Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.mft
File: MKJ1gGSamS5B4yz4wSJF4H_5-cU.mft (raw, json)
Hash identifier: iFY84azLuksM7RiMHS2B+DROELEO7Ukor3hSnjAv1nM=
Subject key identifier: 08:31:E6:23:02:1B:81:2F:E0:D3:38:14:80:C0:8B:DC:3E:CB:FA:FC
Authority key identifier: 30:A2:75:80:64:9A:99:2E:41:E3:2C:F8:C1:22:45:E0:7F:F9:F9:C5
Certificate issuer: /CN=30a27580649a992e41e32cf8c12245e07ff9f9c5
Certificate serial: 019749D5859644686DE075F048B5BE005312
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MKJ1gGSamS5B4yz4wSJF4H_5-cU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.mft
Manifest number: 0C62
Signing time: Sat 07 Jun 2025 10:00:19 +0000
Manifest this update: Sat 07 Jun 2025 10:00:19 +0000
Manifest next update: Sun 08 Jun 2025 10:00:19 +0000
Files and hashes: 1: MKJ1gGSamS5B4yz4wSJF4H_5-cU.crl (hash: jnUCooEIGooAxHRERQ/fHwSYHJQ7OY7rxSoqbsxz4Jw=)
2: WZEbVkL7G2Qj36QisnZkv8BFkNA.roa (hash: f7XKUwdOUxo0bFV2++z3NCiuNhXfpczYvfcpVS/l/Jk=)
3: yCz-ewAMqZx7lCDPn4Ya6LAQnZ4.roa (hash: biH7dwZg2HQ2zwVaqcwP5LR/5HOneIgO7AJ9Gj1riJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.mft
rsync://rpki.ripe.net/repository/DEFAULT/MKJ1gGSamS5B4yz4wSJF4H_5-cU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d5:85:96:44:68:6d:e0:75:f0:48:b5:be:00:53:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30a27580649a992e41e32cf8c12245e07ff9f9c5
Validity
Not Before: Jun 7 10:00:19 2025 GMT
Not After : Jun 8 10:00:19 2025 GMT
Subject: CN=0831e623021b812fe0d3381480c08bdc3ecbfafc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:9c:42:ba:72:dd:07:e5:32:0a:24:3d:3d:42:
24:35:6a:63:58:9b:96:d5:b7:ad:ae:75:5c:4e:9b:
65:4f:77:65:7d:aa:c2:0e:09:65:ed:1f:b2:6a:b0:
5b:3a:ed:08:22:69:2a:14:15:87:f2:48:e3:7a:b6:
e2:5c:ed:6f:67:e9:ab:f6:59:63:d6:5a:da:1c:84:
9b:b6:5d:51:54:28:2e:03:94:70:a3:69:96:32:4b:
f3:a1:6f:cb:8c:42:32:bd:b1:51:c8:61:77:67:15:
75:5e:e3:a7:3a:78:a8:f2:97:03:c2:6a:95:20:6c:
13:00:a1:62:f0:76:d2:f4:4c:2c:ef:ae:dc:14:d8:
7a:2f:a0:ae:07:d7:b9:c1:23:74:37:26:f6:69:d3:
12:8e:d5:f6:27:e5:c8:e9:0b:62:09:03:fd:6f:87:
ba:3b:c1:cf:2b:39:21:f6:e6:4c:37:34:67:71:a8:
a1:b4:b6:3d:40:7d:7c:11:d1:42:a2:e5:e5:60:fa:
3b:e3:53:8a:00:57:84:e2:76:57:4a:a0:4f:24:04:
ba:ad:3d:e8:bf:e0:c0:9a:a5:7c:0d:0a:10:fe:20:
f6:81:b4:13:54:29:d0:37:82:03:e4:a3:f8:ca:c2:
5e:61:43:7e:b7:ab:f9:80:cc:1a:5f:af:d8:f6:20:
d7:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:31:E6:23:02:1B:81:2F:E0:D3:38:14:80:C0:8B:DC:3E:CB:FA:FC
X509v3 Authority Key Identifier:
