
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/666786-561c-4bd0-a7b0-8f7fd3dc15fe/1/Marcypb0SkVzktiQfGuWS-D8-SE.mft
File: Marcypb0SkVzktiQfGuWS-D8-SE.mft (raw, json)
Hash identifier: V9eLpTrvei5DghEMEsvnSNbzXl8mj4mhKZWbaCUffMc=
Subject key identifier: E2:14:D2:2B:B2:86:2D:72:C7:53:0B:49:8B:AE:4D:C5:2C:8A:6A:27
Authority key identifier: 31:AA:DC:CA:96:F4:4A:45:73:92:D8:90:7C:6B:96:4B:E0:FC:F9:21
Certificate issuer: /CN=31aadcca96f44a457392d8907c6b964be0fcf921
Certificate serial: 0199228C9AACBFDE2FD7B9DF9DA5497DA624
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Marcypb0SkVzktiQfGuWS-D8-SE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/666786-561c-4bd0-a7b0-8f7fd3dc15fe/1/Marcypb0SkVzktiQfGuWS-D8-SE.mft
Manifest number: 0D68
Signing time: Sun 07 Sep 2025 05:01:03 +0000
Manifest this update: Sun 07 Sep 2025 05:01:03 +0000
Manifest next update: Mon 08 Sep 2025 05:01:03 +0000
Files and hashes: 1: Marcypb0SkVzktiQfGuWS-D8-SE.crl (hash: E7AtNLhm4ynf/quQIKheql6yfUylSQ2jvsyps3s3VdQ=)
2: XFj03ZPCOj3qqoe8oMNPGmud9a4.roa (hash: m6E7RZQpvmKbh+R69KgZ6bmoskHz5Bb8/AlaawR8U/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/666786-561c-4bd0-a7b0-8f7fd3dc15fe/1/Marcypb0SkVzktiQfGuWS-D8-SE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/666786-561c-4bd0-a7b0-8f7fd3dc15fe/1/Marcypb0SkVzktiQfGuWS-D8-SE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Marcypb0SkVzktiQfGuWS-D8-SE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:9a:ac:bf:de:2f:d7:b9:df:9d:a5:49:7d:a6:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31aadcca96f44a457392d8907c6b964be0fcf921
Validity
Not Before: Sep 7 05:01:03 2025 GMT
Not After : Sep 8 05:01:03 2025 GMT
Subject: CN=e214d22bb2862d72c7530b498bae4dc52c8a6a27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:4b:64:65:dc:eb:79:12:92:50:87:60:d7:09:
84:97:97:e3:f8:2d:2e:51:f6:a0:b8:35:8c:a7:d0:
b4:ac:1e:12:da:dd:a2:39:ae:52:49:38:ea:a3:1d:
4c:27:a7:20:fe:45:14:72:ce:de:81:fe:50:5b:bc:
49:d0:7b:30:2d:ce:bc:23:24:b6:90:88:53:28:51:
d3:24:56:a5:24:03:10:a0:82:63:a9:63:d9:13:d0:
d4:79:40:00:ba:5b:f2:01:8b:f2:13:02:8e:f9:83:
43:c2:74:6e:f9:44:c0:6c:02:cc:e6:2c:7f:6f:01:
58:9d:6c:36:41:33:e1:e7:81:c0:00:5b:0e:ba:81:
b1:b6:2b:38:b4:a6:69:17:3f:38:1d:d9:e6:0a:5b:
19:db:06:fc:94:94:80:0d:d0:f1:47:f1:c5:76:4d:
c3:5c:08:24:19:59:77:73:2d:77:e4:93:3d:a7:a6:
67:66:c8:a5:58:59:65:e1:62:55:28:29:fa:64:e9:
9b:28:8a:0b:10:b4:63:fa:c9:56:e0:cc:37:c6:13:
e8:42:42:7d:2d:1c:85:ce:e7:61:ed:a4:23:e6:bf:
c2:07:1d:d2:1a:40:bd:5a:d3:a4:69:9d:d6:28:4b:
ae:3b:10:3f:18:ae:d1:7c:e3:a9:d3:ee:bc:61:2e:
8e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:14:D2:2B:B2:86:2D:72:C7:53:0B:49:8B:AE:4D:C5:2C:8A:6A:27
X509v3 Authority Key Identifier:
