Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/ee9519-ff61-4679-9015-80e427596b5d/1/McsA0vhEAYEMMgC1L6OI6TZR3fM.mft
File: McsA0vhEAYEMMgC1L6OI6TZR3fM.mft (raw, json)
Hash identifier: Cbs7vnOhTnjvPw91/df5udViFjKsTXKEk9GuqPNMEBg=
Subject key identifier: 93:DC:E7:9B:89:82:F3:31:BC:2D:A6:20:2E:8C:9B:C8:C6:D8:D3:CC
Authority key identifier: 31:CB:00:D2:F8:44:01:81:0C:32:00:B5:2F:A3:88:E9:36:51:DD:F3
Certificate issuer: /CN=31cb00d2f84401810c3200b52fa388e93651ddf3
Certificate serial: 019A1B7475B10C3A0CDE003E422AD73740A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/McsA0vhEAYEMMgC1L6OI6TZR3fM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/ee9519-ff61-4679-9015-80e427596b5d/1/McsA0vhEAYEMMgC1L6OI6TZR3fM.mft
Manifest number: 0677
Signing time: Sat 25 Oct 2025 13:00:08 +0000
Manifest this update: Sat 25 Oct 2025 13:00:08 +0000
Manifest next update: Sun 26 Oct 2025 13:00:08 +0000
Files and hashes: 1: 6QZXrPa3sBN80OwKH97Qmpz11-w.roa (hash: UdHrwly/eXNnDWvZzXVWVnCJ0eO0DldyC6uMO4NJQeg=)
2: HNzUWXlP4veJqPrr6pXP0JJR8j8.roa (hash: su/Z3HJftIxQPXtbWly3dTZmcrPusOAjYOvLjMM2DMs=)
3: McsA0vhEAYEMMgC1L6OI6TZR3fM.crl (hash: X9a4uLcZR9WPFuZ10DREwCx9rdOwIfu8CadWbJFmM0A=)
4: hyttk-VciYASeJhwhte3fbo6duo.roa (hash: 7BwJiVdV5v0GFak7++7KK6Hv1MdzUEXFe+dIhNvsD1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/ee9519-ff61-4679-9015-80e427596b5d/1/McsA0vhEAYEMMgC1L6OI6TZR3fM.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/ee9519-ff61-4679-9015-80e427596b5d/1/McsA0vhEAYEMMgC1L6OI6TZR3fM.mft
rsync://rpki.ripe.net/repository/DEFAULT/McsA0vhEAYEMMgC1L6OI6TZR3fM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 11:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1b:74:75:b1:0c:3a:0c:de:00:3e:42:2a:d7:37:40:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31cb00d2f84401810c3200b52fa388e93651ddf3
Validity
Not Before: Oct 25 13:00:08 2025 GMT
Not After : Oct 26 13:00:08 2025 GMT
Subject: CN=93dce79b8982f331bc2da6202e8c9bc8c6d8d3cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d9:54:9e:f3:fb:7d:b7:59:5c:f7:90:e7:c0:
e6:ad:14:87:d9:03:ef:0a:45:05:e3:44:a1:bc:4e:
f3:30:2e:8f:ed:f1:cd:10:1e:67:63:87:2e:c9:26:
ae:95:62:bf:16:73:9d:ad:54:e8:ce:f0:c1:ba:4d:
d4:71:02:b2:f4:89:bf:3c:d0:0e:ad:fe:0d:12:d8:
3e:48:58:e3:8e:e5:86:6c:55:b2:73:33:1a:f6:d3:
1c:67:bd:32:86:c7:74:e6:14:e0:ed:80:c3:58:a3:
4f:d6:af:2f:6e:0c:95:2b:96:2e:6f:86:87:09:18:
33:b4:41:17:61:aa:f2:12:2d:bd:d1:db:a6:9a:a4:
97:69:3a:18:33:9c:5a:cb:a9:75:dd:67:df:17:2e:
c1:11:e3:c7:0d:24:60:92:73:ca:27:c5:d1:a9:be:
51:88:c6:09:39:1f:fc:c3:de:cd:85:e4:7c:61:5f:
05:2e:e2:eb:92:0a:6d:2d:a5:01:0c:2d:8e:6e:7e:
c3:95:79:c5:31:4f:05:95:d0:ae:89:82:f4:d6:85:
78:53:2f:60:c1:11:85:d8:52:eb:cf:22:b3:83:32:
29:98:82:6d:e4:c8:4c:e6:56:b9:90:f1:4c:45:dc:
4e:d3:42:90:17:e7:8d:49:f8:6c:e1:c1:43:21:0b:
7d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:DC:E7:9B:89:82:F3:31:BC:2D:A6:20:2E:8C:9B:C8:C6:D8:D3:CC
X509v3 Authority Key Identifier:
keyid:31:CB:00:D2:F8:44:01:81:0C:32:00:B5:2F:A3:88:E9:36:51:DD:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/McsA0vhEAYEMMgC1L6OI6TZR3fM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ee9519-ff61-4679-9015-80e427596b5d/1/McsA0vhEAYEMMgC1L6OI6TZR3fM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ee9519-ff61-4679-9015-80e427596b5d/1/McsA0vhEAYEMMgC1L6OI6TZR3fM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:5b:06:c5:82:f3:46:92:14:7b:42:3c:9c:62:af:e2:20:06:
f7:9c:c1:a6:7c:3a:13:db:1b:fe:44:b0:84:a4:1d:0c:04:b0:
ee:5f:f5:bd:6b:21:e4:ac:7f:f0:97:d1:e0:1c:9e:62:1a:0c:
63:72:77:ab:91:c4:bb:70:58:86:e8:b2:8b:e5:57:2e:5c:1b:
e2:4a:01:1b:b5:01:36:d7:b4:5d:d5:62:3a:a6:a9:af:a8:fc:
66:dc:d2:a9:c6:b2:a6:de:72:2e:cd:27:78:37:2c:94:dd:07:
a0:83:5f:76:14:70:4e:6f:12:f6:2a:07:42:07:a6:57:b0:b4:
d9:0f:d0:28:ba:98:bf:ab:9f:7f:ca:d0:cc:97:0c:f8:70:74:
0b:45:42:5c:81:3b:73:82:f8:e1:08:f8:a7:ab:2d:21:09:a0:
d4:2c:f1:ae:4c:6f:b2:1a:e3:12:f4:2a:d6:2d:df:55:a5:62:
dd:f6:c4:9d:af:ab:9a:0d:85:3f:a3:e4:d7:9c:1e:6b:64:42:
c1:0d:1f:18:97:2b:89:7c:ff:6b:4c:c9:31:9e:6f:4c:67:26:
ea:91:c0:2e:98:9d:a0:ba:4c:0b:7c:33:cb:9e:28:c0:9f:06:
a1:94:f7:cb:72:33:a3:51:fe:bf:de:c5:01:25:1f:ed:16:59:
0b:f0:b2:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 20:01:16 2025 by rpki-client