Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.mft
File: MKJ1gGSamS5B4yz4wSJF4H_5-cU.mft (raw, json)
Hash identifier: 90Gvor1PM5OiTEyP/kQohB3abFwGZyZuuNKJu1Tv6Rs=
Subject key identifier: 90:B2:84:5F:32:EE:F4:43:0B:34:DC:91:BA:EF:A6:A9:4F:95:6A:47
Authority key identifier: 30:A2:75:80:64:9A:99:2E:41:E3:2C:F8:C1:22:45:E0:7F:F9:F9:C5
Certificate issuer: /CN=30a27580649a992e41e32cf8c12245e07ff9f9c5
Certificate serial: 01993649FB22219478AA2F030D11D3646D8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MKJ1gGSamS5B4yz4wSJF4H_5-cU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.mft
Manifest number: 0D61
Signing time: Thu 11 Sep 2025 01:00:42 +0000
Manifest this update: Thu 11 Sep 2025 01:00:42 +0000
Manifest next update: Fri 12 Sep 2025 01:00:42 +0000
Files and hashes: 1: MKJ1gGSamS5B4yz4wSJF4H_5-cU.crl (hash: XJhBNVT90gy9fO2jleHHIPNRYQ70N7PAFFz9j3xpIDg=)
2: WZEbVkL7G2Qj36QisnZkv8BFkNA.roa (hash: f7XKUwdOUxo0bFV2++z3NCiuNhXfpczYvfcpVS/l/Jk=)
3: yCz-ewAMqZx7lCDPn4Ya6LAQnZ4.roa (hash: biH7dwZg2HQ2zwVaqcwP5LR/5HOneIgO7AJ9Gj1riJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.mft
rsync://rpki.ripe.net/repository/DEFAULT/MKJ1gGSamS5B4yz4wSJF4H_5-cU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 20:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:36:49:fb:22:21:94:78:aa:2f:03:0d:11:d3:64:6d:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30a27580649a992e41e32cf8c12245e07ff9f9c5
Validity
Not Before: Sep 11 01:00:42 2025 GMT
Not After : Sep 12 01:00:42 2025 GMT
Subject: CN=90b2845f32eef4430b34dc91baefa6a94f956a47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:95:19:c8:77:27:44:3d:44:4e:34:f9:00:d4:
bd:9f:d8:ef:a0:3e:64:a0:79:9d:df:1a:67:a2:4f:
13:26:dc:0c:40:7b:fc:e2:e2:6d:01:19:72:ff:bd:
2b:5e:23:86:5b:30:66:16:93:4a:0e:74:80:19:02:
3f:34:60:a6:a7:06:97:3e:01:d5:99:68:e4:a2:4b:
d2:59:4f:e6:f0:61:da:aa:40:43:cb:72:20:cc:f3:
9f:a6:8f:32:72:5f:4d:ce:77:9a:6e:88:b7:71:9c:
bf:ae:8d:ef:4d:01:56:0f:ef:99:27:63:31:b0:12:
8c:67:40:fd:56:dc:28:a8:7b:78:d4:50:d3:d3:78:
72:fd:45:cc:d4:2a:76:26:aa:b7:16:67:a8:72:dd:
3e:0c:5f:1d:9f:cc:43:eb:27:53:e1:e1:d0:dd:a9:
d8:e7:35:80:90:29:68:ea:ba:c2:b1:11:c0:d6:02:
bc:5b:28:0f:3e:7e:17:46:cc:8e:1e:4a:65:14:cf:
98:67:5b:b3:4e:2c:76:23:4b:c6:87:30:24:b6:66:
1a:63:bf:7b:cc:8e:e8:d4:49:0f:ce:1b:1f:4b:2c:
f4:87:e0:10:6f:df:55:10:e3:fc:ee:d0:3e:1a:9a:
23:c4:d9:48:05:58:2f:92:7a:f2:a5:e1:d4:d9:ff:
3e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:B2:84:5F:32:EE:F4:43:0B:34:DC:91:BA:EF:A6:A9:4F:95:6A:47
X509v3 Authority Key Identifier:
keyid:30:A2:75:80:64:9A:99:2E:41:E3:2C:F8:C1:22:45:E0:7F:F9:F9:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MKJ1gGSamS5B4yz4wSJF4H_5-cU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:78:02:0f:71:b2:dd:e1:5f:f6:24:b1:dd:5e:88:a3:b5:59:
cd:35:6b:21:cd:1a:e1:71:14:64:f0:32:e6:a6:55:3d:ba:f6:
6a:41:16:1a:1f:12:1f:09:35:79:96:04:29:b0:19:1c:c0:41:
23:02:96:86:00:a3:3c:0b:dd:e9:66:ac:ea:49:6d:89:90:48:
30:aa:4d:38:20:56:32:a4:65:50:36:80:13:ce:74:58:8d:f6:
44:b8:71:34:fe:2a:45:79:bd:0f:a9:6a:ca:f4:95:69:d8:0f:
0a:a1:15:b9:26:a2:1b:75:b0:3e:9b:2d:3a:b2:0d:21:8b:93:
4a:b2:dc:66:e9:50:99:4c:3a:d5:2e:9e:2a:d6:c4:9f:e9:a1:
dc:5b:44:81:f8:7a:23:45:50:cc:2e:e5:c7:c0:ea:c7:16:0d:
27:94:f9:47:f6:70:c2:b7:d4:44:8b:cb:08:de:a8:95:02:ba:
4b:f8:84:9e:a4:79:3c:84:93:cb:9f:36:69:d6:9b:8d:e0:1d:
da:cb:39:b2:ac:70:38:aa:54:ac:b5:26:06:7c:ce:f1:c6:ca:
9d:aa:04:a6:a1:b4:10:67:92:19:6d:d4:81:c0:76:af:3d:7f:
40:85:41:63:2e:37:7b:7f:57:76:0c:d7:63:ac:4a:93:f3:c6:
0a:ff:02:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 04:15:52 2025 by rpki-client