Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/232cfd-76dc-49e9-a94d-5188ea17d9a9/1/MGavc-_zrCH_F6CVL_Nw5gykS10.mft
File: MGavc-_zrCH_F6CVL_Nw5gykS10.mft (raw, json)
Hash identifier: 67JYnVoVCa+PoegKcfj1VDftwOxISxFHs3MaiTZLHbM=
Subject key identifier: F5:6B:03:CD:87:E5:4E:F0:13:3A:40:97:7A:68:E6:9E:E1:6E:ED:D8
Authority key identifier: 30:66:AF:73:EF:F3:AC:21:FF:17:A0:95:2F:F3:70:E6:0C:A4:4B:5D
Certificate issuer: /CN=3066af73eff3ac21ff17a0952ff370e60ca44b5d
Certificate serial: 019894B699DE2CE0FCFE211B7732079BFD9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MGavc-_zrCH_F6CVL_Nw5gykS10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/232cfd-76dc-49e9-a94d-5188ea17d9a9/1/MGavc-_zrCH_F6CVL_Nw5gykS10.mft
Manifest number: 1627
Signing time: Sun 10 Aug 2025 16:00:51 +0000
Manifest this update: Sun 10 Aug 2025 16:00:51 +0000
Manifest next update: Mon 11 Aug 2025 16:00:51 +0000
Files and hashes: 1: MGavc-_zrCH_F6CVL_Nw5gykS10.crl (hash: /BJHYxHg5bIcwT01Ugffty8LbDIbXDWXgZz3BXhhoww=)
2: iic_3MWvnXwRjdS-4rnJnbVlZdw.roa (hash: ft3o3Jhs8krX+yoAKh9srXW+5Ly/fpaA/Ux+H2kgUMA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/232cfd-76dc-49e9-a94d-5188ea17d9a9/1/MGavc-_zrCH_F6CVL_Nw5gykS10.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/232cfd-76dc-49e9-a94d-5188ea17d9a9/1/MGavc-_zrCH_F6CVL_Nw5gykS10.mft
rsync://rpki.ripe.net/repository/DEFAULT/MGavc-_zrCH_F6CVL_Nw5gykS10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 16:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:b6:99:de:2c:e0:fc:fe:21:1b:77:32:07:9b:fd:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3066af73eff3ac21ff17a0952ff370e60ca44b5d
Validity
Not Before: Aug 10 16:00:51 2025 GMT
Not After : Aug 11 16:00:51 2025 GMT
Subject: CN=f56b03cd87e54ef0133a40977a68e69ee16eedd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:bd:f2:93:4d:07:3e:9a:41:97:dd:1a:90:81:
23:d6:99:d0:88:6b:25:33:aa:e5:e8:47:42:7b:58:
a3:4f:4b:db:79:df:99:aa:e3:89:77:de:c5:99:d0:
6c:bc:ec:63:9b:2a:0d:27:6e:4b:47:b8:fa:97:10:
7c:c6:3f:82:c4:91:63:63:0f:e6:4e:c1:dd:58:2f:
68:a0:61:9e:78:d6:c9:26:28:3f:f0:71:49:ca:b0:
0f:b5:dc:7a:b3:5b:26:ea:7f:64:95:e6:0d:eb:ee:
f2:d7:05:46:98:bc:98:71:88:0b:60:ec:12:a2:4c:
31:41:d4:b4:9c:89:9f:b6:72:36:cc:c1:12:e7:73:
26:26:52:80:3d:70:55:4c:eb:b1:56:35:de:9f:a9:
29:b6:7f:29:a5:99:7f:dc:89:09:8b:53:e6:86:22:
ca:7e:b8:71:9a:7e:a0:3e:ee:75:d9:e3:4c:93:53:
fb:55:17:6e:ec:83:02:4c:51:3f:42:2c:3f:a8:0e:
93:6a:2e:49:b4:c7:20:3a:99:3d:63:b7:dc:50:df:
d1:f3:b6:04:d8:e7:18:3c:8d:3c:a9:52:96:c3:24:
bd:69:b4:92:0d:ea:70:63:fd:08:de:50:fb:c1:d1:
5d:da:02:39:df:af:bb:83:5a:a3:43:cc:c7:70:db:
76:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:6B:03:CD:87:E5:4E:F0:13:3A:40:97:7A:68:E6:9E:E1:6E:ED:D8
X509v3 Authority Key Identifier:
