Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.mft
File: MKJ1gGSamS5B4yz4wSJF4H_5-cU.mft (raw, json)
Hash identifier: Jes05Vgh03/bCoLPL01S859NYRHigvbc//C53Xprn54=
Subject key identifier: 68:58:32:DB:EE:31:77:0C:9F:36:28:8A:01:91:5A:15:7E:59:94:65
Authority key identifier: 30:A2:75:80:64:9A:99:2E:41:E3:2C:F8:C1:22:45:E0:7F:F9:F9:C5
Certificate issuer: /CN=30a27580649a992e41e32cf8c12245e07ff9f9c5
Certificate serial: 019768BC6141419FB9E961F31B99085D6D99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MKJ1gGSamS5B4yz4wSJF4H_5-cU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.mft
Manifest number: 0C72
Signing time: Fri 13 Jun 2025 10:01:05 +0000
Manifest this update: Fri 13 Jun 2025 10:01:05 +0000
Manifest next update: Sat 14 Jun 2025 10:01:05 +0000
Files and hashes: 1: MKJ1gGSamS5B4yz4wSJF4H_5-cU.crl (hash: AbOP5IVy5kmdU33L+wihjMz6sbXhQwp/fcTCorL5lJg=)
2: WZEbVkL7G2Qj36QisnZkv8BFkNA.roa (hash: f7XKUwdOUxo0bFV2++z3NCiuNhXfpczYvfcpVS/l/Jk=)
3: yCz-ewAMqZx7lCDPn4Ya6LAQnZ4.roa (hash: biH7dwZg2HQ2zwVaqcwP5LR/5HOneIgO7AJ9Gj1riJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.mft
rsync://rpki.ripe.net/repository/DEFAULT/MKJ1gGSamS5B4yz4wSJF4H_5-cU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 10:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:bc:61:41:41:9f:b9:e9:61:f3:1b:99:08:5d:6d:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30a27580649a992e41e32cf8c12245e07ff9f9c5
Validity
Not Before: Jun 13 10:01:05 2025 GMT
Not After : Jun 14 10:01:05 2025 GMT
Subject: CN=685832dbee31770c9f36288a01915a157e599465
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:51:ba:0e:a2:ba:2a:79:4c:c1:63:e8:0b:f2:
b3:14:52:f3:21:74:d3:53:4d:37:6d:8b:f9:b3:05:
b3:ba:ff:bf:74:57:03:fb:df:76:fc:08:4a:60:6f:
31:b3:1d:78:cf:5f:c7:26:4d:b5:11:04:dd:95:c0:
62:f9:fd:81:ba:b2:c4:4e:1b:10:85:88:be:a3:6e:
64:dd:9d:85:07:17:f2:f7:6d:4f:47:8e:f9:6e:e4:
3b:57:e1:da:3b:a6:d6:d2:a7:f6:90:78:9d:78:b1:
62:5a:7e:09:18:b8:7c:eb:6b:c3:43:dc:a4:2d:a5:
59:f3:f9:f9:5d:e2:29:e8:8c:14:d3:df:f5:c1:23:
af:ab:b2:6a:76:5e:13:44:90:4a:4f:d4:7e:95:7e:
0e:76:b4:b3:87:26:79:f0:ea:2b:54:62:0e:f3:7a:
a7:d8:cf:b0:cb:c6:ef:e5:dd:3e:f1:31:74:bc:10:
5c:dc:dd:f6:bd:07:ba:c3:73:e3:be:db:bf:79:68:
6c:ad:71:af:37:fd:44:ac:36:55:c7:03:01:ab:87:
4b:66:32:be:91:ad:01:7c:75:75:c3:14:19:b9:49:
f5:43:c8:4b:ed:62:d5:39:40:19:a0:d5:66:53:ad:
7f:8f:41:00:8d:01:bf:b5:26:19:45:05:19:d3:ad:
95:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:58:32:DB:EE:31:77:0C:9F:36:28:8A:01:91:5A:15:7E:59:94:65
X509v3 Authority Key Identifier:
keyid:30:A2:75:80:64:9A:99:2E:41:E3:2C:F8:C1:22:45:E0:7F:F9:F9:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MKJ1gGSamS5B4yz4wSJF4H_5-cU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:60:b7:92:0c:43:8b:5c:45:7d:3e:c8:1f:ab:4b:c3:ba:ad:
3a:a1:e5:7b:a0:67:95:a1:c4:38:b8:8e:5f:1d:89:b7:1f:d7:
ca:1d:11:0b:8b:85:22:ad:73:d3:de:57:70:54:d1:21:71:9f:
e8:d8:18:9c:3b:7c:d4:a9:bf:10:a4:03:53:93:8e:a7:78:93:
a5:2e:58:f4:65:ac:86:b0:45:57:4f:36:5d:7c:ca:a6:32:3a:
4e:e7:de:cd:ae:fb:a8:d3:2d:4f:48:fa:f5:cf:76:cc:e0:fa:
ec:6b:ec:ab:4e:cd:0b:c3:1a:2e:ab:45:c4:bf:53:39:39:01:
b9:97:0a:b7:ee:8e:4c:b8:79:22:47:31:13:9c:0b:a9:22:a5:
1e:79:2c:1a:af:7a:fc:d4:42:59:4c:02:88:2f:d3:9f:40:3b:
96:35:14:b0:9e:1f:8b:e2:6e:ee:f0:74:c1:aa:05:86:21:18:
d6:3c:c2:71:e3:fc:fa:54:c1:73:49:32:e5:84:fa:4d:1b:2d:
73:35:67:21:89:69:23:87:10:e8:93:5d:44:83:51:a8:06:2b:
38:c9:a1:cf:90:7b:37:65:14:fb:36:0e:66:b0:74:43:ed:2a:
75:f2:19:9e:3e:89:c5:04:fc:5e:03:01:f9:f2:06:03:9d:cd:
f4:83:6a:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:30:19 2025 by rpki-client