Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.mft
File: MK_3UgloSjVGaQYdI9op-OovHV4.mft (raw, json)
Hash identifier: elt+ETUd6gSmvZO3s0EJBLSnNvvBSgrk2zem830LCA8=
Subject key identifier: CB:7B:9B:73:C9:C3:55:76:78:2B:E4:9B:DE:9B:7D:8B:7D:CF:8A:BF
Authority key identifier: 30:AF:F7:52:09:68:4A:35:46:69:06:1D:23:DA:29:F8:EA:2F:1D:5E
Certificate issuer: /CN=30aff75209684a354669061d23da29f8ea2f1d5e
Certificate serial: 01974EC5F4917207963DFBABCC2E156668D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MK_3UgloSjVGaQYdI9op-OovHV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.mft
Manifest number: 157F
Signing time: Sun 08 Jun 2025 09:01:25 +0000
Manifest this update: Sun 08 Jun 2025 09:01:25 +0000
Manifest next update: Mon 09 Jun 2025 09:01:25 +0000
Files and hashes: 1: C-bdkM4lL8tTpeZXpiv45nhPUuM.roa (hash: dO9wg4oa3fmXkWxOi24v6xA9xh5CDmqHbzYIcdtWFXo=)
2: IbRWuE5EQO-8LgU2mAsS5QizVAY.roa (hash: s+vcUKeYVky97TEOonv9opKh34KAYu2tRcLDRkyQ5gI=)
3: MK_3UgloSjVGaQYdI9op-OovHV4.crl (hash: 76yK9gzUfnrv3Vn7uFwZQeCIfvhPKGllIAR/tUam5Tk=)
4: jBuJavuseI2B0_WgKkHYJZFvr_Q.roa (hash: tLuargg/vipoJVRdIR5x9HBU5Ji9GHfTNJavehQ1uxE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/MK_3UgloSjVGaQYdI9op-OovHV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 09:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:c5:f4:91:72:07:96:3d:fb:ab:cc:2e:15:66:68:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30aff75209684a354669061d23da29f8ea2f1d5e
Validity
Not Before: Jun 8 09:01:25 2025 GMT
Not After : Jun 9 09:01:25 2025 GMT
Subject: CN=cb7b9b73c9c35576782be49bde9b7d8b7dcf8abf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:c5:ac:b2:3e:70:d6:e0:92:98:4c:1a:b5:26:
88:17:e1:08:d9:0c:5f:28:5d:88:18:34:df:4c:a4:
7f:90:47:e2:18:25:b1:c2:74:da:88:fc:46:89:b4:
72:c8:bf:7a:da:65:bc:32:85:48:09:02:8c:d1:dc:
e2:bd:5b:a8:5b:48:4a:a7:cf:cb:e2:4b:46:81:80:
63:f4:de:2b:6e:be:b7:9a:6c:fe:48:2f:ad:59:a2:
64:c1:b5:af:af:4b:1b:d6:40:cc:74:04:7d:25:e6:
85:0e:b6:61:72:68:20:9f:98:a4:ad:b9:1a:66:88:
69:6c:f3:c1:b4:1c:ea:98:8b:50:61:6e:fb:66:26:
22:e0:de:d0:2f:3b:ad:2e:77:5d:a8:c6:27:72:1c:
94:f4:fc:51:83:44:bf:8a:43:32:5b:9d:2c:06:e7:
b1:06:c1:50:c1:59:c5:6c:e9:2d:8a:59:d3:11:f3:
65:6c:1c:64:92:cc:9b:9f:0e:92:51:e7:65:87:46:
19:0e:3c:66:2e:10:18:5f:84:fb:f3:d6:7d:36:77:
3f:4a:12:ea:d5:01:a7:67:25:ae:b6:01:4e:1d:ce:
d2:9e:83:31:b7:ed:39:f3:4a:2c:1d:cd:2e:7d:2d:
93:6e:88:31:4e:f3:4c:6e:fd:dd:a5:8b:b3:47:62:
69:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:7B:9B:73:C9:C3:55:76:78:2B:E4:9B:DE:9B:7D:8B:7D:CF:8A:BF
X509v3 Authority Key Identifier:
keyid:30:AF:F7:52:09:68:4A:35:46:69:06:1D:23:DA:29:F8:EA:2F:1D:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MK_3UgloSjVGaQYdI9op-OovHV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:3b:63:f2:47:ac:e2:5e:2b:19:64:0b:91:29:55:b6:b6:a6:
84:a7:b7:cf:a0:0a:d7:e7:19:a0:8b:5d:c1:67:26:6a:1b:04:
b5:66:d4:c3:8c:df:53:51:3d:9f:01:32:49:07:27:00:ce:e7:
6e:9a:fc:dc:8d:2d:c4:f6:dd:da:6b:7d:01:3d:5b:70:47:a5:
a1:4e:68:f6:bd:4b:d7:e2:b0:e4:ba:a9:e0:ef:2b:89:e6:1b:
c4:6c:60:51:62:15:7e:6c:ee:cb:69:1b:55:89:6f:f7:9d:07:
d0:97:e6:1d:10:90:12:ae:08:07:22:af:81:76:d9:bc:a8:0f:
78:e1:c2:43:e8:47:c3:c5:83:ac:79:3d:08:8f:4a:de:fa:24:
93:dd:fc:db:de:db:25:c5:d3:20:c1:e0:65:6f:77:b8:10:44:
b2:e7:99:3b:a4:e2:84:57:aa:94:ac:b2:1c:e5:3b:80:62:b8:
2a:1b:45:da:f3:9f:72:44:68:2c:59:0a:3d:7f:6b:e2:88:07:
6b:2e:3a:75:5e:03:7f:eb:8f:c5:16:14:0c:24:33:17:a5:39:
b8:e3:1f:31:74:42:0e:dc:a6:bd:e5:96:8e:92:f8:44:98:e8:
6a:fc:82:f2:4e:63:44:96:e4:ec:af:66:d7:24:c2:f3:6a:83:
f1:c5:cf:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 18:41:37 2025 by rpki-client