Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/d4dade-caef-4cd0-aef3-004f0cb3ed77/1/MDVUbqWweQVJyguhuyo-Hbrko9o.mft
File: MDVUbqWweQVJyguhuyo-Hbrko9o.mft (raw, json)
Hash identifier: nUq+/AMki0HxxkOnmmXbd/CZZYuhlCzkNFuhUf+DB7s=
Subject key identifier: 27:2D:D6:E5:C9:DC:9C:11:74:99:C4:CB:43:F8:0A:1C:4F:2D:76:46
Authority key identifier: 30:35:54:6E:A5:B0:79:05:49:CA:0B:A1:BB:2A:3E:1D:BA:E4:A3:DA
Certificate issuer: /CN=3035546ea5b0790549ca0ba1bb2a3e1dbae4a3da
Certificate serial: 01987486C80259FB2CD56FF1D9737B298AAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MDVUbqWweQVJyguhuyo-Hbrko9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/d4dade-caef-4cd0-aef3-004f0cb3ed77/1/MDVUbqWweQVJyguhuyo-Hbrko9o.mft
Manifest number: 1216
Signing time: Mon 04 Aug 2025 10:00:46 +0000
Manifest this update: Mon 04 Aug 2025 10:00:46 +0000
Manifest next update: Tue 05 Aug 2025 10:00:46 +0000
Files and hashes: 1: 2W6axHjolbpaH6HEq0QZHunfxqw.roa (hash: wviH1ELaB1e2Lcqmt6CIweQCBrQQn4JSYfHt2lakpZo=)
2: MDVUbqWweQVJyguhuyo-Hbrko9o.crl (hash: mCvPDRCvxB3yFtAxCvEnBaNBypGCRtoSa5QQGMfkvrE=)
3: rrMUUFpVeR29bf5As6_7n50ECNM.roa (hash: kpYzrs/MH+Fk5UtuYnqob2xS0TbxQg7bm0bqEnSyqG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/d4dade-caef-4cd0-aef3-004f0cb3ed77/1/MDVUbqWweQVJyguhuyo-Hbrko9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/d4dade-caef-4cd0-aef3-004f0cb3ed77/1/MDVUbqWweQVJyguhuyo-Hbrko9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/MDVUbqWweQVJyguhuyo-Hbrko9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 10:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:86:c8:02:59:fb:2c:d5:6f:f1:d9:73:7b:29:8a:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3035546ea5b0790549ca0ba1bb2a3e1dbae4a3da
Validity
Not Before: Aug 4 10:00:46 2025 GMT
Not After : Aug 5 10:00:46 2025 GMT
Subject: CN=272dd6e5c9dc9c117499c4cb43f80a1c4f2d7646
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:39:3e:87:e1:92:bb:79:e1:fd:27:7c:91:92:
13:14:6d:c6:db:56:80:04:f8:b0:93:73:7e:39:4e:
8c:a1:e7:1e:f6:52:42:8c:4d:9d:5a:1f:48:02:b9:
a9:ef:d8:dc:3d:0d:2c:13:05:72:c2:ac:44:2a:f6:
89:33:76:01:97:59:14:4d:f4:84:ef:b3:8c:31:56:
b1:78:5c:a0:8c:73:02:04:7b:a0:99:df:90:18:b7:
8c:29:b7:38:ed:a0:c5:ef:09:6d:2d:a0:23:bb:a7:
66:5a:47:f0:bb:9d:f7:90:60:fc:66:ac:c2:6b:47:
1a:20:ee:22:cb:3e:2a:e4:af:f0:13:15:92:04:a5:
de:16:29:d5:7d:a0:fb:f8:83:26:cc:bc:f2:cc:23:
64:ed:2a:3b:db:48:de:17:bb:4c:f6:95:ea:75:a7:
bd:26:e3:b4:4a:af:79:ce:15:6e:01:45:6f:c4:d6:
ea:72:bb:98:a5:a9:2c:4c:fd:28:33:61:ad:aa:bb:
72:76:fe:1a:90:26:29:53:b4:89:17:38:e0:d2:17:
bd:cd:a7:c4:8b:95:0b:a2:5e:68:9d:f1:d2:90:a5:
ad:7a:68:99:c9:68:06:d2:85:82:8e:a6:1e:e0:6b:
65:2f:7b:1f:34:d7:16:99:fc:25:e1:d0:ca:80:70:
7b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:2D:D6:E5:C9:DC:9C:11:74:99:C4:CB:43:F8:0A:1C:4F:2D:76:46
X509v3 Authority Key Identifier:
