Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/d4dade-caef-4cd0-aef3-004f0cb3ed77/1/MDVUbqWweQVJyguhuyo-Hbrko9o.mft
File: MDVUbqWweQVJyguhuyo-Hbrko9o.mft (raw, json)
Hash identifier: l2GM3p+6avBnfyfaPEsJFaoHiK6OXY4B2YzkYNmf2tQ=
Subject key identifier: 9C:A0:43:11:B5:34:03:AC:7D:21:A5:26:5B:68:6F:34:CC:A7:4F:6D
Authority key identifier: 30:35:54:6E:A5:B0:79:05:49:CA:0B:A1:BB:2A:3E:1D:BA:E4:A3:DA
Certificate issuer: /CN=3035546ea5b0790549ca0ba1bb2a3e1dbae4a3da
Certificate serial: 0199FC8F957E14AA38C545A08F875DF17A35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MDVUbqWweQVJyguhuyo-Hbrko9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/d4dade-caef-4cd0-aef3-004f0cb3ed77/1/MDVUbqWweQVJyguhuyo-Hbrko9o.mft
Manifest number: 12E1
Signing time: Sun 19 Oct 2025 13:01:32 +0000
Manifest this update: Sun 19 Oct 2025 13:01:32 +0000
Manifest next update: Mon 20 Oct 2025 13:01:32 +0000
Files and hashes: 1: 2W6axHjolbpaH6HEq0QZHunfxqw.roa (hash: wviH1ELaB1e2Lcqmt6CIweQCBrQQn4JSYfHt2lakpZo=)
2: MDVUbqWweQVJyguhuyo-Hbrko9o.crl (hash: OnFvSqwYWC8f94/DS5RjsQq41/y+s3AMA9fpoLOK5ok=)
3: rrMUUFpVeR29bf5As6_7n50ECNM.roa (hash: kpYzrs/MH+Fk5UtuYnqob2xS0TbxQg7bm0bqEnSyqG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/d4dade-caef-4cd0-aef3-004f0cb3ed77/1/MDVUbqWweQVJyguhuyo-Hbrko9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/d4dade-caef-4cd0-aef3-004f0cb3ed77/1/MDVUbqWweQVJyguhuyo-Hbrko9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/MDVUbqWweQVJyguhuyo-Hbrko9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:95:7e:14:aa:38:c5:45:a0:8f:87:5d:f1:7a:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3035546ea5b0790549ca0ba1bb2a3e1dbae4a3da
Validity
Not Before: Oct 19 13:01:32 2025 GMT
Not After : Oct 20 13:01:32 2025 GMT
Subject: CN=9ca04311b53403ac7d21a5265b686f34cca74f6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:87:9e:a2:dc:bc:4d:4b:97:fb:21:70:75:16:
4f:d5:91:3f:c9:33:9b:dc:50:ea:60:d9:99:f4:0c:
b0:cf:70:99:83:b9:f2:c1:40:64:08:5f:89:c0:5f:
1f:1d:e5:fb:4e:6b:6b:b7:f8:c4:8e:09:d4:a4:a5:
2f:a5:90:db:a0:88:bb:c1:0e:43:6a:fd:0b:85:85:
1c:34:bd:50:b1:bf:c6:68:18:58:ff:bb:69:b8:6e:
92:a1:c4:d0:bf:fd:26:43:cc:40:74:aa:b5:b6:aa:
93:aa:57:cd:de:8f:6c:ef:55:e2:12:2e:2b:03:d7:
6b:d5:18:6a:3b:ed:23:f4:10:22:27:ce:68:7c:f8:
5b:ec:78:9f:99:ee:ed:9b:a9:f8:59:f7:a3:4f:7c:
b7:64:59:ea:e6:2e:29:70:8b:7b:42:09:28:62:db:
a5:a6:c2:36:7e:f6:90:85:e2:fe:5a:36:67:58:fa:
54:2e:84:ca:20:a0:ce:d8:f3:07:08:41:ef:50:09:
86:17:a7:66:6b:79:b1:4c:f9:d9:b5:07:62:3d:0e:
66:48:60:f9:a4:59:85:f5:95:89:27:ab:53:4e:bf:
19:6e:c9:14:8e:a0:dc:f2:33:ee:8f:11:c6:e8:82:
3a:3a:c9:00:c5:0e:cc:56:08:87:1e:35:d1:2d:f2:
96:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:A0:43:11:B5:34:03:AC:7D:21:A5:26:5B:68:6F:34:CC:A7:4F:6D
X509v3 Authority Key Identifier:
