Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/adc0fe-a24f-4736-afb8-796b38796f69/1/MPCPhA4xfpUgW6E0l9nbxzd7nlc.mft
File: MPCPhA4xfpUgW6E0l9nbxzd7nlc.mft (raw, json)
Hash identifier: 1Rm1VPcykrKY8NQov6mlqWArKZywRfxIZp6cWIULL3w=
Subject key identifier: D6:A4:E7:AF:1C:00:D5:3C:42:18:66:B0:F0:CB:A3:BC:15:48:A7:84
Authority key identifier: 30:F0:8F:84:0E:31:7E:95:20:5B:A1:34:97:D9:DB:C7:37:7B:9E:57
Certificate issuer: /CN=30f08f840e317e95205ba13497d9dbc7377b9e57
Certificate serial: 0198530D8713BF816EA6B83566EC70C34CB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MPCPhA4xfpUgW6E0l9nbxzd7nlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/adc0fe-a24f-4736-afb8-796b38796f69/1/MPCPhA4xfpUgW6E0l9nbxzd7nlc.mft
Manifest number: 0681
Signing time: Mon 28 Jul 2025 22:00:52 +0000
Manifest this update: Mon 28 Jul 2025 22:00:52 +0000
Manifest next update: Tue 29 Jul 2025 22:00:52 +0000
Files and hashes: 1: MPCPhA4xfpUgW6E0l9nbxzd7nlc.crl (hash: 8OK0DAx8GAu/jdGwqCQ/Bix4lL8liFbXisW5HoVBsiw=)
2: w63CtVkaTB-I3bLthiRIKcHJ1z0.roa (hash: PphDOFm6VhjC/oLMpXqjasemzNyOPtAOJruxm2WGQGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/adc0fe-a24f-4736-afb8-796b38796f69/1/MPCPhA4xfpUgW6E0l9nbxzd7nlc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/adc0fe-a24f-4736-afb8-796b38796f69/1/MPCPhA4xfpUgW6E0l9nbxzd7nlc.mft
rsync://rpki.ripe.net/repository/DEFAULT/MPCPhA4xfpUgW6E0l9nbxzd7nlc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 22:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:0d:87:13:bf:81:6e:a6:b8:35:66:ec:70:c3:4c:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30f08f840e317e95205ba13497d9dbc7377b9e57
Validity
Not Before: Jul 28 22:00:52 2025 GMT
Not After : Jul 29 22:00:52 2025 GMT
Subject: CN=d6a4e7af1c00d53c421866b0f0cba3bc1548a784
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d3:ee:d2:5d:e3:3f:25:f8:d6:f7:a4:81:7b:
be:0f:eb:e9:3c:e6:e9:e9:e2:54:a3:1d:41:f6:ee:
23:aa:38:d8:51:6c:0f:c5:1d:10:de:f5:d6:5d:f3:
44:af:23:76:1b:73:00:b9:64:e9:d2:e0:a9:c0:d7:
8c:7c:e3:01:05:e9:e0:a5:f9:9a:7b:91:55:7e:16:
b2:4f:03:91:1f:fb:8c:62:25:6e:d5:0d:f1:56:dc:
72:04:0a:00:2d:9b:8d:5f:58:32:56:9a:fa:d4:fc:
ef:b7:d3:76:60:2d:3f:f7:dc:86:dc:e2:57:bc:c5:
9b:91:ec:98:51:83:17:65:0b:20:2e:6c:b8:90:5f:
f6:83:95:28:de:51:fd:0a:b9:8c:68:45:4e:9b:5f:
32:76:57:b2:33:53:45:e9:f3:b0:a6:4d:c4:01:e7:
c9:02:5d:20:db:28:bf:71:1c:e9:1f:4a:e4:ea:c6:
33:d2:00:52:1b:54:44:ca:8f:43:cb:ee:a8:04:04:
42:ab:38:20:25:a5:eb:55:5a:b9:e4:18:90:01:ce:
0d:2d:25:b2:4d:24:f3:8a:cb:78:6e:78:61:0d:fe:
f2:b7:26:13:3e:82:ab:fa:c9:ac:9f:1d:9b:37:e8:
28:2f:45:a2:a7:70:e6:e2:3f:20:ce:7f:07:cc:c5:
c7:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:A4:E7:AF:1C:00:D5:3C:42:18:66:B0:F0:CB:A3:BC:15:48:A7:84
X509v3 Authority Key Identifier:
