Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.mft
File: MK_3UgloSjVGaQYdI9op-OovHV4.mft (raw, json)
Hash identifier: rmgINwK4bGh+2RHMH7KCNVvjI4j8WwEw8lhwV64ot1M=
Subject key identifier: 72:87:0C:FF:0C:30:26:58:6C:73:FD:C6:61:EC:9C:CC:12:B8:1D:84
Authority key identifier: 30:AF:F7:52:09:68:4A:35:46:69:06:1D:23:DA:29:F8:EA:2F:1D:5E
Certificate issuer: /CN=30aff75209684a354669061d23da29f8ea2f1d5e
Certificate serial: 01987DF7CBD543FCEB05E36048433856EF4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MK_3UgloSjVGaQYdI9op-OovHV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.mft
Manifest number: 161C
Signing time: Wed 06 Aug 2025 06:00:48 +0000
Manifest this update: Wed 06 Aug 2025 06:00:48 +0000
Manifest next update: Thu 07 Aug 2025 06:00:48 +0000
Files and hashes: 1: C-bdkM4lL8tTpeZXpiv45nhPUuM.roa (hash: dO9wg4oa3fmXkWxOi24v6xA9xh5CDmqHbzYIcdtWFXo=)
2: IbRWuE5EQO-8LgU2mAsS5QizVAY.roa (hash: s+vcUKeYVky97TEOonv9opKh34KAYu2tRcLDRkyQ5gI=)
3: MK_3UgloSjVGaQYdI9op-OovHV4.crl (hash: OEQSwHax2Jhu62ub0ZVSjeQh/m8dMatvweUsY0bhC+4=)
4: jBuJavuseI2B0_WgKkHYJZFvr_Q.roa (hash: tLuargg/vipoJVRdIR5x9HBU5Ji9GHfTNJavehQ1uxE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/MK_3UgloSjVGaQYdI9op-OovHV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 06:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:f7:cb:d5:43:fc:eb:05:e3:60:48:43:38:56:ef:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30aff75209684a354669061d23da29f8ea2f1d5e
Validity
Not Before: Aug 6 06:00:48 2025 GMT
Not After : Aug 7 06:00:48 2025 GMT
Subject: CN=72870cff0c3026586c73fdc661ec9ccc12b81d84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:6c:08:45:38:80:24:88:5b:96:f6:27:69:2a:
75:1b:74:db:f8:0a:3a:5b:8c:3c:14:45:6d:dc:28:
1d:42:f9:15:56:b0:b2:9a:17:db:24:59:e1:9d:12:
e5:6a:76:d6:88:c5:4c:e7:5e:6e:ca:a9:d5:34:0f:
8f:f9:88:d4:2b:74:61:c8:82:a9:4a:d4:5d:4c:81:
5a:90:6d:93:ec:15:c2:a2:b8:b7:7b:3a:14:bb:7b:
b1:2c:95:60:7e:72:5b:73:6f:52:c2:a0:0b:19:10:
5d:ef:e8:1a:b4:3a:33:0d:f0:d6:96:2f:de:b9:4d:
c6:09:a3:b1:e5:75:08:56:2d:11:b6:a0:4b:9a:19:
87:fa:3a:68:08:c8:90:80:89:9f:d9:d0:b8:89:ab:
2a:a1:9f:24:55:e5:35:78:6d:96:70:4b:88:9c:e0:
e9:8e:b0:9b:b9:34:d1:40:e8:c7:76:3f:33:ab:2c:
18:97:4b:a7:df:21:5a:cb:0a:f4:f1:c6:d2:e7:96:
c4:69:88:d2:c0:c5:b0:c1:d5:aa:ea:2c:f9:97:35:
43:07:92:49:b4:48:08:80:e9:02:a6:ca:c6:6e:ec:
0f:c2:ba:d1:c9:fc:47:44:fe:71:c7:d4:65:47:61:
80:5a:cf:64:f5:54:b2:c0:25:c3:8c:39:92:75:6b:
1a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:87:0C:FF:0C:30:26:58:6C:73:FD:C6:61:EC:9C:CC:12:B8:1D:84
X509v3 Authority Key Identifier:
keyid:30:AF:F7:52:09:68:4A:35:46:69:06:1D:23:DA:29:F8:EA:2F:1D:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MK_3UgloSjVGaQYdI9op-OovHV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:7f:eb:6a:05:19:b3:19:3b:d1:c5:5d:95:3c:8b:72:52:f6:
38:80:93:90:2d:75:68:16:39:99:d0:90:d4:8a:81:18:d7:c3:
5a:0a:8f:cf:2f:3b:70:b5:31:93:81:e9:97:a6:83:81:3c:4d:
bb:c1:2f:51:f6:01:48:e7:f9:cf:bf:9b:8e:fb:b3:7f:65:e1:
77:b8:44:b5:af:ec:31:85:ff:61:9f:0a:90:24:3d:7d:f8:2d:
c5:83:12:14:58:f6:cf:ab:c9:3f:19:75:1b:c5:7f:a9:87:43:
b7:a3:75:98:15:85:03:77:f6:85:5f:e4:3a:f9:48:06:5b:ba:
e8:40:dc:16:83:4f:f9:2b:e5:35:0a:a0:17:43:a3:0a:4d:07:
db:d5:7d:af:52:20:55:76:f6:78:8b:98:89:39:c5:e5:65:8b:
0c:1a:65:26:19:cd:fc:4f:d4:51:cf:ce:3c:8c:bf:36:93:a9:
43:0e:22:24:56:43:29:d2:14:ba:fd:20:f0:87:75:da:92:72:
9e:27:39:95:6b:ce:a4:39:1f:32:b1:de:82:6f:26:c2:e4:ca:
d5:7a:80:84:ca:25:c9:44:35:17:5b:76:87:ba:85:1c:0d:ef:
89:3e:c8:e7:e9:45:a0:fe:77:07:68:44:86:94:4c:52:f1:a0:
9b:21:03:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:15:43 2025 by rpki-client