Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/d4dade-caef-4cd0-aef3-004f0cb3ed77/1/MDVUbqWweQVJyguhuyo-Hbrko9o.mft
File: MDVUbqWweQVJyguhuyo-Hbrko9o.mft (raw, json)
Hash identifier: zpYfxIDOro97jz66duHfzXNzSHN7qxm1paMSp6QdB+U=
Subject key identifier: 59:5E:B9:3A:69:C2:D1:C3:34:43:A5:03:83:B1:FE:1F:86:E9:D7:86
Authority key identifier: 30:35:54:6E:A5:B0:79:05:49:CA:0B:A1:BB:2A:3E:1D:BA:E4:A3:DA
Certificate issuer: /CN=3035546ea5b0790549ca0ba1bb2a3e1dbae4a3da
Certificate serial: 0198D70582E143A065B3B43881262B58AFC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MDVUbqWweQVJyguhuyo-Hbrko9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/d4dade-caef-4cd0-aef3-004f0cb3ed77/1/MDVUbqWweQVJyguhuyo-Hbrko9o.mft
Manifest number: 1249
Signing time: Sat 23 Aug 2025 13:01:59 +0000
Manifest this update: Sat 23 Aug 2025 13:01:59 +0000
Manifest next update: Sun 24 Aug 2025 13:01:59 +0000
Files and hashes: 1: 2W6axHjolbpaH6HEq0QZHunfxqw.roa (hash: wviH1ELaB1e2Lcqmt6CIweQCBrQQn4JSYfHt2lakpZo=)
2: MDVUbqWweQVJyguhuyo-Hbrko9o.crl (hash: U3DRXxawbuWXvB2Frs+LFxps9Aiqnxuc4M2tCiKQx/0=)
3: rrMUUFpVeR29bf5As6_7n50ECNM.roa (hash: kpYzrs/MH+Fk5UtuYnqob2xS0TbxQg7bm0bqEnSyqG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/d4dade-caef-4cd0-aef3-004f0cb3ed77/1/MDVUbqWweQVJyguhuyo-Hbrko9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/d4dade-caef-4cd0-aef3-004f0cb3ed77/1/MDVUbqWweQVJyguhuyo-Hbrko9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/MDVUbqWweQVJyguhuyo-Hbrko9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:82:e1:43:a0:65:b3:b4:38:81:26:2b:58:af:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3035546ea5b0790549ca0ba1bb2a3e1dbae4a3da
Validity
Not Before: Aug 23 13:01:59 2025 GMT
Not After : Aug 24 13:01:59 2025 GMT
Subject: CN=595eb93a69c2d1c33443a50383b1fe1f86e9d786
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ac:e0:a7:59:7d:98:04:ab:62:3b:75:2e:53:
02:d2:77:96:9a:d1:41:a3:ed:f0:ba:30:1d:1b:b6:
0a:9a:fa:e2:ca:ab:55:74:d4:1c:31:5e:4e:4b:e2:
6f:c6:d5:5f:09:99:70:fc:ab:ed:f4:ae:a2:d9:7a:
a0:eb:dc:e6:f1:6d:9b:47:e7:30:f1:7b:b3:c4:e7:
04:93:cf:af:d6:fc:01:f1:36:32:1f:cf:a3:a1:65:
ae:74:5e:94:b7:81:2e:a7:a3:1c:5c:a3:04:cf:1e:
09:33:48:76:ad:06:cc:c2:c1:3e:9a:fb:70:38:12:
5a:db:27:c6:cd:08:c0:c7:c1:9c:81:54:53:77:a9:
67:ca:a1:65:da:f9:a5:d7:87:c9:f8:5d:90:d5:30:
ce:18:1f:91:a8:db:fb:15:a4:db:a0:eb:da:07:18:
e2:38:1b:be:2a:06:d3:41:1b:8d:93:42:8d:1f:a0:
0f:04:4c:3e:36:c5:fa:fc:47:f4:d5:93:f0:b7:54:
86:63:d5:fb:25:dd:a2:24:d6:62:9d:c9:ea:1d:12:
ea:e5:d0:e1:a8:9d:7a:9b:31:ec:a5:e6:ae:c3:21:
d9:bf:58:99:fb:6a:78:05:9f:0c:1f:19:f4:b0:23:
38:8e:e2:85:4b:64:e3:56:8d:f4:d1:e0:ca:6f:84:
3a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:5E:B9:3A:69:C2:D1:C3:34:43:A5:03:83:B1:FE:1F:86:E9:D7:86
X509v3 Authority Key Identifier:
keyid:30:35:54:6E:A5:B0:79:05:49:CA:0B:A1:BB:2A:3E:1D:BA:E4:A3:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MDVUbqWweQVJyguhuyo-Hbrko9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/d4dade-caef-4cd0-aef3-004f0cb3ed77/1/MDVUbqWweQVJyguhuyo-Hbrko9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/d4dade-caef-4cd0-aef3-004f0cb3ed77/1/MDVUbqWweQVJyguhuyo-Hbrko9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:01:93:88:fd:95:92:91:7f:fe:a3:c2:83:f0:3f:54:43:2d:
ba:52:c1:dd:cc:1b:ee:c2:2d:f7:b4:0d:d4:46:be:c0:88:72:
d4:57:32:b7:17:66:75:80:6c:aa:25:e7:94:c3:86:70:06:f1:
b6:7b:bb:22:c5:5a:de:d4:21:69:5c:3b:b8:9b:1a:29:ae:bb:
d9:67:e5:0e:d3:90:45:64:ce:ec:6c:09:24:b0:d2:da:ad:1a:
1e:15:e6:3f:a5:05:37:aa:8c:fb:39:16:3e:33:34:c0:93:b4:
f3:65:18:21:16:c0:86:89:3c:37:70:68:9e:a4:af:dc:02:70:
1c:85:a2:53:e5:ea:d2:9b:c4:ed:86:7d:70:54:d7:41:56:93:
08:dd:55:e0:a5:8c:6a:07:b4:92:a7:e5:ce:4f:e8:ac:4d:36:
fe:25:57:db:cf:56:4d:ee:df:55:43:68:27:fa:b3:f5:ad:17:
5f:d6:1d:66:ee:1b:4f:db:59:5d:8c:46:d3:da:f0:96:d6:50:
56:eb:5a:75:44:4a:11:59:2d:6e:31:95:4c:88:a4:e0:c1:f4:
09:06:fb:25:7c:b1:4b:bc:ec:9e:90:51:1b:f3:5e:2c:95:87:
f6:26:1b:aa:3e:80:62:e3:cc:87:a0:2a:13:af:25:bf:6e:e8:
d6:b4:b2:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:11:29 2025 by rpki-client