Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/4a523b-7244-422d-9004-c4aa9db1abb5/1/MCX9M5qmRQTyiaAMQXPFWgAC60Q.mft
File: MCX9M5qmRQTyiaAMQXPFWgAC60Q.mft (raw, json)
Hash identifier: sZhTZFk9jsEVJF6DS+IAA2fwRRjheLNhZag/+JAQhDk=
Subject key identifier: B8:90:24:A0:2A:A9:2B:F3:85:EB:6E:6F:72:C3:42:50:A9:5E:DB:D3
Authority key identifier: 30:25:FD:33:9A:A6:45:04:F2:89:A0:0C:41:73:C5:5A:00:02:EB:44
Certificate issuer: /CN=3025fd339aa64504f289a00c4173c55a0002eb44
Certificate serial: 0198D7E179537947EAD048D945D2FDBC3D02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MCX9M5qmRQTyiaAMQXPFWgAC60Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/4a523b-7244-422d-9004-c4aa9db1abb5/1/MCX9M5qmRQTyiaAMQXPFWgAC60Q.mft
Manifest number: 1013
Signing time: Sat 23 Aug 2025 17:02:14 +0000
Manifest this update: Sat 23 Aug 2025 17:02:14 +0000
Manifest next update: Sun 24 Aug 2025 17:02:14 +0000
Files and hashes: 1: DPz87dZS9HseddW8gbD-vS7fq9g.roa (hash: 4BW75SF0KzzzYTTCKr54E2E3BA1EBeDyvFumW+QYO5M=)
2: MCX9M5qmRQTyiaAMQXPFWgAC60Q.crl (hash: MNIOiwHCIR3O1kARXk8Sxhx2I1PlCBVQX83FL0vLX0o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/4a523b-7244-422d-9004-c4aa9db1abb5/1/MCX9M5qmRQTyiaAMQXPFWgAC60Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/4a523b-7244-422d-9004-c4aa9db1abb5/1/MCX9M5qmRQTyiaAMQXPFWgAC60Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/MCX9M5qmRQTyiaAMQXPFWgAC60Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:e1:79:53:79:47:ea:d0:48:d9:45:d2:fd:bc:3d:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3025fd339aa64504f289a00c4173c55a0002eb44
Validity
Not Before: Aug 23 17:02:14 2025 GMT
Not After : Aug 24 17:02:14 2025 GMT
Subject: CN=b89024a02aa92bf385eb6e6f72c34250a95edbd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:18:2e:13:7c:a5:bf:b1:3a:a5:9d:d3:bb:4c:
af:e6:71:2b:1a:13:33:c8:4c:84:5e:60:fb:c5:fa:
9d:5e:af:c1:af:7d:22:d5:3c:16:dd:14:b2:69:7b:
a9:10:e7:53:21:57:92:81:ce:02:5c:6d:65:10:2d:
0d:39:d1:05:19:8c:cf:ae:60:55:74:c2:95:fd:b6:
bd:c4:d7:cc:4b:60:1a:fc:55:42:f4:e8:8d:4a:9a:
39:76:0d:3f:ff:36:03:21:a8:04:5f:52:72:4e:1c:
ae:f5:1d:5e:2b:0a:6b:7a:a1:c7:b8:77:ac:17:ff:
7e:7e:62:2b:8b:b7:af:ca:73:10:a0:e2:4a:02:89:
a0:81:43:c7:d4:48:d3:0d:e0:a1:f2:20:08:93:5c:
31:89:bf:d4:b2:8c:6b:4e:d9:1c:59:10:54:96:f9:
02:6b:d1:05:2d:a5:95:4d:d4:c2:6b:50:14:d9:8e:
48:8d:d7:75:68:20:15:86:15:75:3e:82:24:7e:e9:
a8:64:5e:ba:4f:d5:83:53:21:e4:fd:f7:00:43:8c:
ae:e1:2f:5a:10:5c:9c:49:84:16:48:f4:89:d2:ec:
bf:00:3a:3f:b0:fb:16:1f:9c:68:74:06:81:31:10:
15:3f:d6:e7:0f:04:5d:a9:15:d9:ea:8a:ea:7d:95:
8b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:90:24:A0:2A:A9:2B:F3:85:EB:6E:6F:72:C3:42:50:A9:5E:DB:D3
X509v3 Authority Key Identifier:
keyid:30:25:FD:33:9A:A6:45:04:F2:89:A0:0C:41:73:C5:5A:00:02:EB:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MCX9M5qmRQTyiaAMQXPFWgAC60Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4a523b-7244-422d-9004-c4aa9db1abb5/1/MCX9M5qmRQTyiaAMQXPFWgAC60Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4a523b-7244-422d-9004-c4aa9db1abb5/1/MCX9M5qmRQTyiaAMQXPFWgAC60Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:8b:b2:86:b6:ee:f5:b0:b8:86:8b:2a:65:2d:bf:65:d0:cb:
97:9c:21:49:e3:61:7d:1c:16:e3:9c:73:be:26:40:b7:45:e0:
f9:16:c7:b1:a4:b3:f9:6b:75:8a:34:b6:b5:74:5f:7f:d4:59:
fc:f1:02:52:5b:7f:f0:ab:76:b2:29:92:aa:71:0c:01:9f:8c:
40:2f:87:fb:9c:03:5c:98:19:50:8c:8e:77:65:ea:9b:55:48:
ff:c1:22:3e:e9:b9:83:a1:da:55:09:1a:a1:5c:86:a1:2e:1f:
df:f8:51:f6:53:93:b6:94:b6:3c:6c:3d:97:2f:2e:67:32:8b:
2e:7d:9f:33:3c:4e:bd:92:8f:38:89:e9:d4:3d:e8:7d:2e:42:
73:ec:e7:73:4a:23:0e:82:b0:c8:5e:cd:bb:da:4d:60:0c:0c:
b3:36:08:0f:56:ae:59:b9:b7:75:6f:8b:80:03:24:65:03:68:
58:72:06:1f:d7:a8:36:3e:56:ee:5e:ab:41:4e:97:69:a0:b2:
ab:e1:75:d5:ad:b4:10:57:2e:43:0c:7f:5d:3f:cf:16:eb:28:
27:39:07:60:23:ba:83:a7:f4:17:fd:ec:5f:0a:31:a6:2c:2a:
53:4c:7f:94:8c:f6:99:f3:00:63:3e:20:c3:9b:23:9c:30:ab:
75:70:af:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:08:24 2025 by rpki-client