Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.mft
File: MK_3UgloSjVGaQYdI9op-OovHV4.mft (raw, json)
Hash identifier: 65ghfZfBS//ey/TeheFzJMU1cZ7hR9x0kZbUR/FiEJk=
Subject key identifier: B5:0A:72:66:AE:EE:9F:35:53:53:1D:1A:C7:66:0C:0A:A3:52:E1:61
Authority key identifier: 30:AF:F7:52:09:68:4A:35:46:69:06:1D:23:DA:29:F8:EA:2F:1D:5E
Certificate issuer: /CN=30aff75209684a354669061d23da29f8ea2f1d5e
Certificate serial: 019A4D73DC760A6EB50A29A715E254E64742
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MK_3UgloSjVGaQYdI9op-OovHV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 06:00:29 +0000
Manifest this update: Tue 04 Nov 2025 06:00:29 +0000
Manifest next update: Wed 05 Nov 2025 06:00:29 +0000
Files and hashes: 1: C-bdkM4lL8tTpeZXpiv45nhPUuM.roa (hash: dO9wg4oa3fmXkWxOi24v6xA9xh5CDmqHbzYIcdtWFXo=)
2: IbRWuE5EQO-8LgU2mAsS5QizVAY.roa (hash: s+vcUKeYVky97TEOonv9opKh34KAYu2tRcLDRkyQ5gI=)
3: MK_3UgloSjVGaQYdI9op-OovHV4.crl (hash: 1ZcpIyokRpByFzE282x5RYC07bGapESWtf/uiuAybgk=)
4: jBuJavuseI2B0_WgKkHYJZFvr_Q.roa (hash: tLuargg/vipoJVRdIR5x9HBU5Ji9GHfTNJavehQ1uxE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/MK_3UgloSjVGaQYdI9op-OovHV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:dc:76:0a:6e:b5:0a:29:a7:15:e2:54:e6:47:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30aff75209684a354669061d23da29f8ea2f1d5e
Validity
Not Before: Nov 4 06:00:29 2025 GMT
Not After : Nov 5 06:00:29 2025 GMT
Subject: CN=b50a7266aeee9f3553531d1ac7660c0aa352e161
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:73:11:ae:2e:ed:03:2d:74:36:33:1b:77:6b:
8a:d6:9f:ce:f8:13:b4:79:2e:4c:36:c9:e3:4b:fc:
a9:0d:a4:0e:f1:2a:d2:de:34:46:db:04:93:ea:97:
00:b2:50:5a:96:dc:45:ff:ca:af:1e:4b:49:29:22:
85:1d:6f:b2:a8:d5:4c:f1:ee:60:af:35:15:50:c9:
e7:94:d1:29:5d:78:c3:6f:26:9f:33:79:22:88:8b:
5a:fe:d6:08:58:c7:ca:d7:65:c7:df:05:76:26:22:
4f:6c:05:ac:b6:3b:7d:d4:59:96:5a:8a:53:7d:ea:
be:99:06:d3:d0:d1:fb:0c:25:ab:9a:00:13:1f:da:
20:63:48:1d:b3:48:bc:09:d5:5e:c1:aa:4b:43:c8:
50:c4:5a:b9:03:d5:97:9f:98:4f:7e:2d:4e:d5:cc:
c7:c8:19:08:39:f9:4e:0d:e1:d1:e5:e2:a0:14:a8:
e7:5d:38:81:45:4e:50:bf:fa:6b:a4:a9:b5:08:1c:
bc:3a:80:e1:b0:cc:50:75:4e:30:a7:10:4e:2a:7d:
7a:29:4e:d5:77:2b:a7:45:c9:d4:a0:c4:6b:c5:53:
1a:74:7d:ff:2a:ab:56:5a:0c:38:da:58:f1:a0:68:
19:e9:d3:1b:5c:ce:5c:74:b0:bf:e5:b2:8e:d0:62:
ae:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:0A:72:66:AE:EE:9F:35:53:53:1D:1A:C7:66:0C:0A:A3:52:E1:61
X509v3 Authority Key Identifier:
keyid:30:AF:F7:52:09:68:4A:35:46:69:06:1D:23:DA:29:F8:EA:2F:1D:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MK_3UgloSjVGaQYdI9op-OovHV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:a1:97:ec:37:42:4b:76:57:96:aa:12:f5:b1:b0:15:8e:c1:
a4:df:1b:12:6e:6a:19:8c:9b:31:f0:1c:ca:74:35:9c:2e:a8:
31:40:c4:1b:24:8f:55:93:54:90:94:bb:94:d1:ae:ac:e4:34:
64:a5:fb:39:bb:d5:2a:76:5f:de:5f:d0:78:57:c5:dc:c9:e3:
c0:37:89:30:40:e3:59:a0:50:d9:c8:fe:bc:f7:02:d0:40:c4:
1e:0e:d4:54:6f:d8:09:b8:4c:d4:c9:15:6a:e5:47:65:ea:b3:
d7:c1:10:20:33:44:d7:da:64:cd:37:a5:83:ae:ed:35:76:6f:
70:f2:26:46:bc:29:5a:84:3e:92:fe:4d:34:8e:20:13:9f:68:
24:ca:0c:eb:be:0b:e7:5e:21:9c:bf:e0:81:6c:8b:13:f8:7c:
ca:0f:c0:73:6a:8d:8d:0c:c6:35:dd:d1:38:16:b3:41:91:76:
3c:46:47:3a:54:99:30:bb:6a:1a:90:e4:06:24:d0:26:7f:a6:
d7:f8:b9:2c:a7:8f:76:ed:a4:2b:04:e0:5b:43:27:2d:d7:0e:
93:32:f9:89:eb:1c:6b:21:3b:cd:57:a6:bf:58:5a:cb:a4:cf:
f7:c6:99:64:07:32:d9:52:ed:20:a4:7b:60:80:2f:b4:ba:37:
a4:e3:1f:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:48:17 2025 by rpki-client