Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.mft
File: MK_3UgloSjVGaQYdI9op-OovHV4.mft (raw, json)
Hash identifier: KCGGHKPRS7hHAtPnCghr9xBH9Me9IIc22TovfzMIqiI=
Subject key identifier: 19:6C:8F:B5:42:77:BF:C0:EB:8C:0F:DA:57:29:64:A0:46:41:43:D2
Authority key identifier: 30:AF:F7:52:09:68:4A:35:46:69:06:1D:23:DA:29:F8:EA:2F:1D:5E
Certificate issuer: /CN=30aff75209684a354669061d23da29f8ea2f1d5e
Certificate serial: 019779428B260D9E01DFF0A7DBE16FCAFBF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MK_3UgloSjVGaQYdI9op-OovHV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.mft
Manifest number: 1595
Signing time: Mon 16 Jun 2025 15:01:33 +0000
Manifest this update: Mon 16 Jun 2025 15:01:33 +0000
Manifest next update: Tue 17 Jun 2025 15:01:33 +0000
Files and hashes: 1: C-bdkM4lL8tTpeZXpiv45nhPUuM.roa (hash: dO9wg4oa3fmXkWxOi24v6xA9xh5CDmqHbzYIcdtWFXo=)
2: IbRWuE5EQO-8LgU2mAsS5QizVAY.roa (hash: s+vcUKeYVky97TEOonv9opKh34KAYu2tRcLDRkyQ5gI=)
3: MK_3UgloSjVGaQYdI9op-OovHV4.crl (hash: JsPfGOfZQ+AvIiviOZqKbMaKJ79YLEGayZ7vuzC4Avw=)
4: jBuJavuseI2B0_WgKkHYJZFvr_Q.roa (hash: tLuargg/vipoJVRdIR5x9HBU5Ji9GHfTNJavehQ1uxE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/MK_3UgloSjVGaQYdI9op-OovHV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 14:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:79:42:8b:26:0d:9e:01:df:f0:a7:db:e1:6f:ca:fb:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30aff75209684a354669061d23da29f8ea2f1d5e
Validity
Not Before: Jun 16 15:01:33 2025 GMT
Not After : Jun 17 15:01:33 2025 GMT
Subject: CN=196c8fb54277bfc0eb8c0fda572964a0464143d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:f4:3f:43:e4:2d:a5:50:e6:20:2f:9e:f9:99:
b6:70:3a:02:15:4f:e8:a8:d0:6c:a7:d6:b4:bc:0d:
58:07:01:a6:28:d1:28:13:6b:dc:d4:5d:6f:15:81:
d3:b7:61:2c:c2:c9:ab:69:e5:ed:cc:f9:ce:08:42:
04:c7:5b:e5:2e:9b:ea:e4:44:7c:19:5d:cb:49:ec:
78:e5:33:1b:ee:30:98:df:2f:53:12:28:24:aa:df:
36:9a:40:b1:ce:b2:92:0a:68:cd:61:10:49:c6:d2:
35:65:17:9c:4a:77:2d:8b:55:1f:b8:90:fc:a4:92:
0a:70:1c:33:62:33:c4:c7:8e:ed:d1:ee:3e:bb:d7:
9b:14:90:87:ab:d0:b7:df:d5:ad:8f:e5:fe:a6:d1:
b5:09:4b:7d:2f:28:c3:7f:e0:4e:28:86:c6:db:1d:
f8:32:1c:48:d7:62:e4:fb:27:61:14:28:ea:44:cd:
7c:08:47:50:7e:31:40:c1:50:47:49:39:be:8d:52:
1a:9c:e5:de:c5:80:7e:c3:69:b6:e8:f3:bc:9f:5b:
c4:da:c0:ff:e3:0d:f0:1f:c5:48:88:40:c1:03:4a:
3a:4d:e8:0f:24:ef:6c:96:c1:60:4c:df:72:65:22:
16:9a:23:ce:20:d6:d5:19:d0:b1:83:9a:56:11:ad:
ee:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:6C:8F:B5:42:77:BF:C0:EB:8C:0F:DA:57:29:64:A0:46:41:43:D2
X509v3 Authority Key Identifier:
keyid:30:AF:F7:52:09:68:4A:35:46:69:06:1D:23:DA:29:F8:EA:2F:1D:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MK_3UgloSjVGaQYdI9op-OovHV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:a8:7a:ad:8f:91:29:33:97:8d:cf:85:87:2d:8d:1d:45:ae:
de:43:d7:53:62:3d:69:ee:18:f4:97:93:53:d7:4f:5f:9f:d3:
48:1a:25:0b:31:c0:34:35:6c:9d:50:0a:03:f0:67:26:54:05:
f9:4d:98:db:d9:af:31:93:93:86:7c:df:a4:f0:96:e0:4a:91:
ba:84:fc:2c:d1:37:18:dc:81:7c:35:90:e1:fd:42:4f:a8:6c:
38:b7:e3:bc:fe:46:00:05:c7:c7:38:1b:e2:cf:1a:9a:c4:57:
39:42:f0:43:ae:13:66:66:52:dc:d9:54:8f:dc:fc:db:5b:aa:
65:a1:d6:dc:f2:c4:cf:7b:40:40:0c:0c:03:b5:2f:a6:12:db:
46:a3:df:ef:d7:75:7e:5c:de:0d:0c:6c:c8:ed:4c:8e:8e:40:
48:92:86:21:58:5e:19:eb:1e:66:81:5e:48:91:85:47:32:30:
d6:c9:8b:80:a9:fa:c3:ce:df:5d:67:79:63:f3:32:41:3c:a0:
25:0d:48:30:97:7d:86:ed:9c:f6:70:66:3b:d2:b7:75:f1:d9:
0a:12:70:cf:c8:20:0f:cc:31:e7:62:97:e0:52:fc:89:c0:a4:
74:67:c8:ba:9e:0b:40:6e:79:72:bd:b8:ef:2e:04:85:66:48:
66:b1:77:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 23:41:12 2025 by rpki-client