Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.mft
File: MG1hg1W9iTf3W7RlC7XBr3D5oS4.mft (raw, json)
Hash identifier: RNtTaaAMF9W9eRr7Iasmcgi+/qTOG9CKVgxqc1LQ1I0=
Subject key identifier: A8:6D:E5:F5:77:C3:67:B2:AF:99:4A:E7:70:F7:01:D2:57:99:48:71
Authority key identifier: 30:6D:61:83:55:BD:89:37:F7:5B:B4:65:0B:B5:C1:AF:70:F9:A1:2E
Certificate issuer: /CN=306d618355bd8937f75bb4650bb5c1af70f9a12e
Certificate serial: 019A4EF5A5DE7B0C2B65C1A0F83623813CDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MG1hg1W9iTf3W7RlC7XBr3D5oS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.mft
Manifest number: 12AB
Signing time: Tue 04 Nov 2025 13:01:52 +0000
Manifest this update: Tue 04 Nov 2025 13:01:52 +0000
Manifest next update: Wed 05 Nov 2025 13:01:52 +0000
Files and hashes: 1: 3jZVmIYXRpFGaUpKFxmxg6yk0v4.roa (hash: DxwsnC6ETAvm52TcakM8AMF0oIdLtUXLvOU8uNsDQAw=)
2: MG1hg1W9iTf3W7RlC7XBr3D5oS4.crl (hash: /xepHFSTdFpeCOXDFcqqYtPohZW5+EUNNp//UihsPTo=)
3: OhFs8ELf0BkBqUqSta-UtJTxxOY.roa (hash: eORqJrZ4eHwt+ZtqWQMblZ7ybIDSjazTPoe3DTl1tC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/MG1hg1W9iTf3W7RlC7XBr3D5oS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:a5:de:7b:0c:2b:65:c1:a0:f8:36:23:81:3c:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=306d618355bd8937f75bb4650bb5c1af70f9a12e
Validity
Not Before: Nov 4 13:01:52 2025 GMT
Not After : Nov 5 13:01:52 2025 GMT
Subject: CN=a86de5f577c367b2af994ae770f701d257994871
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:e4:49:cd:5c:66:e6:60:70:aa:fe:22:64:0c:
8a:13:a2:53:6e:37:89:e6:98:28:a8:ed:34:9c:f1:
59:86:74:91:93:b0:28:a0:e9:67:e0:89:d3:00:57:
31:79:f6:54:9d:db:7e:2e:6e:a3:0f:75:05:31:82:
74:46:9a:93:4c:c2:48:22:fb:cd:00:4a:40:51:23:
71:0d:8e:53:53:ba:38:14:22:35:7c:1c:f4:00:dd:
f1:9e:e9:60:e0:7b:97:e4:7f:65:04:2d:93:69:46:
c9:b1:ec:55:d0:d4:10:58:7c:01:60:7f:21:af:ff:
41:5a:3e:5c:eb:f8:d2:97:41:23:b9:41:be:cb:ab:
1a:24:8f:ce:e8:da:e6:79:a4:d3:c0:0e:63:7e:e2:
dd:e0:7d:b5:6f:74:b3:6b:1b:e3:b9:31:01:45:dd:
f3:70:89:54:08:53:f2:75:19:35:da:f2:07:df:c7:
ae:9c:ae:9c:02:45:c4:e6:3e:f0:ca:c1:b7:4d:19:
d8:10:ed:e8:81:d3:4c:bc:80:d1:06:41:91:0b:5b:
ed:97:d1:d4:4d:3b:e3:7a:35:c3:f5:f6:bb:e2:ab:
00:45:08:32:bc:1f:e0:4a:d2:58:6a:37:d7:fa:77:
31:7b:6d:3b:cb:84:3b:e2:70:d3:76:10:5d:33:2a:
0f:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:6D:E5:F5:77:C3:67:B2:AF:99:4A:E7:70:F7:01:D2:57:99:48:71
X509v3 Authority Key Identifier:
keyid:30:6D:61:83:55:BD:89:37:F7:5B:B4:65:0B:B5:C1:AF:70:F9:A1:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MG1hg1W9iTf3W7RlC7XBr3D5oS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:c6:11:49:31:7c:5f:d0:74:a1:a7:7f:50:14:de:43:f3:69:
86:6c:4e:00:d5:19:b1:ce:0d:cb:79:4f:0b:bf:26:56:2a:04:
af:3e:89:9b:a4:8d:a3:2e:3f:77:6d:1d:a5:ac:2f:fe:a2:f5:
de:70:1d:2f:8b:a5:41:1a:c2:33:4d:25:38:38:e7:2f:23:d5:
f4:ae:21:6e:9f:67:52:ed:79:72:af:db:83:7d:fc:ef:cd:b9:
67:7b:ff:bf:76:79:7a:11:f3:a7:bf:45:25:21:ee:a9:d8:bf:
20:c1:67:ce:01:1c:de:33:fd:89:5f:51:9a:88:58:c1:28:45:
7e:d2:23:b5:6b:f5:15:52:64:1d:7a:d3:dd:a7:b3:80:1e:ba:
bd:05:07:1e:12:ef:95:67:ab:fc:4e:80:af:b0:d5:76:a8:f6:
0b:ca:25:44:ba:fd:4a:18:9a:3b:36:c9:ea:e7:5c:58:46:0c:
d7:32:8e:6d:87:57:9a:0b:d0:d8:33:73:b4:72:bb:34:82:40:
ad:31:7b:f2:78:3c:95:91:a8:c6:2a:da:1d:c9:d4:cd:1b:34:
3c:cd:97:25:c5:9b:99:a5:38:42:4a:80:1e:f8:e8:d0:8e:26:
9f:a7:db:5f:12:ea:94:55:02:20:89:c6:bc:9f:34:04:b4:ad:
14:ac:b0:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:53:23 2025 by rpki-client