Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/853849-be2e-432f-87a6-a64dad67b735/1/mCbZDesQFiidwO-MRLU06fsnG1s.mft
File: mCbZDesQFiidwO-MRLU06fsnG1s.mft (raw, json)
Hash identifier: g272Qci81AjI1EhbeFJ5qRaCZGshVlt9puHLR14O1S4=
Subject key identifier: 98:BD:5E:E3:FA:83:AE:83:79:20:14:9B:88:08:88:6E:09:BE:4A:59
Authority key identifier: 98:26:D9:0D:EB:10:16:28:9D:C0:EF:8C:44:B5:34:E9:FB:27:1B:5B
Certificate issuer: /CN=9826d90deb1016289dc0ef8c44b534e9fb271b5b
Certificate serial: 0199221EF7D8F39531CBDDB79D708BE9E246
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCbZDesQFiidwO-MRLU06fsnG1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/853849-be2e-432f-87a6-a64dad67b735/1/mCbZDesQFiidwO-MRLU06fsnG1s.mft
Manifest number: 13AC
Signing time: Sun 07 Sep 2025 03:01:18 +0000
Manifest this update: Sun 07 Sep 2025 03:01:18 +0000
Manifest next update: Mon 08 Sep 2025 03:01:18 +0000
Files and hashes: 1: FbTSJ7mjm5cq99L1AIerA5b7n7U.roa (hash: wyC2uEbA5IXzXYZMj5wku9Zxs7BB1RHGpysgY+TRxt4=)
2: mCbZDesQFiidwO-MRLU06fsnG1s.crl (hash: LO9O4ek28lNnup37JDQRuxs2AC1EY2GRu/t30PL+gX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/853849-be2e-432f-87a6-a64dad67b735/1/mCbZDesQFiidwO-MRLU06fsnG1s.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/853849-be2e-432f-87a6-a64dad67b735/1/mCbZDesQFiidwO-MRLU06fsnG1s.mft
rsync://rpki.ripe.net/repository/DEFAULT/mCbZDesQFiidwO-MRLU06fsnG1s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:f7:d8:f3:95:31:cb:dd:b7:9d:70:8b:e9:e2:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9826d90deb1016289dc0ef8c44b534e9fb271b5b
Validity
Not Before: Sep 7 03:01:18 2025 GMT
Not After : Sep 8 03:01:18 2025 GMT
Subject: CN=98bd5ee3fa83ae837920149b8808886e09be4a59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:5f:6d:bf:f3:0a:71:d0:60:0c:c6:f3:2f:bc:
22:c8:52:e7:db:42:50:61:e4:7d:23:ff:80:9a:24:
64:e1:5a:5d:fc:2e:c7:ac:6c:24:a5:22:c1:4c:c7:
e0:8d:c0:bc:b1:06:0a:6a:df:5d:9e:6a:f1:29:b1:
ad:77:de:d8:bb:81:7c:c2:ee:3a:80:6f:5b:99:5d:
5b:f5:a7:e9:dd:b0:55:67:41:f6:80:e7:54:08:d3:
e3:cf:d3:b6:15:8d:8c:c4:fe:8a:46:a2:88:9a:30:
68:d2:48:14:da:da:f5:91:c6:f2:f1:e0:d4:57:8e:
30:fb:f3:64:cb:9c:99:1b:c3:98:4d:da:90:e3:eb:
48:4f:3e:7c:bc:a6:ce:cb:eb:c3:2a:0f:75:aa:43:
ac:87:0f:49:f1:5e:c2:dd:5d:69:06:18:2d:27:ca:
a9:3f:40:be:3d:ed:92:75:aa:be:96:85:0e:ac:8d:
eb:31:34:d5:8c:2c:65:01:9f:11:9b:95:af:21:c0:
58:95:8f:83:49:e0:4c:9a:9c:17:29:e3:9e:c7:d8:
42:8b:0d:9e:ce:d8:29:a9:9c:fb:a3:1a:a7:5d:f5:
95:96:06:57:25:f4:58:96:cb:da:8b:b3:e9:57:d5:
d3:79:e2:e6:b7:8b:2b:42:98:0f:25:ec:d8:d1:a6:
6f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:BD:5E:E3:FA:83:AE:83:79:20:14:9B:88:08:88:6E:09:BE:4A:59
X509v3 Authority Key Identifier:
