Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.mft
File: MK_3UgloSjVGaQYdI9op-OovHV4.mft (raw, json)
Hash identifier: T6alylFmyOcIpL3vg5OBI5JYUy0/4W62/mXe155e3UM=
Subject key identifier: 8D:41:5D:F3:CE:15:AA:19:D9:09:45:EE:43:70:78:9A:34:52:1A:03
Authority key identifier: 30:AF:F7:52:09:68:4A:35:46:69:06:1D:23:DA:29:F8:EA:2F:1D:5E
Certificate issuer: /CN=30aff75209684a354669061d23da29f8ea2f1d5e
Certificate serial: 019A2109269DBC62CE8BD0D4E4AF5D216D14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MK_3UgloSjVGaQYdI9op-OovHV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.mft
Manifest number: 16F5
Signing time: Sun 26 Oct 2025 15:00:39 +0000
Manifest this update: Sun 26 Oct 2025 15:00:39 +0000
Manifest next update: Mon 27 Oct 2025 15:00:39 +0000
Files and hashes: 1: C-bdkM4lL8tTpeZXpiv45nhPUuM.roa (hash: dO9wg4oa3fmXkWxOi24v6xA9xh5CDmqHbzYIcdtWFXo=)
2: IbRWuE5EQO-8LgU2mAsS5QizVAY.roa (hash: s+vcUKeYVky97TEOonv9opKh34KAYu2tRcLDRkyQ5gI=)
3: MK_3UgloSjVGaQYdI9op-OovHV4.crl (hash: HYF+BGjP/5LNSZ5uT/y3MHbS6yHtP1onEj6LW3Dq2FU=)
4: jBuJavuseI2B0_WgKkHYJZFvr_Q.roa (hash: tLuargg/vipoJVRdIR5x9HBU5Ji9GHfTNJavehQ1uxE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/MK_3UgloSjVGaQYdI9op-OovHV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 15:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:09:26:9d:bc:62:ce:8b:d0:d4:e4:af:5d:21:6d:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30aff75209684a354669061d23da29f8ea2f1d5e
Validity
Not Before: Oct 26 15:00:39 2025 GMT
Not After : Oct 27 15:00:39 2025 GMT
Subject: CN=8d415df3ce15aa19d90945ee4370789a34521a03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:86:57:5f:f2:23:8b:83:64:1a:ca:cb:75:89:
2a:75:18:5d:34:87:52:6c:72:9e:86:8c:5f:4a:a9:
55:91:74:7a:58:bd:a0:1c:a9:4f:a0:8f:81:b9:4d:
81:56:74:da:3c:45:1e:a8:59:14:8d:71:8b:95:6c:
41:c8:07:a3:7e:2e:3d:54:68:4b:d4:07:1b:8a:33:
e4:da:31:75:95:18:4e:d1:3a:72:1d:db:bb:f5:20:
c1:67:72:0a:03:8c:5c:9a:dc:a8:2a:c7:9f:fd:73:
33:f8:b6:c7:2b:62:5b:fd:e3:e3:65:18:6a:43:58:
d4:b9:7a:d5:b0:3e:71:b4:b4:a5:cc:38:81:c2:dd:
31:c4:e1:77:67:3b:1b:fd:65:e0:91:0f:37:ee:ea:
66:d7:67:55:dc:62:b8:06:52:3e:3c:95:90:4a:54:
f7:e8:5e:d8:18:f4:e8:b5:f4:f3:cf:67:38:46:5e:
91:4e:6f:03:2b:83:d9:35:74:3b:6d:60:e5:c4:2a:
5d:d1:55:0c:f5:93:e5:62:de:b1:8a:14:90:18:1f:
bf:5d:52:f4:08:98:19:be:c8:a4:e3:a9:b3:46:34:
4b:f0:6d:5c:68:f5:5d:d6:2f:7e:cf:7b:94:38:d9:
88:c7:35:d5:b0:04:c0:88:19:d4:37:0b:7c:22:b5:
10:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:41:5D:F3:CE:15:AA:19:D9:09:45:EE:43:70:78:9A:34:52:1A:03
X509v3 Authority Key Identifier:
keyid:30:AF:F7:52:09:68:4A:35:46:69:06:1D:23:DA:29:F8:EA:2F:1D:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MK_3UgloSjVGaQYdI9op-OovHV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:eb:31:54:c4:ee:0f:fd:dd:77:19:2d:e2:cb:c8:cc:aa:34:
11:1c:d0:e5:59:6b:44:7e:35:f1:38:28:99:4b:89:db:aa:c7:
ae:15:9a:38:5b:3c:0a:7d:10:97:b1:49:67:24:95:ab:34:3e:
4a:88:51:d7:9b:b5:63:cb:a4:2c:97:2d:32:30:1e:cd:a6:43:
87:36:ed:fb:23:f9:2f:0a:2e:1f:83:dc:54:58:18:ee:83:b9:
43:11:63:75:e4:72:ed:b3:39:2f:12:9c:53:55:54:54:6c:f3:
47:0a:ab:fe:f1:41:e5:25:60:b0:31:20:b0:58:69:ba:7e:3f:
4d:e0:39:e4:f0:ac:16:73:f4:98:72:de:05:00:49:15:45:27:
5b:a2:94:1f:a4:e8:88:54:56:17:9d:ac:c0:ed:83:ef:a4:f6:
27:85:c8:f9:bf:fe:13:4e:28:17:d9:c5:eb:44:41:ac:9d:9a:
71:e7:4d:94:21:7b:34:1a:5d:43:45:a0:aa:41:9e:4d:f1:64:
f1:9e:43:4c:86:21:31:b3:a7:2e:19:5b:09:b3:d9:14:ba:c5:
94:f8:70:e9:a5:97:bc:a6:81:c3:e9:99:a5:39:0f:9e:6b:db:
25:63:69:e3:18:14:1d:bd:2e:81:31:ae:e8:c1:34:15:25:44:
dc:8f:49:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 01:49:46 2025 by rpki-client