keyid:30:66:AF:73:EF:F3:AC:21:FF:17:A0:95:2F:F3:70:E6:0C:A4:4B:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGavc-_zrCH_F6CVL_Nw5gykS10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/232cfd-76dc-49e9-a94d-5188ea17d9a9/1/MGavc-_zrCH_F6CVL_Nw5gykS10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/232cfd-76dc-49e9-a94d-5188ea17d9a9/1/MGavc-_zrCH_F6CVL_Nw5gykS10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:da:43:07:4d:45:9c:51:f0:b3:3b:ad:ee:e9:02:ee:68:33:
06:59:4a:0f:8f:3a:93:df:95:0c:5e:0c:1d:fa:98:17:62:c9:
0c:7b:a3:5f:e4:b6:3d:c3:f6:f0:6e:f5:71:01:28:82:1c:34:
e4:0c:e4:f5:50:50:dd:9b:9d:a9:3c:71:4b:6f:d0:5c:79:66:
e5:bb:85:79:82:a0:77:e8:fe:07:6a:e8:0f:4d:8b:79:30:a6:
06:1d:32:16:a1:48:c5:60:1c:0a:b6:1f:44:b3:b6:6f:a3:4d:
dc:1f:b2:aa:e8:8b:2a:d3:46:fa:91:46:14:6a:2f:5b:bf:9a:
c4:4f:53:f4:5e:a3:ae:66:60:33:c2:3d:65:37:57:ab:5d:fd:
d3:2e:34:6e:57:e3:10:d6:e2:11:51:35:0a:3d:50:1f:56:b7:
1c:61:ae:57:b7:a6:77:d5:a9:68:aa:b5:9c:67:64:4b:fd:be:
2f:79:4b:dd:63:5b:8e:c0:22:17:84:2d:41:b8:61:01:28:21:
18:04:6e:8f:8a:43:08:a9:00:06:da:a6:76:a1:41:9f:b9:00:
66:04:00:9d:85:c3:77:46:9b:69:a1:d6:0c:5b:74:13:53:2f:
2c:5d:08:1f:55:8a:78:36:73:fc:d7:97:11:39:19:f2:e0:7b:
6a:de:44:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiUtpneLOD8/iEbdzIHm/2bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwNjZhZjczZWZmM2FjMjFmZjE3YTA5NTJmZjM3MGU2MGNh
NDRiNWQwHhcNMjUwODEwMTYwMDUxWhcNMjUwODExMTYwMDUxWjAzMTEwLwYDVQQD
EyhmNTZiMDNjZDg3ZTU0ZWYwMTMzYTQwOTc3YTY4ZTY5ZWUxNmVlZGQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvL3yk00HPppBl90akIEj1pnQiGsl
M6rl6EdCe1ijT0vbed+ZquOJd97FmdBsvOxjmyoNJ25LR7j6lxB8xj+CxJFjYw/m
TsHdWC9ooGGeeNbJJig/8HFJyrAPtdx6s1sm6n9kleYN6+7y1wVGmLyYcYgLYOwS
okwxQdS0nImftnI2zMES53MmJlKAPXBVTOuxVjXen6kptn8ppZl/3IkJi1PmhiLK
frhxmn6gPu512eNMk1P7VRdu7IMCTFE/Qiw/qA6Tai5JtMcgOpk9Y7fcUN/R87YE
2OcYPI08qVKWwyS9abSSDepwY/0I3lD7wdFd2gI536+7g1qjQ8zHcNt2dQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPVrA82H5U7wEzpAl3po5p7hbu3YMB8GA1UdIwQY
MBaAFDBmr3Pv86wh/xeglS/zcOYMpEtdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUdhdmMtX3pyQ0hfRjZDVkxfTnc1Z3lrUzEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8yMzJjZmQtNzZkYy00OWU5LWE5NGQt
NTE4OGVhMTdkOWE5LzEvTUdhdmMtX3pyQ0hfRjZDVkxfTnc1Z3lrUzEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC8yMzJjZmQtNzZkYy00OWU5LWE5NGQtNTE4OGVhMTdkOWE5
LzEvTUdhdmMtX3pyQ0hfRjZDVkxfTnc1Z3lrUzEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa9pDB01F
nFHwszut7ukC7mgzBllKD486k9+VDF4MHfqYF2LJDHujX+S2PcP28G71cQEoghw0
5Azk9VBQ3ZudqTxxS2/QXHlm5buFeYKgd+j+B2roD02LeTCmBh0yFqFIxWAcCrYf
RLO2b6NN3B+yquiLKtNG+pFGFGovW7+axE9T9F6jrmZgM8I9ZTdXq1390y40blfj
ENbiEVE1Cj1QH1a3HGGuV7emd9WpaKq1nGdkS/2+L3lL3WNbjsAiF4QtQbhhASgh
GARuj4pDCKkABtqmdqFBn7kAZgQAnYXDd0abaaHWDFt0E1MvLF0IH1WKeDZz/NeX
ETkZ8uB7at5EMg==
-----END CERTIFICATE-----
Generated at Sun Aug 10 18:11:40 2025 by rpki-client