keyid:30:35:54:6E:A5:B0:79:05:49:CA:0B:A1:BB:2A:3E:1D:BA:E4:A3:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MDVUbqWweQVJyguhuyo-Hbrko9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/d4dade-caef-4cd0-aef3-004f0cb3ed77/1/MDVUbqWweQVJyguhuyo-Hbrko9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/d4dade-caef-4cd0-aef3-004f0cb3ed77/1/MDVUbqWweQVJyguhuyo-Hbrko9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:f4:72:d1:6d:b6:44:e3:13:95:53:01:df:71:5b:75:d6:2d:
ef:2b:f1:3c:d6:14:46:15:fe:9a:fc:38:0d:67:49:c0:11:da:
a1:d7:55:79:83:51:a6:e6:61:65:85:ad:43:e3:d0:5f:a2:ee:
e8:52:db:d9:12:a8:20:69:98:e1:bd:74:69:cb:d1:4a:11:d1:
c0:a2:a1:4d:a3:1c:44:f8:92:08:7a:c6:5d:12:d8:2f:c2:b2:
10:f5:8d:9e:af:b3:aa:5d:57:5e:ee:53:4c:3c:43:e1:b0:e1:
bc:32:c6:94:20:22:b2:93:c7:cd:51:3f:fc:f7:e7:44:c8:72:
a0:73:bf:43:5c:b3:88:63:59:e6:1f:8d:3b:ce:b0:e1:33:79:
e4:ce:7f:f1:2b:6a:cf:85:69:45:7a:ab:0f:3a:a9:f3:97:bd:
04:e7:6b:3a:3d:ad:ec:36:9e:dc:cb:ea:f3:37:ce:97:2a:5b:
b8:3d:9b:17:56:3f:01:37:cf:c3:56:1c:2f:65:77:7d:c1:50:
1c:c0:4e:7d:82:75:69:ff:37:38:4d:66:9f:47:20:c8:61:fd:
a7:c2:04:06:0b:66:91:98:4c:b9:c3:42:7a:7b:b9:67:e4:6c:
d2:23:22:31:fd:95:c0:7e:2b:88:6d:0e:ad:6f:4e:9e:91:1f:
97:bc:f4:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh0hsgCWfss1W/x2XN7KYqtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwMzU1NDZlYTViMDc5MDU0OWNhMGJhMWJiMmEzZTFkYmFl
NGEzZGEwHhcNMjUwODA0MTAwMDQ2WhcNMjUwODA1MTAwMDQ2WjAzMTEwLwYDVQQD
EygyNzJkZDZlNWM5ZGM5YzExNzQ5OWM0Y2I0M2Y4MGExYzRmMmQ3NjQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTk+h+GSu3nh/Sd8kZITFG3G21aA
BPiwk3N+OU6Moece9lJCjE2dWh9IArmp79jcPQ0sEwVywqxEKvaJM3YBl1kUTfSE
77OMMVaxeFygjHMCBHugmd+QGLeMKbc47aDF7wltLaAju6dmWkfwu533kGD8ZqzC
a0caIO4iyz4q5K/wExWSBKXeFinVfaD7+IMmzLzyzCNk7So720jeF7tM9pXqdae9
JuO0Sq95zhVuAUVvxNbqcruYpaksTP0oM2Gtqrtydv4akCYpU7SJFzjg0he9zafE
i5ULol5onfHSkKWtemiZyWgG0oWCjqYe4GtlL3sfNNcWmfwl4dDKgHB7QQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCct1uXJ3JwRdJnEy0P4ChxPLXZGMB8GA1UdIwQY
MBaAFDA1VG6lsHkFScoLobsqPh265KPaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTURWVWJxV3dlUVZKeWd1aHV5by1IYnJrbzlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9kNGRhZGUtY2FlZi00Y2QwLWFlZjMt
MDA0ZjBjYjNlZDc3LzEvTURWVWJxV3dlUVZKeWd1aHV5by1IYnJrbzlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC9kNGRhZGUtY2FlZi00Y2QwLWFlZjMtMDA0ZjBjYjNlZDc3
LzEvTURWVWJxV3dlUVZKeWd1aHV5by1IYnJrbzlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABPRy0W22
ROMTlVMB33FbddYt7yvxPNYURhX+mvw4DWdJwBHaoddVeYNRpuZhZYWtQ+PQX6Lu
6FLb2RKoIGmY4b10acvRShHRwKKhTaMcRPiSCHrGXRLYL8KyEPWNnq+zql1XXu5T
TDxD4bDhvDLGlCAispPHzVE//PfnRMhyoHO/Q1yziGNZ5h+NO86w4TN55M5/8Stq
z4VpRXqrDzqp85e9BOdrOj2t7Dae3Mvq8zfOlypbuD2bF1Y/ATfPw1YcL2V3fcFQ
HMBOfYJ1af83OE1mn0cgyGH9p8IEBgtmkZhMucNCenu5Z+Rs0iMiMf2VwH4riG0O
rW9OnpEfl7z01A==
-----END CERTIFICATE-----
Generated at Mon Aug 4 16:13:43 2025 by rpki-client