Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.mft
File: MCemMbtnOOtou26mxCTvSn0Uw8s.mft (raw, json)
Hash identifier: LOt/Fn4/jtZLC6ukcYknSbc115yJOWHl3K0oeQ1hi7M=
Subject key identifier: CA:16:39:3A:34:9B:BC:21:96:70:72:84:A5:F3:1C:1A:9B:C3:11:25
Authority key identifier: 30:27:A6:31:BB:67:38:EB:68:BB:6E:A6:C4:24:EF:4A:7D:14:C3:CB
Certificate issuer: /CN=3027a631bb6738eb68bb6ea6c424ef4a7d14c3cb
Certificate serial: 019873E33C79B84F7F21CFA4F7E2DC5A2B0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MCemMbtnOOtou26mxCTvSn0Uw8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.mft
Manifest number: 1618
Signing time: Mon 04 Aug 2025 07:02:08 +0000
Manifest this update: Mon 04 Aug 2025 07:02:08 +0000
Manifest next update: Tue 05 Aug 2025 07:02:08 +0000
Files and hashes: 1: ApyGylUq9XnJnWFVsfj0zntPv2A.roa (hash: J/AU6L4U60tQsws5n8ktoibPaB7afggy7L2/aS0YmuI=)
2: GebDZHzgUSVpcN28Yg77a-VI06g.roa (hash: dm+f03y/iSx5h5jyotT9d+cvRSI3pxxJ+UatUa1LFiM=)
3: MCemMbtnOOtou26mxCTvSn0Uw8s.crl (hash: 6QIsYYrAMq1qOqPI1xXQ+WFAUV5ZuQass0Sb1tp4G/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MCemMbtnOOtou26mxCTvSn0Uw8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:3c:79:b8:4f:7f:21:cf:a4:f7:e2:dc:5a:2b:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3027a631bb6738eb68bb6ea6c424ef4a7d14c3cb
Validity
Not Before: Aug 4 07:02:08 2025 GMT
Not After : Aug 5 07:02:08 2025 GMT
Subject: CN=ca16393a349bbc2196707284a5f31c1a9bc31125
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f0:16:54:0a:a7:4b:4a:83:fb:e9:91:62:af:
65:c7:35:44:ea:09:f7:dd:3c:1a:4f:be:e5:1d:34:
5e:69:3f:33:bd:ff:64:64:a3:e7:b2:4c:2b:6a:e9:
8d:cc:c7:58:e1:7b:40:80:4c:64:f1:88:8a:2f:e3:
fd:1c:c6:e4:b0:75:ec:b1:79:19:b2:01:df:5b:89:
76:4b:2c:ea:8c:90:57:ed:a4:f3:f0:7c:60:a3:c1:
05:3e:df:c1:f7:f4:9c:be:8e:8e:46:41:44:70:22:
7b:6d:ca:35:91:5d:a2:71:72:ff:b4:56:98:f5:9f:
43:81:24:13:c9:be:3b:6b:2d:74:5e:aa:4e:de:3b:
1d:9a:d2:d7:69:d6:8e:cd:27:1b:5b:a5:5f:94:30:
cb:8e:87:59:3d:56:8a:24:21:4e:62:26:36:05:de:
04:c6:e3:78:02:32:69:9a:63:52:5e:3a:92:e9:c6:
bd:49:0a:ca:c0:04:df:07:af:a3:0e:96:2a:d3:66:
e8:10:1d:97:8b:97:0c:19:91:45:78:29:15:75:38:
2c:a2:f0:bd:fe:a7:09:9a:2a:d4:4e:70:93:e6:14:
40:0f:71:42:0a:41:30:00:89:90:5a:b0:57:13:e9:
1d:a5:3e:d2:f9:c8:63:1d:bb:29:37:b5:d4:a6:d7:
01:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:16:39:3A:34:9B:BC:21:96:70:72:84:A5:F3:1C:1A:9B:C3:11:25
X509v3 Authority Key Identifier:
keyid:30:27:A6:31:BB:67:38:EB:68:BB:6E:A6:C4:24:EF:4A:7D:14:C3:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MCemMbtnOOtou26mxCTvSn0Uw8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:a6:40:78:22:85:2f:a9:da:19:f8:b4:dd:ae:9c:a9:56:66:
49:1a:6d:15:89:72:0c:0b:41:31:53:7a:6a:44:ea:f2:21:60:
39:45:19:70:31:76:7d:24:56:cd:04:9f:f5:e4:2b:88:a2:49:
78:31:30:ae:37:3b:38:10:c5:e3:ee:7f:b4:fc:77:8c:8f:6d:
c6:7f:2f:e8:86:00:ae:3d:6f:c9:ec:01:f8:70:47:98:25:c3:
7f:22:cc:c2:e6:5f:4d:da:22:0f:f5:be:35:ac:b7:e4:51:95:
85:78:70:3f:f2:a9:f2:bb:3b:eb:4c:cc:d6:51:8c:d2:9e:7d:
1e:32:a7:1a:5d:bd:06:84:73:02:52:04:e9:8e:36:80:5a:56:
c8:7f:42:c9:bd:73:62:3b:3c:4f:52:15:b3:cf:cd:58:16:86:
14:22:ab:92:f4:2c:c6:c4:c7:e6:f4:d6:c9:99:c4:12:22:42:
e3:bd:64:ed:e4:f2:3d:a6:9a:40:2d:6d:0e:ad:25:f6:1c:81:
c7:33:f3:30:c4:45:f4:15:85:0d:42:15:80:4b:f3:de:00:3a:
52:ff:4c:de:c2:a6:4b:b9:f9:e8:1a:67:86:aa:fc:f9:a2:69:
07:60:61:a3:20:d5:20:92:2f:1f:42:5a:ba:af:03:7f:1f:1d:
71:db:83:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:09:17 2025 by rpki-client