keyid:30:35:54:6E:A5:B0:79:05:49:CA:0B:A1:BB:2A:3E:1D:BA:E4:A3:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MDVUbqWweQVJyguhuyo-Hbrko9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/d4dade-caef-4cd0-aef3-004f0cb3ed77/1/MDVUbqWweQVJyguhuyo-Hbrko9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/d4dade-caef-4cd0-aef3-004f0cb3ed77/1/MDVUbqWweQVJyguhuyo-Hbrko9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:39:0f:86:f8:78:cd:67:ef:fd:9c:7d:65:ea:4a:1f:ba:86:
f7:61:a3:09:2e:26:fb:76:bf:57:ba:20:39:35:cd:2e:68:e5:
52:ac:40:55:b9:e5:64:25:9f:36:c5:ac:47:05:86:de:a0:3c:
b9:55:a9:a8:3b:77:66:c5:a5:64:03:7d:a6:b9:f7:1b:cc:71:
24:6f:ec:f7:1c:3b:56:90:b1:5a:bf:9e:54:ae:5f:cc:af:68:
2a:33:a3:9e:3b:c2:85:bc:8b:ea:07:d0:30:13:e0:a0:5e:e5:
c0:57:81:f7:62:22:21:94:fd:6e:06:1e:bc:c9:25:45:36:f9:
ab:e5:da:ba:32:df:c9:fa:40:28:ed:2c:95:77:c6:78:6a:9b:
66:9d:53:f4:b9:4c:19:ee:75:ac:89:51:c3:a1:93:af:84:4e:
72:4a:8e:6a:71:b4:64:9a:aa:6c:be:a2:29:29:5f:84:52:09:
0e:21:91:db:86:69:38:81:f4:e4:29:ec:11:5e:55:6f:0e:2b:
d3:3b:bb:83:62:06:2c:30:be:48:26:85:49:89:34:31:6e:a1:
0b:49:a2:9d:18:c0:ed:eb:57:53:aa:c9:60:3f:e8:07:e4:0e:
98:28:7d:ec:8d:f4:9e:53:5c:0e:d6:bd:6b:e9:d8:a7:1d:c2:
f8:65:82:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8j5V+FKo4xUWgj4dd8Xo1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwMzU1NDZlYTViMDc5MDU0OWNhMGJhMWJiMmEzZTFkYmFl
NGEzZGEwHhcNMjUxMDE5MTMwMTMyWhcNMjUxMDIwMTMwMTMyWjAzMTEwLwYDVQQD
Eyg5Y2EwNDMxMWI1MzQwM2FjN2QyMWE1MjY1YjY4NmYzNGNjYTc0ZjZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl4eeoty8TUuX+yFwdRZP1ZE/yTOb
3FDqYNmZ9Aywz3CZg7nywUBkCF+JwF8fHeX7Tmtrt/jEjgnUpKUvpZDboIi7wQ5D
av0LhYUcNL1Qsb/GaBhY/7tpuG6SocTQv/0mQ8xAdKq1tqqTqlfN3o9s71XiEi4r
A9dr1RhqO+0j9BAiJ85ofPhb7Hifme7tm6n4WfejT3y3ZFnq5i4pcIt7QgkoYtul
psI2fvaQheL+WjZnWPpULoTKIKDO2PMHCEHvUAmGF6dma3mxTPnZtQdiPQ5mSGD5
pFmF9ZWJJ6tTTr8ZbskUjqDc8jPujxHG6II6OskAxQ7MVgiHHjXRLfKWRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJygQxG1NAOsfSGlJltobzTMp09tMB8GA1UdIwQY
MBaAFDA1VG6lsHkFScoLobsqPh265KPaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTURWVWJxV3dlUVZKeWd1aHV5by1IYnJrbzlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9kNGRhZGUtY2FlZi00Y2QwLWFlZjMt
MDA0ZjBjYjNlZDc3LzEvTURWVWJxV3dlUVZKeWd1aHV5by1IYnJrbzlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC9kNGRhZGUtY2FlZi00Y2QwLWFlZjMtMDA0ZjBjYjNlZDc3
LzEvTURWVWJxV3dlUVZKeWd1aHV5by1IYnJrbzlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfzkPhvh4
zWfv/Zx9ZepKH7qG92GjCS4m+3a/V7ogOTXNLmjlUqxAVbnlZCWfNsWsRwWG3qA8
uVWpqDt3ZsWlZAN9prn3G8xxJG/s9xw7VpCxWr+eVK5fzK9oKjOjnjvChbyL6gfQ
MBPgoF7lwFeB92IiIZT9bgYevMklRTb5q+XaujLfyfpAKO0slXfGeGqbZp1T9LlM
Ge51rIlRw6GTr4ROckqOanG0ZJqqbL6iKSlfhFIJDiGR24ZpOIH05CnsEV5Vbw4r
0zu7g2IGLDC+SCaFSYk0MW6hC0minRjA7etXU6rJYD/oB+QOmCh97I30nlNcDta9
a+nYpx3C+GWCkQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:25 2025 by rpki-client