Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.mft
File: MK_3UgloSjVGaQYdI9op-OovHV4.mft (raw, json)
Hash identifier: ru7ZTpcr26L5my9sxQy2A4Dm1ID9LMZ6UpNnWFrEQJ4=
Subject key identifier: D0:B2:86:D1:AA:63:7E:A2:A6:F6:7F:E3:B7:D9:07:E0:B5:C6:91:F3
Authority key identifier: 30:AF:F7:52:09:68:4A:35:46:69:06:1D:23:DA:29:F8:EA:2F:1D:5E
Certificate issuer: /CN=30aff75209684a354669061d23da29f8ea2f1d5e
Certificate serial: 01992FA37E61B1438AA1375983EFE743EEE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MK_3UgloSjVGaQYdI9op-OovHV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.mft
Manifest number: 1678
Signing time: Tue 09 Sep 2025 18:01:07 +0000
Manifest this update: Tue 09 Sep 2025 18:01:07 +0000
Manifest next update: Wed 10 Sep 2025 18:01:07 +0000
Files and hashes: 1: C-bdkM4lL8tTpeZXpiv45nhPUuM.roa (hash: dO9wg4oa3fmXkWxOi24v6xA9xh5CDmqHbzYIcdtWFXo=)
2: IbRWuE5EQO-8LgU2mAsS5QizVAY.roa (hash: s+vcUKeYVky97TEOonv9opKh34KAYu2tRcLDRkyQ5gI=)
3: MK_3UgloSjVGaQYdI9op-OovHV4.crl (hash: EwHHyjdORYb2cw6r8HvDyJ/1DaGalZlnLgfWJHT4wAA=)
4: jBuJavuseI2B0_WgKkHYJZFvr_Q.roa (hash: tLuargg/vipoJVRdIR5x9HBU5Ji9GHfTNJavehQ1uxE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/MK_3UgloSjVGaQYdI9op-OovHV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 17:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2f:a3:7e:61:b1:43:8a:a1:37:59:83:ef:e7:43:ee:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30aff75209684a354669061d23da29f8ea2f1d5e
Validity
Not Before: Sep 9 18:01:07 2025 GMT
Not After : Sep 10 18:01:07 2025 GMT
Subject: CN=d0b286d1aa637ea2a6f67fe3b7d907e0b5c691f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:77:9b:f8:bd:2c:0c:f8:5f:cb:35:5a:b2:03:
3c:e6:dc:6e:7e:ee:81:90:56:2a:b9:a9:45:f4:df:
8a:0c:65:ed:72:02:81:c6:ff:32:e3:8e:23:9a:47:
92:3f:23:cb:f7:c4:74:7c:4c:38:94:36:03:c5:48:
2c:c0:85:fb:bb:ab:5d:f4:f5:c1:68:4b:53:27:ba:
48:2f:40:3a:97:11:29:d6:0e:f2:ef:5f:ed:b6:64:
6d:50:0d:2c:c3:0e:a2:2d:15:67:6a:f2:7e:3d:db:
6b:00:8e:cf:bc:99:71:d5:86:03:b8:ce:e2:a7:55:
f9:a2:0e:fc:00:18:a3:38:16:2c:0c:1e:72:19:98:
c6:ad:16:2a:ed:e5:cd:83:3e:1f:b0:a9:3e:e0:d2:
a9:48:90:ba:32:8c:9c:ba:0e:5c:ae:8b:d8:55:e7:
d6:e1:81:e2:87:f2:47:60:da:f4:f8:c0:aa:e2:6f:
48:07:03:62:81:36:7d:39:7a:31:61:bf:14:76:47:
d8:ed:ad:77:c1:63:1b:1d:45:cb:a3:cb:54:3e:ba:
2d:e0:5f:f6:f3:9c:3a:12:d9:a8:13:c2:11:0d:10:
4d:a7:81:10:29:59:82:b8:4e:72:ff:5b:a3:db:e0:
9d:ee:a4:8b:74:84:e4:31:53:92:60:67:bc:42:8b:
3f:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:B2:86:D1:AA:63:7E:A2:A6:F6:7F:E3:B7:D9:07:E0:B5:C6:91:F3
X509v3 Authority Key Identifier:
keyid:30:AF:F7:52:09:68:4A:35:46:69:06:1D:23:DA:29:F8:EA:2F:1D:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MK_3UgloSjVGaQYdI9op-OovHV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:ae:82:af:34:7e:14:e0:23:30:83:b5:0d:6a:50:87:7a:b1:
9c:d1:b1:f8:12:51:ff:e9:03:ba:fc:9f:82:34:ad:af:f2:bd:
7a:00:21:0d:8b:a9:4b:9a:23:ba:07:5a:61:ee:b4:30:c9:c3:
48:c4:c7:97:5f:8c:92:93:5b:48:e4:27:d4:e9:0e:38:29:ef:
97:04:25:a2:a7:7a:1a:7f:c8:f3:38:e9:53:d3:c0:4f:08:3f:
a8:50:f0:c2:11:09:b9:f6:dd:cf:91:08:2f:4e:e4:b6:d0:16:
f1:07:3e:f5:57:be:fc:c8:b3:1c:72:8f:60:f8:53:69:f8:78:
10:77:be:cb:3c:db:c7:cb:3a:11:ce:f4:83:a2:13:4b:29:17:
40:23:dc:79:4f:96:77:98:f2:c0:e6:e9:b7:5d:79:22:05:2e:
29:ad:60:d5:9c:72:e7:67:65:78:a7:ec:09:87:e1:14:d2:84:
83:33:c8:26:1d:f5:eb:be:7f:ed:1a:06:20:fd:29:d0:65:f2:
ba:2d:f9:68:21:de:3e:10:8b:8c:eb:23:dd:06:0e:0b:ce:31:
0a:33:2e:ff:1c:e9:a0:22:b1:0a:39:44:05:76:27:eb:bc:3a:
16:2c:79:36:65:49:a7:a9:0f:bf:5b:a7:66:75:d5:0d:41:d9:
eb:53:ea:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 00:00:02 2025 by rpki-client