Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/f1af90-355c-484b-b923-d31d4cb1b129/1/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.mft
File: MDCZQabYT6Tb3a8PTs2Z-fBDz9w.mft (raw, json)
Hash identifier: N9fRbSEI9YQYn3/ivOwzXR/uR2/DHObfQAPUhMY8ej8=
Subject key identifier: B6:BF:FA:59:48:41:09:92:1B:E8:09:8B:68:9D:76:6E:AE:74:68:E6
Authority key identifier: 30:30:99:41:A6:D8:4F:A4:DB:DD:AF:0F:4E:CD:99:F9:F0:43:CF:DC
Certificate issuer: /CN=30309941a6d84fa4dbddaf0f4ecd99f9f043cfdc
Certificate serial: 0199168867E0E21168A30CFFD240A7A06180
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/f1af90-355c-484b-b923-d31d4cb1b129/1/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.mft
Manifest number: 11BD
Signing time: Thu 04 Sep 2025 21:01:02 +0000
Manifest this update: Thu 04 Sep 2025 21:01:02 +0000
Manifest next update: Fri 05 Sep 2025 21:01:02 +0000
Files and hashes: 1: DIrH-kP5nT3HJlZe7jZz_CkvjFY.roa (hash: gKZZgzAyp+INbVPVuZgOHUrKZ9VQYbL1/WwPWyMWDfc=)
2: MDCZQabYT6Tb3a8PTs2Z-fBDz9w.crl (hash: eqFXsGeCISuEk/Xm94AgrXsJ0R9QqPA9y/q6SOML3To=)
3: gD2PrMpYBnq5bkywvcg86wYgyi0.roa (hash: ZloCpzZ4hxZcPRO4MDOIHc0MdVfMRoHKIu3JaQVOrkU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/f1af90-355c-484b-b923-d31d4cb1b129/1/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/f1af90-355c-484b-b923-d31d4cb1b129/1/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 21:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:16:88:67:e0:e2:11:68:a3:0c:ff:d2:40:a7:a0:61:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30309941a6d84fa4dbddaf0f4ecd99f9f043cfdc
Validity
Not Before: Sep 4 21:01:02 2025 GMT
Not After : Sep 5 21:01:02 2025 GMT
Subject: CN=b6bffa59484109921be8098b689d766eae7468e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:65:16:de:96:8d:14:8e:3d:a3:c6:2d:d0:50:
ae:f4:b8:9b:41:6a:27:86:3a:1d:4e:f4:99:fc:b7:
99:da:c3:7a:f5:bd:21:3d:80:fa:a6:10:4b:ab:67:
c2:d8:dd:07:6d:4e:ef:f4:29:4a:86:01:0f:7f:b1:
05:93:b7:a6:53:1f:99:2c:b4:8a:bb:83:cf:6f:2d:
1d:5b:c6:58:23:2f:8f:eb:e9:33:b0:78:cb:77:4b:
69:20:fa:44:94:73:43:98:5a:47:c7:f6:a3:70:06:
1e:f0:6f:c5:56:5b:54:5f:90:37:16:bc:34:b4:70:
85:68:5a:55:70:53:1f:36:9a:29:7c:d6:3c:ab:be:
d9:f6:79:b8:d2:92:2d:29:a0:0f:17:95:c7:f4:df:
a3:7a:b6:7a:b8:9a:a6:26:32:ed:bf:da:e0:5f:c6:
e7:80:c5:b1:21:ae:a1:cb:cc:08:c9:4e:4b:4c:9e:
4e:b2:ea:e1:b7:2a:97:4b:9f:c1:25:67:17:d9:7f:
d8:81:17:dc:d5:d7:9c:2b:f0:e1:d8:f7:ec:43:4c:
a7:88:07:e3:96:83:53:b9:16:23:28:e3:9c:5c:dd:
91:c1:e7:bf:41:41:0e:2f:56:be:98:6b:a8:f0:45:
bf:08:e4:a4:2f:8c:71:73:39:25:f8:82:ad:be:5d:
6a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:BF:FA:59:48:41:09:92:1B:E8:09:8B:68:9D:76:6E:AE:74:68:E6
X509v3 Authority Key Identifier:
