Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/850024-84ee-44c8-b2d9-7d20eb063455/1/MKVWMuyQNMm5o_KQquzZoHwfJqs.mft
File: MKVWMuyQNMm5o_KQquzZoHwfJqs.mft (raw, json)
Hash identifier: a8Rm0elYKTwkgRdJFvhrwpTxeKXWkDQHS9QfG+PmIvA=
Subject key identifier: 1C:70:1B:B7:86:4B:98:34:DD:23:D1:6C:0A:72:2B:F6:5A:F4:BD:ED
Authority key identifier: 30:A5:56:32:EC:90:34:C9:B9:A3:F2:90:AA:EC:D9:A0:7C:1F:26:AB
Certificate issuer: /CN=30a55632ec9034c9b9a3f290aaecd9a07c1f26ab
Certificate serial: 0198530EB090C672979BBC9164F86312A2CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MKVWMuyQNMm5o_KQquzZoHwfJqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/850024-84ee-44c8-b2d9-7d20eb063455/1/MKVWMuyQNMm5o_KQquzZoHwfJqs.mft
Manifest number: 09D9
Signing time: Mon 28 Jul 2025 22:02:08 +0000
Manifest this update: Mon 28 Jul 2025 22:02:08 +0000
Manifest next update: Tue 29 Jul 2025 22:02:08 +0000
Files and hashes: 1: MKVWMuyQNMm5o_KQquzZoHwfJqs.crl (hash: 8cUhy9hGA4tGHKX/fNB7xUHsNfMzu/SbK1RLX7prBFo=)
2: mjst7aUax91GFptXcthnYyUXm5M.roa (hash: yt+uoK2SV82Kw1H7pGPHZ6f9URufEVmNUwV6zXvjHTc=)
3: yVy6K3-_uaSKa1-_oqUp0tf_Xgk.roa (hash: 7YTmf2c9OYfpZTmIIrXdtXUx4tpHodV4viOENQQMD4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/850024-84ee-44c8-b2d9-7d20eb063455/1/MKVWMuyQNMm5o_KQquzZoHwfJqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/850024-84ee-44c8-b2d9-7d20eb063455/1/MKVWMuyQNMm5o_KQquzZoHwfJqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/MKVWMuyQNMm5o_KQquzZoHwfJqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 22:02:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:0e:b0:90:c6:72:97:9b:bc:91:64:f8:63:12:a2:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30a55632ec9034c9b9a3f290aaecd9a07c1f26ab
Validity
Not Before: Jul 28 22:02:08 2025 GMT
Not After : Jul 29 22:02:08 2025 GMT
Subject: CN=1c701bb7864b9834dd23d16c0a722bf65af4bded
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:97:8d:5d:72:f9:72:4d:e4:08:a0:b8:91:f9:
12:b8:e9:13:d7:7f:2b:ef:90:65:71:f6:8f:2e:ff:
f4:38:74:48:e1:77:f1:cc:f3:79:a3:e4:0d:e8:67:
fe:a3:52:44:6d:5c:1a:0f:10:1b:a6:ae:6a:06:71:
73:82:54:db:e7:c2:20:a2:9a:27:54:45:17:c1:0a:
dd:90:c4:c4:77:14:7d:59:f6:29:bc:32:68:5d:4e:
dc:e3:8a:00:21:50:88:ca:02:77:1d:47:89:d7:b4:
25:a0:08:3a:63:df:c2:11:8d:2e:58:4d:41:3e:cf:
3c:f6:ac:cc:06:70:7b:8a:79:f4:be:2b:ef:bc:a2:
7d:4e:89:fa:33:b1:c4:b8:8e:92:b0:31:bd:5b:08:
b9:4c:30:8e:9b:41:84:92:94:35:c8:fe:80:c4:8e:
51:b8:c2:de:fe:d6:7c:d8:d5:c5:cb:b6:db:93:d9:
b6:00:aa:cf:00:bf:cb:a5:83:0c:f6:67:9e:52:4d:
3b:4f:1a:4d:71:1b:26:dd:c6:9c:f4:a4:f7:f1:d0:
7a:28:5e:c3:3f:ee:4b:77:f9:33:12:19:e6:cc:76:
4a:4d:5f:a7:cb:1b:5c:47:02:45:d1:75:32:8d:54:
65:ee:ce:ad:12:52:e5:a1:cf:9a:59:d8:50:c1:54:
2d:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:70:1B:B7:86:4B:98:34:DD:23:D1:6C:0A:72:2B:F6:5A:F4:BD:ED
X509v3 Authority Key Identifier:
keyid:30:A5:56:32:EC:90:34:C9:B9:A3:F2:90:AA:EC:D9:A0:7C:1F:26:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MKVWMuyQNMm5o_KQquzZoHwfJqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/850024-84ee-44c8-b2d9-7d20eb063455/1/MKVWMuyQNMm5o_KQquzZoHwfJqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/850024-84ee-44c8-b2d9-7d20eb063455/1/MKVWMuyQNMm5o_KQquzZoHwfJqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:46:8f:ac:47:92:15:19:ec:dc:40:ee:e9:9a:65:d4:11:c0:
20:75:e0:54:4e:6c:d3:17:3a:c4:7e:0d:2a:84:98:d6:2b:49:
c2:f1:b2:87:98:d1:c3:bf:3c:dc:20:80:f7:0a:85:21:8f:0b:
16:75:8e:c9:0c:fa:73:a3:8a:6c:73:c5:df:70:5a:00:35:10:
c2:ac:f8:2a:97:8e:67:57:cc:d7:84:43:00:97:80:57:11:f0:
db:bb:d8:5f:83:a2:6c:e7:d4:dc:de:96:aa:29:6f:1b:08:8d:
e6:e9:6b:50:1f:e7:60:12:9c:75:15:79:15:2a:e9:8a:a0:3d:
e7:25:3a:cd:02:9b:8f:ec:97:c7:69:53:8c:01:10:31:2d:00:
a9:0f:25:1f:70:cc:7f:37:c6:a2:b7:c4:73:04:24:5f:e2:20:
be:37:7c:99:eb:4a:20:24:bd:8e:f8:b2:15:5e:b1:f3:87:00:
e6:60:99:21:d7:68:b5:2a:bf:de:19:76:a3:d8:b8:74:74:81:
81:a1:74:02:9d:1a:06:8d:cd:a6:21:c4:8d:82:35:9f:f8:d3:
64:31:7e:83:05:69:bf:4e:52:b3:83:2f:b8:12:75:cd:4a:71:
92:3b:24:e6:7c:43:e7:98:02:18:35:50:e8:cb:df:a0:ab:72:
eb:da:3c:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:10:56 2025 by rpki-client