Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.mft
File: MCemMbtnOOtou26mxCTvSn0Uw8s.mft (raw, json)
Hash identifier: Skr5opKJmbvd1RZKKL+jOLa4tbOad13bid2kAs84de8=
Subject key identifier: 4C:89:42:87:3C:C2:3D:95:4F:F8:DD:E5:DC:07:80:80:61:46:26:BA
Authority key identifier: 30:27:A6:31:BB:67:38:EB:68:BB:6E:A6:C4:24:EF:4A:7D:14:C3:CB
Certificate issuer: /CN=3027a631bb6738eb68bb6ea6c424ef4a7d14c3cb
Certificate serial: 0199239ED9FC958350E8F5E11ABE58C968B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MCemMbtnOOtou26mxCTvSn0Uw8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.mft
Manifest number: 1673
Signing time: Sun 07 Sep 2025 10:00:36 +0000
Manifest this update: Sun 07 Sep 2025 10:00:36 +0000
Manifest next update: Mon 08 Sep 2025 10:00:36 +0000
Files and hashes: 1: ApyGylUq9XnJnWFVsfj0zntPv2A.roa (hash: J/AU6L4U60tQsws5n8ktoibPaB7afggy7L2/aS0YmuI=)
2: GebDZHzgUSVpcN28Yg77a-VI06g.roa (hash: dm+f03y/iSx5h5jyotT9d+cvRSI3pxxJ+UatUa1LFiM=)
3: MCemMbtnOOtou26mxCTvSn0Uw8s.crl (hash: mmSpUP4SHYyD+8lOTDk4cXO6zUugZd2lpsEBEuwHVcs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MCemMbtnOOtou26mxCTvSn0Uw8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9e:d9:fc:95:83:50:e8:f5:e1:1a:be:58:c9:68:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3027a631bb6738eb68bb6ea6c424ef4a7d14c3cb
Validity
Not Before: Sep 7 10:00:36 2025 GMT
Not After : Sep 8 10:00:36 2025 GMT
Subject: CN=4c8942873cc23d954ff8dde5dc078080614626ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e5:4c:16:ce:00:51:a3:ef:f1:73:6a:58:98:
58:ff:87:52:42:23:1f:53:bd:24:2d:aa:b9:e8:ce:
91:d1:23:ea:63:85:2a:d3:e2:b6:e8:71:7a:bc:74:
7f:40:7b:a4:62:69:6c:59:90:81:4e:4c:c2:7d:e7:
71:00:ae:b0:a7:cc:8f:70:23:6c:7c:b1:3f:cc:75:
46:cd:45:24:39:0a:cd:d3:3e:ab:96:b6:fc:d0:30:
d2:8c:43:1e:8c:05:28:b6:73:52:17:5a:cc:1d:03:
e5:8b:4c:ab:39:2d:e0:c4:5a:0e:78:14:61:0e:a7:
35:42:a9:9b:c2:74:a7:ec:c6:e0:68:8a:ad:ec:ee:
93:4b:5c:a8:9b:49:98:10:e4:56:0b:98:7e:ab:9e:
03:34:93:8b:de:3a:10:f0:5c:d3:fa:d6:e3:68:ff:
2c:c6:51:70:25:21:e3:58:5e:46:94:05:72:5c:f2:
f1:b3:9e:2c:ec:af:e2:b2:9e:d9:e6:78:1e:1f:d6:
95:ec:86:d7:63:65:f0:84:3b:95:4a:d3:2f:ad:bc:
9f:21:cb:c3:06:97:8d:7f:be:d3:3e:0e:82:8f:18:
71:fa:d4:63:30:55:6f:92:09:c0:67:4f:97:0b:17:
15:08:d3:81:65:21:8d:d8:8c:f7:6a:91:c7:d6:de:
59:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:89:42:87:3C:C2:3D:95:4F:F8:DD:E5:DC:07:80:80:61:46:26:BA
X509v3 Authority Key Identifier:
keyid:30:27:A6:31:BB:67:38:EB:68:BB:6E:A6:C4:24:EF:4A:7D:14:C3:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MCemMbtnOOtou26mxCTvSn0Uw8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dc:d2:3e:dd:19:71:fa:68:60:3d:87:70:a1:74:d7:1b:d6:0f:
37:6c:bd:63:aa:04:14:0a:fa:6c:e6:7c:d9:65:80:42:cb:eb:
c3:54:c1:f5:12:6b:86:f4:06:a4:4f:52:ec:bd:fb:59:7d:cd:
42:64:21:ae:8c:d2:3d:dd:76:8b:11:90:9c:47:c2:2e:79:28:
73:f5:92:06:51:fb:ca:4b:c7:42:6e:55:3c:8d:4a:d8:49:be:
79:7f:fe:68:7b:b9:22:65:02:77:83:c3:1e:17:60:15:24:64:
17:aa:36:60:37:2b:c0:b4:f9:34:2d:8a:2d:07:d4:e0:66:9e:
2e:97:95:76:36:70:c6:50:53:05:75:5d:72:ef:cd:76:27:49:
e7:21:60:14:a2:58:b3:2c:7f:0e:b4:f3:15:02:e4:b8:ac:03:
31:a5:fd:f4:d1:e2:41:c6:89:58:f0:3a:68:51:fb:63:66:6b:
6a:48:3e:70:9c:49:19:c8:06:6d:fa:5c:a3:70:16:f0:7b:82:
d1:fa:aa:76:5c:ce:55:97:67:45:06:56:ae:ed:2b:ac:a1:57:
74:b2:d1:da:3b:4e:43:f4:32:7a:b8:1a:ae:88:f7:f5:c7:c0:
a2:1b:65:01:3c:41:a4:b5:0f:ad:0b:e5:b1:b7:7e:5d:4f:ff:
5c:03:62:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:30:51 2025 by rpki-client