Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/9c27e4-d7b1-43c1-a38f-94914f5ddb3c/1/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.mft
File: Mgskp0Dy5hYyBQrcFGwe5qPmhsU.mft (raw, json)
Hash identifier: +L6twUCb32jaCy+UDRfpgb9+6ms+yyRsAOF13OjU7fE=
Subject key identifier: 6D:1B:E6:E4:AC:F6:B5:5B:82:46:52:92:FA:E0:AE:31:56:68:AA:02
Authority key identifier: 32:0B:24:A7:40:F2:E6:16:32:05:0A:DC:14:6C:1E:E6:A3:E6:86:C5
Certificate issuer: /CN=320b24a740f2e61632050adc146c1ee6a3e686c5
Certificate serial: 019A4EBD5A0C41755918522B1EC2342870A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/9c27e4-d7b1-43c1-a38f-94914f5ddb3c/1/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 12:00:23 +0000
Manifest this update: Tue 04 Nov 2025 12:00:23 +0000
Manifest next update: Wed 05 Nov 2025 12:00:23 +0000
Files and hashes: 1: L6UZeUjVK5OZ7-mZGSjtJGUXkeo.roa (hash: zQv0Jn9i8JzxV9AzBkluRvg9IIcuWJrvzIFoMGo/YiA=)
2: Mgskp0Dy5hYyBQrcFGwe5qPmhsU.crl (hash: Zx5Dg7tCeQxzKeAxMvGt4WozY0JI2e2VDsfw4ojo7Gs=)
3: cE9MAqwQ5qMGLkrFZGC06olWNS8.roa (hash: qikuqaUY8ZBatuemuXHDbHFmATqYtKgaMBnCotzhBRQ=)
4: eNulQrWkb7XXGYDw1_7yfQtfyjU.roa (hash: wqv9AveypucRXaFrqiWm0EqnYUR4U6N703H9MjT8w5I=)
5: ebOku8xEI298KvY-nyvK9tWb6FA.roa (hash: a5+jxAr4ask6hZY3MKueRH2rWcR2j9Q7nIukLKzVuw0=)
6: iDpQNT2zENvZBdlwmVa2eahg-4w.roa (hash: +pNICRMdPczLNv2a8Zb+PvZ8F7nTaRrJXFaN803DnT8=)
7: nOavIXppWmDFhXdDEZ0V1cMIqeg.roa (hash: uLvOIw0+fU0FW9oyjgIp/2zVisu3plAWDz1d4aRwn60=)
8: s9a3pEKBSyjyYAsrYAxiAEP4mCU.roa (hash: 0FpwdS9NLp08wzi3cGdRZXNNnpCGm190316Q+yHGVNo=)
9: v2JqIJBq3wJphTAbwK0-g33RShA.roa (hash: i1c3+hUzjW7SLy+JaUh7BqmO9B9VdI9iEDnKvNZU/ks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/9c27e4-d7b1-43c1-a38f-94914f5ddb3c/1/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/9c27e4-d7b1-43c1-a38f-94914f5ddb3c/1/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:bd:5a:0c:41:75:59:18:52:2b:1e:c2:34:28:70:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=320b24a740f2e61632050adc146c1ee6a3e686c5
Validity
Not Before: Nov 4 12:00:23 2025 GMT
Not After : Nov 5 12:00:23 2025 GMT
Subject: CN=6d1be6e4acf6b55b82465292fae0ae315668aa02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:59:07:43:e3:5a:b1:90:86:43:b5:60:2d:19:
12:f9:4c:87:83:9b:eb:90:fd:31:83:9d:b7:bc:47:
40:2d:7b:16:e1:1e:3a:58:5a:a2:de:5b:e1:8d:fe:
f7:6b:93:52:77:09:9e:bb:64:0a:44:26:8c:da:a1:
b9:e7:19:63:9a:78:98:84:2f:a7:81:a9:2b:0c:f3:
43:26:7e:46:70:cd:e2:e0:88:ca:ca:ae:62:bb:ab:
72:e4:08:13:78:ff:f1:84:30:ef:0c:02:8d:e9:b6:
e9:1a:fb:60:c2:29:ac:53:75:b3:57:5a:74:24:04:
62:13:9a:a2:3e:c7:7f:ee:0f:90:a8:07:19:ae:1c:
c5:73:ab:96:20:48:71:a3:5d:41:9a:84:d7:75:7a:
4a:5b:40:0e:02:de:73:a8:31:d5:68:e9:95:7b:e2:
5f:0b:49:ed:c9:b8:d3:a4:30:5f:25:a1:9c:12:6a:
93:a6:85:bd:ed:9a:91:fd:fb:f9:0a:7c:2a:d0:2e:
64:d3:88:c6:12:bf:82:03:a3:b2:b1:4e:52:77:82:
26:a8:9a:3b:e2:88:53:cc:b0:9a:7a:d9:7c:44:de:
14:74:d9:34:1c:b1:41:34:f5:1a:fd:1c:8f:81:ae:
38:dc:9d:f1:80:ce:59:1f:0e:d7:99:43:0f:09:f0:
1f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:1B:E6:E4:AC:F6:B5:5B:82:46:52:92:FA:E0:AE:31:56:68:AA:02
X509v3 Authority Key Identifier:
keyid:32:0B:24:A7:40:F2:E6:16:32:05:0A:DC:14:6C:1E:E6:A3:E6:86:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/9c27e4-d7b1-43c1-a38f-94914f5ddb3c/1/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/9c27e4-d7b1-43c1-a38f-94914f5ddb3c/1/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:42:a9:3f:f4:b3:72:0b:0f:a9:99:89:fb:3c:a7:2d:b5:0e:
f4:f4:5b:24:ff:62:ca:eb:91:eb:75:b0:29:e2:f4:8a:6d:0e:
3a:0f:e4:b5:28:5c:79:21:89:ee:5b:5d:f1:0b:bb:f4:ed:6e:
bc:4c:f8:89:1b:f6:2f:9e:c6:1b:39:65:01:9d:74:4a:d9:f4:
8f:5f:47:5c:0e:c3:cd:21:c9:ab:cd:ec:a1:36:ef:f7:50:4b:
4e:bb:4f:9a:4f:00:5d:48:93:c0:35:84:4b:16:e7:a8:4a:8a:
6d:c0:c1:73:90:07:0f:8f:6a:ca:74:7c:04:65:ca:9a:cc:b5:
de:63:22:37:44:42:e5:d0:df:25:a3:8c:bd:1b:b3:22:29:fa:
4f:c5:77:7a:c1:59:29:cd:97:69:21:fd:76:df:16:c1:3e:eb:
a9:0e:32:0d:5c:0d:76:79:75:9c:71:81:9f:db:ab:db:8f:f4:
d0:00:0a:5c:6b:70:e1:f7:ac:6e:8d:ad:11:62:c8:7a:f3:ab:
10:3e:f1:09:38:61:52:a1:e2:8d:6f:7d:20:13:03:f0:72:4c:
5e:b7:fd:4a:0b:2a:15:57:8e:7d:43:62:4f:1e:ab:76:52:57:
35:2e:18:6c:40:b5:31:eb:34:10:4a:f8:8a:79:92:52:f4:36:
3d:30:a7:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:21:58 2025 by rpki-client