keyid:30:30:99:41:A6:D8:4F:A4:DB:DD:AF:0F:4E:CD:99:F9:F0:43:CF:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/f1af90-355c-484b-b923-d31d4cb1b129/1/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/f1af90-355c-484b-b923-d31d4cb1b129/1/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:c7:d0:dd:26:21:c3:a8:a7:d6:f7:4f:b3:78:c7:4e:82:fc:
df:01:40:25:df:5f:4f:b9:2c:26:6f:7e:a3:90:fc:1d:da:e2:
7b:0d:7a:6b:40:76:71:50:bd:bc:0e:9a:ea:e8:af:30:ca:b5:
1a:da:b9:60:3d:2a:55:b4:e8:fe:e2:91:3e:96:c4:ac:9e:78:
b1:f4:3e:04:ea:cb:2b:be:34:65:95:fe:e0:09:24:8a:f8:9f:
43:ad:2e:3f:f6:af:19:e6:d4:62:0b:38:53:5f:8a:40:ac:8a:
26:e6:9f:64:59:6a:5f:6a:53:9c:0c:6d:be:f5:35:6e:73:3f:
51:a7:92:a1:54:b8:cf:34:43:e4:53:2b:e2:cc:f8:6b:88:e8:
b6:ff:4c:95:9c:a6:0f:9d:ae:0a:aa:c2:cc:4e:ba:ff:5a:9e:
84:f2:31:4e:62:dd:e2:f6:c1:6d:eb:cf:1b:43:7f:4f:ec:cf:
03:17:ad:0e:55:c8:d1:c1:ab:2b:98:c7:c6:25:c3:60:6b:fc:
bd:f5:42:d7:1d:1c:23:ff:04:e8:58:72:c2:0a:ed:7e:b6:42:
7e:69:0d:19:47:fb:9f:bf:67:57:7a:c8:ba:e8:82:d9:19:8c:
fd:cd:a4:04:0a:e7:c2:cd:dd:00:a3:f6:bf:99:e7:f8:66:09:
27:87:bd:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkWiGfg4hFoowz/0kCnoGGAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwMzA5OTQxYTZkODRmYTRkYmRkYWYwZjRlY2Q5OWY5ZjA0
M2NmZGMwHhcNMjUwOTA0MjEwMTAyWhcNMjUwOTA1MjEwMTAyWjAzMTEwLwYDVQQD
EyhiNmJmZmE1OTQ4NDEwOTkyMWJlODA5OGI2ODlkNzY2ZWFlNzQ2OGU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvmUW3paNFI49o8Yt0FCu9LibQWon
hjodTvSZ/LeZ2sN69b0hPYD6phBLq2fC2N0HbU7v9ClKhgEPf7EFk7emUx+ZLLSK
u4PPby0dW8ZYIy+P6+kzsHjLd0tpIPpElHNDmFpHx/ajcAYe8G/FVltUX5A3Frw0
tHCFaFpVcFMfNpopfNY8q77Z9nm40pItKaAPF5XH9N+jerZ6uJqmJjLtv9rgX8bn
gMWxIa6hy8wIyU5LTJ5OsurhtyqXS5/BJWcX2X/YgRfc1decK/Dh2PfsQ0yniAfj
loNTuRYjKOOcXN2Rwee/QUEOL1a+mGuo8EW/COSkL4xxczkl+IKtvl1qKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLa/+llIQQmSG+gJi2iddm6udGjmMB8GA1UdIwQY
MBaAFDAwmUGm2E+k292vD07NmfnwQ8/cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTURDWlFhYllUNlRiM2E4UFRzMlotZkJEejl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9mMWFmOTAtMzU1Yy00ODRiLWI5MjMt
ZDMxZDRjYjFiMTI5LzEvTURDWlFhYllUNlRiM2E4UFRzMlotZkJEejl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi9mMWFmOTAtMzU1Yy00ODRiLWI5MjMtZDMxZDRjYjFiMTI5
LzEvTURDWlFhYllUNlRiM2E4UFRzMlotZkJEejl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAssfQ3SYh
w6in1vdPs3jHToL83wFAJd9fT7ksJm9+o5D8Hdriew16a0B2cVC9vA6a6uivMMq1
Gtq5YD0qVbTo/uKRPpbErJ54sfQ+BOrLK740ZZX+4AkkivifQ60uP/avGebUYgs4
U1+KQKyKJuafZFlqX2pTnAxtvvU1bnM/UaeSoVS4zzRD5FMr4sz4a4jotv9MlZym
D52uCqrCzE66/1qehPIxTmLd4vbBbevPG0N/T+zPAxetDlXI0cGrK5jHxiXDYGv8
vfVC1x0cI/8E6FhywgrtfrZCfmkNGUf7n79nV3rIuuiC2RmM/c2kBArnws3dAKP2
v5nn+GYJJ4e9pA==
-----END CERTIFICATE-----
Generated at Fri Sep 5 06:04:27 2025 by rpki-client