keyid:31:AA:DC:CA:96:F4:4A:45:73:92:D8:90:7C:6B:96:4B:E0:FC:F9:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Marcypb0SkVzktiQfGuWS-D8-SE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/666786-561c-4bd0-a7b0-8f7fd3dc15fe/1/Marcypb0SkVzktiQfGuWS-D8-SE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/666786-561c-4bd0-a7b0-8f7fd3dc15fe/1/Marcypb0SkVzktiQfGuWS-D8-SE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:d1:3e:98:9c:0b:a7:8a:c6:dc:5a:09:15:5b:64:18:bd:40:
a2:dc:be:c3:f4:fc:9f:96:f7:cb:7a:1f:8f:40:3f:ac:34:10:
a3:8e:ab:bd:4e:27:98:77:c4:d0:e6:46:a3:33:00:5b:c1:1a:
5c:d4:8a:f0:a7:3c:a6:d0:7d:6f:33:35:c7:a7:3e:5a:6e:56:
ec:7f:33:7b:0a:34:db:13:ca:d4:0a:d3:c4:25:1a:0d:0f:17:
2c:5a:df:31:7e:9b:a5:03:f5:a4:fb:17:62:0b:f3:1c:dd:0c:
c6:db:04:e4:16:12:96:f1:ae:82:45:18:f7:42:3f:82:47:3c:
5a:db:65:ef:eb:99:49:98:36:95:a6:e7:21:ea:03:fd:8b:c1:
7b:46:4f:da:2c:1e:29:37:55:fb:89:6d:06:8b:ef:e8:3c:4e:
03:22:c2:92:b8:8f:61:ef:e8:35:20:97:6e:74:fe:70:2e:b3:
48:a9:24:49:1f:d0:31:74:97:b9:da:a0:75:a2:99:3e:5c:9c:
eb:9c:c7:8d:a2:96:5f:94:a7:0b:52:4a:1e:59:ce:a3:d6:b0:
cf:0b:6e:a0:f7:f7:0a:b2:1d:d7:c9:5a:30:86:2d:0b:bf:51:
19:1b:8b:1c:ad:00:fd:f6:75:f8:d1:20:75:8f:6f:b3:b8:37:
4e:65:23:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkijJqsv94v17nfnaVJfaYkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxYWFkY2NhOTZmNDRhNDU3MzkyZDg5MDdjNmI5NjRiZTBm
Y2Y5MjEwHhcNMjUwOTA3MDUwMTAzWhcNMjUwOTA4MDUwMTAzWjAzMTEwLwYDVQQD
EyhlMjE0ZDIyYmIyODYyZDcyYzc1MzBiNDk4YmFlNGRjNTJjOGE2YTI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUtkZdzreRKSUIdg1wmEl5fj+C0u
UfaguDWMp9C0rB4S2t2iOa5SSTjqox1MJ6cg/kUUcs7egf5QW7xJ0HswLc68IyS2
kIhTKFHTJFalJAMQoIJjqWPZE9DUeUAAulvyAYvyEwKO+YNDwnRu+UTAbALM5ix/
bwFYnWw2QTPh54HAAFsOuoGxtis4tKZpFz84HdnmClsZ2wb8lJSADdDxR/HFdk3D
XAgkGVl3cy135JM9p6ZnZsilWFll4WJVKCn6ZOmbKIoLELRj+slW4Mw3xhPoQkJ9
LRyFzudh7aQj5r/CBx3SGkC9WtOkaZ3WKEuuOxA/GK7RfOOp0+68YS6OEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOIU0iuyhi1yx1MLSYuuTcUsimonMB8GA1UdIwQY
MBaAFDGq3MqW9EpFc5LYkHxrlkvg/PkhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWFyY3lwYjBTa1Z6a3RpUWZHdVdTLUQ4LVNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni82NjY3ODYtNTYxYy00YmQwLWE3YjAt
OGY3ZmQzZGMxNWZlLzEvTWFyY3lwYjBTa1Z6a3RpUWZHdVdTLUQ4LVNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni82NjY3ODYtNTYxYy00YmQwLWE3YjAtOGY3ZmQzZGMxNWZl
LzEvTWFyY3lwYjBTa1Z6a3RpUWZHdVdTLUQ4LVNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADtE+mJwL
p4rG3FoJFVtkGL1Aoty+w/T8n5b3y3ofj0A/rDQQo46rvU4nmHfE0OZGozMAW8Ea
XNSK8Kc8ptB9bzM1x6c+Wm5W7H8zewo02xPK1ArTxCUaDQ8XLFrfMX6bpQP1pPsX
YgvzHN0MxtsE5BYSlvGugkUY90I/gkc8Wttl7+uZSZg2labnIeoD/YvBe0ZP2iwe
KTdV+4ltBovv6DxOAyLCkriPYe/oNSCXbnT+cC6zSKkkSR/QMXSXudqgdaKZPlyc
65zHjaKWX5SnC1JKHlnOo9awzwtuoPf3CrId18laMIYtC79RGRuLHK0A/fZ1+NEg
dY9vs7g3TmUjTg==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:08:24 2025 by rpki-client