Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/4a523b-7244-422d-9004-c4aa9db1abb5/1/MCX9M5qmRQTyiaAMQXPFWgAC60Q.mft
File: MCX9M5qmRQTyiaAMQXPFWgAC60Q.mft (raw, json)
Hash identifier: PG+KL6T7EyXRdBVXZ54Q3XoeWyo2NnLq0EH6/1oXIgs=
Subject key identifier: B4:27:FD:C8:0E:6E:AE:23:64:5F:A7:49:92:7F:0D:88:D6:75:A9:22
Authority key identifier: 30:25:FD:33:9A:A6:45:04:F2:89:A0:0C:41:73:C5:5A:00:02:EB:44
Certificate issuer: /CN=3025fd339aa64504f289a00c4173c55a0002eb44
Certificate serial: 0198906BB6EEC60AFF1DCA1E31FBB8071200
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MCX9M5qmRQTyiaAMQXPFWgAC60Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/4a523b-7244-422d-9004-c4aa9db1abb5/1/MCX9M5qmRQTyiaAMQXPFWgAC60Q.mft
Manifest number: 0FEE
Signing time: Sat 09 Aug 2025 20:00:34 +0000
Manifest this update: Sat 09 Aug 2025 20:00:34 +0000
Manifest next update: Sun 10 Aug 2025 20:00:34 +0000
Files and hashes: 1: DPz87dZS9HseddW8gbD-vS7fq9g.roa (hash: 4BW75SF0KzzzYTTCKr54E2E3BA1EBeDyvFumW+QYO5M=)
2: MCX9M5qmRQTyiaAMQXPFWgAC60Q.crl (hash: UN9svc6Sd7dA7SfgGtdX1pGC37H47tHUcqIlGJ8kaQ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/4a523b-7244-422d-9004-c4aa9db1abb5/1/MCX9M5qmRQTyiaAMQXPFWgAC60Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/4a523b-7244-422d-9004-c4aa9db1abb5/1/MCX9M5qmRQTyiaAMQXPFWgAC60Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/MCX9M5qmRQTyiaAMQXPFWgAC60Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:90:6b:b6:ee:c6:0a:ff:1d:ca:1e:31:fb:b8:07:12:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3025fd339aa64504f289a00c4173c55a0002eb44
Validity
Not Before: Aug 9 20:00:34 2025 GMT
Not After : Aug 10 20:00:34 2025 GMT
Subject: CN=b427fdc80e6eae23645fa749927f0d88d675a922
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:20:e6:85:ad:91:e2:19:0b:75:87:53:0b:0f:
26:48:b1:f8:cd:cb:5b:8d:fd:21:64:d0:5e:25:3a:
58:0b:6e:38:16:7a:32:9f:bb:36:bc:8e:f1:06:1f:
fe:dd:74:0b:b7:42:5e:a3:b5:5e:79:2c:30:a7:22:
a4:cc:f3:6c:33:94:23:7d:be:8a:8b:0b:12:b2:fa:
89:ff:36:c2:7e:f3:c4:52:87:26:d0:51:ba:a3:3e:
67:44:ef:b4:47:e6:60:8a:8d:61:f8:7d:63:1d:5d:
a2:10:5a:9b:bf:4b:d1:3f:eb:6b:99:39:ad:57:17:
f9:cd:ef:72:7f:91:4e:01:94:44:ef:b0:dc:0d:52:
29:e1:6f:5f:f3:5a:e5:38:8f:f0:52:87:6d:4b:92:
3c:09:1f:70:6e:44:c7:cb:8b:de:c6:89:51:a6:9b:
b6:b7:aa:b3:59:28:1c:33:16:48:e7:bd:1a:6e:2c:
eb:b1:88:8b:3d:8c:01:9f:2a:6f:d0:3c:41:16:19:
d6:b6:17:63:b4:ff:02:1a:39:27:8e:cd:ab:3e:34:
59:5c:c6:a8:2a:df:f5:4e:83:b8:a9:61:3a:d8:1c:
3d:09:1f:52:c6:3d:80:6f:bc:e5:18:84:d5:30:d5:
c8:d8:22:31:cc:d4:46:d3:c3:96:ba:ed:58:ea:d1:
61:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:27:FD:C8:0E:6E:AE:23:64:5F:A7:49:92:7F:0D:88:D6:75:A9:22
X509v3 Authority Key Identifier:
keyid:30:25:FD:33:9A:A6:45:04:F2:89:A0:0C:41:73:C5:5A:00:02:EB:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MCX9M5qmRQTyiaAMQXPFWgAC60Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4a523b-7244-422d-9004-c4aa9db1abb5/1/MCX9M5qmRQTyiaAMQXPFWgAC60Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4a523b-7244-422d-9004-c4aa9db1abb5/1/MCX9M5qmRQTyiaAMQXPFWgAC60Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:34:ac:98:8c:3b:4b:ea:b7:75:8f:f4:98:35:86:3a:cb:81:
72:45:c5:34:d2:7e:51:63:b4:c2:38:33:4a:4e:35:fe:91:a7:
64:95:5e:d5:05:76:5a:e1:58:3f:f3:02:bf:6f:16:f5:f8:0d:
ee:71:6a:f6:39:0b:5c:a3:9f:36:01:83:07:e0:f8:af:20:70:
3e:1c:d9:aa:17:2a:d0:59:cc:a5:75:4f:a4:e7:df:75:ae:38:
06:21:e4:50:38:52:53:a8:d5:f2:94:cf:88:02:2f:76:72:89:
81:8c:2c:98:72:33:0e:3c:89:ee:d7:88:a5:00:2b:15:fa:06:
37:7d:36:1e:38:7f:a6:47:4d:df:16:ff:2d:9b:27:8d:8b:f6:
89:c1:45:07:d8:6c:4c:18:cd:7b:07:26:d5:49:36:a3:d8:14:
db:73:35:4c:f8:f6:e3:34:8a:bf:57:5c:32:32:04:64:87:9f:
e9:10:75:cf:07:35:86:c3:7d:60:32:1b:b9:bd:11:6a:01:b5:
03:c8:28:a2:2a:13:65:75:ba:45:37:87:cf:cf:97:68:e3:f5:
e3:1e:60:89:f7:77:93:c5:27:50:69:b9:5e:49:c1:b6:ea:b1:
c2:10:8a:3a:04:f5:07:87:44:cc:13:4e:4d:e9:e2:d9:7a:38:
7e:7f:ce:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 23:07:41 2025 by rpki-client