Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/MAVrA3XYlLk8sOJtm01koIxYNx4.mft
File: MAVrA3XYlLk8sOJtm01koIxYNx4.mft (raw, json)
Hash identifier: P8uMU7JMFxo9lmCbeM238+sSznU2w4/Nc+mSOyN5BeU=
Subject key identifier: E0:D5:9C:5C:37:EC:A4:48:FF:3F:66:2F:3F:3D:1D:CB:BD:DD:93:7C
Authority key identifier: 30:05:6B:03:75:D8:94:B9:3C:B0:E2:6D:9B:4D:64:A0:8C:58:37:1E
Certificate issuer: /CN=30056b0375d894b93cb0e26d9b4d64a08c58371e
Certificate serial: 0199FCFD72DA2B6E39377B49ADEB0EF979D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MAVrA3XYlLk8sOJtm01koIxYNx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/MAVrA3XYlLk8sOJtm01koIxYNx4.mft
Manifest number: 0C6C
Signing time: Sun 19 Oct 2025 15:01:32 +0000
Manifest this update: Sun 19 Oct 2025 15:01:32 +0000
Manifest next update: Mon 20 Oct 2025 15:01:32 +0000
Files and hashes: 1: 3O6Y3eQ5OpGsAft35AyeyfVjQ6o.roa (hash: u+uYD6/L10KdiWIH/nhFz7IkGG28050DGlwgSDFBhnk=)
2: MAVrA3XYlLk8sOJtm01koIxYNx4.crl (hash: Oq1MxArCg1zNLppDnhSIRDYZY/QKDRX12cxxKMR1xn0=)
3: vQwx6cGSIAT7m9K8R35GzUVPtvc.roa (hash: zbCFg7Xh1dqpHRv2DApSfzHkCmAjvg9jJtigoE/GHhk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/MAVrA3XYlLk8sOJtm01koIxYNx4.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/MAVrA3XYlLk8sOJtm01koIxYNx4.mft
rsync://rpki.ripe.net/repository/DEFAULT/MAVrA3XYlLk8sOJtm01koIxYNx4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:72:da:2b:6e:39:37:7b:49:ad:eb:0e:f9:79:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30056b0375d894b93cb0e26d9b4d64a08c58371e
Validity
Not Before: Oct 19 15:01:32 2025 GMT
Not After : Oct 20 15:01:32 2025 GMT
Subject: CN=e0d59c5c37eca448ff3f662f3f3d1dcbbddd937c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a6:b3:da:76:ce:65:6b:e4:cb:d6:ee:d4:b7:
31:ae:86:8f:e1:c0:87:bc:9a:89:b9:4d:05:66:68:
f5:3d:55:3d:a2:27:6d:39:3d:cb:db:1a:0c:f6:fb:
08:d3:1a:4d:7f:20:50:26:47:40:37:8d:18:8a:2a:
2b:65:45:f7:96:d2:e7:ae:f4:08:b9:d9:10:2f:01:
de:10:5e:06:09:50:56:31:15:ba:57:a1:ab:27:00:
ac:11:be:80:69:3e:c9:3a:2a:f4:c6:7b:60:bf:f3:
3e:ac:7b:89:42:b8:ef:5e:07:cb:90:a4:24:00:ae:
1a:26:3c:9c:4b:2e:cd:ca:c5:02:85:50:2d:4e:7a:
31:1f:0f:c5:33:10:7b:f5:19:1e:4a:4a:5a:d2:87:
29:6f:6d:bd:17:c3:d7:67:6d:92:31:96:05:f7:75:
5b:2d:e4:82:50:5f:85:02:29:f9:78:9f:f3:5b:9b:
24:1f:0d:75:f5:57:0c:9d:21:10:c2:f3:0f:06:ee:
26:18:6d:ff:ec:78:8c:ba:87:c1:eb:3a:6d:2b:00:
85:82:14:db:1a:00:6b:07:61:82:a1:b8:5e:38:03:
9f:44:a9:ff:59:10:1e:a2:b8:b7:86:a0:f5:b3:07:
48:d6:b6:45:b2:12:c5:90:05:8c:43:a9:6c:65:a5:
18:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:D5:9C:5C:37:EC:A4:48:FF:3F:66:2F:3F:3D:1D:CB:BD:DD:93:7C
X509v3 Authority Key Identifier:
keyid:30:05:6B:03:75:D8:94:B9:3C:B0:E2:6D:9B:4D:64:A0:8C:58:37:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MAVrA3XYlLk8sOJtm01koIxYNx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/MAVrA3XYlLk8sOJtm01koIxYNx4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/MAVrA3XYlLk8sOJtm01koIxYNx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:09:fb:09:ef:a4:7d:0e:ab:9f:14:f3:d6:b9:8f:73:92:e1:
55:62:b5:fa:d9:c5:05:77:97:93:a5:57:a2:31:4e:72:0d:f8:
6a:ca:ae:d3:1c:08:d0:15:89:c3:5a:36:38:8d:e4:31:85:bf:
d4:ca:1d:14:70:7d:a1:77:57:93:16:b5:a5:5e:a5:8d:c6:41:
99:cf:b8:3d:72:b9:0b:b8:b8:20:a5:a8:a5:18:2b:d2:22:ac:
9f:94:8f:47:6f:9a:47:89:b2:b6:92:bf:52:3b:f7:a7:2e:16:
d3:83:b7:68:d2:cd:35:1a:d8:64:38:2a:f0:c5:bb:99:52:1d:
0b:26:d3:3a:44:ab:d8:95:65:5b:5b:f6:45:9a:50:39:7b:74:
ae:17:9c:2f:15:28:fb:b7:6d:80:4b:db:42:bd:fa:d1:4e:44:
9a:8d:de:e2:7a:b4:e7:7d:38:a3:89:04:88:46:d9:9e:44:92:
87:42:cf:63:84:4a:53:73:a5:a0:0b:33:5e:06:bf:d0:59:8c:
79:85:b7:0d:9a:56:11:0e:cd:02:fc:27:09:e3:dc:f0:4d:dd:
35:a5:bf:f2:fd:c4:1e:5b:49:6e:f8:76:25:c7:d1:80:e1:79:
93:15:43:b0:c9:5a:f3:99:68:cb:20:b9:20:31:e9:46:03:18:
b9:47:ca:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:04:10 2025 by rpki-client