Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/ee9519-ff61-4679-9015-80e427596b5d/1/McsA0vhEAYEMMgC1L6OI6TZR3fM.mft
File: McsA0vhEAYEMMgC1L6OI6TZR3fM.mft (raw, json)
Hash identifier: C4WbH9XcHU8uBM/qKhqG/1tBfJdM/luM17OyYBPgGrg=
Subject key identifier: 0A:71:23:AB:79:02:22:89:46:D5:C7:C2:99:A7:27:8E:CD:58:C9:56
Authority key identifier: 31:CB:00:D2:F8:44:01:81:0C:32:00:B5:2F:A3:88:E9:36:51:DD:F3
Certificate issuer: /CN=31cb00d2f84401810c3200b52fa388e93651ddf3
Certificate serial: 019922FA4F460E0B3FA1A029FB5D6F592D63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/McsA0vhEAYEMMgC1L6OI6TZR3fM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/ee9519-ff61-4679-9015-80e427596b5d/1/McsA0vhEAYEMMgC1L6OI6TZR3fM.mft
Manifest number: 05F5
Signing time: Sun 07 Sep 2025 07:00:53 +0000
Manifest this update: Sun 07 Sep 2025 07:00:53 +0000
Manifest next update: Mon 08 Sep 2025 07:00:53 +0000
Files and hashes: 1: 0bSnoMCDjomKjH9l20xWi3AzK8U.roa (hash: w7ylFdvDoXCXnQ/NKrVCZ3HeQ1sG0SNLXLUNJWq26Aw=)
2: 6QZXrPa3sBN80OwKH97Qmpz11-w.roa (hash: UdHrwly/eXNnDWvZzXVWVnCJ0eO0DldyC6uMO4NJQeg=)
3: HNzUWXlP4veJqPrr6pXP0JJR8j8.roa (hash: su/Z3HJftIxQPXtbWly3dTZmcrPusOAjYOvLjMM2DMs=)
4: McsA0vhEAYEMMgC1L6OI6TZR3fM.crl (hash: qHVYVg/SHKKr25xQ0/kW/yC5h463uxIiQpCU6T7a1jo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/ee9519-ff61-4679-9015-80e427596b5d/1/McsA0vhEAYEMMgC1L6OI6TZR3fM.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/ee9519-ff61-4679-9015-80e427596b5d/1/McsA0vhEAYEMMgC1L6OI6TZR3fM.mft
rsync://rpki.ripe.net/repository/DEFAULT/McsA0vhEAYEMMgC1L6OI6TZR3fM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:4f:46:0e:0b:3f:a1:a0:29:fb:5d:6f:59:2d:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31cb00d2f84401810c3200b52fa388e93651ddf3
Validity
Not Before: Sep 7 07:00:53 2025 GMT
Not After : Sep 8 07:00:53 2025 GMT
Subject: CN=0a7123ab7902228946d5c7c299a7278ecd58c956
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ef:6e:92:4d:39:78:1c:0e:cb:3f:ef:10:98:
8f:70:a6:3a:b2:7b:4a:27:07:4c:3d:18:1d:85:5c:
9a:5f:99:d3:ef:60:a2:c2:87:f2:7d:ea:d4:a2:29:
eb:80:eb:a2:5e:78:53:e1:88:53:48:02:9c:30:0c:
77:d1:db:45:88:73:ef:0d:85:1b:93:f0:cf:9d:dc:
78:00:eb:e3:41:be:48:c4:a6:cd:c0:0b:32:94:90:
ba:df:30:bf:c8:7b:ee:18:62:2f:85:ef:6b:b8:6b:
a8:e6:c7:cd:85:54:7b:1d:c7:10:86:d7:f5:05:b0:
9a:64:95:7a:90:86:a3:ab:4d:b1:6a:1c:85:04:6a:
d6:0a:e9:1f:e5:36:94:80:38:e0:24:00:46:64:cc:
6b:89:72:b6:ce:a4:fa:46:fc:8f:65:b7:b2:bf:0c:
4d:14:07:d6:fc:df:e6:f6:91:25:c6:70:84:b2:d9:
aa:e7:57:c8:5f:c7:e4:09:0c:cb:d6:50:45:96:c0:
40:8e:68:dc:a4:6c:98:7b:88:23:6d:99:4f:e9:86:
1e:bf:14:d8:9d:97:70:74:c5:b6:f7:b6:6f:12:98:
fe:9a:cf:b4:5c:e0:d6:78:39:fb:34:8c:cd:df:75:
33:63:24:66:c9:9a:38:fb:02:9c:e5:5d:a8:16:2c:
eb:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:71:23:AB:79:02:22:89:46:D5:C7:C2:99:A7:27:8E:CD:58:C9:56
X509v3 Authority Key Identifier:
keyid:31:CB:00:D2:F8:44:01:81:0C:32:00:B5:2F:A3:88:E9:36:51:DD:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/McsA0vhEAYEMMgC1L6OI6TZR3fM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ee9519-ff61-4679-9015-80e427596b5d/1/McsA0vhEAYEMMgC1L6OI6TZR3fM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ee9519-ff61-4679-9015-80e427596b5d/1/McsA0vhEAYEMMgC1L6OI6TZR3fM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:91:fd:28:6d:d2:50:e7:9f:93:c6:55:91:7b:96:20:d8:bd:
c7:a8:9c:2f:11:bd:4f:f5:93:fa:99:30:df:4a:24:fa:e8:6b:
5f:14:a4:ca:0c:8c:92:53:1c:a1:48:e9:2f:48:62:f7:ee:06:
bc:6a:f3:b0:42:72:68:6f:8e:a0:27:b9:75:e0:b2:d8:e0:4d:
03:b1:31:f8:35:58:2f:37:4e:ce:d8:f7:70:fe:fe:3e:0a:89:
de:8a:69:fa:a5:ac:f8:f3:35:7b:70:5f:45:b6:eb:66:c6:e6:
66:ec:c2:da:56:3e:7d:83:1f:7f:14:43:a6:ec:b9:e9:d8:df:
5e:b9:28:af:39:39:7a:e8:29:7c:db:89:ab:a6:fb:05:47:47:
c7:8a:26:2b:d4:6f:7c:7c:f5:72:af:d7:12:c8:a0:98:f4:2f:
3d:46:88:c5:e8:14:90:16:67:13:91:f2:bd:ea:5a:4a:11:02:
37:5d:80:8c:1b:eb:9a:3b:b9:a5:98:e4:b7:c2:6b:5f:d5:58:
70:94:87:ed:77:7e:fa:24:a9:94:a5:43:89:35:56:7a:9a:db:
f9:4a:c6:57:5e:6e:8f:14:84:3b:bf:43:fb:63:bb:7c:f4:18:
4e:70:d3:b6:ef:14:e1:f5:01:7b:75:a8:5c:5c:7a:0d:a5:04:
06:6d:2b:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:25:04 2025 by rpki-client