Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/f1af90-355c-484b-b923-d31d4cb1b129/1/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.mft
File: MDCZQabYT6Tb3a8PTs2Z-fBDz9w.mft (raw, json)
Hash identifier: OI2ZHI3M/afbtJIQw5tXvLGoPgMjGfp40hF8+p7yE/w=
Subject key identifier: 2B:71:34:E1:78:D0:EB:B1:50:61:2A:BB:BE:46:A8:93:07:8E:54:A5
Authority key identifier: 30:30:99:41:A6:D8:4F:A4:DB:DD:AF:0F:4E:CD:99:F9:F0:43:CF:DC
Certificate issuer: /CN=30309941a6d84fa4dbddaf0f4ecd99f9f043cfdc
Certificate serial: 019A72264793696117367D607AA3494E9528
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/f1af90-355c-484b-b923-d31d4cb1b129/1/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.mft
Manifest number: 1271
Signing time: Tue 11 Nov 2025 09:01:42 +0000
Manifest this update: Tue 11 Nov 2025 09:01:42 +0000
Manifest next update: Wed 12 Nov 2025 09:01:42 +0000
Files and hashes: 1: DIrH-kP5nT3HJlZe7jZz_CkvjFY.roa (hash: gKZZgzAyp+INbVPVuZgOHUrKZ9VQYbL1/WwPWyMWDfc=)
2: MDCZQabYT6Tb3a8PTs2Z-fBDz9w.crl (hash: +Rd4Lse+z/mJFnFV+LdFliyG9IurTH9OMERJ2w5gmjY=)
3: gD2PrMpYBnq5bkywvcg86wYgyi0.roa (hash: ZloCpzZ4hxZcPRO4MDOIHc0MdVfMRoHKIu3JaQVOrkU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/f1af90-355c-484b-b923-d31d4cb1b129/1/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/f1af90-355c-484b-b923-d31d4cb1b129/1/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:47:93:69:61:17:36:7d:60:7a:a3:49:4e:95:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30309941a6d84fa4dbddaf0f4ecd99f9f043cfdc
Validity
Not Before: Nov 11 09:01:42 2025 GMT
Not After : Nov 12 09:01:42 2025 GMT
Subject: CN=2b7134e178d0ebb150612abbbe46a893078e54a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:a3:fb:d8:dd:29:86:b3:78:a8:59:93:2d:01:
92:40:44:b3:5f:1d:2c:45:88:b3:01:8e:c0:4c:86:
a1:bb:99:07:ef:6d:0b:9f:19:94:e4:b3:52:45:9c:
d5:ac:b5:1d:51:1f:f6:6c:5f:a0:8d:50:f7:44:d3:
ae:d5:64:ad:ba:fd:f1:15:0f:71:2c:ec:02:6e:bf:
09:a1:d0:a0:fa:b8:10:3d:56:4a:0d:19:14:d7:6e:
a0:4d:96:6a:72:e3:2e:56:d5:6a:f9:16:88:9e:2c:
e6:d3:71:fa:86:32:c5:5b:e2:cb:88:b9:d2:80:c0:
3f:52:e2:f3:57:7c:04:bd:c2:72:a6:d4:c1:a3:99:
41:f2:ad:f3:f7:62:f0:9c:7d:93:69:17:09:61:4e:
d2:5b:d6:1c:d1:2c:6c:a6:0e:b1:0a:81:99:15:3c:
88:da:7d:e6:78:f3:cf:76:3a:49:54:94:41:6b:b8:
11:8f:c1:98:4a:48:82:1b:e7:41:39:3b:28:27:40:
9f:6c:53:ca:12:df:8f:91:d4:4b:8f:c9:d6:cf:9a:
98:78:11:3d:13:ec:3a:1c:52:59:28:34:00:ac:9f:
5b:9d:fa:7c:92:bf:0c:67:26:08:68:2c:35:a9:e5:
6a:3d:85:ad:32:2c:ba:18:a9:41:b6:14:f8:d8:a4:
5d:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:71:34:E1:78:D0:EB:B1:50:61:2A:BB:BE:46:A8:93:07:8E:54:A5
X509v3 Authority Key Identifier:
keyid:30:30:99:41:A6:D8:4F:A4:DB:DD:AF:0F:4E:CD:99:F9:F0:43:CF:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/f1af90-355c-484b-b923-d31d4cb1b129/1/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/f1af90-355c-484b-b923-d31d4cb1b129/1/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:41:48:af:bf:2e:27:65:5e:68:e2:4c:cd:fa:f6:fa:01:d4:
63:3d:bf:08:0e:87:33:8d:f0:cf:07:d5:12:a2:ed:41:7a:09:
b8:83:d3:34:9d:37:40:45:cc:80:c9:0f:f2:bf:c7:97:07:fb:
0c:ea:11:5c:ff:e6:56:6d:ce:cc:9b:99:7f:0a:21:c0:30:66:
e7:e7:6b:cd:0e:41:1d:1d:41:96:bb:92:3c:7d:31:66:93:9b:
1c:2e:65:18:5d:96:20:13:15:99:c7:64:1a:e6:51:1a:50:77:
fa:56:57:e7:eb:c8:b8:87:ac:0e:39:d0:84:c2:1d:73:7d:76:
f4:21:b4:57:cf:05:2f:3c:ea:13:31:af:c0:45:0d:34:07:88:
ed:67:cb:39:b9:bc:4e:51:92:2f:c5:68:d2:83:57:6d:a1:bf:
bd:f4:e2:e4:aa:a8:e8:e5:6b:26:bc:5a:2a:f5:db:42:e4:e6:
64:05:d2:77:8c:3f:f8:bb:8c:e1:22:2f:9d:94:be:8f:04:f2:
41:65:79:2f:93:ef:64:d7:32:45:af:95:fa:8e:28:57:d3:ad:
23:7b:bf:fd:8f:df:36:bc:98:fc:4c:13:50:48:fd:d2:7f:9f:
b0:da:50:d3:8a:8f:df:e8:f4:de:4a:9c:29:06:c7:c8:56:14:
28:a5:26:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:20:38 2025 by rpki-client