Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.mft
File: Mca7r0CfX9bXCcTX0kNEopKjyqU.mft (raw, json)
Hash identifier: tT9vn2tjvUVDhjrCBRJv5tN+v4p9rGLlN+5D77fGqo4=
Subject key identifier: 55:E5:C3:AE:FC:82:52:8D:35:14:59:E9:B9:32:29:1F:AB:BC:80:1D
Authority key identifier: 31:C6:BB:AF:40:9F:5F:D6:D7:09:C4:D7:D2:43:44:A2:92:A3:CA:A5
Certificate issuer: /CN=31c6bbaf409f5fd6d709c4d7d24344a292a3caa5
Certificate serial: 0198D66082A977499C642C78F33234309AAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mca7r0CfX9bXCcTX0kNEopKjyqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.mft
Manifest number: 1273
Signing time: Sat 23 Aug 2025 10:01:45 +0000
Manifest this update: Sat 23 Aug 2025 10:01:45 +0000
Manifest next update: Sun 24 Aug 2025 10:01:45 +0000
Files and hashes: 1: Kt18qGRPFhnoeDMRU6Ja36FUtdA.roa (hash: ZdZhwP5GgUBDAZeIM6qZ4JCbpszuez2XwZJ3dyqtyLY=)
2: Mca7r0CfX9bXCcTX0kNEopKjyqU.crl (hash: 08jRKd/WX9JLAbthofAkqK3wE1Br+nLbsbVtaao98NM=)
3: yRmsjuq_F6DD6X9AriATfFnXQ5Y.roa (hash: v4PNoMO1RSILauLPhTzIlbmj9RAxx7AGmat1z5c9V7E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mca7r0CfX9bXCcTX0kNEopKjyqU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:82:a9:77:49:9c:64:2c:78:f3:32:34:30:9a:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31c6bbaf409f5fd6d709c4d7d24344a292a3caa5
Validity
Not Before: Aug 23 10:01:45 2025 GMT
Not After : Aug 24 10:01:45 2025 GMT
Subject: CN=55e5c3aefc82528d351459e9b932291fabbc801d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b0:7e:84:15:33:31:94:26:8d:e0:42:8b:55:
b4:dc:f6:c2:2d:b0:80:c4:e3:87:65:6c:4c:7a:9c:
c0:e3:f5:53:b8:78:7f:fe:72:f6:c8:ae:5b:61:f2:
0b:9d:0c:8b:40:cd:05:69:67:7d:94:d7:c7:d7:6e:
a8:96:1a:28:ff:d3:24:4e:1f:3f:a1:0c:fc:cd:6c:
d1:0d:40:ca:0a:0d:21:a1:b3:a8:7c:41:b3:b9:b2:
28:5e:e5:a8:6c:09:99:64:bf:1a:43:e0:11:c1:04:
cb:9f:7f:ae:c0:3d:e4:d8:1c:27:30:36:ea:61:99:
8f:f9:f1:c4:02:85:3c:1d:f8:d8:ea:6b:c8:3e:b2:
b4:1e:7c:18:55:1a:fa:fb:11:5d:ad:51:df:a1:c9:
d8:66:2a:3d:61:7c:df:84:35:0c:1d:84:45:40:a3:
c0:43:51:b7:63:cc:51:52:a9:6e:12:f3:da:b8:7c:
6c:f5:d7:dc:26:da:09:1a:80:10:96:47:b8:11:28:
ce:2d:6b:65:fb:f4:1b:6f:58:11:38:6d:7a:be:45:
29:bc:ce:b2:5c:d5:1c:f1:7a:1e:ff:1c:21:e2:28:
32:4e:5b:6b:74:0c:30:73:b0:dd:6d:b8:f6:df:e3:
d4:c8:3f:a9:6f:ea:e8:0c:2f:c0:8c:46:00:14:9c:
1e:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:E5:C3:AE:FC:82:52:8D:35:14:59:E9:B9:32:29:1F:AB:BC:80:1D
X509v3 Authority Key Identifier:
keyid:31:C6:BB:AF:40:9F:5F:D6:D7:09:C4:D7:D2:43:44:A2:92:A3:CA:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mca7r0CfX9bXCcTX0kNEopKjyqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:12:dd:e3:f8:77:d2:a5:8c:92:8a:d0:63:68:da:de:34:4c:
74:b9:b9:df:24:cf:4b:bf:7b:98:16:2f:44:24:45:aa:60:ee:
2f:30:44:78:25:55:6c:1a:2c:4e:ee:1e:af:34:95:17:df:6d:
5e:1e:92:15:ed:76:d8:3a:bb:25:33:b9:4a:e6:bd:63:93:e0:
e3:6e:c0:ec:94:94:f6:54:e0:91:0d:be:9d:29:cd:7a:b2:5c:
6d:1a:a9:9b:8b:38:06:2d:07:b2:a4:12:30:1e:c3:70:bd:2e:
92:cc:f6:3c:c4:7f:95:8a:ac:ca:05:00:48:4a:6f:46:72:1b:
93:c7:33:5f:6a:24:8f:22:f2:c2:85:c0:0e:db:f3:6c:31:e2:
7e:91:be:41:99:83:b9:5f:12:b5:d2:8a:4b:c5:42:e2:c2:9f:
1c:1e:1e:89:05:f6:9f:bf:2a:8b:14:b2:8f:ac:06:90:35:7c:
cb:39:fb:85:aa:2b:d9:01:fa:bc:16:fb:8b:e5:b1:6d:05:09:
f2:ae:4b:5a:7b:80:78:f1:71:57:fa:7f:0f:10:b5:3c:08:54:
ca:35:88:c6:99:e3:b0:1e:9d:fe:3b:b8:65:d7:36:ef:99:30:
a9:0a:5e:76:f3:cc:51:60:66:87:e2:41:ad:f2:40:a2:b1:0f:
61:e5:0a:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:02:12 2025 by rpki-client