Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/0f2682-9878-416b-965c-40aac6396777/1/mjgMVcRhF_nQ-fifiF_YrFhMcuc.mft
File: mjgMVcRhF_nQ-fifiF_YrFhMcuc.mft (raw, json)
Hash identifier: Ja574JbKdu8Y8E+By8W/oP7I+k/mV7Ts9KSVudb5CZI=
Subject key identifier: 24:AB:34:FE:6B:25:60:B6:0A:B0:21:FD:5B:EE:D6:F4:12:7D:11:61
Authority key identifier: 9A:38:0C:55:C4:61:17:F9:D0:F9:F8:9F:88:5F:D8:AC:58:4C:72:E7
Certificate issuer: /CN=9a380c55c46117f9d0f9f89f885fd8ac584c72e7
Certificate serial: 019A5187F89891F452CB5EE58E05C29B5CA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mjgMVcRhF_nQ-fifiF_YrFhMcuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/0f2682-9878-416b-965c-40aac6396777/1/mjgMVcRhF_nQ-fifiF_YrFhMcuc.mft
Manifest number: 0632
Signing time: Wed 05 Nov 2025 01:00:56 +0000
Manifest this update: Wed 05 Nov 2025 01:00:56 +0000
Manifest next update: Thu 06 Nov 2025 01:00:56 +0000
Files and hashes: 1: 0Xa-Nei_d95pLvklAjjCcq4wB50.roa (hash: IPQHZLb7lkBMMEnjRg8Zyo+jCG1PIyAJca8gIl7Nyqw=)
2: mjgMVcRhF_nQ-fifiF_YrFhMcuc.crl (hash: brRRRf68hYwTYwtxKE1/6G3eklgyISiKXyghIc90ZqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/0f2682-9878-416b-965c-40aac6396777/1/mjgMVcRhF_nQ-fifiF_YrFhMcuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/0f2682-9878-416b-965c-40aac6396777/1/mjgMVcRhF_nQ-fifiF_YrFhMcuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/mjgMVcRhF_nQ-fifiF_YrFhMcuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:87:f8:98:91:f4:52:cb:5e:e5:8e:05:c2:9b:5c:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a380c55c46117f9d0f9f89f885fd8ac584c72e7
Validity
Not Before: Nov 5 01:00:56 2025 GMT
Not After : Nov 6 01:00:56 2025 GMT
Subject: CN=24ab34fe6b2560b60ab021fd5beed6f4127d1161
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:17:6d:4f:7f:51:d2:90:a0:7e:15:56:3a:3c:
7d:48:d0:4d:ce:62:56:c7:cd:3a:84:c6:82:66:3b:
1a:fc:8c:54:fb:dc:1c:8a:51:02:7c:35:47:9d:c9:
49:58:55:d8:a1:c5:53:d1:bd:79:eb:95:93:2e:0d:
39:35:82:61:09:98:2f:79:de:58:97:37:20:8e:7f:
dd:ff:b2:ac:f5:c7:53:16:36:09:b1:e0:9a:55:2b:
e9:dc:46:67:9d:64:c5:b8:90:00:80:d6:ce:21:35:
dc:4b:dc:0d:59:01:1b:17:23:c2:5d:9a:28:14:a8:
3c:3f:cd:a2:f4:40:0b:31:ec:cd:33:09:a9:be:bd:
79:a2:42:cc:35:b0:77:2d:6d:50:21:47:16:3b:80:
a9:13:ca:b9:ff:b9:ce:6f:7f:05:3f:99:43:b5:73:
45:0c:33:7a:9e:64:39:2a:82:07:8b:7b:15:b8:ae:
f1:3c:13:00:af:9e:2d:1e:8d:5a:6c:09:a2:95:15:
28:a2:c8:94:e4:e5:cd:8f:5e:73:24:3c:95:e2:ae:
a1:98:e3:48:eb:50:0a:3d:52:22:c3:0f:29:bc:ab:
4a:53:61:5c:df:7b:9a:71:63:47:4d:dc:1e:9c:88:
52:bc:41:92:14:be:27:3d:ae:13:28:af:37:4a:0a:
34:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:AB:34:FE:6B:25:60:B6:0A:B0:21:FD:5B:EE:D6:F4:12:7D:11:61
X509v3 Authority Key Identifier:
keyid:9A:38:0C:55:C4:61:17:F9:D0:F9:F8:9F:88:5F:D8:AC:58:4C:72:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mjgMVcRhF_nQ-fifiF_YrFhMcuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/0f2682-9878-416b-965c-40aac6396777/1/mjgMVcRhF_nQ-fifiF_YrFhMcuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/0f2682-9878-416b-965c-40aac6396777/1/mjgMVcRhF_nQ-fifiF_YrFhMcuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:34:b6:77:08:37:b7:c4:c3:e4:7d:c7:41:a7:a7:ee:ee:9f:
c2:8c:7b:fb:fd:bd:bb:0a:3a:57:db:0b:0c:0d:f3:0d:65:e9:
f7:4a:ab:9d:c5:d3:59:5c:98:c3:14:90:f8:dd:ca:61:4f:54:
c8:63:dd:b4:27:9b:0d:08:63:b4:c1:4a:48:7a:21:5d:b3:84:
fe:a9:bc:4d:3a:8a:6e:ae:df:e7:9f:bd:d3:bd:1b:7d:cf:53:
fb:19:9d:8f:84:c0:58:41:81:3a:9f:c3:04:75:35:d3:a2:bf:
e1:2a:32:f2:19:10:3d:6f:8a:d2:b3:7d:92:31:43:f3:d3:05:
21:ae:f2:65:7c:40:e5:b1:a2:e6:a4:ce:66:fe:b5:68:e9:dd:
64:64:29:fb:7a:78:39:cd:b4:18:be:36:2b:11:8e:f7:28:cd:
3e:25:59:55:b5:fd:d5:c9:80:5b:c5:4e:09:c2:b9:33:7f:23:
4c:3d:a4:59:29:91:ee:ec:38:6f:bf:7b:1d:0b:c2:07:6a:74:
d7:35:66:c4:02:a6:31:48:e7:a3:97:f9:ed:e8:84:1a:48:07:
d9:72:36:73:d6:49:b9:1a:ef:25:73:87:e5:8d:1b:18:b5:00:
77:b5:65:2f:e5:38:e8:e4:de:cf:f3:c6:91:13:ed:67:3d:9d:
5d:cb:07:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:18:41 2025 by rpki-client