Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/MKNPnR29IKqH-w9ivStsXjDGFKI.mft
File: MKNPnR29IKqH-w9ivStsXjDGFKI.mft (raw, json)
Hash identifier: +rWR0lJAOTZs7/XmuU471+2qLORG7kLE3Js0BEpaW4E=
Subject key identifier: 8E:39:ED:BA:DF:35:FD:9B:9D:90:9B:0F:97:4B:FE:E3:07:70:DC:02
Authority key identifier: 30:A3:4F:9D:1D:BD:20:AA:87:FB:0F:62:BD:2B:6C:5E:30:C6:14:A2
Certificate issuer: /CN=30a34f9d1dbd20aa87fb0f62bd2b6c5e30c614a2
Certificate serial: 01987CE4E59E1BFFCC7F16587877B7E160CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MKNPnR29IKqH-w9ivStsXjDGFKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/MKNPnR29IKqH-w9ivStsXjDGFKI.mft
Manifest number: 06CF
Signing time: Wed 06 Aug 2025 01:00:32 +0000
Manifest this update: Wed 06 Aug 2025 01:00:32 +0000
Manifest next update: Thu 07 Aug 2025 01:00:32 +0000
Files and hashes: 1: MKNPnR29IKqH-w9ivStsXjDGFKI.crl (hash: ISnowoUftjX7uPYeyUmw759g/TMSiDjrwTBAZ4DvODI=)
2: lblIM2FJQ_WVf-a4mFWu5Otgr-A.roa (hash: dTACe68AOYRTGOWM2bf2NFYllivUWP/q40LE4fNKxno=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/MKNPnR29IKqH-w9ivStsXjDGFKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/MKNPnR29IKqH-w9ivStsXjDGFKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MKNPnR29IKqH-w9ivStsXjDGFKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:e4:e5:9e:1b:ff:cc:7f:16:58:78:77:b7:e1:60:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30a34f9d1dbd20aa87fb0f62bd2b6c5e30c614a2
Validity
Not Before: Aug 6 01:00:32 2025 GMT
Not After : Aug 7 01:00:32 2025 GMT
Subject: CN=8e39edbadf35fd9b9d909b0f974bfee30770dc02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:63:7c:6d:41:28:54:af:81:57:64:85:96:99:
80:fc:a6:6e:6f:75:e3:9f:01:d2:f1:ec:b9:3a:a8:
e1:e1:34:5c:26:29:5e:ae:bb:6d:74:aa:09:2d:4e:
2d:19:d9:d8:49:f4:99:e3:53:e6:29:97:0e:94:24:
b8:a7:fb:a4:6e:6d:10:5f:a8:c2:c5:26:d4:39:35:
15:bf:8b:db:bd:98:d8:2a:cf:9f:92:fd:c3:4b:0c:
79:e5:6c:90:12:94:6b:fd:5d:f7:5c:a8:21:2f:87:
fa:20:9c:eb:4b:9e:72:0f:63:2b:2f:10:1b:3b:4c:
eb:cc:6f:15:86:46:d8:3e:ea:c7:fd:ef:fa:b8:45:
90:15:b7:e3:10:8b:fd:35:75:e5:28:14:49:42:c8:
0a:e1:4a:09:62:6c:7a:e2:f9:88:4c:29:31:d0:1d:
02:86:c9:a6:f1:87:49:fb:a1:01:37:fc:de:4c:02:
72:47:0e:73:32:d9:62:55:f4:3d:ac:a5:4f:55:b1:
cc:fe:24:cc:da:48:5c:34:86:d3:54:f5:1b:6c:92:
f0:92:f6:7d:8f:32:36:9f:18:22:de:a4:86:31:3e:
0e:71:f9:7c:27:8f:75:90:64:fc:47:8f:0e:b8:a8:
78:32:c0:30:1a:3c:f3:9d:61:10:bb:f4:8f:4b:04:
e5:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:39:ED:BA:DF:35:FD:9B:9D:90:9B:0F:97:4B:FE:E3:07:70:DC:02
X509v3 Authority Key Identifier:
keyid:30:A3:4F:9D:1D:BD:20:AA:87:FB:0F:62:BD:2B:6C:5E:30:C6:14:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MKNPnR29IKqH-w9ivStsXjDGFKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/MKNPnR29IKqH-w9ivStsXjDGFKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/MKNPnR29IKqH-w9ivStsXjDGFKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:e8:38:e2:4f:51:95:bb:a2:4c:fc:b1:cc:f9:69:80:96:64:
fd:1d:70:db:fe:77:27:03:64:dd:ac:1d:4f:8d:cd:d8:ed:96:
01:97:22:8e:cb:24:19:35:54:8d:89:30:4b:27:ae:9b:20:e9:
78:ac:e6:b0:22:52:0f:c8:9d:97:21:14:ab:51:3f:d8:f6:a6:
0e:58:aa:05:89:35:77:c6:bf:ab:92:15:b6:06:3d:e7:25:c2:
1a:2d:44:92:76:03:5d:16:03:67:78:60:dd:84:96:24:00:43:
46:08:f9:c4:5f:13:87:c1:b3:fd:0f:8e:b1:f6:35:ed:ac:18:
b5:76:b4:f8:3e:37:42:57:15:35:26:6c:f7:29:e8:fb:d1:fc:
7e:5c:f0:f2:92:a1:71:2b:84:3a:1b:f4:be:2d:ff:48:ce:20:
f9:88:26:a4:1c:ec:af:31:c5:d7:8d:4c:a4:c8:26:6d:16:b3:
b5:d9:f7:75:46:94:1d:5e:04:09:bd:3f:9e:47:64:46:7f:b2:
ca:5b:81:2a:4a:5b:b7:67:52:d9:bd:78:e8:44:ba:a6:d5:81:
b5:e6:3f:20:e9:45:01:a3:07:e2:50:8e:f6:a3:3c:6c:b9:08:
4f:5f:87:49:4a:69:47:ed:1a:1c:14:4f:a9:36:21:da:b5:65:
c6:e3:fb:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:37:18 2025 by rpki-client