Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/5bf797-bc55-48c1-9e92-992825cd3214/1/MgTAPDbIBtaH6D6o0nIM7ru9w0M.mft
File: MgTAPDbIBtaH6D6o0nIM7ru9w0M.mft (raw, json)
Hash identifier: 3x78rRm5+Lz+DIWu9ec9C69Yb62706DCV81ghF8WCMk=
Subject key identifier: 64:D9:37:12:5E:DA:D2:D7:4F:AE:DD:BA:86:D9:B2:57:22:DF:C9:A5
Authority key identifier: 32:04:C0:3C:36:C8:06:D6:87:E8:3E:A8:D2:72:0C:EE:BB:BD:C3:43
Certificate issuer: /CN=3204c03c36c806d687e83ea8d2720ceebbbdc343
Certificate serial: 019A50E3B11A15B2E5F304F2E56CB3144B0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MgTAPDbIBtaH6D6o0nIM7ru9w0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/5bf797-bc55-48c1-9e92-992825cd3214/1/MgTAPDbIBtaH6D6o0nIM7ru9w0M.mft
Manifest number: 06F1
Signing time: Tue 04 Nov 2025 22:01:30 +0000
Manifest this update: Tue 04 Nov 2025 22:01:30 +0000
Manifest next update: Wed 05 Nov 2025 22:01:30 +0000
Files and hashes: 1: 4iEprq9S0niaPUM7nGF34QiTqwo.roa (hash: f7Epr5pWf6vu+WKqHqf6izv8485TY6ZobKvsLuSbPr4=)
2: MgTAPDbIBtaH6D6o0nIM7ru9w0M.crl (hash: M57F0/B226hRSD41KK4bfwLeaQnK/zQdj1uIBjg9ZUU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/5bf797-bc55-48c1-9e92-992825cd3214/1/MgTAPDbIBtaH6D6o0nIM7ru9w0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/5bf797-bc55-48c1-9e92-992825cd3214/1/MgTAPDbIBtaH6D6o0nIM7ru9w0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/MgTAPDbIBtaH6D6o0nIM7ru9w0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:b1:1a:15:b2:e5:f3:04:f2:e5:6c:b3:14:4b:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3204c03c36c806d687e83ea8d2720ceebbbdc343
Validity
Not Before: Nov 4 22:01:30 2025 GMT
Not After : Nov 5 22:01:30 2025 GMT
Subject: CN=64d937125edad2d74faeddba86d9b25722dfc9a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:bd:d0:54:45:d4:d4:de:33:ac:7f:cb:c5:38:
e1:b5:99:58:b6:76:98:6c:5c:1e:8f:e4:4d:d6:7f:
88:0d:18:8a:d1:7d:0a:ab:1e:91:33:2e:33:56:d7:
08:f8:e5:5f:16:d2:a5:14:30:95:d2:08:3e:5c:09:
29:78:83:43:65:fc:5f:d2:ef:9c:8f:19:3f:55:12:
4c:e1:ce:db:00:0d:2d:27:5c:a7:f2:98:b4:b1:80:
e9:f4:c6:d0:d6:54:4e:b7:84:01:f3:93:31:63:be:
29:e1:12:99:0b:0d:d3:b7:37:80:d5:b8:10:26:d4:
46:5c:12:0f:cc:16:79:61:47:82:2d:ce:9d:b0:95:
ca:fd:36:9e:41:4a:09:ec:df:e0:7a:80:1d:47:30:
be:2b:86:4a:a6:66:0e:fb:10:1e:0f:bf:c7:fb:4f:
62:b5:95:4e:d9:4d:65:3d:ad:3b:07:4b:c2:76:9a:
9d:ae:db:ae:10:72:51:f3:3b:3b:26:61:77:35:5c:
d4:e0:32:dc:8f:a6:71:cf:f8:21:78:98:3d:71:51:
12:bb:2b:37:22:71:83:de:39:f3:69:d8:66:09:28:
87:90:23:bc:00:54:39:19:34:68:61:37:19:c1:82:
6c:4f:1b:b6:e9:9c:a5:35:46:f4:52:df:ae:49:2b:
b7:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:D9:37:12:5E:DA:D2:D7:4F:AE:DD:BA:86:D9:B2:57:22:DF:C9:A5
X509v3 Authority Key Identifier:
