Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/9dca0e-a41b-4972-bbb5-08e2b1017927/1/MCaAamuNrGjCoytlhJIpUk_DPac.mft
File: MCaAamuNrGjCoytlhJIpUk_DPac.mft (raw, json)
Hash identifier: XBHswg+v77IRbh9ESaB8wSlCdC4XAgrN6WxbiREVDVE=
Subject key identifier: 2A:B2:F4:3F:D3:C4:8D:37:8F:D4:E0:8D:7C:7D:B1:05:66:83:40:4D
Authority key identifier: 30:26:80:6A:6B:8D:AC:68:C2:A3:2B:65:84:92:29:52:4F:C3:3D:A7
Certificate issuer: /CN=3026806a6b8dac68c2a32b65849229524fc33da7
Certificate serial: 0198D473FAF3DE49FC794C8AD4AE72FBCD06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MCaAamuNrGjCoytlhJIpUk_DPac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/9dca0e-a41b-4972-bbb5-08e2b1017927/1/MCaAamuNrGjCoytlhJIpUk_DPac.mft
Manifest number: 0E0E
Signing time: Sat 23 Aug 2025 01:03:47 +0000
Manifest this update: Sat 23 Aug 2025 01:03:47 +0000
Manifest next update: Sun 24 Aug 2025 01:03:47 +0000
Files and hashes: 1: HqEtipzQowxTqcDrA6YD2PAM22k.roa (hash: +TySDtYTZSAF4An5pdiKoQwn0LwGdYxQZAyZ18GrAFU=)
2: MCaAamuNrGjCoytlhJIpUk_DPac.crl (hash: i6R/0gZz04yZMY1Q+2XNXIy7yqt9le46WwK06hjdmcE=)
3: SXPqMjJIqIiiKMiICnz-R2huK7A.roa (hash: VBPweWvhbagfxdIj/U/h3DiF8G4gGJiOVx2OPYGVAl8=)
4: mq67U8AOrv7b74cfkdBYBaypO5A.roa (hash: QY68SLY4zF8tJakUE4WpAwOGlOvHrGkBCR0Es/TMl1s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/9dca0e-a41b-4972-bbb5-08e2b1017927/1/MCaAamuNrGjCoytlhJIpUk_DPac.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/9dca0e-a41b-4972-bbb5-08e2b1017927/1/MCaAamuNrGjCoytlhJIpUk_DPac.mft
rsync://rpki.ripe.net/repository/DEFAULT/MCaAamuNrGjCoytlhJIpUk_DPac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:fa:f3:de:49:fc:79:4c:8a:d4:ae:72:fb:cd:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3026806a6b8dac68c2a32b65849229524fc33da7
Validity
Not Before: Aug 23 01:03:47 2025 GMT
Not After : Aug 24 01:03:47 2025 GMT
Subject: CN=2ab2f43fd3c48d378fd4e08d7c7db1056683404d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:3e:29:2b:e8:89:3a:51:b3:88:3c:9c:d8:df:
c4:02:d7:bf:71:26:ce:fc:b4:ab:72:f3:54:5f:a8:
8e:4b:e0:1f:93:de:3c:2d:13:74:11:f5:8f:46:33:
8b:f3:a6:bd:e2:b5:d6:f7:01:c9:6a:4f:21:9c:6e:
3b:15:26:d2:34:ab:fe:51:c9:a6:57:d5:02:27:4e:
e2:05:64:f2:27:ff:05:c8:26:fe:9c:a1:ae:18:15:
15:a5:20:b0:db:f5:18:4a:ec:2f:4e:dc:d5:d2:46:
b5:a0:03:42:c3:cd:73:26:8d:e6:9f:77:e7:aa:ab:
66:1c:73:22:f4:78:50:49:77:17:d2:2a:01:96:55:
f6:69:6e:79:3a:d1:1b:08:d4:5f:10:b6:22:2f:e5:
c3:13:45:31:62:af:a6:ac:74:46:7b:b1:7f:bd:be:
5d:30:67:e6:53:28:38:61:1a:36:f0:06:c4:b8:8f:
12:8e:d3:1e:4b:8e:b7:97:70:55:3c:47:0b:2a:d1:
45:ff:4b:ab:0a:ad:b9:60:a0:f3:00:ec:fe:6c:29:
c9:c9:6f:3d:e9:c9:72:c3:a6:c8:c1:b4:8a:10:57:
dc:57:7c:fa:c5:60:8f:5b:d4:10:6c:58:a5:9c:72:
46:83:71:1f:b9:3e:e1:89:c7:0f:bc:8b:dd:e5:5e:
f0:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:B2:F4:3F:D3:C4:8D:37:8F:D4:E0:8D:7C:7D:B1:05:66:83:40:4D
X509v3 Authority Key Identifier:
keyid:30:26:80:6A:6B:8D:AC:68:C2:A3:2B:65:84:92:29:52:4F:C3:3D:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MCaAamuNrGjCoytlhJIpUk_DPac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9dca0e-a41b-4972-bbb5-08e2b1017927/1/MCaAamuNrGjCoytlhJIpUk_DPac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9dca0e-a41b-4972-bbb5-08e2b1017927/1/MCaAamuNrGjCoytlhJIpUk_DPac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:93:0d:44:6f:06:cf:c0:36:c1:99:d9:e6:10:0f:88:dd:2d:
02:d0:13:f1:e8:69:18:10:30:a5:f2:de:f1:0d:81:5a:34:7e:
41:7e:62:ff:11:cc:0f:16:ee:e1:bc:56:9c:da:12:7b:de:68:
f8:c1:a7:8f:a5:1d:bb:fe:36:2a:b7:61:9b:02:bb:9a:1a:28:
22:60:67:91:6c:87:67:1e:66:4d:cc:c5:c7:19:8d:2b:e8:e2:
7c:f5:0f:8a:b0:7b:54:3b:be:f6:14:65:4e:56:f5:65:a2:57:
73:48:14:7c:ab:3b:7b:28:de:51:f5:b9:7a:d2:fe:d2:89:a1:
4f:4f:aa:cc:79:4a:bf:18:04:f7:58:1b:fa:b5:3c:95:ba:20:
3a:6c:a4:87:41:76:82:b2:c7:17:6c:2a:be:b8:0d:0b:46:a8:
e0:1d:bd:cc:d3:35:8c:ff:88:af:19:07:d6:3e:8f:dc:0a:bd:
2a:76:eb:e6:55:06:5d:db:7e:1b:75:64:74:13:a8:92:d9:fb:
e8:23:e3:76:87:0c:44:f2:fd:d2:02:31:54:94:1f:27:96:36:
11:47:68:5b:ee:93:92:40:f7:13:91:36:2d:15:e1:85:b4:78:
42:42:b8:d0:c7:0d:ab:cc:fb:57:ad:24:9d:3a:0a:5d:83:7e:
fa:9d:62:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:27:16 2025 by rpki-client