Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/d4dade-caef-4cd0-aef3-004f0cb3ed77/1/MDVUbqWweQVJyguhuyo-Hbrko9o.mft
File: MDVUbqWweQVJyguhuyo-Hbrko9o.mft (raw, json)
Hash identifier: x+7x5KWAHd0hhppH7Ug5GqWjyDMsfOVPBFC1WkWj1/k=
Subject key identifier: 3A:85:D6:F1:F7:91:3B:84:87:BD:E1:FD:C3:84:DB:36:06:22:68:2B
Authority key identifier: 30:35:54:6E:A5:B0:79:05:49:CA:0B:A1:BB:2A:3E:1D:BA:E4:A3:DA
Certificate issuer: /CN=3035546ea5b0790549ca0ba1bb2a3e1dbae4a3da
Certificate serial: 01984A0A48E837AAB40E0311C92ED3484C6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MDVUbqWweQVJyguhuyo-Hbrko9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/d4dade-caef-4cd0-aef3-004f0cb3ed77/1/MDVUbqWweQVJyguhuyo-Hbrko9o.mft
Manifest number: 1200
Signing time: Sun 27 Jul 2025 04:00:44 +0000
Manifest this update: Sun 27 Jul 2025 04:00:44 +0000
Manifest next update: Mon 28 Jul 2025 04:00:44 +0000
Files and hashes: 1: 2W6axHjolbpaH6HEq0QZHunfxqw.roa (hash: wviH1ELaB1e2Lcqmt6CIweQCBrQQn4JSYfHt2lakpZo=)
2: MDVUbqWweQVJyguhuyo-Hbrko9o.crl (hash: GiSGFXBg0cgMTHEKhM9ev2IBnSWce4ibIgHI2sbPKUM=)
3: rrMUUFpVeR29bf5As6_7n50ECNM.roa (hash: kpYzrs/MH+Fk5UtuYnqob2xS0TbxQg7bm0bqEnSyqG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/d4dade-caef-4cd0-aef3-004f0cb3ed77/1/MDVUbqWweQVJyguhuyo-Hbrko9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/d4dade-caef-4cd0-aef3-004f0cb3ed77/1/MDVUbqWweQVJyguhuyo-Hbrko9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/MDVUbqWweQVJyguhuyo-Hbrko9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:0a:48:e8:37:aa:b4:0e:03:11:c9:2e:d3:48:4c:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3035546ea5b0790549ca0ba1bb2a3e1dbae4a3da
Validity
Not Before: Jul 27 04:00:44 2025 GMT
Not After : Jul 28 04:00:44 2025 GMT
Subject: CN=3a85d6f1f7913b8487bde1fdc384db360622682b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:90:df:ba:1e:b4:b2:5b:1c:03:06:f5:7f:72:
93:93:41:e9:70:e8:e9:47:49:e2:0c:81:03:5b:2d:
01:a2:e0:f3:2f:07:5e:c6:d6:32:7b:ca:19:95:84:
ea:83:fd:ae:5b:c9:22:04:b2:89:27:e5:56:64:4a:
6b:8d:0a:10:97:23:a9:86:0b:80:27:6d:97:84:06:
7a:10:d6:64:3f:f3:16:82:25:88:68:41:12:63:1e:
cb:46:23:56:24:b2:30:ed:87:36:2b:ae:37:7b:d6:
dd:8c:1f:6d:17:74:56:9e:e5:6e:5e:23:c9:2b:cb:
31:e1:5c:38:06:c0:b6:9b:e7:85:6f:e2:50:e9:54:
28:72:f2:2e:15:5c:f7:b4:ee:e6:0e:f6:6c:02:d4:
c2:c2:93:4f:2a:90:b5:ae:36:51:d3:7d:45:e5:d3:
6d:9c:e7:5e:94:cd:75:a9:88:86:23:15:00:a8:f7:
2f:c9:cf:83:a5:20:6d:c7:ef:bf:af:89:60:e6:5f:
8b:99:1d:00:2d:7c:a9:a0:e0:c3:c8:84:5d:65:4c:
d2:87:82:91:b9:21:7b:38:2b:3e:0a:5f:ee:3a:01:
8e:f9:ec:4c:11:b1:84:6a:dc:ef:a2:48:19:48:ea:
0b:59:a3:ff:50:94:77:9e:61:c3:3c:12:d9:af:1e:
39:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:85:D6:F1:F7:91:3B:84:87:BD:E1:FD:C3:84:DB:36:06:22:68:2B
X509v3 Authority Key Identifier:
