Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/850024-84ee-44c8-b2d9-7d20eb063455/1/MKVWMuyQNMm5o_KQquzZoHwfJqs.mft
File: MKVWMuyQNMm5o_KQquzZoHwfJqs.mft (raw, json)
Hash identifier: vbY41dH+fGgA4EIrauOBNUTn3njYMm/w1YAJrVmVQe0=
Subject key identifier: 64:2B:00:2D:36:52:DA:D1:24:7B:B7:E2:D6:20:8D:3A:AF:5A:C4:D1
Authority key identifier: 30:A5:56:32:EC:90:34:C9:B9:A3:F2:90:AA:EC:D9:A0:7C:1F:26:AB
Certificate issuer: /CN=30a55632ec9034c9b9a3f290aaecd9a07c1f26ab
Certificate serial: 0198A04D0284E0F156F6AAC23D4A56994CAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MKVWMuyQNMm5o_KQquzZoHwfJqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/850024-84ee-44c8-b2d9-7d20eb063455/1/MKVWMuyQNMm5o_KQquzZoHwfJqs.mft
Manifest number: 0A01
Signing time: Tue 12 Aug 2025 22:00:58 +0000
Manifest this update: Tue 12 Aug 2025 22:00:58 +0000
Manifest next update: Wed 13 Aug 2025 22:00:58 +0000
Files and hashes: 1: MKVWMuyQNMm5o_KQquzZoHwfJqs.crl (hash: FrSUHHJpyr7ZQDxtdFH/Ag7AvN1JyKpAK+uCMgQMSP0=)
2: mjst7aUax91GFptXcthnYyUXm5M.roa (hash: yt+uoK2SV82Kw1H7pGPHZ6f9URufEVmNUwV6zXvjHTc=)
3: yVy6K3-_uaSKa1-_oqUp0tf_Xgk.roa (hash: 7YTmf2c9OYfpZTmIIrXdtXUx4tpHodV4viOENQQMD4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/850024-84ee-44c8-b2d9-7d20eb063455/1/MKVWMuyQNMm5o_KQquzZoHwfJqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/850024-84ee-44c8-b2d9-7d20eb063455/1/MKVWMuyQNMm5o_KQquzZoHwfJqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/MKVWMuyQNMm5o_KQquzZoHwfJqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:4d:02:84:e0:f1:56:f6:aa:c2:3d:4a:56:99:4c:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30a55632ec9034c9b9a3f290aaecd9a07c1f26ab
Validity
Not Before: Aug 12 22:00:58 2025 GMT
Not After : Aug 13 22:00:58 2025 GMT
Subject: CN=642b002d3652dad1247bb7e2d6208d3aaf5ac4d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ee:95:3f:dd:36:b3:88:c6:cf:df:d8:17:9e:
9e:73:e3:11:c3:ad:20:5d:fe:68:ff:8e:ee:88:e0:
7d:cc:be:44:33:5d:28:33:04:5c:aa:bb:1d:80:27:
de:46:1c:7f:57:70:b7:54:b3:b9:fa:17:63:c9:6d:
1e:a3:8a:d2:39:df:cb:57:6c:37:b9:1e:01:4a:a1:
e3:69:62:72:a7:ff:7f:02:2f:a2:c6:f1:53:f2:c1:
3c:53:c4:0c:58:7a:00:87:e5:db:0d:1d:b0:07:6b:
15:67:77:e8:5e:d7:6a:8d:aa:fe:7f:58:76:49:84:
84:1d:fa:45:6a:fd:a5:fc:d7:82:61:41:c1:81:53:
3b:16:10:6e:84:08:5a:4d:48:9b:93:a3:39:dd:ce:
ab:a2:f1:70:d2:81:a4:ca:d5:92:cb:a9:6a:03:e7:
ba:4c:33:e3:c4:af:f8:00:92:66:75:12:b7:ed:45:
b1:e0:94:2a:af:e4:b5:17:6c:4f:3f:44:81:c0:8d:
db:4b:c1:f3:e5:ba:fb:e0:01:b1:c8:bf:19:f1:44:
79:b5:d1:fb:bf:98:9b:d9:18:1f:9c:e9:00:5d:46:
b7:ff:43:49:75:3e:f5:df:d1:82:ea:32:4e:f7:93:
1b:0b:cb:b3:30:48:4b:a2:90:1b:b9:07:08:31:0a:
76:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:2B:00:2D:36:52:DA:D1:24:7B:B7:E2:D6:20:8D:3A:AF:5A:C4:D1
X509v3 Authority Key Identifier:
keyid:30:A5:56:32:EC:90:34:C9:B9:A3:F2:90:AA:EC:D9:A0:7C:1F:26:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MKVWMuyQNMm5o_KQquzZoHwfJqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/850024-84ee-44c8-b2d9-7d20eb063455/1/MKVWMuyQNMm5o_KQquzZoHwfJqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/850024-84ee-44c8-b2d9-7d20eb063455/1/MKVWMuyQNMm5o_KQquzZoHwfJqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:23:8c:33:9d:cf:a6:89:2b:97:1a:35:b8:1d:17:cf:c4:f3:
97:7d:37:53:67:9a:07:e3:cf:dc:cd:f2:94:6b:2c:1f:40:17:
63:9b:d4:14:a8:21:a6:84:a5:3e:88:c7:bd:b5:cb:d7:fa:99:
93:4f:5d:2b:6d:44:48:0a:b8:71:eb:a6:e0:4c:b0:85:8b:3a:
9c:df:db:c8:58:e3:ca:1c:a1:99:ac:75:21:91:dd:b8:af:99:
b2:7c:cc:d6:de:69:63:1d:b7:97:7d:c0:42:a2:75:34:47:a6:
3b:26:6c:f4:41:7b:d9:9c:1d:6a:6f:e8:33:f8:8d:9e:69:67:
28:c7:27:a2:fe:37:5c:d9:5a:1d:cc:83:fa:ea:5c:fc:92:08:
7a:58:fb:d4:6c:f1:3a:52:eb:83:25:d2:61:34:4f:b6:65:1a:
d4:f2:56:f4:7e:b8:4d:60:4b:cc:a0:80:ea:39:b8:24:e3:2c:
1c:7b:e9:3d:22:a5:6a:89:64:f1:d6:62:eb:ea:7f:5f:86:f4:
4c:eb:65:c4:d1:55:ff:44:e4:43:d6:70:bd:ed:b5:60:e8:97:
80:ea:31:f8:9f:29:52:1d:b4:41:25:ef:5b:e3:ad:bc:79:99:
ea:6b:0d:30:d1:7f:39:91:98:e6:34:13:b3:6b:b7:d8:42:e0:
ab:4a:ca:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 00:25:33 2025 by rpki-client