
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/c4e75e-fd51-40f6-bc31-28c3c1e2a370/1/mcqYoSu22Nq4LzdM8KJ4paYbeOc.mft
File: mcqYoSu22Nq4LzdM8KJ4paYbeOc.mft (raw, json)
Hash identifier: Vqt41Tt8Nxcl55k1BMjQ+oiqtLdcis84cG14jotOZto=
Subject key identifier: 9B:AA:36:EF:CC:52:08:DE:84:F9:21:54:BE:C4:DC:60:3A:85:90:8C
Authority key identifier: 99:CA:98:A1:2B:B6:D8:DA:B8:2F:37:4C:F0:A2:78:A5:A6:1B:78:E7
Certificate issuer: /CN=99ca98a12bb6d8dab82f374cf0a278a5a61b78e7
Certificate serial: 0199239EC545F4BA8D0D0B232AAA5FFE4F28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mcqYoSu22Nq4LzdM8KJ4paYbeOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/c4e75e-fd51-40f6-bc31-28c3c1e2a370/1/mcqYoSu22Nq4LzdM8KJ4paYbeOc.mft
Manifest number: 0846
Signing time: Sun 07 Sep 2025 10:00:31 +0000
Manifest this update: Sun 07 Sep 2025 10:00:31 +0000
Manifest next update: Mon 08 Sep 2025 10:00:31 +0000
Files and hashes: 1: mcqYoSu22Nq4LzdM8KJ4paYbeOc.crl (hash: ryIEwvlKmF7FzgpiNGOtcL5QcV+Ezobu/r8QODIPTN4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/c4e75e-fd51-40f6-bc31-28c3c1e2a370/1/mcqYoSu22Nq4LzdM8KJ4paYbeOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/c4e75e-fd51-40f6-bc31-28c3c1e2a370/1/mcqYoSu22Nq4LzdM8KJ4paYbeOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/mcqYoSu22Nq4LzdM8KJ4paYbeOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9e:c5:45:f4:ba:8d:0d:0b:23:2a:aa:5f:fe:4f:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99ca98a12bb6d8dab82f374cf0a278a5a61b78e7
Validity
Not Before: Sep 7 10:00:31 2025 GMT
Not After : Sep 8 10:00:31 2025 GMT
Subject: CN=9baa36efcc5208de84f92154bec4dc603a85908c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:25:9d:6e:41:e9:d9:7b:bf:27:f6:ab:94:b8:
48:80:f2:85:3a:2e:32:c8:77:25:33:42:8d:f6:fd:
ad:3f:e4:82:60:7c:c2:ee:7b:74:04:17:f6:33:32:
83:ba:ad:d3:85:5c:6e:5f:46:55:b7:06:54:e0:7b:
46:ec:b6:b1:a7:5d:20:08:cc:1a:25:39:ac:f5:a4:
8b:4a:1f:ec:84:55:7a:e5:d1:b2:40:12:05:1f:6c:
51:b2:e0:b8:93:ea:66:41:96:2a:ee:59:90:39:15:
50:e6:3b:17:ba:60:4a:e1:95:ad:3a:40:2b:cd:01:
55:e1:15:50:a7:96:f6:4c:2d:d0:ca:bd:39:b2:1b:
ea:ab:ea:d4:77:6f:c9:7a:60:f3:b4:3f:9b:53:66:
66:f6:1c:7e:4f:9b:53:93:ea:da:e6:a2:1c:02:5d:
c1:e5:d3:db:9d:b1:9e:a9:c1:db:c0:6f:b6:7a:26:
cc:af:6d:a4:1f:f1:9f:05:42:a2:6c:50:4f:b0:29:
63:d9:f2:6f:3a:09:6a:19:7f:d7:25:5f:ec:4f:93:
3d:8d:26:04:35:44:c9:57:d3:b5:e9:b8:77:03:62:
63:bd:6c:f5:c1:c5:aa:70:57:2f:8f:50:5f:28:f0:
da:45:4b:c9:fe:82:e3:40:3a:c6:5c:84:64:1a:29:
c7:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:AA:36:EF:CC:52:08:DE:84:F9:21:54:BE:C4:DC:60:3A:85:90:8C
X509v3 Authority Key Identifier:
keyid:99:CA:98:A1:2B:B6:D8:DA:B8:2F:37:4C:F0:A2:78:A5:A6:1B:78:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mcqYoSu22Nq4LzdM8KJ4paYbeOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/c4e75e-fd51-40f6-bc31-28c3c1e2a370/1/mcqYoSu22Nq4LzdM8KJ4paYbeOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/c4e75e-fd51-40f6-bc31-28c3c1e2a370/1/mcqYoSu22Nq4LzdM8KJ4paYbeOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:61:d6:7d:09:ea:00:82:9c:f6:87:38:c0:c8:ff:8b:7f:cf:
39:d0:cd:ff:e0:d5:4b:14:11:ad:4b:26:f3:83:a7:01:61:f3:
c0:a0:77:8b:77:86:42:d6:f5:81:76:31:5a:bb:2b:a2:29:ca:
87:d8:76:d5:ff:61:da:e3:20:58:16:30:31:c9:fb:0d:cc:37:
dc:ab:91:63:57:59:90:41:62:11:1b:33:e3:d8:25:b3:e8:40:
fc:8b:9d:ca:2d:35:7f:3d:9f:b0:83:2d:dd:16:df:e2:98:64:
5c:2e:a4:36:17:53:02:ef:3c:96:f2:a5:81:12:a7:6c:fc:4d:
36:34:18:ba:c4:eb:e2:26:dd:6a:02:b2:66:24:88:20:63:27:
9e:c6:b9:e8:35:5b:20:a2:43:f6:c0:b0:64:59:d4:39:fa:ca:
19:3d:0d:03:f7:fd:58:34:fc:df:8a:39:f3:39:c7:e4:f4:61:
2e:0c:01:aa:9e:c2:65:c7:08:68:f6:22:84:7b:7f:ad:bb:cb:
e1:d9:11:9b:20:22:9b:96:82:7d:fc:26:83:be:ea:3a:2f:d4:
dc:7e:5f:0d:b4:15:60:a9:d4:63:5b:0c:8c:54:4a:a6:15:63:
32:f1:1d:30:a0:c1:76:ce:79:ff:f1:40:d8:1f:7e:1e:46:59:
3b:0c:96:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:35:38 2025 by rpki-client