keyid:30:35:54:6E:A5:B0:79:05:49:CA:0B:A1:BB:2A:3E:1D:BA:E4:A3:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MDVUbqWweQVJyguhuyo-Hbrko9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/d4dade-caef-4cd0-aef3-004f0cb3ed77/1/MDVUbqWweQVJyguhuyo-Hbrko9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/d4dade-caef-4cd0-aef3-004f0cb3ed77/1/MDVUbqWweQVJyguhuyo-Hbrko9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:e7:c5:25:7c:b2:d0:c0:c8:60:fe:d3:e2:d2:ee:7e:41:47:
45:0c:d8:78:02:7d:5b:94:07:c0:a4:48:a1:06:63:d8:4b:25:
c1:ad:0f:bd:7f:51:e9:b4:6a:24:e3:75:c5:ca:94:61:18:d9:
d4:71:89:0e:a5:9c:1f:4b:b5:e6:b7:b0:ec:11:1b:2b:ba:ec:
2a:2f:0e:ec:44:78:05:ad:55:b8:ff:4e:e9:39:f0:cf:63:04:
55:0d:44:99:33:7d:82:58:9a:65:c8:7f:40:ff:73:2c:45:1f:
5b:2a:df:f0:b6:36:0c:29:1b:ed:e3:35:c7:24:11:eb:cd:e0:
04:ac:c4:6c:98:09:61:f7:c5:32:a6:a9:40:f7:9a:15:cb:0e:
6a:15:ce:a1:1a:06:17:47:2a:21:de:5a:8b:f4:2c:37:3c:ea:
d8:9c:c3:dc:ac:c7:94:6b:63:e1:70:81:3f:4b:d6:84:24:c7:
57:c7:83:6b:dc:95:4c:74:77:39:ce:c2:f9:71:29:75:8c:f8:
7c:4e:07:55:b4:76:01:9a:d0:d2:39:3f:c4:f2:6a:62:aa:dd:
6f:34:13:2a:84:d8:e0:50:81:54:a4:7a:fc:c1:bc:22:7a:bb:
f5:08:69:fb:f7:c7:c2:c3:20:55:32:73:2f:77:83:06:ec:77:
55:50:4c:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKCkjoN6q0DgMRyS7TSExuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwMzU1NDZlYTViMDc5MDU0OWNhMGJhMWJiMmEzZTFkYmFl
NGEzZGEwHhcNMjUwNzI3MDQwMDQ0WhcNMjUwNzI4MDQwMDQ0WjAzMTEwLwYDVQQD
EygzYTg1ZDZmMWY3OTEzYjg0ODdiZGUxZmRjMzg0ZGIzNjA2MjI2ODJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5Dfuh60slscAwb1f3KTk0HpcOjp
R0niDIEDWy0BouDzLwdextYye8oZlYTqg/2uW8kiBLKJJ+VWZEprjQoQlyOphguA
J22XhAZ6ENZkP/MWgiWIaEESYx7LRiNWJLIw7Yc2K643e9bdjB9tF3RWnuVuXiPJ
K8sx4Vw4BsC2m+eFb+JQ6VQocvIuFVz3tO7mDvZsAtTCwpNPKpC1rjZR031F5dNt
nOdelM11qYiGIxUAqPcvyc+DpSBtx++/r4lg5l+LmR0ALXypoODDyIRdZUzSh4KR
uSF7OCs+Cl/uOgGO+exMEbGEatzvokgZSOoLWaP/UJR3nmHDPBLZrx457QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDqF1vH3kTuEh73h/cOE2zYGImgrMB8GA1UdIwQY
MBaAFDA1VG6lsHkFScoLobsqPh265KPaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTURWVWJxV3dlUVZKeWd1aHV5by1IYnJrbzlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9kNGRhZGUtY2FlZi00Y2QwLWFlZjMt
MDA0ZjBjYjNlZDc3LzEvTURWVWJxV3dlUVZKeWd1aHV5by1IYnJrbzlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC9kNGRhZGUtY2FlZi00Y2QwLWFlZjMtMDA0ZjBjYjNlZDc3
LzEvTURWVWJxV3dlUVZKeWd1aHV5by1IYnJrbzlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPOfFJXyy
0MDIYP7T4tLufkFHRQzYeAJ9W5QHwKRIoQZj2Eslwa0PvX9R6bRqJON1xcqUYRjZ
1HGJDqWcH0u15rew7BEbK7rsKi8O7ER4Ba1VuP9O6Tnwz2MEVQ1EmTN9gliaZch/
QP9zLEUfWyrf8LY2DCkb7eM1xyQR683gBKzEbJgJYffFMqapQPeaFcsOahXOoRoG
F0cqId5ai/QsNzzq2JzD3KzHlGtj4XCBP0vWhCTHV8eDa9yVTHR3Oc7C+XEpdYz4
fE4HVbR2AZrQ0jk/xPJqYqrdbzQTKoTY4FCBVKR6/MG8Inq79Qhp+/fHwsMgVTJz
L3eDBux3VVBM/Q==
-----END CERTIFICATE-----
Generated at Sun Jul 27 07:52:38 2025 by rpki-client