Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/ee9519-ff61-4679-9015-80e427596b5d/1/McsA0vhEAYEMMgC1L6OI6TZR3fM.mft
File: McsA0vhEAYEMMgC1L6OI6TZR3fM.mft (raw, json)
Hash identifier: v8a90dVJz2d2lIG/NncBq3a58FhEhjj1wfVN7PwQdR8=
Subject key identifier: 2B:1B:C8:33:2A:65:41:8F:39:EA:CA:52:09:DE:A4:60:4D:1A:96:91
Authority key identifier: 31:CB:00:D2:F8:44:01:81:0C:32:00:B5:2F:A3:88:E9:36:51:DD:F3
Certificate issuer: /CN=31cb00d2f84401810c3200b52fa388e93651ddf3
Certificate serial: 019A4F9918D8E750FFE235C59065ABEAC996
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/McsA0vhEAYEMMgC1L6OI6TZR3fM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/ee9519-ff61-4679-9015-80e427596b5d/1/McsA0vhEAYEMMgC1L6OI6TZR3fM.mft
Manifest number: 0692
Signing time: Tue 04 Nov 2025 16:00:24 +0000
Manifest this update: Tue 04 Nov 2025 16:00:24 +0000
Manifest next update: Wed 05 Nov 2025 16:00:24 +0000
Files and hashes: 1: 6QZXrPa3sBN80OwKH97Qmpz11-w.roa (hash: UdHrwly/eXNnDWvZzXVWVnCJ0eO0DldyC6uMO4NJQeg=)
2: HNzUWXlP4veJqPrr6pXP0JJR8j8.roa (hash: su/Z3HJftIxQPXtbWly3dTZmcrPusOAjYOvLjMM2DMs=)
3: McsA0vhEAYEMMgC1L6OI6TZR3fM.crl (hash: JMseeriOfRCiC0JwBJ+B6pGD7cmUR0jXxWCkebCEnAM=)
4: hyttk-VciYASeJhwhte3fbo6duo.roa (hash: 7BwJiVdV5v0GFak7++7KK6Hv1MdzUEXFe+dIhNvsD1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/ee9519-ff61-4679-9015-80e427596b5d/1/McsA0vhEAYEMMgC1L6OI6TZR3fM.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/ee9519-ff61-4679-9015-80e427596b5d/1/McsA0vhEAYEMMgC1L6OI6TZR3fM.mft
rsync://rpki.ripe.net/repository/DEFAULT/McsA0vhEAYEMMgC1L6OI6TZR3fM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:18:d8:e7:50:ff:e2:35:c5:90:65:ab:ea:c9:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31cb00d2f84401810c3200b52fa388e93651ddf3
Validity
Not Before: Nov 4 16:00:24 2025 GMT
Not After : Nov 5 16:00:24 2025 GMT
Subject: CN=2b1bc8332a65418f39eaca5209dea4604d1a9691
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:da:cc:43:b0:f0:25:28:15:59:08:41:d3:bd:
fd:eb:0b:f3:89:35:65:ae:07:84:a5:7b:b6:75:c5:
63:40:b4:e8:f3:c3:08:c6:d8:b4:f7:c6:09:fc:36:
53:73:b7:c1:2c:06:8f:f6:01:6e:18:4e:6e:90:db:
e1:f1:59:b3:99:26:64:17:4e:bd:ed:0b:79:ce:ce:
fb:9b:3d:97:7e:19:71:2b:aa:35:c7:6e:93:d3:45:
b3:6e:5f:08:01:9b:bf:82:a2:a4:1c:5a:e5:20:90:
c5:1e:5a:d4:6d:84:6e:8b:50:c4:47:53:ea:7d:c7:
c0:7a:61:6e:00:61:1a:ad:33:6c:33:3b:76:ee:5c:
a6:11:7d:2e:3b:ef:54:ed:d8:0c:cd:18:58:0e:91:
bb:44:d6:6f:a1:82:f3:df:63:d8:dd:58:b8:de:92:
60:3f:f5:6c:04:b1:1b:87:57:c0:4b:b5:87:9f:01:
31:b5:b1:e5:48:cd:70:65:12:78:39:8c:6c:7c:c5:
08:9e:b3:dd:66:3e:07:f7:f9:62:e9:0d:65:9b:33:
c4:0b:23:5c:92:53:c6:02:44:f7:40:c9:0d:3f:30:
2c:3c:fa:0b:ce:41:95:d3:2a:fa:b8:7d:21:f9:ef:
20:58:c4:c7:63:0e:13:86:e3:f1:f6:7f:61:a4:f4:
68:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:1B:C8:33:2A:65:41:8F:39:EA:CA:52:09:DE:A4:60:4D:1A:96:91
X509v3 Authority Key Identifier:
keyid:31:CB:00:D2:F8:44:01:81:0C:32:00:B5:2F:A3:88:E9:36:51:DD:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/McsA0vhEAYEMMgC1L6OI6TZR3fM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ee9519-ff61-4679-9015-80e427596b5d/1/McsA0vhEAYEMMgC1L6OI6TZR3fM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ee9519-ff61-4679-9015-80e427596b5d/1/McsA0vhEAYEMMgC1L6OI6TZR3fM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:19:2b:af:a1:49:42:1e:55:9d:ff:e0:ed:45:e7:44:d6:ac:
c5:f4:20:e5:74:14:9c:e5:48:cc:11:d2:79:08:2f:ec:71:1e:
b3:d8:2c:75:39:38:3b:ae:6a:88:3c:63:b7:7e:ad:4a:84:d3:
05:b1:c7:2c:d2:27:be:b4:e1:26:49:00:e2:51:30:74:c3:90:
55:1d:fb:91:ca:2d:2a:b5:98:f2:50:ad:f5:31:ef:8f:d1:71:
c3:a3:fc:39:73:87:4a:41:02:b2:ea:da:77:8a:1c:be:f8:ba:
7f:1c:ea:39:13:09:25:a7:22:2c:52:79:d0:e9:ac:1e:d6:07:
b9:b5:6f:67:2e:28:15:bb:ee:45:2e:7c:e2:d3:ac:a8:7f:9c:
0a:d1:dc:01:de:0b:d1:ac:4c:b3:ce:ed:97:49:81:8c:c3:25:
81:3d:41:a3:83:0c:3c:c8:be:e9:ea:67:75:c3:d5:7c:91:08:
09:26:b7:60:b8:9c:21:5f:fc:2b:e0:7d:20:e8:a7:a4:c2:0d:
40:1a:b4:47:86:88:18:bd:0b:9f:1f:d4:89:80:3b:60:cd:85:
f0:09:81:01:c9:a8:a5:46:0b:06:6f:0e:a6:72:59:05:d0:01:
0c:45:ab:54:43:71:36:1a:2d:7c:b6:3c:48:0b:72:68:a1:17:
cd:ab:6c:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:00:36 2025 by rpki-client