Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/4a523b-7244-422d-9004-c4aa9db1abb5/1/MCX9M5qmRQTyiaAMQXPFWgAC60Q.mft
File: MCX9M5qmRQTyiaAMQXPFWgAC60Q.mft (raw, json)
Hash identifier: fI2yqlzJoDxB8rKhLCr8QPw/wDtkRz2SYUR3//4K3L4=
Subject key identifier: 5C:D4:CF:1C:2D:6A:4F:5B:80:47:6F:2E:DB:65:FB:B6:D3:44:0B:5F
Authority key identifier: 30:25:FD:33:9A:A6:45:04:F2:89:A0:0C:41:73:C5:5A:00:02:EB:44
Certificate issuer: /CN=3025fd339aa64504f289a00c4173c55a0002eb44
Certificate serial: 0198602471B9C45C45A488B2465F6C013BD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MCX9M5qmRQTyiaAMQXPFWgAC60Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/4a523b-7244-422d-9004-c4aa9db1abb5/1/MCX9M5qmRQTyiaAMQXPFWgAC60Q.mft
Manifest number: 0FD5
Signing time: Thu 31 Jul 2025 11:00:57 +0000
Manifest this update: Thu 31 Jul 2025 11:00:57 +0000
Manifest next update: Fri 01 Aug 2025 11:00:57 +0000
Files and hashes: 1: DPz87dZS9HseddW8gbD-vS7fq9g.roa (hash: 4BW75SF0KzzzYTTCKr54E2E3BA1EBeDyvFumW+QYO5M=)
2: MCX9M5qmRQTyiaAMQXPFWgAC60Q.crl (hash: u9R5aj6mtZxDMZTFQaCrU6TJ/7kweXv3r5wCOFGep7E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/4a523b-7244-422d-9004-c4aa9db1abb5/1/MCX9M5qmRQTyiaAMQXPFWgAC60Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/4a523b-7244-422d-9004-c4aa9db1abb5/1/MCX9M5qmRQTyiaAMQXPFWgAC60Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/MCX9M5qmRQTyiaAMQXPFWgAC60Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 Aug 2025 09:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:60:24:71:b9:c4:5c:45:a4:88:b2:46:5f:6c:01:3b:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3025fd339aa64504f289a00c4173c55a0002eb44
Validity
Not Before: Jul 31 11:00:57 2025 GMT
Not After : Aug 1 11:00:57 2025 GMT
Subject: CN=5cd4cf1c2d6a4f5b80476f2edb65fbb6d3440b5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:89:84:3b:cd:60:e5:8a:39:b8:da:57:70:15:
a1:4b:46:a8:cd:5e:02:43:b0:6a:e6:1b:14:cc:da:
c0:4a:55:73:be:17:e4:34:12:25:b3:88:f4:21:68:
0b:8d:e2:4f:67:cd:a3:93:0b:63:20:e6:91:c9:89:
c5:12:0d:18:d6:38:f7:64:63:7c:32:5d:fe:c9:0d:
cc:14:0d:97:83:e8:2c:91:70:46:a6:82:91:e2:93:
99:c5:88:5a:10:3d:9c:4d:fc:e9:48:6f:78:47:00:
56:b7:ae:49:2d:de:fd:81:2e:64:7b:af:20:e5:ed:
d8:5f:d7:2b:6f:47:50:1f:78:96:cd:06:83:34:f2:
92:a3:bd:c6:77:4d:c5:fd:48:d0:e4:de:c9:1f:cc:
ca:0b:cd:7f:bc:44:3f:e8:f4:bc:f0:69:0b:41:3d:
ba:f8:b8:c6:96:b2:14:42:7b:e9:6c:51:4a:68:d0:
b6:fa:a2:c6:ac:0f:3c:aa:c0:11:02:7d:aa:d1:3f:
e6:ec:81:c2:cf:de:62:8d:65:83:b2:21:8f:4f:e4:
47:96:56:dc:86:c7:25:0f:27:0c:9f:e1:fb:a3:a8:
0a:a6:76:b0:78:1c:2b:03:1d:b1:7f:e4:29:38:d8:
16:a0:5d:c2:a6:9c:16:c5:9d:56:eb:2f:2f:0e:2b:
6c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:D4:CF:1C:2D:6A:4F:5B:80:47:6F:2E:DB:65:FB:B6:D3:44:0B:5F
X509v3 Authority Key Identifier:
keyid:30:25:FD:33:9A:A6:45:04:F2:89:A0:0C:41:73:C5:5A:00:02:EB:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MCX9M5qmRQTyiaAMQXPFWgAC60Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4a523b-7244-422d-9004-c4aa9db1abb5/1/MCX9M5qmRQTyiaAMQXPFWgAC60Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4a523b-7244-422d-9004-c4aa9db1abb5/1/MCX9M5qmRQTyiaAMQXPFWgAC60Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:05:9d:1d:1e:3d:00:00:40:8a:88:b1:33:c9:8a:d1:bd:12:
0a:b7:f7:5a:f3:f8:49:6e:ce:74:c4:05:07:85:3c:78:a1:d5:
b3:80:21:51:23:9d:8d:f7:e5:9c:00:d1:a2:e2:27:e5:93:eb:
d3:5e:5d:3a:32:68:40:ee:19:8a:0c:11:31:76:73:9b:91:eb:
92:32:8c:8c:b4:35:8d:f6:b4:e6:05:45:50:c9:45:ca:e1:f9:
11:4d:0a:4a:73:e5:14:dd:44:86:0e:24:7c:4c:4b:88:ac:32:
26:d5:26:59:f0:0e:ff:02:4d:44:c0:b9:ee:0c:bd:21:9e:78:
1a:d1:6d:ed:73:a8:fd:37:e2:f4:32:1c:9b:4c:cd:f4:7d:84:
3f:7a:0c:26:62:e4:96:f8:61:4d:a2:2b:52:2e:9b:2c:b4:12:
3f:2f:47:62:aa:c4:88:f1:f9:4e:31:1f:e1:bf:0e:4b:9a:c4:
a2:bd:1c:58:39:a5:c0:fd:4e:9a:e5:18:cb:8a:74:1e:3b:7d:
9f:07:c8:31:81:83:93:c1:95:da:b7:fe:a4:5a:e0:4c:e2:06:
ed:d0:ea:92:d5:d4:23:c1:a7:72:ae:a7:be:b9:2e:b5:f9:0b:
dd:5d:e1:de:fb:c5:ba:e4:fb:d3:0a:4c:12:d5:c6:ef:93:81:
59:fe:68:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 14:24:08 2025 by rpki-client