Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/6fae02-0c37-4f05-81ba-1b46d2eb5412/1/MK7hGylDVy0RvsxCXGhLSLuyy9Q.mft
File: MK7hGylDVy0RvsxCXGhLSLuyy9Q.mft (raw, json)
Hash identifier: MsHItPqmdSavk9/4934cFSWnTopTHtlRFb5xmurDyBk=
Subject key identifier: 61:9E:EB:F0:66:CF:C9:26:78:B2:0F:8C:C4:9C:DF:90:0C:5A:52:08
Authority key identifier: 30:AE:E1:1B:29:43:57:2D:11:BE:CC:42:5C:68:4B:48:BB:B2:CB:D4
Certificate issuer: /CN=30aee11b2943572d11becc425c684b48bbb2cbd4
Certificate serial: 0198496551A7FAA6DF7738E5DC4C4213653D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MK7hGylDVy0RvsxCXGhLSLuyy9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/6fae02-0c37-4f05-81ba-1b46d2eb5412/1/MK7hGylDVy0RvsxCXGhLSLuyy9Q.mft
Manifest number: 1601
Signing time: Sun 27 Jul 2025 01:00:33 +0000
Manifest this update: Sun 27 Jul 2025 01:00:33 +0000
Manifest next update: Mon 28 Jul 2025 01:00:33 +0000
Files and hashes: 1: MK7hGylDVy0RvsxCXGhLSLuyy9Q.crl (hash: 1Bh2qcycMw7R+C2K7f8E93Gqfm3rC2l4qXCZcEut7UM=)
2: hldVZlO6d8WWA7-GTHuwlp4u6fM.roa (hash: fXvwRBJ+hinYD3qF0h+tIsxkZ7408ikqGqdWmZh6YUU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/6fae02-0c37-4f05-81ba-1b46d2eb5412/1/MK7hGylDVy0RvsxCXGhLSLuyy9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/6fae02-0c37-4f05-81ba-1b46d2eb5412/1/MK7hGylDVy0RvsxCXGhLSLuyy9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/MK7hGylDVy0RvsxCXGhLSLuyy9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:51:a7:fa:a6:df:77:38:e5:dc:4c:42:13:65:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30aee11b2943572d11becc425c684b48bbb2cbd4
Validity
Not Before: Jul 27 01:00:33 2025 GMT
Not After : Jul 28 01:00:33 2025 GMT
Subject: CN=619eebf066cfc92678b20f8cc49cdf900c5a5208
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:75:84:72:bc:06:8f:33:af:d1:a2:a4:74:1c:
00:1a:33:57:e9:d9:a7:ae:00:12:c6:6d:73:c6:fa:
8c:ac:71:b7:9a:be:81:40:30:d8:b0:3c:fe:eb:75:
4d:65:1e:f2:f2:41:ff:2a:09:ac:61:79:e0:dc:ae:
7e:02:16:c2:72:3d:32:34:4e:19:ab:6a:a9:a7:7f:
5d:e0:b3:82:c6:22:a1:cb:cb:2e:5d:05:8a:3d:43:
25:25:c4:39:9d:86:75:d7:4b:04:ca:e7:79:02:51:
d3:ee:e3:71:35:90:a3:bd:e4:50:25:74:8f:0f:e4:
f2:13:99:6c:35:9b:b5:51:1f:c2:20:e6:a4:38:8b:
4b:ca:8c:ca:0c:bf:89:fb:8b:bf:da:86:c8:7a:00:
81:ca:12:6e:42:5f:0e:bc:e5:fd:80:91:de:3c:b5:
cd:fb:11:42:72:c5:06:8e:e3:fe:30:4f:43:ce:73:
7f:84:bd:f6:b0:8e:e0:d4:e0:65:e3:59:9d:24:7a:
0d:ce:d7:2e:3b:69:cd:7b:a9:7d:23:06:7c:fa:43:
52:8b:be:22:ec:c0:1b:aa:4d:64:35:38:ba:40:fb:
83:b5:14:a1:a6:c2:85:a1:e6:da:32:75:2c:8f:f2:
70:8f:ab:1b:1e:90:e7:98:e3:1f:b6:b1:92:9e:c5:
6b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:9E:EB:F0:66:CF:C9:26:78:B2:0F:8C:C4:9C:DF:90:0C:5A:52:08
X509v3 Authority Key Identifier:
keyid:30:AE:E1:1B:29:43:57:2D:11:BE:CC:42:5C:68:4B:48:BB:B2:CB:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MK7hGylDVy0RvsxCXGhLSLuyy9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/6fae02-0c37-4f05-81ba-1b46d2eb5412/1/MK7hGylDVy0RvsxCXGhLSLuyy9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/6fae02-0c37-4f05-81ba-1b46d2eb5412/1/MK7hGylDVy0RvsxCXGhLSLuyy9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:73:13:3c:d5:f2:74:f6:ab:ca:a7:8a:e9:61:fc:2b:69:9f:
ac:b6:05:0a:35:b2:f6:85:2c:53:2c:c9:9c:ed:3b:0e:10:b0:
9a:f4:9c:f5:78:c0:24:48:22:f7:90:dd:93:1d:46:1e:74:c8:
fe:fb:ca:d5:92:a7:d1:cd:9f:e0:e9:ab:76:4c:3f:27:31:84:
dd:72:62:72:5a:c5:56:7c:86:3c:0a:c4:17:f7:0d:e4:87:08:
44:9c:55:6b:86:9b:4f:12:2d:7a:53:84:c4:41:89:7f:ce:87:
c3:17:61:a5:00:9e:ba:bc:31:4e:f7:5d:78:82:65:ab:33:62:
dc:ca:04:00:22:31:fb:8e:77:6e:4e:77:a8:0d:e2:34:46:bf:
14:0c:1c:f7:69:52:42:6a:01:af:c8:d7:ee:1f:e5:dd:e1:be:
7f:f2:75:51:6d:80:60:7d:5d:fc:ad:80:ae:13:b1:8e:61:a6:
df:4e:a6:72:a2:1c:16:d3:b8:8b:5e:07:5c:92:c9:b0:53:1d:
94:79:54:50:24:91:d6:a2:49:da:b5:00:4d:9f:2b:aa:17:fc:
3a:69:6a:ee:1f:d4:75:90:b6:44:5e:75:ee:27:1b:69:8d:bd:
20:f6:54:a0:bb:25:15:85:30:11:d8:66:3a:53:fb:8a:a8:b1:
31:06:2f:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:56:01 2025 by rpki-client