
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/ee9519-ff61-4679-9015-80e427596b5d/1/McsA0vhEAYEMMgC1L6OI6TZR3fM.mft
File: McsA0vhEAYEMMgC1L6OI6TZR3fM.mft (raw, json)
Hash identifier: r4EJ53sydaLDn0/y7tLaydYiZoNuuiY6DgXozjJKE9I=
Subject key identifier: 37:A6:C3:3D:EB:32:CE:4D:54:5C:04:09:DA:57:8E:3E:45:32:8F:7B
Authority key identifier: 31:CB:00:D2:F8:44:01:81:0C:32:00:B5:2F:A3:88:E9:36:51:DD:F3
Certificate issuer: /CN=31cb00d2f84401810c3200b52fa388e93651ddf3
Certificate serial: 019770759E6818E1ACC6E62FF75441E8E90A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/McsA0vhEAYEMMgC1L6OI6TZR3fM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/ee9519-ff61-4679-9015-80e427596b5d/1/McsA0vhEAYEMMgC1L6OI6TZR3fM.mft
Manifest number: 0514
Signing time: Sat 14 Jun 2025 22:00:45 +0000
Manifest this update: Sat 14 Jun 2025 22:00:45 +0000
Manifest next update: Sun 15 Jun 2025 22:00:45 +0000
Files and hashes: 1: 0bSnoMCDjomKjH9l20xWi3AzK8U.roa (hash: w7ylFdvDoXCXnQ/NKrVCZ3HeQ1sG0SNLXLUNJWq26Aw=)
2: 6QZXrPa3sBN80OwKH97Qmpz11-w.roa (hash: UdHrwly/eXNnDWvZzXVWVnCJ0eO0DldyC6uMO4NJQeg=)
3: HNzUWXlP4veJqPrr6pXP0JJR8j8.roa (hash: su/Z3HJftIxQPXtbWly3dTZmcrPusOAjYOvLjMM2DMs=)
4: McsA0vhEAYEMMgC1L6OI6TZR3fM.crl (hash: vv9wHvCVPNZv+N7VhNrQ+kzETR1jA77cOCMs3uNYV0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/ee9519-ff61-4679-9015-80e427596b5d/1/McsA0vhEAYEMMgC1L6OI6TZR3fM.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/ee9519-ff61-4679-9015-80e427596b5d/1/McsA0vhEAYEMMgC1L6OI6TZR3fM.mft
rsync://rpki.ripe.net/repository/DEFAULT/McsA0vhEAYEMMgC1L6OI6TZR3fM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:75:9e:68:18:e1:ac:c6:e6:2f:f7:54:41:e8:e9:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31cb00d2f84401810c3200b52fa388e93651ddf3
Validity
Not Before: Jun 14 22:00:45 2025 GMT
Not After : Jun 15 22:00:45 2025 GMT
Subject: CN=37a6c33deb32ce4d545c0409da578e3e45328f7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:2c:0d:6a:da:59:55:7c:4b:69:5e:ae:6e:14:
8e:27:83:d7:89:71:38:28:8f:d0:76:06:58:fb:f2:
59:93:c5:b2:2d:5b:c5:f7:f6:16:7c:8c:df:fe:8d:
18:a9:c3:83:d7:a3:2d:8b:54:1c:84:64:0d:8c:f7:
ba:7e:9a:86:db:6e:61:e9:1b:39:e2:0b:ff:1f:7a:
c6:2d:12:4e:45:11:43:d2:c8:30:d8:7d:6c:c6:04:
11:ca:f0:74:71:df:a2:7d:f9:43:cc:68:59:36:47:
2a:71:9f:3e:9e:9b:d5:f7:81:ae:b1:0f:ab:5d:f4:
32:3d:4b:0d:c6:dc:92:3c:80:c6:16:92:a3:e4:54:
1d:dd:8c:b0:8c:ac:e0:21:1a:da:5f:cc:1d:d0:a8:
c1:e8:99:ab:ed:00:aa:2f:4d:b4:30:a9:8d:70:db:
31:f5:d2:d3:f6:dd:5d:b1:a4:d7:fe:86:80:cc:30:
8a:f6:fa:49:e4:bb:04:94:6c:1e:40:3e:17:b8:8b:
b7:00:63:c0:9a:2d:1b:81:0f:ec:32:b7:7a:81:26:
6c:30:4f:34:4c:e4:9b:b6:d1:d0:7d:b2:c3:2d:4a:
c3:8e:47:15:72:2e:14:cf:4a:1b:e6:a4:df:57:10:
a1:a5:13:1e:a3:3d:01:b0:54:6a:dc:7a:f5:5f:ba:
51:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:A6:C3:3D:EB:32:CE:4D:54:5C:04:09:DA:57:8E:3E:45:32:8F:7B
X509v3 Authority Key Identifier:
keyid:31:CB:00:D2:F8:44:01:81:0C:32:00:B5:2F:A3:88:E9:36:51:DD:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/McsA0vhEAYEMMgC1L6OI6TZR3fM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ee9519-ff61-4679-9015-80e427596b5d/1/McsA0vhEAYEMMgC1L6OI6TZR3fM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ee9519-ff61-4679-9015-80e427596b5d/1/McsA0vhEAYEMMgC1L6OI6TZR3fM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:de:01:21:c2:b7:c6:d1:1d:bd:ab:5f:08:12:c2:2e:b4:db:
3c:e2:83:af:ad:54:7d:8b:d1:09:be:1c:81:97:9d:45:bd:d7:
53:e5:97:1a:b3:91:cb:0a:0d:08:5a:b5:e4:60:27:42:81:0e:
97:54:9c:96:42:30:a2:fb:fd:a1:a3:99:9a:d7:15:a8:8a:a2:
37:e0:06:ec:7a:df:26:2a:56:19:1c:e2:52:6c:9f:6a:1d:c6:
5c:53:52:55:55:3b:10:20:8b:d3:7c:dd:00:bc:b9:2c:60:15:
27:36:53:12:8c:de:26:3b:e5:2c:65:c9:dc:20:ae:7a:5c:a0:
67:35:e6:14:a5:e3:19:37:53:07:f7:f1:4d:0d:d0:ca:83:ef:
7a:dd:69:b6:a4:0e:3c:45:5a:57:2b:9a:b7:21:ac:a6:9a:02:
98:d9:c3:a5:1b:b8:bb:70:12:43:7d:4b:32:0d:28:fb:ae:f9:
24:6d:2a:55:96:99:bf:7c:72:cc:16:f8:15:3f:c4:32:58:99:
9f:eb:2e:79:b3:ca:a7:80:18:5c:73:31:55:8f:f8:7d:15:3d:
46:ef:18:9c:3a:82:8a:c1:97:8e:c7:61:2b:04:87:ac:08:04:
d4:5a:83:b7:db:db:40:4f:48:b6:a3:62:97:12:a9:c0:50:99:
1a:92:d7:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 00:52:40 2025 by rpki-client