Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.mft
File: MK_3UgloSjVGaQYdI9op-OovHV4.mft (raw, json)
Hash identifier: q+bHrGeDL7V2q9hs1WtcEnai7jaCM0bhJDcLGxRE6g4=
Subject key identifier: 5A:1A:A4:D2:58:1D:85:66:21:91:83:6B:20:48:B3:18:E2:6C:DC:B5
Authority key identifier: 30:AF:F7:52:09:68:4A:35:46:69:06:1D:23:DA:29:F8:EA:2F:1D:5E
Certificate issuer: /CN=30aff75209684a354669061d23da29f8ea2f1d5e
Certificate serial: 019845F6D8A17C2B8142D7A2FDF6CB2DEE95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MK_3UgloSjVGaQYdI9op-OovHV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.mft
Manifest number: 15FF
Signing time: Sat 26 Jul 2025 09:01:01 +0000
Manifest this update: Sat 26 Jul 2025 09:01:01 +0000
Manifest next update: Sun 27 Jul 2025 09:01:01 +0000
Files and hashes: 1: C-bdkM4lL8tTpeZXpiv45nhPUuM.roa (hash: dO9wg4oa3fmXkWxOi24v6xA9xh5CDmqHbzYIcdtWFXo=)
2: IbRWuE5EQO-8LgU2mAsS5QizVAY.roa (hash: s+vcUKeYVky97TEOonv9opKh34KAYu2tRcLDRkyQ5gI=)
3: MK_3UgloSjVGaQYdI9op-OovHV4.crl (hash: YsXVHnRVzvj3jWEpr1WJuh9+cv4cvbYjA+OckuNk/EQ=)
4: jBuJavuseI2B0_WgKkHYJZFvr_Q.roa (hash: tLuargg/vipoJVRdIR5x9HBU5Ji9GHfTNJavehQ1uxE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/MK_3UgloSjVGaQYdI9op-OovHV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:f6:d8:a1:7c:2b:81:42:d7:a2:fd:f6:cb:2d:ee:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30aff75209684a354669061d23da29f8ea2f1d5e
Validity
Not Before: Jul 26 09:01:01 2025 GMT
Not After : Jul 27 09:01:01 2025 GMT
Subject: CN=5a1aa4d2581d85662191836b2048b318e26cdcb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e9:32:44:b9:a9:c2:69:5a:4d:94:c6:7f:cc:
2e:a5:4e:4d:5c:67:c8:32:a3:11:d8:0f:c8:db:b5:
1f:44:ea:a6:eb:e8:d7:ac:9b:da:64:dc:4a:56:b6:
04:30:c2:7a:62:3b:9d:39:42:8f:81:6b:13:7c:0c:
a0:d5:01:8e:e4:c6:4d:4c:b2:ff:06:ab:37:81:59:
bd:6c:a8:ff:9f:23:47:c5:9e:d4:42:95:b1:f4:44:
fc:70:91:57:52:65:2d:30:82:7c:be:61:bd:61:da:
31:6b:80:ba:55:d3:fe:50:ef:34:11:f9:72:1d:1b:
ea:f6:d8:c3:ff:bb:ad:c8:73:0b:67:6f:bd:c4:72:
42:5e:b9:af:7a:48:d6:18:b6:20:d9:48:7b:36:bd:
87:29:b7:3c:79:ba:15:96:e2:2d:ac:ee:16:d5:84:
1f:73:39:dc:94:e6:5f:2d:e5:5e:7f:1e:97:2e:c0:
66:20:6d:3d:73:a6:a7:30:f3:6c:28:9c:10:ef:4d:
77:76:79:16:dc:0c:5f:5b:97:16:43:ba:88:54:64:
da:6e:4b:5f:4f:fe:3d:06:7f:1b:1a:ef:e5:50:f5:
16:3f:41:25:d7:05:a1:bd:94:bb:85:3c:b3:7f:7b:
2e:62:05:be:38:84:ca:31:c5:fd:4c:36:b9:0b:40:
58:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:1A:A4:D2:58:1D:85:66:21:91:83:6B:20:48:B3:18:E2:6C:DC:B5
X509v3 Authority Key Identifier:
keyid:30:AF:F7:52:09:68:4A:35:46:69:06:1D:23:DA:29:F8:EA:2F:1D:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MK_3UgloSjVGaQYdI9op-OovHV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:a0:d6:f6:d6:60:02:52:74:38:15:14:d2:70:3c:29:db:06:
47:cd:93:69:5c:53:be:bc:1e:24:36:08:71:00:18:09:fe:b0:
f9:73:c7:4e:9b:fd:69:5e:69:83:f9:77:8f:71:ef:d1:34:80:
b5:58:17:0e:99:cf:7c:6f:cf:3f:4e:7e:a7:57:e3:d6:c7:de:
5f:85:cc:d5:9b:e6:28:e9:96:ff:55:d4:32:eb:09:a0:13:52:
2e:09:7f:82:7b:3e:ef:f8:39:2f:b5:8f:96:6a:df:3b:7f:34:
d0:20:8e:29:72:f6:17:80:8a:73:e0:3d:4e:f8:80:18:25:f2:
af:44:1d:28:49:37:a9:dc:13:eb:ec:a3:9e:c8:2e:b4:28:fc:
93:39:53:d7:c4:65:4d:75:7a:35:f2:40:23:7e:92:42:1b:9e:
da:b4:42:c1:57:ff:80:d0:26:d4:6b:bb:ce:96:24:4d:fa:96:
dd:af:70:04:01:94:1b:9d:19:ee:c0:29:24:9c:6b:95:4d:8b:
21:43:31:dd:dd:76:25:a0:ef:1d:20:37:13:ae:9e:ab:fd:b8:
a2:73:bb:d6:d2:d6:77:31:36:44:c2:26:c9:84:77:79:40:c1:
b1:49:e3:31:97:df:00:6b:24:8e:44:70:16:35:d8:5a:b7:47:
7a:98:d1:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:47:14 2025 by rpki-client