Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/ee9519-ff61-4679-9015-80e427596b5d/1/McsA0vhEAYEMMgC1L6OI6TZR3fM.mft
File: McsA0vhEAYEMMgC1L6OI6TZR3fM.mft (raw, json)
Hash identifier: XRrpHkp9ViOmoixMo0gfEgqBxj1JsNidAd17CWJSHXo=
Subject key identifier: 28:C4:D6:6E:9B:7A:E0:6E:83:14:F5:F0:23:17:51:74:E2:E6:D0:3A
Authority key identifier: 31:CB:00:D2:F8:44:01:81:0C:32:00:B5:2F:A3:88:E9:36:51:DD:F3
Certificate issuer: /CN=31cb00d2f84401810c3200b52fa388e93651ddf3
Certificate serial: 0198D5BBEB63AE1E76BE7D59F98E1799FAF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/McsA0vhEAYEMMgC1L6OI6TZR3fM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/ee9519-ff61-4679-9015-80e427596b5d/1/McsA0vhEAYEMMgC1L6OI6TZR3fM.mft
Manifest number: 05CD
Signing time: Sat 23 Aug 2025 07:01:58 +0000
Manifest this update: Sat 23 Aug 2025 07:01:58 +0000
Manifest next update: Sun 24 Aug 2025 07:01:58 +0000
Files and hashes: 1: 0bSnoMCDjomKjH9l20xWi3AzK8U.roa (hash: w7ylFdvDoXCXnQ/NKrVCZ3HeQ1sG0SNLXLUNJWq26Aw=)
2: 6QZXrPa3sBN80OwKH97Qmpz11-w.roa (hash: UdHrwly/eXNnDWvZzXVWVnCJ0eO0DldyC6uMO4NJQeg=)
3: HNzUWXlP4veJqPrr6pXP0JJR8j8.roa (hash: su/Z3HJftIxQPXtbWly3dTZmcrPusOAjYOvLjMM2DMs=)
4: McsA0vhEAYEMMgC1L6OI6TZR3fM.crl (hash: zvxlXrkvSqW8gAVgS3sTF8owFWrWahpXtERJa+WkzTQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/ee9519-ff61-4679-9015-80e427596b5d/1/McsA0vhEAYEMMgC1L6OI6TZR3fM.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/ee9519-ff61-4679-9015-80e427596b5d/1/McsA0vhEAYEMMgC1L6OI6TZR3fM.mft
rsync://rpki.ripe.net/repository/DEFAULT/McsA0vhEAYEMMgC1L6OI6TZR3fM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:eb:63:ae:1e:76:be:7d:59:f9:8e:17:99:fa:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31cb00d2f84401810c3200b52fa388e93651ddf3
Validity
Not Before: Aug 23 07:01:58 2025 GMT
Not After : Aug 24 07:01:58 2025 GMT
Subject: CN=28c4d66e9b7ae06e8314f5f023175174e2e6d03a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:44:f2:e6:7e:4d:f5:8e:a0:3c:95:d3:2f:24:
a3:fd:dd:58:08:0c:09:9c:94:ee:33:58:6e:e4:78:
62:8f:7d:13:8c:7e:bc:9f:cb:b5:9f:a1:c6:1a:77:
02:2e:d2:ad:3f:ef:b9:a8:9d:49:55:c5:a3:f4:9b:
7b:9e:f5:11:3c:14:75:62:2b:bd:b5:4a:82:bb:13:
14:44:54:b4:4c:bf:f9:75:19:81:b8:01:19:87:04:
c6:0e:7a:ee:71:f2:07:b8:1a:3d:61:d6:b6:5d:03:
37:53:14:c0:42:21:17:21:d6:40:00:45:7b:6f:08:
c5:a5:db:b0:ea:f3:cc:b2:4e:a4:77:7a:fb:df:7d:
c6:a3:a2:97:e0:f8:36:d6:bb:cf:c7:4f:07:8e:23:
16:7b:a8:65:ea:40:ca:00:aa:a2:e2:68:f6:64:17:
25:ec:c7:ec:29:85:56:fa:2c:5e:9f:7f:a2:4d:da:
4c:db:78:d9:f9:2d:4a:60:22:e1:26:bc:16:a8:be:
fa:46:78:fc:cf:b6:3b:43:7a:61:52:d9:f4:5c:73:
3a:de:dd:9f:e4:97:98:af:9e:ce:ea:25:22:45:a7:
13:c5:7f:46:73:6d:8f:57:30:0b:e3:b4:de:06:9d:
94:b5:17:2e:8c:17:ef:6e:82:71:69:f3:83:c4:50:
ae:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:C4:D6:6E:9B:7A:E0:6E:83:14:F5:F0:23:17:51:74:E2:E6:D0:3A
X509v3 Authority Key Identifier:
keyid:31:CB:00:D2:F8:44:01:81:0C:32:00:B5:2F:A3:88:E9:36:51:DD:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/McsA0vhEAYEMMgC1L6OI6TZR3fM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ee9519-ff61-4679-9015-80e427596b5d/1/McsA0vhEAYEMMgC1L6OI6TZR3fM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ee9519-ff61-4679-9015-80e427596b5d/1/McsA0vhEAYEMMgC1L6OI6TZR3fM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:cf:10:f0:66:e2:16:01:54:29:81:e6:1c:9b:8a:eb:8e:68:
b6:f2:26:1c:83:3c:0e:3b:4a:b0:31:8f:8e:47:e7:79:43:be:
2b:74:28:f2:9b:e3:60:38:f3:38:04:5e:83:53:43:6a:fe:d1:
d0:b7:d3:7f:fe:8e:2e:49:3e:a2:44:f4:04:60:97:2d:52:95:
67:b9:66:d2:3c:74:c1:78:8e:62:05:bc:20:da:e5:2b:68:2b:
3e:35:90:c6:cd:4b:ae:5f:33:47:ac:98:64:00:59:52:68:64:
7b:f5:53:e0:56:30:da:be:99:ef:29:91:42:01:c6:9f:8c:35:
bb:68:af:74:ac:9b:e9:b8:cc:95:38:ba:6f:2c:cb:04:8e:47:
0c:36:ff:f2:d6:06:ab:62:5c:d4:33:a2:36:cd:d1:2e:8e:26:
10:b8:16:7c:33:e6:8a:b4:a6:08:59:5f:1d:11:47:55:d4:dd:
63:05:51:22:b6:85:79:3b:fc:6c:c9:01:dd:f8:09:0c:ad:51:
d7:5a:49:0c:fa:06:c8:40:20:4b:aa:71:78:13:b2:84:6e:87:
25:4f:79:6e:46:f8:a3:bd:7a:51:a1:7e:48:2f:82:b2:0e:da:
71:f4:c5:ba:37:49:f5:30:1c:e7:e2:2b:48:99:a9:7a:1f:fa:
87:d0:ce:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:24:02 2025 by rpki-client