Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/666786-561c-4bd0-a7b0-8f7fd3dc15fe/1/Marcypb0SkVzktiQfGuWS-D8-SE.mft
File: Marcypb0SkVzktiQfGuWS-D8-SE.mft (raw, json)
Hash identifier: MheiqwjHCWqXpWfFflrZz61ncepKJ9tMSULvJSe+E8Q=
Subject key identifier: D8:79:0C:9B:CA:0A:F5:28:CF:6B:1F:16:64:6E:FA:B0:48:B5:F3:60
Authority key identifier: 31:AA:DC:CA:96:F4:4A:45:73:92:D8:90:7C:6B:96:4B:E0:FC:F9:21
Certificate issuer: /CN=31aadcca96f44a457392d8907c6b964be0fcf921
Certificate serial: 0198D54DE5EDD2A8F4AA9AF0E380CBF4B73B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Marcypb0SkVzktiQfGuWS-D8-SE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/666786-561c-4bd0-a7b0-8f7fd3dc15fe/1/Marcypb0SkVzktiQfGuWS-D8-SE.mft
Manifest number: 0D40
Signing time: Sat 23 Aug 2025 05:01:48 +0000
Manifest this update: Sat 23 Aug 2025 05:01:48 +0000
Manifest next update: Sun 24 Aug 2025 05:01:48 +0000
Files and hashes: 1: Marcypb0SkVzktiQfGuWS-D8-SE.crl (hash: ZbayHPlFQAfGdBZ9PLpRNy8HrWMz8qzB7CKr5zEZxYE=)
2: XFj03ZPCOj3qqoe8oMNPGmud9a4.roa (hash: m6E7RZQpvmKbh+R69KgZ6bmoskHz5Bb8/AlaawR8U/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/666786-561c-4bd0-a7b0-8f7fd3dc15fe/1/Marcypb0SkVzktiQfGuWS-D8-SE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/666786-561c-4bd0-a7b0-8f7fd3dc15fe/1/Marcypb0SkVzktiQfGuWS-D8-SE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Marcypb0SkVzktiQfGuWS-D8-SE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:e5:ed:d2:a8:f4:aa:9a:f0:e3:80:cb:f4:b7:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31aadcca96f44a457392d8907c6b964be0fcf921
Validity
Not Before: Aug 23 05:01:48 2025 GMT
Not After : Aug 24 05:01:48 2025 GMT
Subject: CN=d8790c9bca0af528cf6b1f16646efab048b5f360
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b2:ac:13:cd:4e:29:f0:b2:b9:a5:46:46:96:
77:18:b5:cf:76:8d:b8:c7:f1:c5:bd:1a:30:71:33:
6c:54:22:86:7b:1c:a4:30:9e:2f:6f:af:28:e5:6e:
a0:ae:a2:bf:0a:31:cc:cd:1e:c1:bb:75:55:16:7e:
40:92:e6:7d:45:f2:95:62:f5:15:90:25:c4:83:b5:
68:72:46:05:c0:7e:95:47:de:4e:92:ff:18:24:fc:
db:15:63:0d:cd:69:6b:d9:a1:ff:70:e1:d0:73:73:
19:f1:07:66:69:ca:3d:e7:3c:d4:33:60:83:61:62:
24:11:1a:f5:cd:a9:f3:a8:81:9b:25:28:aa:fb:0a:
9c:51:f5:99:00:0e:89:ba:af:c6:8f:e6:9e:cd:a4:
82:71:c1:0d:e8:a2:03:94:c6:4f:a8:c1:df:c5:73:
c0:e9:75:96:b4:26:4e:2c:31:0a:fe:7c:4d:0b:3e:
1c:e5:7e:94:16:f2:57:7a:c8:15:ea:2d:8d:50:f3:
29:74:b9:f9:9a:00:59:eb:61:c5:fd:bd:78:f2:75:
a7:b6:d9:75:2c:9f:ca:77:e7:78:a4:a2:9c:25:d0:
c6:1a:24:42:c7:61:55:43:f1:c7:49:38:79:6b:b4:
df:f7:79:b6:0a:7b:c1:ac:81:d3:ee:5f:05:fd:1c:
e6:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:79:0C:9B:CA:0A:F5:28:CF:6B:1F:16:64:6E:FA:B0:48:B5:F3:60
X509v3 Authority Key Identifier:
keyid:31:AA:DC:CA:96:F4:4A:45:73:92:D8:90:7C:6B:96:4B:E0:FC:F9:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Marcypb0SkVzktiQfGuWS-D8-SE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/666786-561c-4bd0-a7b0-8f7fd3dc15fe/1/Marcypb0SkVzktiQfGuWS-D8-SE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/666786-561c-4bd0-a7b0-8f7fd3dc15fe/1/Marcypb0SkVzktiQfGuWS-D8-SE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:07:d7:df:6e:f9:7f:e8:ce:c1:74:0f:48:4c:20:d9:0a:ef:
0c:05:f6:ef:15:e8:02:50:41:8b:43:47:a2:c9:6f:15:2c:cb:
a9:e1:43:6f:65:26:af:59:35:88:0e:89:be:24:13:40:5c:98:
c5:3a:20:98:34:cd:70:c2:71:4d:b1:f6:ae:d4:58:5b:3d:e7:
58:62:12:c6:91:9e:d4:98:0d:a5:17:c7:1c:94:13:9a:68:48:
11:f7:1d:02:ff:77:f5:53:77:3e:65:e8:3b:85:1b:c3:5c:51:
d4:96:0b:71:51:62:70:59:66:8c:2d:7d:76:35:cc:5d:13:da:
0b:d0:e3:1b:ab:2b:4f:0d:5e:a7:8c:77:a4:69:3f:de:a7:df:
ba:82:f0:3d:11:45:5b:31:95:bb:89:95:1d:18:1a:b8:ba:d4:
61:51:52:46:27:60:eb:1c:91:a0:c7:9e:c3:cb:b7:fd:3f:fa:
cb:9a:94:7b:56:77:3e:f5:e0:1c:f6:15:58:a4:86:e2:87:d3:
b4:e9:c4:2e:09:4d:00:ac:fc:f4:4a:91:22:57:e1:f7:91:9d:
b3:ee:0f:46:1f:09:c6:a0:9e:1b:5e:f3:18:de:55:90:aa:18:
d1:69:b6:b9:32:9b:38:06:33:d0:2c:b0:a1:3b:d3:94:58:ae:
cd:e6:15:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:29:46 2025 by rpki-client