keyid:30:A2:75:80:64:9A:99:2E:41:E3:2C:F8:C1:22:45:E0:7F:F9:F9:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MKJ1gGSamS5B4yz4wSJF4H_5-cU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:0c:81:3a:61:12:94:f2:87:ce:99:a2:b4:f1:d3:85:af:29:
a4:7c:4e:fe:2c:49:b9:2d:d1:f1:eb:01:17:d4:d5:ce:d3:f7:
39:5d:49:40:64:17:3e:c3:26:b3:a1:01:c5:e0:9a:dc:b5:60:
72:9c:59:5c:2e:40:12:3f:d5:8a:21:57:ca:e7:61:d0:e6:95:
de:8a:58:0d:ee:ac:06:a4:b1:a9:07:b7:76:48:85:be:04:f9:
d7:bb:06:86:d3:45:58:08:7f:55:75:31:9f:32:43:08:18:17:
e7:de:2f:e2:f0:25:14:ee:62:0b:d5:3a:52:56:50:f0:3a:44:
f9:eb:ef:1b:0c:57:0d:50:21:78:70:56:81:83:ed:20:4e:63:
ec:d5:2d:03:ec:01:81:52:54:99:d6:c1:43:1e:d9:48:29:67:
24:c0:0c:28:8b:6d:f1:ad:18:ec:eb:a4:57:26:4e:db:74:c7:
cc:8a:65:61:3d:e1:9a:07:df:56:80:1c:32:95:17:dd:b2:e3:
d8:88:75:83:5d:21:7c:5b:00:98:cc:4f:fb:04:36:58:33:f1:
8d:23:a2:23:c5:b9:81:a3:b4:ea:13:7e:c0:49:6f:12:08:d1:
e6:cb:7b:1f:48:68:51:7b:5a:b0:fd:91:4e:17:8d:dc:47:d9:
7b:6f:0c:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJ1YWWRGht4HXwSLW+AFMSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwYTI3NTgwNjQ5YTk5MmU0MWUzMmNmOGMxMjI0NWUwN2Zm
OWY5YzUwHhcNMjUwNjA3MTAwMDE5WhcNMjUwNjA4MTAwMDE5WjAzMTEwLwYDVQQD
EygwODMxZTYyMzAyMWI4MTJmZTBkMzM4MTQ4MGMwOGJkYzNlY2JmYWZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJxCunLdB+UyCiQ9PUIkNWpjWJuW
1betrnVcTptlT3dlfarCDgll7R+yarBbOu0IImkqFBWH8kjjerbiXO1vZ+mr9llj
1lraHISbtl1RVCguA5Rwo2mWMkvzoW/LjEIyvbFRyGF3ZxV1XuOnOnio8pcDwmqV
IGwTAKFi8HbS9Ews767cFNh6L6CuB9e5wSN0Nyb2adMSjtX2J+XI6QtiCQP9b4e6
O8HPKzkh9uZMNzRncaihtLY9QH18EdFCouXlYPo741OKAFeE4nZXSqBPJAS6rT3o
v+DAmqV8DQoQ/iD2gbQTVCnQN4ID5KP4ysJeYUN+t6v5gMwaX6/Y9iDXxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAgx5iMCG4Ev4NM4FIDAi9w+y/r8MB8GA1UdIwQY
MBaAFDCidYBkmpkuQeMs+MEiReB/+fnFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUtKMWdHU2FtUzVCNHl6NHdTSkY0SF81LWNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8yOWI0MmItNTY2ZS00M2U5LWEyZGMt
ZjU0ODY5OWY5NDdhLzEvTUtKMWdHU2FtUzVCNHl6NHdTSkY0SF81LWNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy8yOWI0MmItNTY2ZS00M2U5LWEyZGMtZjU0ODY5OWY5NDdh
LzEvTUtKMWdHU2FtUzVCNHl6NHdTSkY0SF81LWNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEQyBOmES
lPKHzpmitPHTha8ppHxO/ixJuS3R8esBF9TVztP3OV1JQGQXPsMms6EBxeCa3LVg
cpxZXC5AEj/ViiFXyudh0OaV3opYDe6sBqSxqQe3dkiFvgT517sGhtNFWAh/VXUx
nzJDCBgX594v4vAlFO5iC9U6UlZQ8DpE+evvGwxXDVAheHBWgYPtIE5j7NUtA+wB
gVJUmdbBQx7ZSClnJMAMKItt8a0Y7OukVyZO23THzIplYT3hmgffVoAcMpUX3bLj
2Ih1g10hfFsAmMxP+wQ2WDPxjSOiI8W5gaO06hN+wElvEgjR5st7H0hoUXtasP2R
TheN3EfZe28MuA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 15:36:55 2025 by rpki-client