
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/7e4ea8-8950-4183-abc0-3382794049c2/1/MGtGjMMe86PQgayPArJx4xR1Wb8.mft
File: MGtGjMMe86PQgayPArJx4xR1Wb8.mft (raw, json)
Hash identifier: QOh/Yg72mIIR4Cz5/7eaFt0TLyjS6nBk+aJlIT/k2Pg=
Subject key identifier: 25:2F:A5:47:1B:53:3D:DD:9B:80:68:FD:FA:84:F8:D0:95:70:3F:E0
Authority key identifier: 30:6B:46:8C:C3:1E:F3:A3:D0:81:AC:8F:02:B2:71:E3:14:75:59:BF
Certificate issuer: /CN=306b468cc31ef3a3d081ac8f02b271e3147559bf
Certificate serial: 0198936D809CB772584123EC01BC39A41341
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MGtGjMMe86PQgayPArJx4xR1Wb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/7e4ea8-8950-4183-abc0-3382794049c2/1/MGtGjMMe86PQgayPArJx4xR1Wb8.mft
Manifest number: 0AE3
Signing time: Sun 10 Aug 2025 10:01:23 +0000
Manifest this update: Sun 10 Aug 2025 10:01:23 +0000
Manifest next update: Mon 11 Aug 2025 10:01:23 +0000
Files and hashes: 1: MGtGjMMe86PQgayPArJx4xR1Wb8.crl (hash: QE37aAZHdg6yM5WNbCR7CA6Ba48cCyHCRNXjh+7jbXg=)
2: zCf3OK6AbL-GLEVW2m2fiyVZR2o.roa (hash: T9wprypvgjd5UjKaL97Qh7s/fP7I922vE5XInqdd1G4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/7e4ea8-8950-4183-abc0-3382794049c2/1/MGtGjMMe86PQgayPArJx4xR1Wb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/7e4ea8-8950-4183-abc0-3382794049c2/1/MGtGjMMe86PQgayPArJx4xR1Wb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/MGtGjMMe86PQgayPArJx4xR1Wb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:6d:80:9c:b7:72:58:41:23:ec:01:bc:39:a4:13:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=306b468cc31ef3a3d081ac8f02b271e3147559bf
Validity
Not Before: Aug 10 10:01:23 2025 GMT
Not After : Aug 11 10:01:23 2025 GMT
Subject: CN=252fa5471b533ddd9b8068fdfa84f8d095703fe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e9:b8:d6:87:5d:dc:5b:13:92:ba:8c:ae:df:
56:b8:1d:11:e3:1b:d2:3d:a4:49:d2:dc:e7:e3:d5:
71:83:88:39:21:48:79:ad:97:56:39:ad:27:44:8d:
45:14:f4:88:d8:14:00:96:f8:9f:ad:41:2a:80:31:
a7:84:f7:da:ac:54:c3:3a:95:1a:6f:32:bc:39:a6:
04:f7:27:c0:02:27:be:f2:64:c4:e1:9e:4d:88:80:
5e:8a:0d:80:dd:3a:c3:72:b5:c4:e9:5c:de:8d:8c:
1a:03:04:70:8f:b3:d6:e0:07:d0:27:93:f1:f0:c0:
ee:fc:89:0a:b3:43:a3:98:8a:30:44:9c:68:c3:5a:
dc:91:79:2b:b7:ef:b1:a3:9a:54:16:15:a9:40:59:
bd:5c:f5:98:1d:4c:61:d2:78:ea:f4:3f:a8:13:d7:
df:d5:c1:99:82:b7:f3:67:c4:f4:c9:4c:2d:2e:6c:
cc:90:a6:12:dc:fa:ab:be:5e:b9:fb:6d:b8:12:5e:
2e:97:b0:22:aa:94:66:e8:61:6c:c7:b8:7d:bb:1f:
91:e7:da:4e:2f:4d:f5:2b:e0:17:8e:fb:21:2e:9e:
c3:86:6a:41:c8:ff:c1:33:1a:26:a8:9a:47:6e:27:
1b:13:18:4e:ae:e1:75:8f:21:51:5d:37:1c:89:8e:
8c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:2F:A5:47:1B:53:3D:DD:9B:80:68:FD:FA:84:F8:D0:95:70:3F:E0
X509v3 Authority Key Identifier:
keyid:30:6B:46:8C:C3:1E:F3:A3:D0:81:AC:8F:02:B2:71:E3:14:75:59:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGtGjMMe86PQgayPArJx4xR1Wb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7e4ea8-8950-4183-abc0-3382794049c2/1/MGtGjMMe86PQgayPArJx4xR1Wb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7e4ea8-8950-4183-abc0-3382794049c2/1/MGtGjMMe86PQgayPArJx4xR1Wb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:82:e6:b8:46:50:95:8d:30:c8:84:05:de:6b:2b:28:c1:50:
44:30:e5:87:6f:62:e0:b4:a4:b0:dc:28:7d:ee:7e:b3:3f:f5:
e0:bd:de:5e:da:19:c4:ad:32:78:9b:c5:ab:8b:17:c2:fb:46:
26:16:e2:11:6f:e8:ce:8c:61:39:7b:35:d3:a6:87:9d:21:89:
b5:c0:ae:c0:f8:44:a7:e3:0f:45:fa:bf:c4:1c:46:7a:f5:f8:
c3:99:f5:58:1b:90:e8:fe:02:cc:14:2e:31:8e:bc:62:20:0d:
fe:30:06:ab:5c:5e:b6:99:0a:4e:88:d0:24:67:f9:77:d5:ea:
97:f3:0e:83:b5:76:74:2d:91:d7:6e:cd:1f:ab:b0:81:5d:04:
cc:d7:e1:f2:54:62:a1:68:bf:ec:b0:2f:9b:4e:01:b2:d4:7a:
6a:2b:99:0e:47:d1:5f:fc:67:a0:0c:ec:fc:4f:ec:58:11:23:
16:57:84:0a:1b:3a:72:19:30:08:62:90:81:e5:7a:a1:e1:52:
99:cb:eb:6a:b8:4d:65:29:96:e6:40:09:f2:b7:c0:f0:40:c7:
9b:fb:6a:dc:dc:cb:be:a4:7e:19:63:47:f4:d2:32:6d:0d:1a:
9e:f9:a4:b9:b3:49:01:5d:39:96:cd:ac:50:77:0b:fa:3c:81:
fb:8d:94:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 16:05:17 2025 by rpki-client