Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/5b0494-5ad6-4ea4-95fa-a83d9d920d31/1/mk-ppgpaJP_mFLbftYgT2SWjsxg.mft
File: mk-ppgpaJP_mFLbftYgT2SWjsxg.mft (raw, json)
Hash identifier: QnCtqsiNnPW8p0W5VLgXKefZivM/zXI17OBaUmTV/dA=
Subject key identifier: 10:F6:92:0A:84:80:D0:C5:DC:3F:40:D6:D7:D8:2A:54:A2:43:E6:57
Authority key identifier: 9A:4F:A9:A6:0A:5A:24:FF:E6:14:B6:DF:B5:88:13:D9:25:A3:B3:18
Certificate issuer: /CN=9a4fa9a60a5a24ffe614b6dfb58813d925a3b318
Certificate serial: 01976B862B6459FEB3187E7955AB3BDCD354
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mk-ppgpaJP_mFLbftYgT2SWjsxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/5b0494-5ad6-4ea4-95fa-a83d9d920d31/1/mk-ppgpaJP_mFLbftYgT2SWjsxg.mft
Manifest number: 0CA3
Signing time: Fri 13 Jun 2025 23:00:44 +0000
Manifest this update: Fri 13 Jun 2025 23:00:44 +0000
Manifest next update: Sat 14 Jun 2025 23:00:44 +0000
Files and hashes: 1: WF_UUzJyBXVRYaWBRz9A5RqP7uM.roa (hash: fXJDB7viVboUYMb0Tq5yYms1zX+sjGa50QbTOcD6d1o=)
2: mk-ppgpaJP_mFLbftYgT2SWjsxg.crl (hash: vs8nq99QRUu4P7Q+0gTItbh3NAHsVpEmJdsOH5Is5pU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/5b0494-5ad6-4ea4-95fa-a83d9d920d31/1/mk-ppgpaJP_mFLbftYgT2SWjsxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/5b0494-5ad6-4ea4-95fa-a83d9d920d31/1/mk-ppgpaJP_mFLbftYgT2SWjsxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/mk-ppgpaJP_mFLbftYgT2SWjsxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 23:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:86:2b:64:59:fe:b3:18:7e:79:55:ab:3b:dc:d3:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a4fa9a60a5a24ffe614b6dfb58813d925a3b318
Validity
Not Before: Jun 13 23:00:44 2025 GMT
Not After : Jun 14 23:00:44 2025 GMT
Subject: CN=10f6920a8480d0c5dc3f40d6d7d82a54a243e657
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ff:b1:b8:72:5a:b9:96:77:80:8e:ee:b9:9d:
a9:4b:b7:44:a7:50:ee:c2:9c:56:2e:f1:e4:2c:87:
5e:d8:2c:ec:6f:2e:19:aa:b6:e0:75:46:00:de:25:
21:f0:e7:90:70:9d:f0:bc:d7:47:f9:b0:48:08:ae:
fa:2a:dc:9d:2b:00:a7:be:12:f2:6c:c6:64:3b:c9:
c1:43:75:a2:fa:65:79:ed:ad:ef:58:a3:d4:e8:9f:
70:b9:09:61:38:03:2b:7d:14:e3:79:fb:5e:4a:36:
3a:be:70:49:8b:2a:be:25:ee:2b:b2:61:99:60:95:
44:fa:2b:ea:9c:14:7f:51:bf:d1:b0:06:fd:4d:d0:
0a:f3:78:9c:72:40:22:79:05:7d:97:cc:ee:c1:68:
69:5b:0e:ca:3a:9b:5f:c7:1c:6d:dd:85:3a:b6:02:
d5:7a:2f:37:f4:3f:79:1c:7f:5c:69:64:d7:33:55:
dc:76:35:e2:c5:58:fa:22:e3:51:42:24:cf:ef:e0:
53:f3:3a:03:16:f6:35:17:18:33:4a:06:19:c2:fa:
1d:32:65:90:83:fc:4e:f0:7a:13:83:02:41:60:9a:
4c:88:28:a7:f8:a9:d4:61:b0:af:b4:cd:7d:b9:7d:
28:1f:ec:49:bd:5b:0e:7b:08:af:d6:82:48:77:f4:
45:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:F6:92:0A:84:80:D0:C5:DC:3F:40:D6:D7:D8:2A:54:A2:43:E6:57
X509v3 Authority Key Identifier:
keyid:9A:4F:A9:A6:0A:5A:24:FF:E6:14:B6:DF:B5:88:13:D9:25:A3:B3:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mk-ppgpaJP_mFLbftYgT2SWjsxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5b0494-5ad6-4ea4-95fa-a83d9d920d31/1/mk-ppgpaJP_mFLbftYgT2SWjsxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5b0494-5ad6-4ea4-95fa-a83d9d920d31/1/mk-ppgpaJP_mFLbftYgT2SWjsxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:32:a1:3f:f5:cd:9f:c0:ac:f1:2c:f5:c4:b6:ba:51:ac:4b:
f0:b1:6c:7e:f1:64:e2:81:95:6a:df:dc:e9:39:0e:c7:d0:fe:
2e:ff:a9:75:6c:73:d3:41:a9:f0:18:c4:44:14:e5:ce:11:33:
d3:86:b8:62:09:d4:a4:c6:ce:1e:ed:74:4a:33:71:25:b9:2f:
68:15:d4:01:b2:21:59:52:b9:e7:c8:8b:5e:a5:a7:04:11:ac:
0c:b8:71:86:71:a7:fa:32:3c:2e:5d:a9:b4:ba:a0:e3:e1:60:
56:7e:61:cb:09:77:ea:4c:57:aa:04:08:2b:4f:b5:72:d7:39:
10:f2:df:31:02:86:d6:c3:4d:cf:d0:9e:4a:2d:04:7b:ad:42:
15:eb:23:35:af:9f:d4:be:d2:0a:c8:49:97:ea:58:08:a3:e3:
b8:9e:43:c0:06:31:cb:5a:a6:33:6c:42:73:78:66:c8:19:13:
7e:4b:bb:1f:3e:61:e6:86:2f:5a:8d:25:7a:b2:88:58:d0:e9:
14:2a:52:6f:3e:c9:b7:4c:b7:86:51:ac:e3:7e:77:1f:81:da:
ce:10:fc:07:fc:8f:de:c0:00:c7:c3:bc:e7:9c:f1:df:82:68:
66:a9:73:77:4b:6a:38:6e:54:1f:f9:03:f2:2f:a8:0e:aa:65:
54:65:1d:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:36:41 2025 by rpki-client