Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/d4dade-caef-4cd0-aef3-004f0cb3ed77/1/MDVUbqWweQVJyguhuyo-Hbrko9o.mft
File: MDVUbqWweQVJyguhuyo-Hbrko9o.mft (raw, json)
Hash identifier: 0W/rbnEcB7yvXRsAAYz6Vu0cpVAAxYtgEUhy5c8tgYw=
Subject key identifier: ED:FE:5D:4C:18:F3:89:C4:65:65:AE:87:E9:95:D2:EF:10:A9:42:24
Authority key identifier: 30:35:54:6E:A5:B0:79:05:49:CA:0B:A1:BB:2A:3E:1D:BA:E4:A3:DA
Certificate issuer: /CN=3035546ea5b0790549ca0ba1bb2a3e1dbae4a3da
Certificate serial: 019A2AE7B23BDD2E175D202D737762765FDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MDVUbqWweQVJyguhuyo-Hbrko9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/d4dade-caef-4cd0-aef3-004f0cb3ed77/1/MDVUbqWweQVJyguhuyo-Hbrko9o.mft
Manifest number: 12F9
Signing time: Tue 28 Oct 2025 13:00:18 +0000
Manifest this update: Tue 28 Oct 2025 13:00:18 +0000
Manifest next update: Wed 29 Oct 2025 13:00:18 +0000
Files and hashes: 1: 2W6axHjolbpaH6HEq0QZHunfxqw.roa (hash: wviH1ELaB1e2Lcqmt6CIweQCBrQQn4JSYfHt2lakpZo=)
2: MDVUbqWweQVJyguhuyo-Hbrko9o.crl (hash: NvKxgozGSSjj1hTA4XQDMli9S1daCNaQGHcbLlZaKI8=)
3: rrMUUFpVeR29bf5As6_7n50ECNM.roa (hash: kpYzrs/MH+Fk5UtuYnqob2xS0TbxQg7bm0bqEnSyqG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/d4dade-caef-4cd0-aef3-004f0cb3ed77/1/MDVUbqWweQVJyguhuyo-Hbrko9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/d4dade-caef-4cd0-aef3-004f0cb3ed77/1/MDVUbqWweQVJyguhuyo-Hbrko9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/MDVUbqWweQVJyguhuyo-Hbrko9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 13:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2a:e7:b2:3b:dd:2e:17:5d:20:2d:73:77:62:76:5f:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3035546ea5b0790549ca0ba1bb2a3e1dbae4a3da
Validity
Not Before: Oct 28 13:00:18 2025 GMT
Not After : Oct 29 13:00:18 2025 GMT
Subject: CN=edfe5d4c18f389c46565ae87e995d2ef10a94224
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:fd:fd:2d:c2:90:e2:54:ed:4e:3f:f9:04:dd:
76:54:0e:5a:91:c9:17:92:ab:96:6f:d0:3e:0e:37:
cf:8f:2f:61:6c:5d:37:0d:73:c1:8c:ec:e3:94:16:
8a:61:15:2e:ad:d3:36:9b:49:44:38:d4:cf:a5:81:
3f:dc:a3:03:d7:3c:d1:70:d8:04:a0:5d:d4:fc:4e:
1d:33:f5:4f:ec:ed:2f:01:e5:63:93:c4:6c:db:35:
39:89:b1:79:47:87:1a:f1:a1:a6:73:80:43:8d:e7:
d2:8e:ad:9f:a1:64:b9:17:43:96:de:a4:50:e5:27:
db:c0:91:d0:cd:42:06:01:55:83:97:3e:8b:c5:4b:
f4:e1:2f:cc:81:d4:50:ec:1d:54:19:16:75:d1:2e:
65:69:e8:ad:77:c3:9b:75:55:70:6f:cc:96:a0:45:
88:59:39:4e:57:21:a2:e5:c0:d3:3e:6c:0f:65:30:
df:55:e3:e7:0f:e3:91:8e:f4:f8:12:a8:3f:25:60:
9c:67:94:68:ad:b6:ef:9d:32:cc:68:d2:3a:3d:78:
d4:5a:e9:14:87:8f:3e:d8:84:c2:c2:3c:94:1e:1f:
e0:d0:10:29:cd:42:41:0e:8c:bb:40:16:1f:58:6a:
a1:71:1a:b5:a0:6f:01:9d:04:22:26:fb:5f:ff:23:
dd:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:FE:5D:4C:18:F3:89:C4:65:65:AE:87:E9:95:D2:EF:10:A9:42:24
X509v3 Authority Key Identifier:
keyid:30:35:54:6E:A5:B0:79:05:49:CA:0B:A1:BB:2A:3E:1D:BA:E4:A3:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MDVUbqWweQVJyguhuyo-Hbrko9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/d4dade-caef-4cd0-aef3-004f0cb3ed77/1/MDVUbqWweQVJyguhuyo-Hbrko9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/d4dade-caef-4cd0-aef3-004f0cb3ed77/1/MDVUbqWweQVJyguhuyo-Hbrko9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:81:c5:74:99:73:6a:2d:c4:b4:59:f9:53:40:00:d8:4c:10:
35:b0:1e:99:6c:dc:ea:90:d2:b1:39:8e:d5:96:a8:62:4b:73:
80:b7:89:19:40:3c:a1:e1:c6:5d:31:e6:7b:48:0a:13:f5:e4:
7c:93:06:10:0d:ef:91:c4:22:48:d0:9b:28:04:47:0e:fc:01:
4a:37:74:12:54:7a:72:4e:d8:29:02:6e:34:c7:15:4d:d1:98:
91:00:e8:08:32:72:9c:f3:61:fe:43:e0:68:2d:ba:3c:79:05:
0e:a5:f7:e4:5d:ba:58:83:3f:bb:8a:f6:d8:44:80:37:97:af:
8c:83:7b:34:4a:40:b5:6f:88:9f:2d:bd:25:db:2e:3c:6e:94:
bb:c1:02:26:8d:11:3d:e7:57:cc:68:39:cf:54:b1:c5:cd:82:
97:44:f0:f0:c6:a2:de:69:22:d2:bc:ff:c9:23:13:2a:e5:07:
eb:c0:9b:6d:ff:4f:7b:9b:36:c0:7e:99:1d:81:9d:27:f8:cb:
b6:fa:8e:12:05:0e:69:cb:c1:ba:2f:f3:0a:af:8d:2f:64:0d:
65:cc:7e:3f:7f:db:69:be:56:58:21:f1:d0:45:bf:5a:f2:7d:
11:c7:c8:23:f6:70:99:54:e8:fa:85:62:ab:9b:28:e6:e3:27:
0e:f3:1f:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 21:12:10 2025 by rpki-client