Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/850024-84ee-44c8-b2d9-7d20eb063455/1/MKVWMuyQNMm5o_KQquzZoHwfJqs.mft
File: MKVWMuyQNMm5o_KQquzZoHwfJqs.mft (raw, json)
Hash identifier: cKrB1az+dSVKw5EWY/CQhep3iE49kgh2EhlF6a68QVU=
Subject key identifier: B3:7B:43:4C:9C:EC:45:47:B1:6C:82:3B:A8:64:8A:92:FF:EB:7D:2E
Authority key identifier: 30:A5:56:32:EC:90:34:C9:B9:A3:F2:90:AA:EC:D9:A0:7C:1F:26:AB
Certificate issuer: /CN=30a55632ec9034c9b9a3f290aaecd9a07c1f26ab
Certificate serial: 01975234002D0C220F48494A337778D4E1FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MKVWMuyQNMm5o_KQquzZoHwfJqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/850024-84ee-44c8-b2d9-7d20eb063455/1/MKVWMuyQNMm5o_KQquzZoHwfJqs.mft
Manifest number: 0954
Signing time: Mon 09 Jun 2025 01:00:28 +0000
Manifest this update: Mon 09 Jun 2025 01:00:28 +0000
Manifest next update: Tue 10 Jun 2025 01:00:28 +0000
Files and hashes: 1: MKVWMuyQNMm5o_KQquzZoHwfJqs.crl (hash: IqKeEsj7nhddRmCBb6CsGc4Q6tQfJuYIqKOA1G0jrb4=)
2: mjst7aUax91GFptXcthnYyUXm5M.roa (hash: yt+uoK2SV82Kw1H7pGPHZ6f9URufEVmNUwV6zXvjHTc=)
3: yVy6K3-_uaSKa1-_oqUp0tf_Xgk.roa (hash: 7YTmf2c9OYfpZTmIIrXdtXUx4tpHodV4viOENQQMD4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/850024-84ee-44c8-b2d9-7d20eb063455/1/MKVWMuyQNMm5o_KQquzZoHwfJqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/850024-84ee-44c8-b2d9-7d20eb063455/1/MKVWMuyQNMm5o_KQquzZoHwfJqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/MKVWMuyQNMm5o_KQquzZoHwfJqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 01:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:52:34:00:2d:0c:22:0f:48:49:4a:33:77:78:d4:e1:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30a55632ec9034c9b9a3f290aaecd9a07c1f26ab
Validity
Not Before: Jun 9 01:00:28 2025 GMT
Not After : Jun 10 01:00:28 2025 GMT
Subject: CN=b37b434c9cec4547b16c823ba8648a92ffeb7d2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:8d:10:3b:0b:85:2e:a0:68:be:43:f9:47:9c:
8a:1b:1d:c7:f4:26:2c:58:d3:8c:d2:0b:f3:28:7b:
78:3d:b3:8c:df:5f:5c:38:fb:c2:25:a7:4d:5f:ba:
4a:98:94:1a:54:09:4a:20:7c:fa:9e:20:96:30:8d:
72:26:ea:cd:df:1f:01:a6:0d:e6:42:93:57:30:43:
c1:4b:5a:39:8b:77:a0:39:99:69:71:6a:bd:a9:30:
f9:36:ed:5f:ae:35:b1:a2:cf:ad:02:f3:21:5b:77:
10:d4:91:f4:2d:52:8a:c3:62:94:0e:9c:ac:3d:b4:
ec:ec:bf:04:fa:4c:52:09:52:72:02:e0:68:5f:4b:
af:56:a0:9a:94:07:79:45:15:b4:10:f8:80:cf:9f:
2d:2f:26:20:7f:9b:26:99:47:33:55:ff:23:87:30:
80:fc:8f:23:b8:6c:ab:22:03:4b:30:f1:52:72:bb:
25:ed:24:b0:3d:29:61:1b:0c:a6:10:e2:c7:61:88:
83:a5:16:7a:b1:87:b8:08:a9:d0:e7:1f:34:5a:bb:
7b:aa:78:b7:c6:d8:ca:ed:35:04:a9:38:46:48:9a:
b4:66:08:d0:3a:a2:8e:7d:c9:36:40:ce:96:06:d3:
0d:83:ff:81:de:d9:90:14:e7:3e:7f:30:b7:e1:80:
1b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:7B:43:4C:9C:EC:45:47:B1:6C:82:3B:A8:64:8A:92:FF:EB:7D:2E
X509v3 Authority Key Identifier:
keyid:30:A5:56:32:EC:90:34:C9:B9:A3:F2:90:AA:EC:D9:A0:7C:1F:26:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MKVWMuyQNMm5o_KQquzZoHwfJqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/850024-84ee-44c8-b2d9-7d20eb063455/1/MKVWMuyQNMm5o_KQquzZoHwfJqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/850024-84ee-44c8-b2d9-7d20eb063455/1/MKVWMuyQNMm5o_KQquzZoHwfJqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:91:a3:2f:37:35:dd:c5:30:90:b2:7e:36:4a:63:52:9e:99:
c6:63:a9:d9:9b:d5:88:3c:bf:c7:89:76:b6:3f:77:63:e4:67:
64:c1:03:25:1d:31:6b:07:bd:df:cf:f5:c4:b4:f3:01:47:61:
0a:c5:cc:b6:3e:fe:53:f8:43:5a:b0:df:b6:ae:7e:aa:20:5a:
c2:17:0e:c3:4c:e3:70:2c:a8:27:2e:0a:d2:e1:f0:8a:92:76:
46:d5:43:71:80:85:f6:de:e1:cc:47:79:ac:f0:ce:5b:3b:80:
98:cd:38:34:26:43:04:15:db:db:95:df:bb:4e:88:b6:66:84:
56:a4:33:a1:aa:17:b0:60:59:b5:12:39:bd:3a:35:aa:f0:c1:
0e:48:1f:01:15:c4:fd:da:ea:3a:20:49:7e:f6:86:86:e0:32:
fd:23:3c:7d:ff:13:0c:58:44:6f:fc:7f:77:a6:39:26:45:c2:
25:b7:66:15:67:a1:37:7e:b1:3a:8a:b0:42:58:6a:e2:52:3e:
84:fe:fd:e3:9b:7b:77:eb:98:e8:fd:2c:85:6a:9f:95:28:53:
d6:5f:7a:63:51:1d:a4:7f:41:71:46:75:0c:68:ed:e5:a3:c8:
94:dd:a8:9e:07:3c:e2:f6:d3:07:80:c1:da:7d:c8:b8:f9:2c:
2b:2e:48:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 09:02:22 2025 by rpki-client