Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/f1af90-355c-484b-b923-d31d4cb1b129/1/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.mft
File: MDCZQabYT6Tb3a8PTs2Z-fBDz9w.mft (raw, json)
Hash identifier: gHaudcm7EFrlvOe/vq0TPdEogZPebj8acSov1lMchXo=
Subject key identifier: 6E:5E:48:14:DE:2F:64:93:00:4F:15:F1:CA:EF:CA:CC:2B:E0:6E:9C
Authority key identifier: 30:30:99:41:A6:D8:4F:A4:DB:DD:AF:0F:4E:CD:99:F9:F0:43:CF:DC
Certificate issuer: /CN=30309941a6d84fa4dbddaf0f4ecd99f9f043cfdc
Certificate serial: 019A4D740242BFADD85B94A539918A0507A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/f1af90-355c-484b-b923-d31d4cb1b129/1/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.mft
Manifest number: 125E
Signing time: Tue 04 Nov 2025 06:00:39 +0000
Manifest this update: Tue 04 Nov 2025 06:00:39 +0000
Manifest next update: Wed 05 Nov 2025 06:00:39 +0000
Files and hashes: 1: DIrH-kP5nT3HJlZe7jZz_CkvjFY.roa (hash: gKZZgzAyp+INbVPVuZgOHUrKZ9VQYbL1/WwPWyMWDfc=)
2: MDCZQabYT6Tb3a8PTs2Z-fBDz9w.crl (hash: tKIKeg5IN3LTJSQOO+YCRWRQrZSvFsL8HWL5oA8FeNM=)
3: gD2PrMpYBnq5bkywvcg86wYgyi0.roa (hash: ZloCpzZ4hxZcPRO4MDOIHc0MdVfMRoHKIu3JaQVOrkU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/f1af90-355c-484b-b923-d31d4cb1b129/1/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/f1af90-355c-484b-b923-d31d4cb1b129/1/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:02:42:bf:ad:d8:5b:94:a5:39:91:8a:05:07:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30309941a6d84fa4dbddaf0f4ecd99f9f043cfdc
Validity
Not Before: Nov 4 06:00:39 2025 GMT
Not After : Nov 5 06:00:39 2025 GMT
Subject: CN=6e5e4814de2f6493004f15f1caefcacc2be06e9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f4:6b:0c:8b:da:02:bc:cc:3f:e4:82:52:be:
3e:3b:6c:83:f4:91:05:bd:16:6a:29:3b:4c:b7:17:
eb:7c:ea:9c:2a:ff:a0:cc:db:a7:ab:16:4e:26:a8:
f2:58:7f:36:6f:25:ea:29:13:e3:da:65:c1:41:32:
68:59:31:6c:ed:ca:4a:71:30:3f:09:0f:da:06:11:
1f:92:77:aa:77:9b:e3:08:74:8e:82:58:d2:7e:6d:
bb:c5:5f:1c:b0:e3:55:62:91:82:ad:5b:70:29:b0:
30:ca:de:22:ab:5c:63:6c:d6:cf:20:94:5d:d3:a6:
8f:85:80:48:1e:1a:a0:b1:d1:bc:48:5d:80:2c:c1:
76:ea:aa:b7:aa:3d:c6:7c:ea:ad:0a:a3:4d:7a:07:
ea:41:2c:81:93:1b:b6:20:bd:76:43:82:be:6f:44:
1f:8e:07:1b:c1:79:46:83:7c:56:dd:b8:75:ee:38:
a8:61:38:88:ce:6d:e9:71:4c:08:8f:d0:95:91:cd:
11:03:17:26:bd:2c:7d:16:fb:aa:3b:f1:9d:24:92:
ac:e0:d9:f0:e4:a6:87:9e:ca:7c:eb:b1:2f:ac:7b:
89:8b:f9:07:94:bf:bc:31:bf:3a:11:a3:88:53:68:
1a:4b:67:4f:f4:03:10:b6:58:5f:5d:0e:85:51:53:
3c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:5E:48:14:DE:2F:64:93:00:4F:15:F1:CA:EF:CA:CC:2B:E0:6E:9C
X509v3 Authority Key Identifier:
keyid:30:30:99:41:A6:D8:4F:A4:DB:DD:AF:0F:4E:CD:99:F9:F0:43:CF:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/f1af90-355c-484b-b923-d31d4cb1b129/1/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/f1af90-355c-484b-b923-d31d4cb1b129/1/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:30:6d:d1:f4:da:4d:44:9a:de:ff:8a:9b:02:ac:60:5f:dc:
3a:39:cf:07:f2:b2:ed:b6:be:74:bf:37:bb:0a:8a:53:85:d6:
4c:d1:14:97:b2:e5:0f:62:1f:9d:c0:d4:90:9e:ac:96:98:dd:
06:25:0f:3c:e5:12:ec:e7:58:f7:ca:02:b2:a6:26:34:cc:9d:
7e:82:f6:25:46:b0:82:4f:c0:29:cb:e2:f7:dc:ae:30:22:85:
93:ec:2b:6f:72:b3:c0:a3:80:ad:f9:51:d0:45:51:96:24:4f:
79:5a:72:2d:8a:52:36:29:c5:a3:4c:d3:61:2e:8d:b0:2f:30:
a5:ad:fc:77:3e:db:12:a7:5d:40:59:c8:6c:62:1c:a4:36:34:
03:0b:0a:ba:47:62:b4:bb:47:2e:0a:14:46:45:5b:d2:3b:b3:
cd:01:e6:f2:e6:bb:96:f7:cb:d2:d3:bf:b2:90:63:27:67:03:
a4:25:16:f0:c7:29:b5:33:57:fa:a7:c3:51:a3:9b:16:5e:92:
0d:21:4f:f3:13:9e:ef:13:4a:4f:55:e2:6d:6b:f1:9d:76:7a:
32:bb:d3:df:ab:a8:57:67:89:5a:de:08:11:7a:14:fd:0d:aa:
68:e6:7b:0d:8d:29:3c:87:47:aa:e6:9e:8f:a6:92:d0:9b:f7:
94:2d:18:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:48:03 2025 by rpki-client