keyid:98:26:D9:0D:EB:10:16:28:9D:C0:EF:8C:44:B5:34:E9:FB:27:1B:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCbZDesQFiidwO-MRLU06fsnG1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/853849-be2e-432f-87a6-a64dad67b735/1/mCbZDesQFiidwO-MRLU06fsnG1s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/853849-be2e-432f-87a6-a64dad67b735/1/mCbZDesQFiidwO-MRLU06fsnG1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:38:e9:af:fe:b0:79:f1:a6:20:12:ba:41:87:75:82:51:d3:
05:a9:dd:3c:c8:18:8c:74:a1:19:ab:e5:bb:a8:1e:96:41:22:
7d:75:31:d8:d8:b7:5f:ac:25:36:6f:00:9c:70:d4:95:66:6e:
be:86:c4:03:01:59:4d:9b:ed:76:0f:b2:76:99:b1:41:b7:8b:
19:0e:9d:b7:e1:ca:93:dd:8c:71:76:2c:9f:4f:28:b4:20:6c:
e9:3a:28:57:e2:73:22:4f:2c:7f:4c:d6:d3:49:87:14:08:df:
3f:c1:42:a4:37:c1:b4:2e:58:79:82:08:91:a8:d5:20:01:5a:
82:25:dd:74:17:c8:69:08:e0:a0:22:fc:d6:ef:8a:96:78:9b:
25:34:c6:45:40:a4:8d:de:32:33:34:43:df:34:1f:34:09:6a:
c7:bf:ab:34:68:6c:e3:23:f0:50:d2:53:50:b5:02:38:50:08:
36:5a:a0:bd:32:0f:80:4f:f2:06:84:72:3d:67:60:d8:15:af:
bb:41:d2:44:6b:81:5c:8e:b4:04:a8:b9:55:50:85:71:83:72:
79:76:44:36:85:3d:ac:ed:ff:4c:bb:a8:95:6d:69:9a:a3:f2:
18:c4:76:1c:9d:7d:3e:56:b8:45:f6:6c:40:44:57:bd:5e:8b:
c5:18:0d:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiHvfY85Uxy923nXCL6eJGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4MjZkOTBkZWIxMDE2Mjg5ZGMwZWY4YzQ0YjUzNGU5ZmIy
NzFiNWIwHhcNMjUwOTA3MDMwMTE4WhcNMjUwOTA4MDMwMTE4WjAzMTEwLwYDVQQD
Eyg5OGJkNWVlM2ZhODNhZTgzNzkyMDE0OWI4ODA4ODg2ZTA5YmU0YTU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9F9tv/MKcdBgDMbzL7wiyFLn20JQ
YeR9I/+AmiRk4Vpd/C7HrGwkpSLBTMfgjcC8sQYKat9dnmrxKbGtd97Yu4F8wu46
gG9bmV1b9afp3bBVZ0H2gOdUCNPjz9O2FY2MxP6KRqKImjBo0kgU2tr1kcby8eDU
V44w+/Nky5yZG8OYTdqQ4+tITz58vKbOy+vDKg91qkOshw9J8V7C3V1pBhgtJ8qp
P0C+Pe2Sdaq+loUOrI3rMTTVjCxlAZ8Rm5WvIcBYlY+DSeBMmpwXKeOex9hCiw2e
ztgpqZz7oxqnXfWVlgZXJfRYlsvai7PpV9XTeeLmt4srQpgPJezY0aZvYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJi9XuP6g66DeSAUm4gIiG4JvkpZMB8GA1UdIwQY
MBaAFJgm2Q3rEBYoncDvjES1NOn7JxtbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUNiWkRlc1FGaWlkd08tTVJMVTA2ZnNuRzFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy84NTM4NDktYmUyZS00MzJmLTg3YTYt
YTY0ZGFkNjdiNzM1LzEvbUNiWkRlc1FGaWlkd08tTVJMVTA2ZnNuRzFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy84NTM4NDktYmUyZS00MzJmLTg3YTYtYTY0ZGFkNjdiNzM1
LzEvbUNiWkRlc1FGaWlkd08tTVJMVTA2ZnNuRzFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIjjpr/6w
efGmIBK6QYd1glHTBandPMgYjHShGavlu6gelkEifXUx2Ni3X6wlNm8AnHDUlWZu
vobEAwFZTZvtdg+ydpmxQbeLGQ6dt+HKk92McXYsn08otCBs6TooV+JzIk8sf0zW
00mHFAjfP8FCpDfBtC5YeYIIkajVIAFagiXddBfIaQjgoCL81u+KlnibJTTGRUCk
jd4yMzRD3zQfNAlqx7+rNGhs4yPwUNJTULUCOFAINlqgvTIPgE/yBoRyPWdg2BWv
u0HSRGuBXI60BKi5VVCFcYNyeXZENoU9rO3/TLuolW1pmqPyGMR2HJ19Pla4RfZs
QERXvV6LxRgNHA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:33:06 2025 by rpki-client