Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.mft
File: 250Zf7vuKh3MtPVXIqghDTEFsEI.mft (raw, json)
Hash identifier: wbIxq+rpXR+NrQ184iQ3HjdU3VB2zNr6fiODs51aQgA=
Subject key identifier: 79:4D:F2:54:13:C8:D4:BA:CB:5F:EA:47:F9:44:99:9B:B3:07:58:25
Authority key identifier: DB:9D:19:7F:BB:EE:2A:1D:CC:B4:F5:57:22:A8:21:0D:31:05:B0:42
Certificate issuer: /CN=db9d197fbbee2a1dccb4f55722a8210d3105b042
Certificate serial: 0199356E00FA3657B536B5600B15271FD073
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/250Zf7vuKh3MtPVXIqghDTEFsEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.mft
Manifest number: 1243
Signing time: Wed 10 Sep 2025 21:00:25 +0000
Manifest this update: Wed 10 Sep 2025 21:00:25 +0000
Manifest next update: Thu 11 Sep 2025 21:00:25 +0000
Files and hashes: 1: 0c-KKappZ1t73aXjS8mz1x-xTGc.roa (hash: MAa3tSzCnjrh/og+z4XVJnuDQ4AqmSQvPQCYBTfEoDQ=)
2: 250Zf7vuKh3MtPVXIqghDTEFsEI.crl (hash: YWhM0ykvi1YBBQpHJA8ZqlL5Jgkrwh91kgq6wv4Ik5Y=)
3: 3sv6NKDpba_DUykmu28n6vWbI8U.roa (hash: gUh8eARhI2X9S3x1fvxAhLVuOISp5wl4VqYYPGnDg8Y=)
4: 4rupNMtZnDN0QSWru1RNhLDuJIo.roa (hash: z4IbiN1+w7zdJy/d9hWZDYM0E9ZzQh9TzT+f2XEsa+o=)
5: 67A2CgJxemu3UONyMlCVAtsKdlY.roa (hash: xvBw7mNRlOl8XFOFSPthYphIDW4EGlwFC4zOhUwlCv8=)
6: E2YGCkvl1qJmLxaFsCR58I4gibo.roa (hash: xheLTw+nhNWSmWNkdWISArZADpVzS+Ca89hGltJJMno=)
7: Sp4iVd_pOq560eUzaVqvX_2Gqas.roa (hash: JgPqfPTZcwMnjOQsf/Q1+96TPKUck5H6ntnLpmTpKbM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/250Zf7vuKh3MtPVXIqghDTEFsEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 19:33:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:6e:00:fa:36:57:b5:36:b5:60:0b:15:27:1f:d0:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db9d197fbbee2a1dccb4f55722a8210d3105b042
Validity
Not Before: Sep 10 21:00:25 2025 GMT
Not After : Sep 11 21:00:25 2025 GMT
Subject: CN=794df25413c8d4bacb5fea47f944999bb3075825
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:9f:0f:5d:9d:f1:a5:b8:76:b4:14:d2:55:fa:
92:49:f0:2d:11:4e:2e:21:5a:b9:1c:32:58:16:f0:
30:ae:a4:5d:2b:ff:de:af:71:01:36:66:a2:f3:44:
01:e8:9f:f6:65:e3:94:97:6f:f1:22:13:b6:d4:1a:
f1:d2:9a:b6:3f:c2:85:c4:85:9f:bb:24:e4:40:40:
cc:ad:28:4f:b3:b6:6c:d0:25:4e:b6:7e:47:2a:01:
ed:e8:26:b5:2a:36:cd:72:9f:f2:8c:1b:7f:61:28:
78:09:3f:d5:f3:e2:78:bb:2d:0b:af:e0:0a:b1:74:
d0:44:03:a1:45:93:68:0e:01:70:9f:78:4e:27:be:
39:d1:17:d6:36:26:cf:c5:4a:3c:69:d5:a3:48:ad:
05:32:c4:71:7a:d8:35:4b:b3:4d:5b:40:ff:67:88:
4d:76:11:4b:cb:9c:62:64:10:3b:a9:5e:87:2b:25:
bd:00:19:fe:31:25:e7:7d:97:ee:8e:6b:d2:d0:0a:
b9:6d:20:2f:0f:bc:9a:f3:97:ba:6e:ce:4b:50:48:
08:59:93:f1:84:76:bf:ce:3b:90:3b:e4:39:47:17:
45:56:34:df:cc:40:95:65:0a:6d:33:61:f4:74:48:
77:af:3a:2a:7a:e4:50:b9:37:dc:b6:bf:9a:8b:d7:
00:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:4D:F2:54:13:C8:D4:BA:CB:5F:EA:47:F9:44:99:9B:B3:07:58:25
X509v3 Authority Key Identifier:
keyid:DB:9D:19:7F:BB:EE:2A:1D:CC:B4:F5:57:22:A8:21:0D:31:05:B0:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/250Zf7vuKh3MtPVXIqghDTEFsEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:dc:ba:e2:6e:e1:be:e4:67:8f:0b:b6:99:42:e7:70:00:92:
d8:58:d2:16:05:0a:76:10:7a:cd:2c:cb:dc:08:0b:06:e9:ef:
3d:32:8d:66:8f:e0:64:2f:da:6f:89:b9:a0:73:29:45:d4:3c:
b3:c3:33:fa:6f:de:ff:e7:4e:28:2d:88:62:96:b4:9b:8e:a2:
f4:70:3d:28:22:12:69:62:30:62:b5:d7:28:d0:04:bd:7c:1b:
46:05:bb:0c:ba:69:1a:1a:bc:1e:08:e7:66:de:16:ee:be:42:
48:78:ee:5f:e6:8c:2b:97:bd:a5:41:6e:87:c4:8a:2c:1d:5b:
8b:3c:41:ae:f1:ea:d5:6f:07:15:fb:28:72:61:18:a0:52:20:
ee:86:93:40:70:5d:ed:ec:f2:08:ff:84:01:8a:9f:b1:cf:cd:
82:b2:54:fd:2d:24:fe:62:b6:f8:88:13:71:a0:3a:7e:c0:70:
56:9f:d1:27:63:c8:9b:6c:32:59:6f:84:18:e1:5e:f3:42:c0:
30:86:7b:46:c7:f8:b6:51:b9:7a:b6:e7:4b:49:b5:79:67:ea:
6f:9e:93:1e:cf:2d:4d:a2:28:67:c8:ca:2c:30:26:90:76:df:
0a:10:fe:4b:d8:75:4c:7d:03:2d:53:6e:69:c1:63:15:a1:5d:
39:4e:51:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 22:15:14 2025 by rpki-client