Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/f1af90-355c-484b-b923-d31d4cb1b129/1/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.mft
File: MDCZQabYT6Tb3a8PTs2Z-fBDz9w.mft (raw, json)
Hash identifier: p13e/aYfJBBnequTjcShQVs4mTvknx5Ugcck0qxUmHA=
Subject key identifier: 99:9E:1B:C3:FE:C4:99:35:0B:BF:A2:9B:49:12:4F:F3:59:0F:2B:60
Authority key identifier: 30:30:99:41:A6:D8:4F:A4:DB:DD:AF:0F:4E:CD:99:F9:F0:43:CF:DC
Certificate issuer: /CN=30309941a6d84fa4dbddaf0f4ecd99f9f043cfdc
Certificate serial: 0197756558A1676EAAC14F725AA0333B5005
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/f1af90-355c-484b-b923-d31d4cb1b129/1/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.mft
Manifest number: 10E5
Signing time: Sun 15 Jun 2025 21:01:05 +0000
Manifest this update: Sun 15 Jun 2025 21:01:05 +0000
Manifest next update: Mon 16 Jun 2025 21:01:05 +0000
Files and hashes: 1: DIrH-kP5nT3HJlZe7jZz_CkvjFY.roa (hash: gKZZgzAyp+INbVPVuZgOHUrKZ9VQYbL1/WwPWyMWDfc=)
2: MDCZQabYT6Tb3a8PTs2Z-fBDz9w.crl (hash: TkzOzD4dYO3qvcz+i6EbTHyuFBDa2EmU83LTq25JBj8=)
3: gD2PrMpYBnq5bkywvcg86wYgyi0.roa (hash: ZloCpzZ4hxZcPRO4MDOIHc0MdVfMRoHKIu3JaQVOrkU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/f1af90-355c-484b-b923-d31d4cb1b129/1/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/f1af90-355c-484b-b923-d31d4cb1b129/1/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 20:59:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:75:65:58:a1:67:6e:aa:c1:4f:72:5a:a0:33:3b:50:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30309941a6d84fa4dbddaf0f4ecd99f9f043cfdc
Validity
Not Before: Jun 15 21:01:05 2025 GMT
Not After : Jun 16 21:01:05 2025 GMT
Subject: CN=999e1bc3fec499350bbfa29b49124ff3590f2b60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:58:bf:a5:36:8a:ba:7e:ad:c7:84:fa:dd:3c:
b7:ab:a9:2b:46:a2:3a:c0:44:5c:e5:d9:d9:07:f4:
71:a8:0f:17:03:a6:2e:24:2a:4a:50:aa:02:84:76:
58:c6:ba:6d:ba:ba:87:58:04:72:22:72:59:ce:5a:
d8:aa:a0:e9:7a:bf:80:2b:35:68:d4:b0:db:20:84:
6c:2c:6e:a6:ac:5b:ef:bf:3b:f0:de:c5:5b:3a:9e:
6c:00:95:cc:fa:53:d2:da:53:ed:cd:e0:95:c4:76:
bc:6d:e1:34:56:8d:6a:9c:f6:52:02:69:d0:fb:f6:
ca:1f:97:bb:95:52:a9:b4:6c:a6:ee:4e:ce:29:61:
74:c8:b0:e2:a2:91:19:b0:48:ba:0c:91:b2:cc:8a:
5b:c3:e1:b1:6f:1a:a1:6c:f5:95:65:fd:1b:dd:43:
72:db:e6:44:cb:ef:76:2f:18:da:00:fc:27:0c:ea:
43:45:7b:08:b8:67:39:2a:07:36:3e:14:59:34:9b:
3a:9f:f3:35:74:d0:bb:be:75:db:28:b7:19:d7:1c:
bd:f4:32:f9:48:ab:5d:05:6b:21:ef:db:3a:c4:4e:
18:66:4e:e9:ee:61:20:cb:27:fd:13:dd:16:f6:0b:
33:f0:c6:10:43:68:c7:86:00:e0:58:0c:9b:f5:ef:
fb:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:9E:1B:C3:FE:C4:99:35:0B:BF:A2:9B:49:12:4F:F3:59:0F:2B:60
X509v3 Authority Key Identifier:
keyid:30:30:99:41:A6:D8:4F:A4:DB:DD:AF:0F:4E:CD:99:F9:F0:43:CF:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/f1af90-355c-484b-b923-d31d4cb1b129/1/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/f1af90-355c-484b-b923-d31d4cb1b129/1/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:8f:96:70:8d:f1:53:76:01:bb:20:06:d6:a7:4d:c2:22:b5:
8f:30:20:f9:a6:cd:e1:a5:eb:e0:c5:92:2e:7b:6d:03:5b:90:
ed:80:b1:77:2b:c9:09:eb:c5:93:5c:68:56:40:7d:dc:a8:19:
28:8c:b1:0d:3b:fe:16:c0:a5:67:b2:37:7c:dc:ad:7a:67:9f:
38:d2:d6:15:82:56:c4:22:5c:65:49:8f:15:7f:f8:cc:b5:02:
95:f6:99:fd:aa:30:21:d2:02:86:e5:33:00:75:07:05:77:31:
d5:12:ab:9a:c6:e4:40:1d:1b:66:5d:f5:ae:33:50:0d:12:f3:
ec:2b:e1:d6:21:a0:9c:49:1a:d2:af:e1:cb:87:24:92:6e:2f:
5c:bb:4c:42:df:93:c7:85:35:9d:d8:d1:59:85:98:05:b0:8b:
99:97:2a:07:da:df:0b:6d:89:c1:be:09:89:ea:cc:f4:c3:70:
86:4e:e7:7b:fc:62:4d:94:f0:65:33:6c:a2:4a:0c:c5:23:b8:
73:cc:e6:e6:c4:b3:35:d5:15:7d:1e:ce:75:30:d8:7b:47:dd:
f1:b4:61:e3:b2:c3:f0:9f:71:df:97:e7:e6:b4:25:89:c1:32:
8c:cc:d5:3b:57:20:5e:7f:8a:4a:20:c9:92:44:59:1c:51:26:
22:24:b8:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd1ZVihZ26qwU9yWqAzO1AFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwMzA5OTQxYTZkODRmYTRkYmRkYWYwZjRlY2Q5OWY5ZjA0
M2NmZGMwHhcNMjUwNjE1MjEwMTA1WhcNMjUwNjE2MjEwMTA1WjAzMTEwLwYDVQQD
Eyg5OTllMWJjM2ZlYzQ5OTM1MGJiZmEyOWI0OTEyNGZmMzU5MGYyYjYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk1i/pTaKun6tx4T63Ty3q6krRqI6
wERc5dnZB/RxqA8XA6YuJCpKUKoChHZYxrpturqHWARyInJZzlrYqqDper+AKzVo
1LDbIIRsLG6mrFvvvzvw3sVbOp5sAJXM+lPS2lPtzeCVxHa8beE0Vo1qnPZSAmnQ
+/bKH5e7lVKptGym7k7OKWF0yLDiopEZsEi6DJGyzIpbw+GxbxqhbPWVZf0b3UNy
2+ZEy+92LxjaAPwnDOpDRXsIuGc5Kgc2PhRZNJs6n/M1dNC7vnXbKLcZ1xy99DL5
SKtdBWsh79s6xE4YZk7p7mEgyyf9E90W9gsz8MYQQ2jHhgDgWAyb9e/7hQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJmeG8P+xJk1C7+im0kST/NZDytgMB8GA1UdIwQY
MBaAFDAwmUGm2E+k292vD07NmfnwQ8/cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTURDWlFhYllUNlRiM2E4UFRzMlotZkJEejl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9mMWFmOTAtMzU1Yy00ODRiLWI5MjMt
ZDMxZDRjYjFiMTI5LzEvTURDWlFhYllUNlRiM2E4UFRzMlotZkJEejl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi9mMWFmOTAtMzU1Yy00ODRiLWI5MjMtZDMxZDRjYjFiMTI5
LzEvTURDWlFhYllUNlRiM2E4UFRzMlotZkJEejl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcI+WcI3x
U3YBuyAG1qdNwiK1jzAg+abN4aXr4MWSLnttA1uQ7YCxdyvJCevFk1xoVkB93KgZ
KIyxDTv+FsClZ7I3fNytemefONLWFYJWxCJcZUmPFX/4zLUClfaZ/aowIdIChuUz
AHUHBXcx1RKrmsbkQB0bZl31rjNQDRLz7Cvh1iGgnEka0q/hy4ckkm4vXLtMQt+T
x4U1ndjRWYWYBbCLmZcqB9rfC22Jwb4JierM9MNwhk7ne/xiTZTwZTNsokoMxSO4
c8zm5sSzNdUVfR7OdTDYe0fd8bRh47LD8J9x35fn5rQlicEyjMzVO1cgXn+KSiDJ
kkRZHFEmIiS4oQ==
-----END CERTIFICATE-----
Generated at Mon Jun 16 02:21:41 2025 by rpki-client