Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.mft
File: MKJ1gGSamS5B4yz4wSJF4H_5-cU.mft (raw, json)
Hash identifier: s+dNQ5rqcTQYsS5QJ7MkVGOU52E+srLpZ8Ys7q7HPA0=
Subject key identifier: 31:01:08:2D:AD:0D:54:E8:6E:5E:70:33:0D:F8:8D:89:79:BC:A6:FA
Authority key identifier: 30:A2:75:80:64:9A:99:2E:41:E3:2C:F8:C1:22:45:E0:7F:F9:F9:C5
Certificate issuer: /CN=30a27580649a992e41e32cf8c12245e07ff9f9c5
Certificate serial: 019A21E47B8773C96D5D30D5BE2F9F65A875
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MKJ1gGSamS5B4yz4wSJF4H_5-cU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.mft
Manifest number: 0DDB
Signing time: Sun 26 Oct 2025 19:00:13 +0000
Manifest this update: Sun 26 Oct 2025 19:00:13 +0000
Manifest next update: Mon 27 Oct 2025 19:00:13 +0000
Files and hashes: 1: MKJ1gGSamS5B4yz4wSJF4H_5-cU.crl (hash: HbrGECKk2GAr3YeVUp9b4gtdXJv3yKkHzyixT9kE3MA=)
2: WZEbVkL7G2Qj36QisnZkv8BFkNA.roa (hash: f7XKUwdOUxo0bFV2++z3NCiuNhXfpczYvfcpVS/l/Jk=)
3: yCz-ewAMqZx7lCDPn4Ya6LAQnZ4.roa (hash: biH7dwZg2HQ2zwVaqcwP5LR/5HOneIgO7AJ9Gj1riJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.mft
rsync://rpki.ripe.net/repository/DEFAULT/MKJ1gGSamS5B4yz4wSJF4H_5-cU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:e4:7b:87:73:c9:6d:5d:30:d5:be:2f:9f:65:a8:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30a27580649a992e41e32cf8c12245e07ff9f9c5
Validity
Not Before: Oct 26 19:00:13 2025 GMT
Not After : Oct 27 19:00:13 2025 GMT
Subject: CN=3101082dad0d54e86e5e70330df88d8979bca6fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:13:01:3c:68:6e:8b:01:64:5a:33:45:ca:52:
9e:9d:a5:f5:3a:d9:a4:46:ed:3f:92:e4:67:67:cd:
dd:71:3f:e9:bf:2c:bf:b9:64:47:ae:46:83:16:b4:
ca:e6:e1:3f:e5:7d:ba:a7:f9:1f:31:0c:b5:96:45:
03:79:8f:99:d9:73:07:4c:32:d7:f3:ba:fd:2d:01:
ab:e2:ff:11:10:d7:8b:23:77:94:91:fc:8d:60:d4:
29:54:d5:10:ef:85:89:5c:a1:db:33:bd:17:28:23:
6e:d5:93:d9:bd:a8:de:13:29:bf:44:4c:29:49:ce:
f4:19:32:28:3c:b8:e8:06:ce:4e:c8:30:ed:7a:e7:
3a:24:df:93:81:4c:74:ed:40:0b:92:1f:bb:78:a8:
95:b7:ed:63:9b:6a:36:b8:ed:16:2f:66:ab:c0:2c:
2b:c3:cd:34:0c:03:43:64:97:fe:a4:83:2b:e1:94:
f0:41:eb:ec:7a:96:da:3d:fa:6e:d0:be:f1:33:3d:
76:9d:fe:d7:28:8a:7c:39:02:a0:b5:1a:17:82:e1:
2a:e4:55:29:6c:de:71:ed:d1:03:0a:a8:b1:2b:75:
bc:fd:ed:20:8c:3e:db:a1:c4:ca:a8:72:8b:27:08:
19:16:7b:45:51:33:c9:1a:c7:73:3a:bf:d1:96:ca:
16:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:01:08:2D:AD:0D:54:E8:6E:5E:70:33:0D:F8:8D:89:79:BC:A6:FA
X509v3 Authority Key Identifier:
keyid:30:A2:75:80:64:9A:99:2E:41:E3:2C:F8:C1:22:45:E0:7F:F9:F9:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MKJ1gGSamS5B4yz4wSJF4H_5-cU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:9b:e3:d4:88:4e:33:23:35:13:33:2e:3d:b7:b0:ea:92:be:
e4:df:d8:7e:86:cc:a6:d0:f8:16:98:65:6f:e9:eb:09:39:3a:
a4:2f:85:3c:c1:a9:b3:87:34:53:e5:eb:e9:0a:9c:04:32:57:
33:14:82:79:a7:60:e7:30:19:4c:90:ff:99:65:c5:e0:ac:95:
c9:e3:8a:e1:68:01:e4:7b:3e:e7:0b:bf:57:9b:3c:6b:e4:9c:
02:5c:e4:d9:10:ad:f1:1c:2a:ff:a5:53:08:2b:6f:85:c9:96:
5e:37:cd:be:7d:30:64:36:3d:8e:6e:9d:c2:bb:c7:84:b8:c0:
58:06:3e:ba:7f:bc:61:28:2c:59:d1:6c:e5:3e:68:cd:0e:16:
18:c9:f1:c5:06:bc:e7:b4:cc:6c:a1:b5:45:d9:4b:71:90:51:
90:e9:d6:83:b4:8f:db:a0:b4:26:17:88:b1:ef:a5:87:9f:b6:
06:f6:f5:f3:fc:15:8c:9b:9a:42:fa:e1:9f:fc:ef:9d:ed:e8:
49:8e:01:be:f6:a6:b0:25:bf:ac:a9:8b:1a:6e:e1:26:99:9d:
ca:31:0e:56:ae:fd:8d:7e:97:66:80:0f:f8:23:3f:28:fb:a7:
0e:07:1f:49:b5:3f:85:12:af:da:91:05:a2:62:c2:c5:b5:11:
d9:db:bb:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:18:20 2025 by rpki-client