Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/232cfd-76dc-49e9-a94d-5188ea17d9a9/1/MGavc-_zrCH_F6CVL_Nw5gykS10.mft
File: MGavc-_zrCH_F6CVL_Nw5gykS10.mft (raw, json)
Hash identifier: rJJdEIREPL6bs4G37Q2oqeYuVfrW6FeI/QDQT0cDkFc=
Subject key identifier: 10:D0:5D:52:5B:11:89:82:03:3A:D2:EB:67:80:02:C0:06:46:C3:2D
Authority key identifier: 30:66:AF:73:EF:F3:AC:21:FF:17:A0:95:2F:F3:70:E6:0C:A4:4B:5D
Certificate issuer: /CN=3066af73eff3ac21ff17a0952ff370e60ca44b5d
Certificate serial: 019A4EF4EE50FC589AFD9D79ABC16F8700D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MGavc-_zrCH_F6CVL_Nw5gykS10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/232cfd-76dc-49e9-a94d-5188ea17d9a9/1/MGavc-_zrCH_F6CVL_Nw5gykS10.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 13:01:05 +0000
Manifest this update: Tue 04 Nov 2025 13:01:05 +0000
Manifest next update: Wed 05 Nov 2025 13:01:05 +0000
Files and hashes: 1: MGavc-_zrCH_F6CVL_Nw5gykS10.crl (hash: ufFMvROW11VNxZoVif1qT3Vn2Jf1MDwJeV4gJUhyH5w=)
2: iic_3MWvnXwRjdS-4rnJnbVlZdw.roa (hash: ft3o3Jhs8krX+yoAKh9srXW+5Ly/fpaA/Ux+H2kgUMA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/232cfd-76dc-49e9-a94d-5188ea17d9a9/1/MGavc-_zrCH_F6CVL_Nw5gykS10.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/232cfd-76dc-49e9-a94d-5188ea17d9a9/1/MGavc-_zrCH_F6CVL_Nw5gykS10.mft
rsync://rpki.ripe.net/repository/DEFAULT/MGavc-_zrCH_F6CVL_Nw5gykS10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:ee:50:fc:58:9a:fd:9d:79:ab:c1:6f:87:00:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3066af73eff3ac21ff17a0952ff370e60ca44b5d
Validity
Not Before: Nov 4 13:01:05 2025 GMT
Not After : Nov 5 13:01:05 2025 GMT
Subject: CN=10d05d525b118982033ad2eb678002c00646c32d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f4:14:95:35:b5:06:60:f6:4c:e4:d5:3c:7b:
43:17:92:15:ca:a2:2a:38:2d:f6:cc:fe:24:df:fa:
03:5a:6a:e2:48:ed:d2:d4:c8:e8:a2:11:cc:49:4f:
9c:05:9a:3d:5b:7c:e0:5c:d3:05:19:3b:d3:11:ba:
6e:cf:4d:9a:a8:76:3f:f7:09:2d:e2:7e:f6:f6:09:
2d:ea:66:91:47:c3:92:19:1f:40:35:7b:2c:33:59:
8c:4d:16:c6:3e:00:0e:ad:4a:c8:74:e7:1f:c5:4d:
04:d6:20:3a:40:f3:0b:9f:48:c5:53:e1:3c:75:12:
7f:8e:1d:12:d3:d7:aa:4f:94:8d:8a:37:ef:44:3b:
e7:f0:44:16:15:c5:a7:79:d0:0b:1c:c1:ca:63:4a:
1d:4f:c4:d2:56:a7:cc:dc:0b:33:f0:3d:80:a5:ec:
77:1f:2d:1c:93:5e:31:e6:4c:bb:3c:26:e5:cc:9e:
82:91:fd:98:54:da:dc:57:a8:c0:75:8e:18:2a:cc:
a0:88:93:3b:84:46:2e:a5:49:07:20:0b:7b:03:bd:
a1:39:ac:ea:7f:f5:01:17:c0:7f:41:ff:a3:eb:e7:
f1:f7:82:14:d3:2d:53:26:7d:91:ee:38:03:82:4f:
74:85:6b:42:77:02:1e:5d:50:ee:dd:2a:e9:25:00:
31:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:D0:5D:52:5B:11:89:82:03:3A:D2:EB:67:80:02:C0:06:46:C3:2D
X509v3 Authority Key Identifier:
keyid:30:66:AF:73:EF:F3:AC:21:FF:17:A0:95:2F:F3:70:E6:0C:A4:4B:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGavc-_zrCH_F6CVL_Nw5gykS10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/232cfd-76dc-49e9-a94d-5188ea17d9a9/1/MGavc-_zrCH_F6CVL_Nw5gykS10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/232cfd-76dc-49e9-a94d-5188ea17d9a9/1/MGavc-_zrCH_F6CVL_Nw5gykS10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:f9:3b:6e:88:d0:98:82:5c:26:7d:2d:33:d4:ba:62:f2:61:
9d:f7:f8:a4:1f:9d:97:e1:6e:84:4a:9b:57:7e:08:0d:c3:73:
06:d5:8d:3c:da:43:3a:fa:b3:f6:f1:ba:b2:d0:86:b7:ed:29:
d6:98:84:3f:b9:8f:d5:d5:50:9c:bb:85:1e:32:f0:0a:e8:b0:
60:90:2a:68:6d:16:dc:24:54:c8:b7:fc:20:13:87:c1:26:25:
ea:47:9d:84:13:7d:39:e2:8b:f3:98:a7:bf:05:76:98:5f:89:
0c:ce:12:e7:02:fb:8f:68:e0:1f:19:bc:e6:53:5d:81:6e:58:
b5:c9:f6:3c:fd:ca:87:27:ed:e6:54:73:d2:88:f2:25:06:ed:
82:94:e6:37:c4:32:e3:aa:a6:89:68:75:48:ac:08:ea:8a:34:
90:8a:d6:40:e6:7d:1b:38:61:6a:8e:c9:15:b1:5a:a7:c7:1e:
2b:6d:0d:c9:74:fc:35:86:33:09:c5:71:de:e1:ab:af:5d:be:
1f:f3:24:e1:68:cf:dc:19:05:2a:a6:c2:25:d7:a5:0b:5c:aa:
dc:8d:92:65:42:3b:a3:4d:de:fb:e3:4f:e3:4e:47:dd:65:96:
93:8b:4b:43:32:56:86:33:3d:84:27:f7:23:75:2a:60:be:f5:
53:aa:8c:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:08:04 2025 by rpki-client