keyid:32:04:C0:3C:36:C8:06:D6:87:E8:3E:A8:D2:72:0C:EE:BB:BD:C3:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MgTAPDbIBtaH6D6o0nIM7ru9w0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/5bf797-bc55-48c1-9e92-992825cd3214/1/MgTAPDbIBtaH6D6o0nIM7ru9w0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/5bf797-bc55-48c1-9e92-992825cd3214/1/MgTAPDbIBtaH6D6o0nIM7ru9w0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:a5:69:4e:c3:c0:3e:6e:66:aa:83:6b:d5:a2:41:1b:31:e8:
b6:a1:dd:09:9d:b1:1c:a9:ac:e6:5c:a2:c7:8a:db:0f:60:f2:
27:d0:a4:67:54:89:d2:ea:59:96:f3:30:da:e8:60:8d:4c:56:
5d:99:f3:84:05:13:9d:30:3a:f4:3e:43:69:1c:36:ff:db:b3:
02:49:5a:b9:68:cf:07:0b:39:f2:0b:33:da:67:9d:1b:27:21:
79:e8:c6:ca:c8:0a:4a:f0:36:79:7a:ba:d2:82:f5:d7:29:b9:
26:e8:19:55:1a:01:54:4d:e4:b9:7b:b8:3b:53:8f:34:b3:e8:
c0:4e:63:c8:18:75:da:fe:43:92:db:5a:8f:c5:7b:82:c9:68:
c1:7c:0e:a0:5c:99:f1:8c:f3:1c:c7:95:b8:b8:59:df:2c:7b:
87:36:56:b2:29:17:c5:74:5c:2f:07:7f:5c:3d:f3:03:58:9b:
91:63:26:bf:c4:18:f6:2d:6b:58:fc:e4:94:7b:d7:4e:91:b0:
45:fa:97:81:98:8c:f9:9e:42:1d:3b:9d:4e:f7:aa:02:e0:6b:
a8:a9:3d:ad:a9:b8:ac:a5:cc:c3:5a:c8:58:a3:a9:4e:b1:92:
72:a4:94:0f:6c:5f:bc:61:67:a9:d0:a6:b1:e3:ca:98:9f:0c:
64:7a:36:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQ47EaFbLl8wTy5WyzFEsPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyMDRjMDNjMzZjODA2ZDY4N2U4M2VhOGQyNzIwY2VlYmJi
ZGMzNDMwHhcNMjUxMTA0MjIwMTMwWhcNMjUxMTA1MjIwMTMwWjAzMTEwLwYDVQQD
Eyg2NGQ5MzcxMjVlZGFkMmQ3NGZhZWRkYmE4NmQ5YjI1NzIyZGZjOWE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzb3QVEXU1N4zrH/LxTjhtZlYtnaY
bFwej+RN1n+IDRiK0X0Kqx6RMy4zVtcI+OVfFtKlFDCV0gg+XAkpeINDZfxf0u+c
jxk/VRJM4c7bAA0tJ1yn8pi0sYDp9MbQ1lROt4QB85MxY74p4RKZCw3TtzeA1bgQ
JtRGXBIPzBZ5YUeCLc6dsJXK/TaeQUoJ7N/geoAdRzC+K4ZKpmYO+xAeD7/H+09i
tZVO2U1lPa07B0vCdpqdrtuuEHJR8zs7JmF3NVzU4DLcj6Zxz/gheJg9cVESuys3
InGD3jnzadhmCSiHkCO8AFQ5GTRoYTcZwYJsTxu26ZylNUb0Ut+uSSu31QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGTZNxJe2tLXT67duobZslci38mlMB8GA1UdIwQY
MBaAFDIEwDw2yAbWh+g+qNJyDO67vcNDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWdUQVBEYklCdGFINkQ2bzBuSU03cnU5dzBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny81YmY3OTctYmM1NS00OGMxLTllOTIt
OTkyODI1Y2QzMjE0LzEvTWdUQVBEYklCdGFINkQ2bzBuSU03cnU5dzBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny81YmY3OTctYmM1NS00OGMxLTllOTItOTkyODI1Y2QzMjE0
LzEvTWdUQVBEYklCdGFINkQ2bzBuSU03cnU5dzBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcKVpTsPA
Pm5mqoNr1aJBGzHotqHdCZ2xHKms5lyix4rbD2DyJ9CkZ1SJ0upZlvMw2uhgjUxW
XZnzhAUTnTA69D5DaRw2/9uzAklauWjPBws58gsz2medGycheejGysgKSvA2eXq6
0oL11ym5JugZVRoBVE3kuXu4O1OPNLPowE5jyBh12v5Dkttaj8V7gslowXwOoFyZ
8YzzHMeVuLhZ3yx7hzZWsikXxXRcLwd/XD3zA1ibkWMmv8QY9i1rWPzklHvXTpGw
RfqXgZiM+Z5CHTudTveqAuBrqKk9ram4rKXMw1rIWKOpTrGScqSUD2xfvGFnqdCm
sePKmJ8MZHo2CA==
-----END CERTIFICATE-----
Generated at Wed Nov 5 00:46:58 2025 by rpki-client