Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/f1af90-355c-484b-b923-d31d4cb1b129/1/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.mft
File: MDCZQabYT6Tb3a8PTs2Z-fBDz9w.mft (raw, json)
Hash identifier: YbJAK8KwKyNuRBiIbz3YvzEkgU/jTLfKWiiUU747oCs=
Subject key identifier: 37:EF:CE:B0:25:5F:41:52:FD:3A:03:DE:D8:D9:DC:DD:A1:1E:2B:F4
Authority key identifier: 30:30:99:41:A6:D8:4F:A4:DB:DD:AF:0F:4E:CD:99:F9:F0:43:CF:DC
Certificate issuer: /CN=30309941a6d84fa4dbddaf0f4ecd99f9f043cfdc
Certificate serial: 0197B8FD7209F92B7F0DFAC90BC9B44AB03F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/f1af90-355c-484b-b923-d31d4cb1b129/1/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.mft
Manifest number: 1108
Signing time: Sun 29 Jun 2025 00:01:46 +0000
Manifest this update: Sun 29 Jun 2025 00:01:46 +0000
Manifest next update: Mon 30 Jun 2025 00:01:46 +0000
Files and hashes: 1: DIrH-kP5nT3HJlZe7jZz_CkvjFY.roa (hash: gKZZgzAyp+INbVPVuZgOHUrKZ9VQYbL1/WwPWyMWDfc=)
2: MDCZQabYT6Tb3a8PTs2Z-fBDz9w.crl (hash: mebmNbFdI13/1X0RMDXb6qzgP/EY2l6x8EhRXZ/Duxw=)
3: gD2PrMpYBnq5bkywvcg86wYgyi0.roa (hash: ZloCpzZ4hxZcPRO4MDOIHc0MdVfMRoHKIu3JaQVOrkU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/f1af90-355c-484b-b923-d31d4cb1b129/1/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/f1af90-355c-484b-b923-d31d4cb1b129/1/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:fd:72:09:f9:2b:7f:0d:fa:c9:0b:c9:b4:4a:b0:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30309941a6d84fa4dbddaf0f4ecd99f9f043cfdc
Validity
Not Before: Jun 29 00:01:46 2025 GMT
Not After : Jun 30 00:01:46 2025 GMT
Subject: CN=37efceb0255f4152fd3a03ded8d9dcdda11e2bf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d7:4e:99:00:82:f9:da:87:29:6f:0f:f8:75:
57:c6:05:8f:4e:11:9e:b4:eb:5a:fe:7a:fc:fb:2a:
8a:dd:11:47:c0:61:47:ea:e6:c1:bf:e2:1c:40:88:
fc:20:ca:d3:b0:f4:7a:8c:86:52:90:2b:d1:4e:fa:
3b:5e:ef:dc:77:bf:ec:97:2a:e8:88:6f:69:5a:30:
81:70:93:f6:4d:75:f1:e6:28:5d:de:58:ef:91:0d:
3a:8d:3e:49:9a:0b:46:93:b2:e9:4c:a6:d4:b5:c5:
71:23:16:c0:e2:98:9a:ad:5e:4f:d0:9b:15:16:ea:
bb:b2:f6:c5:d2:c7:d7:57:5d:bb:ca:24:f9:b8:bc:
20:79:1e:ff:a0:e7:7e:51:bc:1b:c3:94:50:90:9d:
2d:4f:6a:e0:b7:6e:fc:ac:4b:c2:0e:3c:87:e5:5f:
21:52:26:e6:31:8a:87:de:43:87:82:ec:50:0e:c6:
56:57:fb:12:83:c3:d7:83:f1:f3:bc:e1:e7:eb:8b:
4d:93:9f:de:44:9b:37:67:db:24:55:dc:11:78:6f:
db:85:b5:ce:7f:64:6d:d8:d4:9c:b8:cc:8b:e3:5c:
02:3d:b5:81:2f:32:87:85:4d:8f:8e:95:fb:13:87:
de:d1:4d:19:8b:aa:36:54:db:f8:08:30:15:e6:2b:
41:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:EF:CE:B0:25:5F:41:52:FD:3A:03:DE:D8:D9:DC:DD:A1:1E:2B:F4
X509v3 Authority Key Identifier:
keyid:30:30:99:41:A6:D8:4F:A4:DB:DD:AF:0F:4E:CD:99:F9:F0:43:CF:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/f1af90-355c-484b-b923-d31d4cb1b129/1/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/f1af90-355c-484b-b923-d31d4cb1b129/1/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:8f:00:36:87:31:52:a6:bc:ce:2b:60:fd:55:52:04:ce:fc:
d5:67:64:20:64:6a:22:06:39:7f:86:12:29:6c:eb:c2:f1:01:
4f:98:b3:0b:05:59:a4:fa:68:59:d2:54:d2:44:be:15:e8:eb:
b8:43:2d:b7:f0:22:10:4a:1a:e6:47:b5:85:7f:54:91:07:39:
fc:f6:4b:ab:fc:af:e5:72:37:48:fd:00:0c:19:07:bb:85:f1:
c8:fd:10:89:18:b6:0d:17:72:18:32:28:2f:bf:9f:87:46:be:
b2:3a:84:fa:89:65:82:b2:8e:c4:ba:50:18:d6:8c:3e:21:70:
64:2d:0c:d1:42:e8:9b:fa:fb:af:c0:ed:74:ff:77:99:83:b2:
4e:59:e3:d6:f4:18:3f:dd:1c:b0:71:78:e5:09:88:ae:1b:38:
1b:8e:c7:08:92:5e:06:52:ec:ef:23:61:cb:7e:be:6c:95:d9:
ad:62:21:a7:82:38:32:67:bf:9e:80:82:bb:31:77:3f:f3:00:
fa:af:40:79:d8:2b:09:48:12:88:eb:15:57:03:63:77:b3:e1:
46:88:71:b9:a6:c8:2f:09:79:bf:8a:2b:6e:e0:40:f6:a4:e9:
bf:ef:44:7b:5b:a2:dd:ca:4d:d7:a5:78:46:7a:46:48:24:92:
97:43:67:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4/XIJ+St/DfrJC8m0SrA/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwMzA5OTQxYTZkODRmYTRkYmRkYWYwZjRlY2Q5OWY5ZjA0
M2NmZGMwHhcNMjUwNjI5MDAwMTQ2WhcNMjUwNjMwMDAwMTQ2WjAzMTEwLwYDVQQD
EygzN2VmY2ViMDI1NWY0MTUyZmQzYTAzZGVkOGQ5ZGNkZGExMWUyYmY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9dOmQCC+dqHKW8P+HVXxgWPThGe
tOta/nr8+yqK3RFHwGFH6ubBv+IcQIj8IMrTsPR6jIZSkCvRTvo7Xu/cd7/slyro
iG9pWjCBcJP2TXXx5ihd3ljvkQ06jT5JmgtGk7LpTKbUtcVxIxbA4piarV5P0JsV
Fuq7svbF0sfXV127yiT5uLwgeR7/oOd+Ubwbw5RQkJ0tT2rgt278rEvCDjyH5V8h
UibmMYqH3kOHguxQDsZWV/sSg8PXg/HzvOHn64tNk5/eRJs3Z9skVdwReG/bhbXO
f2Rt2NScuMyL41wCPbWBLzKHhU2PjpX7E4fe0U0Zi6o2VNv4CDAV5itB6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDfvzrAlX0FS/ToD3tjZ3N2hHiv0MB8GA1UdIwQY
MBaAFDAwmUGm2E+k292vD07NmfnwQ8/cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTURDWlFhYllUNlRiM2E4UFRzMlotZkJEejl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9mMWFmOTAtMzU1Yy00ODRiLWI5MjMt
ZDMxZDRjYjFiMTI5LzEvTURDWlFhYllUNlRiM2E4UFRzMlotZkJEejl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi9mMWFmOTAtMzU1Yy00ODRiLWI5MjMtZDMxZDRjYjFiMTI5
LzEvTURDWlFhYllUNlRiM2E4UFRzMlotZkJEejl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlI8ANocx
Uqa8zitg/VVSBM781WdkIGRqIgY5f4YSKWzrwvEBT5izCwVZpPpoWdJU0kS+Fejr
uEMtt/AiEEoa5ke1hX9UkQc5/PZLq/yv5XI3SP0ADBkHu4XxyP0QiRi2DRdyGDIo
L7+fh0a+sjqE+ollgrKOxLpQGNaMPiFwZC0M0ULom/r7r8DtdP93mYOyTlnj1vQY
P90csHF45QmIrhs4G47HCJJeBlLs7yNhy36+bJXZrWIhp4I4Mme/noCCuzF3P/MA
+q9AedgrCUgSiOsVVwNjd7PhRohxuabILwl5v4orbuBA9qTpv+9Ee1ui3cpN16V4
RnpGSCSSl0Nn+w==
-----END CERTIFICATE-----
Generated at Sun Jun 29 02:19:31 2025 by rpki-client