Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/f1af90-355c-484b-b923-d31d4cb1b129/1/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.mft
File: MDCZQabYT6Tb3a8PTs2Z-fBDz9w.mft (raw, json)
Hash identifier: jmvyntb023ZGg7WppTz9xlGi8QJV+t8e0jk1jTnoc/o=
Subject key identifier: 2F:1B:66:C5:28:67:BD:84:2E:2D:99:13:5C:63:75:F2:D3:18:91:89
Authority key identifier: 30:30:99:41:A6:D8:4F:A4:DB:DD:AF:0F:4E:CD:99:F9:F0:43:CF:DC
Certificate issuer: /CN=30309941a6d84fa4dbddaf0f4ecd99f9f043cfdc
Certificate serial: 0197470C44533A387882E66109E1F07F68E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/f1af90-355c-484b-b923-d31d4cb1b129/1/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.mft
Manifest number: 10CD
Signing time: Fri 06 Jun 2025 21:01:15 +0000
Manifest this update: Fri 06 Jun 2025 21:01:15 +0000
Manifest next update: Sat 07 Jun 2025 21:01:15 +0000
Files and hashes: 1: DIrH-kP5nT3HJlZe7jZz_CkvjFY.roa (hash: gKZZgzAyp+INbVPVuZgOHUrKZ9VQYbL1/WwPWyMWDfc=)
2: MDCZQabYT6Tb3a8PTs2Z-fBDz9w.crl (hash: NVBcCQ8KTZTX7YrD/VFalhCN/MuReDKc4AdbO0DUUdk=)
3: gD2PrMpYBnq5bkywvcg86wYgyi0.roa (hash: ZloCpzZ4hxZcPRO4MDOIHc0MdVfMRoHKIu3JaQVOrkU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/f1af90-355c-484b-b923-d31d4cb1b129/1/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/f1af90-355c-484b-b923-d31d4cb1b129/1/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 21:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:0c:44:53:3a:38:78:82:e6:61:09:e1:f0:7f:68:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30309941a6d84fa4dbddaf0f4ecd99f9f043cfdc
Validity
Not Before: Jun 6 21:01:15 2025 GMT
Not After : Jun 7 21:01:15 2025 GMT
Subject: CN=2f1b66c52867bd842e2d99135c6375f2d3189189
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:8d:52:e3:67:68:26:d7:40:f3:ad:84:8b:98:
a1:c5:f7:29:06:96:a9:54:88:1a:03:6d:5a:2e:f7:
8d:56:b1:fe:c1:6a:61:56:1c:22:86:f6:26:a2:02:
d0:b5:13:ce:38:e8:dd:e7:d1:68:e7:ea:8f:b1:ee:
33:04:93:64:50:dc:df:6c:ef:ea:5a:da:5f:6a:e7:
6a:2c:b7:db:06:3e:6e:70:8d:62:6a:4a:60:78:27:
54:64:85:7d:a8:9d:2f:ca:00:92:72:69:0b:02:25:
42:3f:d0:b3:4e:dd:a6:40:9c:ac:cc:b2:2f:1c:9d:
03:1f:e2:6e:f0:c6:7c:c8:ef:c0:5a:eb:95:e1:fa:
f0:ba:a4:a0:61:7d:68:f1:2b:e9:3e:cc:7c:3a:ac:
13:63:7a:7f:73:ec:5d:c8:50:59:3b:16:37:4c:50:
b5:0e:7d:fc:f9:80:b2:88:94:3a:2e:8f:3b:64:16:
da:2e:81:c1:99:c6:66:77:4e:93:4b:5a:3c:ae:b4:
50:5e:a0:bb:9d:d8:39:08:52:9a:23:c2:13:48:44:
43:42:58:68:94:32:c1:cf:8d:e8:01:99:ef:92:0c:
67:5c:75:0a:3e:16:e5:b3:0f:19:4f:5f:df:dd:4d:
b7:86:6c:98:39:33:5d:12:bf:5d:70:b6:9a:33:42:
55:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:1B:66:C5:28:67:BD:84:2E:2D:99:13:5C:63:75:F2:D3:18:91:89
X509v3 Authority Key Identifier:
keyid:30:30:99:41:A6:D8:4F:A4:DB:DD:AF:0F:4E:CD:99:F9:F0:43:CF:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/f1af90-355c-484b-b923-d31d4cb1b129/1/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/f1af90-355c-484b-b923-d31d4cb1b129/1/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:f7:4c:96:22:04:15:88:3b:b9:f7:61:e0:cd:af:d2:91:e3:
69:b8:0c:42:6f:f3:62:93:ad:81:57:8f:1f:4c:f3:e9:30:c0:
96:2c:f0:9b:a3:29:a9:19:92:27:df:3d:a1:6b:41:e0:a1:46:
c5:37:43:d0:a7:5f:cc:22:16:97:82:c0:8c:b2:65:e5:aa:47:
df:a5:df:89:ea:34:c3:9d:21:f2:91:61:75:08:93:98:6d:2e:
59:a1:47:0d:e0:9a:7e:c1:05:35:45:f8:53:d0:aa:16:11:b1:
44:61:cd:15:73:f2:bd:e4:af:d0:16:8e:3f:17:89:d4:9d:0e:
91:a5:bf:ff:03:82:01:57:00:7e:d9:13:fe:c0:f9:bf:a9:50:
d2:1d:b0:55:00:2c:6d:2b:57:c9:30:c7:ba:4a:71:48:b4:2d:
d6:d7:bb:14:a1:bb:cf:d0:9b:0e:31:e1:9f:52:57:78:da:4d:
2d:2a:bb:ee:64:f9:0e:74:1c:e8:4e:68:4b:aa:fe:45:9c:24:
d0:18:a8:07:3e:94:04:0b:8f:03:a9:dd:07:92:1c:93:ba:71:
55:8b:a2:9d:e9:a7:03:93:a0:3b:70:1b:5d:c5:8f:e8:b6:f4:
6d:8c:b8:6f:6c:a7:08:b5:5f:85:82:80:09:68:31:23:89:52:
17:75:3b:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdHDERTOjh4guZhCeHwf2jhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwMzA5OTQxYTZkODRmYTRkYmRkYWYwZjRlY2Q5OWY5ZjA0
M2NmZGMwHhcNMjUwNjA2MjEwMTE1WhcNMjUwNjA3MjEwMTE1WjAzMTEwLwYDVQQD
EygyZjFiNjZjNTI4NjdiZDg0MmUyZDk5MTM1YzYzNzVmMmQzMTg5MTg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmY1S42doJtdA862Ei5ihxfcpBpap
VIgaA21aLveNVrH+wWphVhwihvYmogLQtRPOOOjd59Fo5+qPse4zBJNkUNzfbO/q
WtpfaudqLLfbBj5ucI1iakpgeCdUZIV9qJ0vygCScmkLAiVCP9CzTt2mQJyszLIv
HJ0DH+Ju8MZ8yO/AWuuV4frwuqSgYX1o8SvpPsx8OqwTY3p/c+xdyFBZOxY3TFC1
Dn38+YCyiJQ6Lo87ZBbaLoHBmcZmd06TS1o8rrRQXqC7ndg5CFKaI8ITSERDQlho
lDLBz43oAZnvkgxnXHUKPhblsw8ZT1/f3U23hmyYOTNdEr9dcLaaM0JVhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC8bZsUoZ72ELi2ZE1xjdfLTGJGJMB8GA1UdIwQY
MBaAFDAwmUGm2E+k292vD07NmfnwQ8/cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTURDWlFhYllUNlRiM2E4UFRzMlotZkJEejl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9mMWFmOTAtMzU1Yy00ODRiLWI5MjMt
ZDMxZDRjYjFiMTI5LzEvTURDWlFhYllUNlRiM2E4UFRzMlotZkJEejl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi9mMWFmOTAtMzU1Yy00ODRiLWI5MjMtZDMxZDRjYjFiMTI5
LzEvTURDWlFhYllUNlRiM2E4UFRzMlotZkJEejl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANfdMliIE
FYg7ufdh4M2v0pHjabgMQm/zYpOtgVePH0zz6TDAlizwm6MpqRmSJ989oWtB4KFG
xTdD0KdfzCIWl4LAjLJl5apH36Xfieo0w50h8pFhdQiTmG0uWaFHDeCafsEFNUX4
U9CqFhGxRGHNFXPyveSv0BaOPxeJ1J0OkaW//wOCAVcAftkT/sD5v6lQ0h2wVQAs
bStXyTDHukpxSLQt1te7FKG7z9CbDjHhn1JXeNpNLSq77mT5DnQc6E5oS6r+RZwk
0BioBz6UBAuPA6ndB5Ick7pxVYuinemnA5OgO3AbXcWP6Lb0bYy4b2ynCLVfhYKA
CWgxI4lSF3U7zw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 07:42:55 2025 by rpki-client