Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.mft
File: MKJ1gGSamS5B4yz4wSJF4H_5-cU.mft (raw, json)
Hash identifier: TcHnuKwRids+96lkVN/4NOGuW5x3owBmmzGasQC24YU=
Subject key identifier: 77:95:65:AE:86:39:A7:D1:36:0F:B4:D0:15:8E:78:02:A8:79:8E:3B
Authority key identifier: 30:A2:75:80:64:9A:99:2E:41:E3:2C:F8:C1:22:45:E0:7F:F9:F9:C5
Certificate issuer: /CN=30a27580649a992e41e32cf8c12245e07ff9f9c5
Certificate serial: 01984AAF05F986B7129D4BE6E07B6DD4897A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MKJ1gGSamS5B4yz4wSJF4H_5-cU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.mft
Manifest number: 0CE7
Signing time: Sun 27 Jul 2025 07:00:40 +0000
Manifest this update: Sun 27 Jul 2025 07:00:40 +0000
Manifest next update: Mon 28 Jul 2025 07:00:40 +0000
Files and hashes: 1: MKJ1gGSamS5B4yz4wSJF4H_5-cU.crl (hash: DyL3H80zXJMSb/bxKcT73TGC6xvZz3HtJdqsPUBWMdE=)
2: WZEbVkL7G2Qj36QisnZkv8BFkNA.roa (hash: f7XKUwdOUxo0bFV2++z3NCiuNhXfpczYvfcpVS/l/Jk=)
3: yCz-ewAMqZx7lCDPn4Ya6LAQnZ4.roa (hash: biH7dwZg2HQ2zwVaqcwP5LR/5HOneIgO7AJ9Gj1riJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.mft
rsync://rpki.ripe.net/repository/DEFAULT/MKJ1gGSamS5B4yz4wSJF4H_5-cU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:af:05:f9:86:b7:12:9d:4b:e6:e0:7b:6d:d4:89:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30a27580649a992e41e32cf8c12245e07ff9f9c5
Validity
Not Before: Jul 27 07:00:40 2025 GMT
Not After : Jul 28 07:00:40 2025 GMT
Subject: CN=779565ae8639a7d1360fb4d0158e7802a8798e3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:c6:7f:bc:28:55:bc:a4:ba:ee:d2:5c:71:ca:
ef:0d:46:2e:f4:85:28:a7:a6:bc:fc:b0:c6:2e:7b:
b3:2a:0f:c8:df:4e:37:7b:79:cf:57:79:13:cf:52:
76:0d:b2:86:bc:3f:4f:4f:8a:aa:0b:38:a5:fb:ef:
bc:05:4c:93:96:92:df:a6:3c:2f:28:f6:ed:14:01:
13:e0:04:f0:e8:04:55:fb:f0:2d:3f:12:29:85:f1:
fc:05:31:a0:4d:8f:e2:64:92:58:ab:f4:06:76:c0:
e3:e8:95:f1:e5:61:1b:2c:0c:95:0b:00:ad:33:7e:
77:f8:0b:4c:1c:f4:23:0c:23:9b:27:1d:a9:9b:a4:
03:c5:00:f5:14:47:ea:ca:22:6f:3e:1a:58:81:0f:
41:02:6a:03:be:ef:bd:9e:ac:85:7c:20:dc:29:6a:
41:56:f5:2b:a4:c9:e8:b2:74:1f:60:b3:28:c8:19:
18:f6:37:4d:81:2a:ae:5b:24:4b:15:04:c2:23:9d:
ea:53:77:f4:b6:d7:13:7c:23:e0:f8:d1:7c:7f:23:
4d:6d:50:11:54:bd:42:3c:e8:09:69:c7:5d:aa:bc:
10:ef:22:fa:7c:e1:66:db:9c:59:ad:60:c6:7f:b2:
1d:40:6f:48:e6:44:5d:a6:3b:79:bd:4e:aa:65:f3:
b8:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:95:65:AE:86:39:A7:D1:36:0F:B4:D0:15:8E:78:02:A8:79:8E:3B
X509v3 Authority Key Identifier:
keyid:30:A2:75:80:64:9A:99:2E:41:E3:2C:F8:C1:22:45:E0:7F:F9:F9:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MKJ1gGSamS5B4yz4wSJF4H_5-cU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:69:d9:dd:96:7b:b4:21:c2:2d:0d:ef:bc:6d:8a:55:77:e5:
5a:49:62:8e:1e:74:52:eb:60:77:8a:3c:49:42:04:83:12:92:
3d:52:ad:fa:65:d5:61:7c:9b:95:50:9a:b4:5e:99:52:00:38:
44:35:6c:c7:d2:c5:0b:10:27:53:37:05:ad:52:b2:ce:f0:17:
5f:a7:f3:f4:43:81:f3:e8:6a:e4:14:54:30:79:8f:fb:c7:c5:
4f:70:be:ea:bf:27:c0:3c:f5:d6:f6:b0:ac:d8:18:ac:2b:8c:
dd:b6:eb:2b:67:d5:d0:50:25:0a:e3:6e:a7:67:45:fb:bf:e4:
cf:9e:db:e7:df:ad:e3:03:f6:cb:88:a9:37:3c:9f:d6:0c:cb:
a6:e3:19:6b:b2:11:c2:f5:dc:5d:0e:c8:38:85:3c:af:72:d5:
0e:e3:ba:35:76:7f:b1:78:77:7d:a9:ac:cd:0e:70:87:7c:c0:
94:b9:1f:f6:6a:e8:cd:a1:de:5a:a2:54:b4:14:64:b3:5b:6a:
ef:d4:8b:17:bd:c8:ab:d0:c0:20:04:90:03:23:15:43:a6:3f:
d7:4b:35:30:ed:59:f1:94:e2:47:44:cc:d2:4f:ba:39:90:63:
8a:40:01:f9:a2:06:85:f5:1f:67:d0:ba:45:14:59:4b:ca:0e:
c0:56:05:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:09:56 2025 by rpki-client