:a4:7e:3d:98:28:f7:27:ae:74:58:12:2e:96:27:
c4:11:32:ca:18:68:d9:8e:d4:6f:f8:16:2f:a6:47:
2f:2b:f4:9c:04:b4:5b:f5:f3:2c:1b:c1:c1:62:a3:
b9:26:d8:0c:02:2a:37:25:c5:8d:f8:8c:68:a7:cf:
af:89:b4:49:4f:b8:e2:39:2b:31:ce:2b:bd:8b:14:
4a:07:15:bb:d2:9f:44:c8:9d:d1:ad:92:9d:4b:c6:
78:0b:07:9d:6f:77:70:58:4c:2e:8a:b6:55:1d:6f:
df:0e:a3:e5:08:eb:fe:53:e2:7e:a5:e2:4b:87:3d:
19:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:21:FC:E0:54:64:98:B4:54:54:1A:1B:BF:4E:AC:7B:12:F2:8C:CB
X509v3 Authority Key Identifier:
keyid:30:A2:75:80:64:9A:99:2E:41:E3:2C:F8:C1:22:45:E0:7F:F9:F9:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MKJ1gGSamS5B4yz4wSJF4H_5-cU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:5e:da:fe:ea:4c:43:60:bd:cd:51:4e:9b:ec:2e:3c:4c:ae:
ed:0a:18:32:6f:13:41:62:8b:47:fc:0a:56:5f:ab:05:03:3f:
b0:b8:62:8e:6e:cb:f2:71:67:fa:16:a5:0a:e9:d4:6c:ca:28:
55:66:c9:d0:47:3a:f3:85:8f:29:3b:17:25:24:89:a4:d0:b3:
70:89:0c:cf:d2:f9:0b:c7:2c:d7:75:7f:69:83:bb:bb:3a:53:
05:0e:0d:34:5b:56:e7:01:36:37:a3:fb:69:61:38:a6:fd:8b:
7c:fe:1d:6c:7b:81:78:1a:a4:ef:9e:08:f0:8e:44:b8:26:fa:
2e:99:94:aa:25:22:4c:ca:67:3f:cc:4b:ca:1a:8c:86:84:46:
6a:01:98:b6:4c:bb:31:db:31:94:c5:0d:b6:4d:c9:fe:28:2f:
e6:73:d7:df:a4:bb:1f:8d:44:01:af:63:e7:c7:11:da:78:4b:
c1:d1:05:f7:62:0c:69:17:3a:a0:be:cd:1c:5e:f3:f1:03:6f:
8e:ae:8f:c4:70:ca:94:31:42:b6:5d:c3:7f:f0:4d:98:d0:58:
26:91:ee:8e:18:f1:99:98:f1:c3:72:fb:9e:bc:c7:0f:11:4d:
63:04:76:58:dc:ac:3c:b9:2c:4b:bc:e7:31:28:31:be:7a:ca:
1a:6d:21:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:29:59 2025 by rpki-client