Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/bd3880-fc26-4121-b2e4-e6d6e8aebef8/1/MC0R6FJhV0AHazKBuK_w-sXKLzM.mft
File: MC0R6FJhV0AHazKBuK_w-sXKLzM.mft (raw, json)
Hash identifier: uhZoFUyUExLb1jnHWsOJXez/T8lnub472SuoIC/+Qbw=
Subject key identifier: 0E:33:B7:7E:EC:90:E3:FB:29:6D:5B:34:72:72:36:6E:89:90:74:B1
Authority key identifier: 30:2D:11:E8:52:61:57:40:07:6B:32:81:B8:AF:F0:FA:C5:CA:2F:33
Certificate issuer: /CN=302d11e852615740076b3281b8aff0fac5ca2f33
Certificate serial: 0199356E5B831B83AF599BA0D6B2551C809C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MC0R6FJhV0AHazKBuK_w-sXKLzM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/bd3880-fc26-4121-b2e4-e6d6e8aebef8/1/MC0R6FJhV0AHazKBuK_w-sXKLzM.mft
Manifest number: 1190
Signing time: Wed 10 Sep 2025 21:00:48 +0000
Manifest this update: Wed 10 Sep 2025 21:00:48 +0000
Manifest next update: Thu 11 Sep 2025 21:00:48 +0000
Files and hashes: 1: AV_h3jqDqBv8GTowG5NZT83IRVM.roa (hash: 7I92tp7yKWv9nRYHQ0pF0g4dedaK+rFfmKLNQHVUe28=)
2: MC0R6FJhV0AHazKBuK_w-sXKLzM.crl (hash: 8An6i8iuJUsBG3Z5wAlsQnZHK0KMprP4CHrT3ceExOw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/bd3880-fc26-4121-b2e4-e6d6e8aebef8/1/MC0R6FJhV0AHazKBuK_w-sXKLzM.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/bd3880-fc26-4121-b2e4-e6d6e8aebef8/1/MC0R6FJhV0AHazKBuK_w-sXKLzM.mft
rsync://rpki.ripe.net/repository/DEFAULT/MC0R6FJhV0AHazKBuK_w-sXKLzM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 20:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:6e:5b:83:1b:83:af:59:9b:a0:d6:b2:55:1c:80:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=302d11e852615740076b3281b8aff0fac5ca2f33
Validity
Not Before: Sep 10 21:00:48 2025 GMT
Not After : Sep 11 21:00:48 2025 GMT
Subject: CN=0e33b77eec90e3fb296d5b347272366e899074b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:42:59:22:a7:97:db:a2:60:8b:ff:ac:ad:55:
09:73:c3:ee:7e:ff:20:71:4a:ba:d1:36:ed:46:39:
ea:f8:89:07:33:a2:19:0d:29:6b:fe:b7:b2:19:8c:
0f:0b:e7:d0:97:98:fc:e1:16:16:45:2d:8f:ee:17:
6b:d9:67:02:e0:c1:0a:2e:52:84:c9:df:90:36:ea:
87:d3:57:cd:5a:4b:03:d6:b0:0f:4e:85:f7:38:b5:
c2:46:6d:f7:fe:d3:45:16:43:9b:36:56:8b:a9:56:
02:a9:6d:ba:b9:b6:f5:d1:12:22:5f:97:05:63:65:
47:52:85:7e:8e:84:fe:59:74:f5:e6:44:ad:e4:65:
50:2c:17:7b:0b:2f:fd:79:e2:5a:97:71:94:00:12:
9a:64:b1:81:28:0d:3f:03:0e:a8:88:da:dc:70:1f:
e3:9a:f6:be:3a:19:79:82:86:2b:d9:57:82:e3:6e:
21:c7:fd:3e:40:0a:e5:81:a8:6a:f5:a3:18:5d:89:
c9:a3:92:e2:5a:83:26:5e:67:a2:5d:e8:1d:4f:a4:
07:17:19:61:39:7d:9e:a7:e7:b4:6f:21:f6:9d:69:
2b:94:bf:5a:03:d2:4b:20:a9:15:8d:9e:9f:f4:ad:
ed:76:4d:60:e2:98:f6:81:5d:35:80:01:16:32:1c:
85:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:33:B7:7E:EC:90:E3:FB:29:6D:5B:34:72:72:36:6E:89:90:74:B1
X509v3 Authority Key Identifier:
keyid:30:2D:11:E8:52:61:57:40:07:6B:32:81:B8:AF:F0:FA:C5:CA:2F:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MC0R6FJhV0AHazKBuK_w-sXKLzM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/bd3880-fc26-4121-b2e4-e6d6e8aebef8/1/MC0R6FJhV0AHazKBuK_w-sXKLzM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/bd3880-fc26-4121-b2e4-e6d6e8aebef8/1/MC0R6FJhV0AHazKBuK_w-sXKLzM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:aa:2c:4c:01:64:fb:12:c3:1b:52:c4:65:f6:b8:63:79:88:
24:29:af:f2:28:ff:ab:9d:e5:73:df:10:5e:30:7c:d5:7c:3d:
e1:83:0a:ce:0a:40:61:9a:d3:f7:71:51:af:cb:e9:78:ae:c3:
75:f3:1a:a9:ba:e0:f8:6d:cd:4c:19:af:f0:2a:bf:a5:a7:d2:
dd:66:91:9e:42:bb:db:5e:eb:4f:51:8d:15:ef:8f:0b:b3:3f:
26:91:67:11:07:70:74:dc:8b:6f:e5:d1:e6:5f:50:7e:a5:18:
50:6a:8b:bd:c5:59:bf:63:34:2c:58:6c:e6:5e:c5:74:f1:bd:
15:ee:b4:ee:e6:bc:80:07:c8:27:d6:48:77:c2:f2:4f:73:fd:
7e:b3:58:c5:7d:5d:bc:65:a4:f2:23:e1:22:84:ee:ff:d1:7e:
cd:c5:7e:4b:6d:7f:db:a5:7f:4e:17:87:3a:47:c4:d1:a9:93:
0a:00:92:02:4a:10:38:c2:51:04:6f:15:a9:f2:56:d5:bf:06:
5f:c1:37:c3:be:a6:cc:36:c0:bc:b9:c6:f0:4d:20:bf:26:be:
1f:34:52:dc:90:dc:ae:4c:28:78:99:80:12:c8:6c:44:a1:87:
e4:11:db:9d:aa:4c:23:8e:9c:be:b0:36:7c:20:87:f7:60:8c:
65:fa:b3:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 23:00:51 2025 by rpki-client