
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.mft
File: Mca7r0CfX9bXCcTX0kNEopKjyqU.mft (raw, json)
Hash identifier: udhOq1wAo6TzNqkLZTdJX07V36ig1WPFSCQVUVJSzm4=
Subject key identifier: C5:DF:49:3D:99:57:C4:EB:6E:A1:84:3A:28:31:8E:88:A0:DC:B4:5E
Authority key identifier: 31:C6:BB:AF:40:9F:5F:D6:D7:09:C4:D7:D2:43:44:A2:92:A3:CA:A5
Certificate issuer: /CN=31c6bbaf409f5fd6d709c4d7d24344a292a3caa5
Certificate serial: 01987D8B33C44AF73C17FAC3A72731B6D83C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mca7r0CfX9bXCcTX0kNEopKjyqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.mft
Manifest number: 1245
Signing time: Wed 06 Aug 2025 04:02:11 +0000
Manifest this update: Wed 06 Aug 2025 04:02:11 +0000
Manifest next update: Thu 07 Aug 2025 04:02:11 +0000
Files and hashes: 1: Kt18qGRPFhnoeDMRU6Ja36FUtdA.roa (hash: ZdZhwP5GgUBDAZeIM6qZ4JCbpszuez2XwZJ3dyqtyLY=)
2: Mca7r0CfX9bXCcTX0kNEopKjyqU.crl (hash: +77VqmWt36NOjyuMKh8prdnRNKUnOLLe1yY12nw2QDc=)
3: yRmsjuq_F6DD6X9AriATfFnXQ5Y.roa (hash: v4PNoMO1RSILauLPhTzIlbmj9RAxx7AGmat1z5c9V7E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mca7r0CfX9bXCcTX0kNEopKjyqU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 04:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:8b:33:c4:4a:f7:3c:17:fa:c3:a7:27:31:b6:d8:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31c6bbaf409f5fd6d709c4d7d24344a292a3caa5
Validity
Not Before: Aug 6 04:02:11 2025 GMT
Not After : Aug 7 04:02:11 2025 GMT
Subject: CN=c5df493d9957c4eb6ea1843a28318e88a0dcb45e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:01:b1:03:f0:f8:df:88:07:a6:9f:96:61:b0:
60:d0:48:12:aa:3d:4f:52:97:56:d8:6c:46:6a:be:
51:94:6f:60:91:fe:3d:48:c8:3b:5c:84:16:ba:34:
7e:e9:5a:81:aa:4b:c3:67:de:cb:7f:b6:85:74:f9:
0d:fd:c3:22:4a:a8:66:4f:f5:5f:3e:f3:80:2c:da:
91:bf:2f:34:bf:47:f4:4c:0b:71:fb:05:67:c1:84:
57:24:2e:fb:50:fa:80:18:98:7a:98:95:98:48:e8:
2c:64:4c:5b:ed:55:65:c7:11:9f:14:d6:02:d5:0f:
0c:e7:af:c5:0d:ef:26:bb:a7:f5:05:21:5e:27:a7:
a2:23:fd:04:bb:29:5f:5b:cb:21:3c:aa:10:42:b9:
92:2f:10:9f:d6:74:ee:fa:94:cd:da:8c:39:5a:f1:
f5:78:2d:6c:65:3f:9d:9e:92:c5:86:a6:95:e7:75:
f7:5d:ac:d6:6e:d3:b7:62:4d:a8:ec:9b:08:b0:33:
b5:93:45:01:90:b7:e6:78:e3:a0:bf:48:52:96:b2:
c3:0d:dc:06:0c:f2:7b:26:45:90:bd:72:dd:50:36:
da:ab:cb:f3:77:4c:2f:90:fb:0f:3c:d6:f3:4a:25:
b9:df:cf:e6:94:5b:51:17:3a:b2:0d:a1:85:57:a0:
ca:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:DF:49:3D:99:57:C4:EB:6E:A1:84:3A:28:31:8E:88:A0:DC:B4:5E
X509v3 Authority Key Identifier:
keyid:31:C6:BB:AF:40:9F:5F:D6:D7:09:C4:D7:D2:43:44:A2:92:A3:CA:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mca7r0CfX9bXCcTX0kNEopKjyqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:04:db:06:7d:da:7a:0c:f1:1f:bc:75:6b:2b:f6:28:68:c8:
99:fe:5b:06:3f:16:7b:7e:e2:50:c2:03:3f:a4:02:19:c5:4a:
cd:fd:40:39:0a:87:5c:a1:ee:36:68:f2:77:64:b4:47:6c:8a:
20:de:7a:60:60:1e:5e:38:99:86:53:cd:b1:40:78:71:b1:c0:
82:fd:36:c6:7b:81:47:a4:97:f2:8e:5f:97:0d:dc:9e:1b:5d:
80:36:2d:64:57:19:2a:4c:cb:73:4b:7c:66:2f:e7:2d:b3:44:
7d:0b:26:ea:ab:69:a5:10:15:4e:45:ad:b2:4d:3f:b8:27:4d:
f4:f0:03:dc:f8:d6:2b:fe:e2:1f:38:30:a5:c1:4e:d2:3d:25:
35:8b:c2:15:9a:28:ae:96:f5:e0:b8:a2:fa:53:bd:5f:eb:8a:
20:5d:f9:a7:a4:d5:60:c0:b8:1a:f5:7c:77:a7:77:f9:d0:c1:
aa:0b:f9:e4:3f:63:69:08:9b:54:7b:16:4b:e4:5b:b3:27:75:
50:5a:50:3b:cc:9f:b1:dc:2e:e1:27:78:8f:f6:38:bf:55:20:
a9:8e:f9:3c:a2:2b:c0:1f:f1:00:8c:51:b8:f5:0e:b7:51:da:
b0:03:11:26:b6:d7:23:2b:2f:7c:a7:09:14:9d:36:37:40:1e:
40:e8:90:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:11:44 2025 by rpki-client