Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/mKUzMIdAu70he_adzpCz9UEghFc.mft
File: mKUzMIdAu70he_adzpCz9UEghFc.mft (raw, json)
Hash identifier: uKTBCMmHLixbFzPHssOPtvoSEWk1Q+YcVh2GMuIIz94=
Subject key identifier: 08:91:D7:C8:58:4E:35:8E:5D:F9:4A:C9:4D:51:E6:A6:6A:0E:F7:B3
Authority key identifier: 98:A5:33:30:87:40:BB:BD:21:7B:F6:9D:CE:90:B3:F5:41:20:84:57
Certificate issuer: /CN=98a533308740bbbd217bf69dce90b3f541208457
Certificate serial: 019784D84BB276BAADC51930FFC74A8046FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mKUzMIdAu70he_adzpCz9UEghFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/mKUzMIdAu70he_adzpCz9UEghFc.mft
Manifest number: 159E
Signing time: Wed 18 Jun 2025 21:00:57 +0000
Manifest this update: Wed 18 Jun 2025 21:00:57 +0000
Manifest next update: Thu 19 Jun 2025 21:00:57 +0000
Files and hashes: 1: 4hnUUt9Ys_eQWvU2fA6JemX65dw.roa (hash: ntUnKbzWvKshnrPe1olGFJu/nCj9Xb/2m4Wf2hJLEss=)
2: mKUzMIdAu70he_adzpCz9UEghFc.crl (hash: joxK0vq+qCzTGrYHy1l3IN6KnkxqzV4tVfeGrwob/zo=)
3: sfQ3GEtYzhBBWxqpfOQ0GcKpsbY.roa (hash: wrk4xF0OxGaC9MkY6FPvwbKzU+JxYtuzUOz5b0tcuxA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/mKUzMIdAu70he_adzpCz9UEghFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/mKUzMIdAu70he_adzpCz9UEghFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/mKUzMIdAu70he_adzpCz9UEghFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:84:d8:4b:b2:76:ba:ad:c5:19:30:ff:c7:4a:80:46:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98a533308740bbbd217bf69dce90b3f541208457
Validity
Not Before: Jun 18 21:00:57 2025 GMT
Not After : Jun 19 21:00:57 2025 GMT
Subject: CN=0891d7c8584e358e5df94ac94d51e6a66a0ef7b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:4c:07:73:5b:16:09:75:ed:16:17:29:8e:68:
2a:26:f5:74:0c:a2:8e:87:2c:0d:68:4c:e0:c9:ba:
2b:fe:0e:71:2e:7d:a5:ca:69:9e:f3:6b:6c:9d:7c:
8e:ec:f7:21:de:1b:7c:47:69:09:43:6e:3a:8b:87:
f3:3f:b1:e8:b2:f1:fa:ef:5a:35:95:ef:0c:9d:e0:
22:0e:6a:d0:a9:3a:3e:88:fa:91:91:1b:b2:4e:22:
7c:58:d4:20:c9:25:a6:b5:c8:de:ab:16:35:dc:5a:
bb:6e:38:53:56:b5:a8:b6:4d:e9:6d:cf:45:91:1f:
3e:5c:95:54:b2:21:bd:23:88:f0:82:2a:62:1d:83:
c0:ff:a5:1c:3e:1f:09:61:9a:a3:64:19:71:1b:fb:
1f:93:23:70:c5:fd:0f:f0:ff:d9:c2:e6:be:1d:3f:
05:9d:61:9c:fd:10:83:84:85:5b:ad:8e:cb:98:4b:
40:d3:6b:7b:62:33:eb:39:20:bd:e3:d2:aa:64:ec:
8c:18:18:1e:fa:28:d1:2b:f1:26:91:d1:12:60:d7:
b0:92:0c:65:82:08:6c:f2:2a:6b:98:56:5e:4f:d7:
a5:a6:c4:86:98:af:29:e5:0c:25:01:3b:e3:25:87:
9a:5d:62:b1:9a:3b:14:ed:ee:ab:75:f9:06:bc:60:
1d:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:91:D7:C8:58:4E:35:8E:5D:F9:4A:C9:4D:51:E6:A6:6A:0E:F7:B3
X509v3 Authority Key Identifier:
keyid:98:A5:33:30:87:40:BB:BD:21:7B:F6:9D:CE:90:B3:F5:41:20:84:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mKUzMIdAu70he_adzpCz9UEghFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/mKUzMIdAu70he_adzpCz9UEghFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/mKUzMIdAu70he_adzpCz9UEghFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:3b:7b:a3:cf:fd:bc:23:9e:7f:61:c4:96:f7:dd:e2:e9:05:
39:24:5e:46:55:4a:25:1f:e5:b4:2d:a9:47:63:e2:e4:e0:5a:
b0:b6:57:2b:0e:4c:2e:8d:93:48:f2:29:99:57:67:b4:64:71:
91:03:35:da:ca:2d:d0:9e:9a:59:38:1c:9a:2d:be:ac:f9:f6:
ef:1b:c0:3f:e9:fa:50:0d:82:0a:3a:5b:02:09:ea:43:bf:70:
5e:25:c5:0f:ad:ab:38:07:1c:5e:e8:98:6c:48:02:7b:01:5a:
70:62:b6:01:3f:d9:26:df:41:a8:2d:8a:b3:6e:f8:1e:99:c8:
71:f5:73:c3:26:61:c7:c6:32:76:9a:35:ec:ed:7a:17:2f:c4:
92:af:5f:95:6e:2b:53:69:4d:d0:98:e6:2d:70:24:78:19:51:
90:8f:ee:af:12:f7:9c:38:a0:07:6e:91:5f:ba:a0:e0:c0:cf:
df:0c:37:bb:57:17:43:2a:e5:53:4a:2a:05:59:2b:29:cf:27:
0b:06:3c:ff:0b:bc:9a:fa:86:91:1f:02:61:53:db:4c:2b:39:
9b:74:8f:4c:aa:a0:5a:7c:36:a7:fe:a1:a2:a9:02:11:fd:0b:
aa:68:39:2e:7b:72:94:81:b3:ca:a4:9a:8c:1e:21:1b:69:15:
32:72:37:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 00:50:58 2025 by rpki-client