Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/f1af90-355c-484b-b923-d31d4cb1b129/1/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.mft
File: MDCZQabYT6Tb3a8PTs2Z-fBDz9w.mft (raw, json)
Hash identifier: wmnBqNcmFHS83plkXpKw/JqiIYRdqcgZYQ6r8xwyHLU=
Subject key identifier: 83:10:60:4A:03:87:69:DE:56:3F:7A:63:B4:FB:FA:88:84:5D:65:86
Authority key identifier: 30:30:99:41:A6:D8:4F:A4:DB:DD:AF:0F:4E:CD:99:F9:F0:43:CF:DC
Certificate issuer: /CN=30309941a6d84fa4dbddaf0f4ecd99f9f043cfdc
Certificate serial: 0199FC58C715E8EA2FB32211C9FA44A07FE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/f1af90-355c-484b-b923-d31d4cb1b129/1/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.mft
Manifest number: 1234
Signing time: Sun 19 Oct 2025 12:01:40 +0000
Manifest this update: Sun 19 Oct 2025 12:01:40 +0000
Manifest next update: Mon 20 Oct 2025 12:01:40 +0000
Files and hashes: 1: DIrH-kP5nT3HJlZe7jZz_CkvjFY.roa (hash: gKZZgzAyp+INbVPVuZgOHUrKZ9VQYbL1/WwPWyMWDfc=)
2: MDCZQabYT6Tb3a8PTs2Z-fBDz9w.crl (hash: nVhbvymY+qzscXF98v6OqUXkMKUy9F+MzG1NhzTo/WA=)
3: gD2PrMpYBnq5bkywvcg86wYgyi0.roa (hash: ZloCpzZ4hxZcPRO4MDOIHc0MdVfMRoHKIu3JaQVOrkU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/f1af90-355c-484b-b923-d31d4cb1b129/1/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/f1af90-355c-484b-b923-d31d4cb1b129/1/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:c7:15:e8:ea:2f:b3:22:11:c9:fa:44:a0:7f:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30309941a6d84fa4dbddaf0f4ecd99f9f043cfdc
Validity
Not Before: Oct 19 12:01:40 2025 GMT
Not After : Oct 20 12:01:40 2025 GMT
Subject: CN=8310604a038769de563f7a63b4fbfa88845d6586
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:50:a0:b6:bb:6a:2a:9b:82:e5:ee:e3:a5:7e:
32:d0:ec:fc:30:f8:70:40:84:45:89:70:72:99:72:
f3:4c:13:a1:ef:2e:56:ff:9d:1c:ea:31:69:ad:38:
1b:04:bf:20:7d:85:4e:15:73:7a:ee:bb:4e:ed:c8:
91:9e:f0:7e:1f:36:5a:4e:78:a0:e2:af:1b:a1:e6:
a4:f2:9c:8a:c2:dc:62:21:01:a1:f3:3d:f2:66:35:
3f:7f:1e:e8:e8:5a:21:60:63:37:50:fb:fe:d7:c4:
61:06:bf:48:86:8b:a4:6b:96:7b:6a:7f:2d:29:61:
82:84:56:c7:c4:4a:a1:51:08:c0:1a:97:17:f0:8d:
99:6d:fc:10:9e:46:17:30:dd:3c:40:32:0b:db:f2:
64:86:cb:c3:12:94:ff:d8:21:3d:4d:e9:8e:76:91:
5f:b4:bb:c2:83:fe:6a:71:da:5e:69:b1:ca:13:f8:
1d:74:4c:fd:21:da:7b:a2:37:a7:e6:77:31:ce:38:
06:f1:ff:88:d1:4d:9e:57:5a:bc:25:f4:68:e7:91:
d0:b4:7b:e0:0f:b7:8d:05:eb:56:05:41:de:9b:f0:
c6:84:5e:89:6c:9e:81:87:ad:76:43:26:9a:8e:5f:
c7:af:1c:54:06:c0:91:9a:e9:66:8b:d8:10:29:ef:
6c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:10:60:4A:03:87:69:DE:56:3F:7A:63:B4:FB:FA:88:84:5D:65:86
X509v3 Authority Key Identifier:
keyid:30:30:99:41:A6:D8:4F:A4:DB:DD:AF:0F:4E:CD:99:F9:F0:43:CF:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/f1af90-355c-484b-b923-d31d4cb1b129/1/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/f1af90-355c-484b-b923-d31d4cb1b129/1/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:b8:15:ef:66:7e:33:ed:9a:ea:ce:d9:07:eb:0b:48:d5:04:
8e:a6:af:8e:02:6d:f4:04:c1:b6:56:59:87:33:e0:ae:46:a1:
70:5e:f7:72:49:65:08:70:f7:59:c9:49:2d:09:c7:ea:76:33:
d4:98:ca:de:83:a3:8a:21:4a:37:9d:d9:2e:88:da:ce:a1:fc:
be:0b:fc:f7:7c:73:19:45:9d:39:95:2c:2b:79:1e:fa:93:15:
27:af:4c:1e:a0:ca:81:15:90:39:b0:2c:db:cb:dc:f0:3b:f0:
9b:25:11:ed:6d:88:0b:45:84:a0:57:28:2d:09:e8:f0:b3:6a:
95:2f:19:b8:37:6a:35:32:4f:7a:88:77:a8:4f:b3:8e:d3:4a:
0b:b2:d2:37:4a:cf:56:b2:d8:86:76:d4:0b:87:d4:1d:b7:27:
a9:5a:24:ff:39:41:9f:4c:7d:41:17:21:f0:a7:35:75:9c:d5:
61:f8:95:8e:4f:6f:ab:0d:74:90:9d:cb:8f:ca:22:9b:63:08:
94:b2:d4:dd:70:90:e2:56:be:6a:a1:e7:2e:39:89:8d:69:e0:
2b:86:87:10:a5:95:fe:c9:ab:28:2f:30:d9:26:f4:d0:8c:25:
92:9a:bf:f2:b6:4b:0d:35:54:4f:a7:ff:78:da:08:25:9e:38:
c8:da:58:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:15 2025 by rpki-client