keyid:30:F0:8F:84:0E:31:7E:95:20:5B:A1:34:97:D9:DB:C7:37:7B:9E:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MPCPhA4xfpUgW6E0l9nbxzd7nlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/adc0fe-a24f-4736-afb8-796b38796f69/1/MPCPhA4xfpUgW6E0l9nbxzd7nlc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/adc0fe-a24f-4736-afb8-796b38796f69/1/MPCPhA4xfpUgW6E0l9nbxzd7nlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:e2:ee:f5:b5:8f:b5:f3:e8:06:9c:4b:42:a4:3b:b1:5b:63:
1a:3f:a6:5f:48:8d:e4:74:b6:74:bd:a8:19:5c:47:45:4a:20:
15:02:3c:55:f2:d8:6a:29:d0:1a:eb:78:64:78:f3:22:8e:f4:
2d:dd:77:a7:97:f8:29:d5:f3:15:5d:55:0f:04:8e:e5:2d:f3:
0a:70:dd:0b:8d:65:f9:04:3f:d3:f4:5e:80:f6:ad:66:2f:a0:
ce:d2:95:74:8b:d4:78:3e:61:09:b2:67:c6:9a:e7:56:61:14:
a5:32:43:d7:6d:29:be:82:72:d8:a5:3d:de:ab:c0:f4:90:a8:
17:30:e1:6f:1d:9b:ea:b3:f0:4d:a8:97:fa:23:2b:3a:be:e8:
ac:2b:fc:1e:25:90:6a:bf:2c:0d:fb:2d:4e:aa:60:70:d3:d4:
97:cd:1e:d6:a9:dc:4e:8f:7a:0e:04:b2:e7:c4:ca:84:16:ec:
8b:0f:83:39:f1:0b:22:ef:4d:4c:c4:ac:fc:9e:d3:00:4b:55:
c0:09:61:bb:25:0f:88:ee:8b:91:84:89:3d:d3:68:67:15:c9:
44:dc:76:c4:e8:96:99:8a:a7:49:36:da:77:fa:56:f2:cd:ed:
b0:68:a1:10:15:8e:7d:d7:7a:48:6e:93:ce:c4:8f:1e:4c:27:
6e:8b:46:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhTDYcTv4Fuprg1Zuxww0y1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwZjA4Zjg0MGUzMTdlOTUyMDViYTEzNDk3ZDlkYmM3Mzc3
YjllNTcwHhcNMjUwNzI4MjIwMDUyWhcNMjUwNzI5MjIwMDUyWjAzMTEwLwYDVQQD
EyhkNmE0ZTdhZjFjMDBkNTNjNDIxODY2YjBmMGNiYTNiYzE1NDhhNzg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdPu0l3jPyX41vekgXu+D+vpPObp
6eJUox1B9u4jqjjYUWwPxR0Q3vXWXfNEryN2G3MAuWTp0uCpwNeMfOMBBengpfma
e5FVfhayTwORH/uMYiVu1Q3xVtxyBAoALZuNX1gyVpr61Pzvt9N2YC0/99yG3OJX
vMWbkeyYUYMXZQsgLmy4kF/2g5Uo3lH9CrmMaEVOm18ydleyM1NF6fOwpk3EAefJ
Al0g2yi/cRzpH0rk6sYz0gBSG1REyo9Dy+6oBARCqzggJaXrVVq55BiQAc4NLSWy
TSTzist4bnhhDf7ytyYTPoKr+smsnx2bN+goL0Wip3Dm4j8gzn8HzMXHewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNak568cANU8QhhmsPDLo7wVSKeEMB8GA1UdIwQY
MBaAFDDwj4QOMX6VIFuhNJfZ28c3e55XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVBDUGhBNHhmcFVnVzZFMGw5bmJ4emQ3bmxjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9hZGMwZmUtYTI0Zi00NzM2LWFmYjgt
Nzk2YjM4Nzk2ZjY5LzEvTVBDUGhBNHhmcFVnVzZFMGw5bmJ4emQ3bmxjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS9hZGMwZmUtYTI0Zi00NzM2LWFmYjgtNzk2YjM4Nzk2ZjY5
LzEvTVBDUGhBNHhmcFVnVzZFMGw5bmJ4emQ3bmxjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0OLu9bWP
tfPoBpxLQqQ7sVtjGj+mX0iN5HS2dL2oGVxHRUogFQI8VfLYainQGut4ZHjzIo70
Ld13p5f4KdXzFV1VDwSO5S3zCnDdC41l+QQ/0/RegPatZi+gztKVdIvUeD5hCbJn
xprnVmEUpTJD120pvoJy2KU93qvA9JCoFzDhbx2b6rPwTaiX+iMrOr7orCv8HiWQ
ar8sDfstTqpgcNPUl80e1qncTo96DgSy58TKhBbsiw+DOfELIu9NTMSs/J7TAEtV
wAlhuyUPiO6LkYSJPdNoZxXJRNx2xOiWmYqnSTbad/pW8s3tsGihEBWOfdd6SG6T
zsSPHkwnbotG8A==
-----END CERTIFICATE-----
Generated at Tue Jul 29 07:41:37 2025 by rpki-client