Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/4a523b-7244-422d-9004-c4aa9db1abb5/1/MCX9M5qmRQTyiaAMQXPFWgAC60Q.mft
File: MCX9M5qmRQTyiaAMQXPFWgAC60Q.mft (raw, json)
Hash identifier: 2X4CN6eqAJfxCT/TFQONYJJ05Ei71kg/IKG+gtnWt6E=
Subject key identifier: 6E:4E:73:9B:50:9A:94:77:B0:C1:61:4A:5E:3E:AE:2F:5F:58:E7:64
Authority key identifier: 30:25:FD:33:9A:A6:45:04:F2:89:A0:0C:41:73:C5:5A:00:02:EB:44
Certificate issuer: /CN=3025fd339aa64504f289a00c4173c55a0002eb44
Certificate serial: 0199FF595548E86CF14C74A74BFF9C19E038
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MCX9M5qmRQTyiaAMQXPFWgAC60Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/4a523b-7244-422d-9004-c4aa9db1abb5/1/MCX9M5qmRQTyiaAMQXPFWgAC60Q.mft
Manifest number: 10AC
Signing time: Mon 20 Oct 2025 02:01:08 +0000
Manifest this update: Mon 20 Oct 2025 02:01:08 +0000
Manifest next update: Tue 21 Oct 2025 02:01:08 +0000
Files and hashes: 1: DPz87dZS9HseddW8gbD-vS7fq9g.roa (hash: 4BW75SF0KzzzYTTCKr54E2E3BA1EBeDyvFumW+QYO5M=)
2: MCX9M5qmRQTyiaAMQXPFWgAC60Q.crl (hash: 4c+5TbP6LUgs+MXyUHX9dVut7wNfJENDJCbH82zBafE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/4a523b-7244-422d-9004-c4aa9db1abb5/1/MCX9M5qmRQTyiaAMQXPFWgAC60Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/4a523b-7244-422d-9004-c4aa9db1abb5/1/MCX9M5qmRQTyiaAMQXPFWgAC60Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/MCX9M5qmRQTyiaAMQXPFWgAC60Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 02:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:59:55:48:e8:6c:f1:4c:74:a7:4b:ff:9c:19:e0:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3025fd339aa64504f289a00c4173c55a0002eb44
Validity
Not Before: Oct 20 02:01:08 2025 GMT
Not After : Oct 21 02:01:08 2025 GMT
Subject: CN=6e4e739b509a9477b0c1614a5e3eae2f5f58e764
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4f:d2:ff:3a:48:51:18:7b:d4:f7:f2:a4:50:
be:c1:03:07:50:ae:fd:f3:22:1c:c6:30:16:69:00:
a8:2f:e3:d7:b3:a9:23:bd:9e:d7:ca:cb:8a:ab:9c:
87:23:9a:01:40:8e:a3:e2:e4:b4:0c:14:a6:bd:5f:
51:ec:8c:66:7f:e1:b2:35:29:47:9c:10:64:ec:07:
af:76:cc:84:78:92:aa:17:b0:29:51:f0:25:ae:ad:
cc:fa:43:21:36:94:9f:2b:15:6a:fc:ef:cf:c0:db:
1e:eb:a7:e9:e3:50:5a:cc:65:b6:85:00:27:6d:19:
ea:13:25:fb:7f:1f:30:50:0e:37:1c:59:ae:d1:db:
9d:a3:0d:63:74:19:21:98:5d:44:33:e6:b1:0f:1c:
ae:2e:6f:1a:fb:87:b3:04:7b:da:78:71:4b:4d:25:
39:5d:23:60:d1:7d:47:53:09:df:0f:65:61:45:1c:
80:11:0e:27:7e:87:fe:88:40:e9:01:ec:95:66:aa:
9b:f9:d4:ad:fc:d0:11:64:c2:6b:6a:00:98:fc:6c:
0a:73:00:18:53:a1:14:51:b5:51:69:b5:ff:e5:4f:
9f:9b:48:b5:7c:61:f2:42:90:9a:2f:97:f5:b0:90:
10:53:c9:72:fe:45:70:04:67:ab:c5:5b:9f:73:75:
1c:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:4E:73:9B:50:9A:94:77:B0:C1:61:4A:5E:3E:AE:2F:5F:58:E7:64
X509v3 Authority Key Identifier:
keyid:30:25:FD:33:9A:A6:45:04:F2:89:A0:0C:41:73:C5:5A:00:02:EB:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MCX9M5qmRQTyiaAMQXPFWgAC60Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4a523b-7244-422d-9004-c4aa9db1abb5/1/MCX9M5qmRQTyiaAMQXPFWgAC60Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4a523b-7244-422d-9004-c4aa9db1abb5/1/MCX9M5qmRQTyiaAMQXPFWgAC60Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:26:09:6b:9a:b8:42:9c:e7:ef:73:05:8a:d6:f4:36:b3:2e:
10:39:29:1a:49:8d:fc:a2:b1:9b:5c:09:e3:11:19:a9:29:8a:
ab:bc:16:57:d9:49:87:a3:a8:cc:66:8d:13:60:e4:d5:5a:1e:
1e:ef:ff:f9:b5:f5:88:e2:39:c3:df:b4:56:34:bf:58:e9:ab:
77:05:b3:e6:df:f0:27:14:02:1e:f9:34:26:0f:49:b1:61:5e:
bc:2e:d2:0a:8f:c8:94:df:e3:7e:51:02:5a:0e:0b:ec:7d:9e:
28:12:1e:78:f3:e7:01:5e:13:de:51:11:0f:cb:5e:47:54:72:
07:94:aa:6e:3e:4e:0c:9d:c9:07:b6:c3:e3:4e:1e:ef:f3:72:
1a:30:27:c1:5c:ba:c7:15:03:a0:24:ac:05:43:4a:62:17:e1:
03:26:8c:50:58:10:a1:10:50:17:ba:c6:5a:8b:08:29:94:39:
e7:b9:ce:11:20:a1:0c:05:b7:9f:a7:0b:4d:a2:56:8c:76:58:
8b:fb:aa:90:ad:1b:ce:a1:92:2a:39:97:66:30:2a:19:f9:e9:
f5:d4:c0:9e:86:ee:fb:84:d0:a2:04:5c:8e:fc:03:30:b3:f2:
81:ff:95:23:1b:7a:b8:15:cc:a0:36:57:99:36:33:2b:89:cc:
a0:cb:0d:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:32:32 2025 by rpki-client