Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/9b34b0-301a-41a2-b4c5-a8866aa95c71/1/MGatYcFi3wZQ7gq2DGgHWymiEcg.mft
File: MGatYcFi3wZQ7gq2DGgHWymiEcg.mft (raw, json)
Hash identifier: SwUf4/5zV3PkDE6kHA8fR9T3d+fBReAP3BNy5spNSmw=
Subject key identifier: A5:7A:86:B6:32:6C:48:2B:21:5A:AB:07:C0:8A:47:DD:0B:75:E5:5F
Authority key identifier: 30:66:AD:61:C1:62:DF:06:50:EE:0A:B6:0C:68:07:5B:29:A2:11:C8
Certificate issuer: /CN=3066ad61c162df0650ee0ab60c68075b29a211c8
Certificate serial: 019A51BE21EF58C9BB91144188C62C479595
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MGatYcFi3wZQ7gq2DGgHWymiEcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/9b34b0-301a-41a2-b4c5-a8866aa95c71/1/MGatYcFi3wZQ7gq2DGgHWymiEcg.mft
Manifest number: 1710
Signing time: Wed 05 Nov 2025 02:00:06 +0000
Manifest this update: Wed 05 Nov 2025 02:00:06 +0000
Manifest next update: Thu 06 Nov 2025 02:00:06 +0000
Files and hashes: 1: MGatYcFi3wZQ7gq2DGgHWymiEcg.crl (hash: 3+Yw3pL2vVQGfTJlaAuS8DqOSpZrbp3xHiihraMtBtI=)
2: akH_-GUofRi3IR9WY9DWc-MBUHc.roa (hash: GH7ew6e0VLPyvTO+mxXZge5TTd6Djbt+GfnJ/q6zgIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/9b34b0-301a-41a2-b4c5-a8866aa95c71/1/MGatYcFi3wZQ7gq2DGgHWymiEcg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/9b34b0-301a-41a2-b4c5-a8866aa95c71/1/MGatYcFi3wZQ7gq2DGgHWymiEcg.mft
rsync://rpki.ripe.net/repository/DEFAULT/MGatYcFi3wZQ7gq2DGgHWymiEcg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:be:21:ef:58:c9:bb:91:14:41:88:c6:2c:47:95:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3066ad61c162df0650ee0ab60c68075b29a211c8
Validity
Not Before: Nov 5 02:00:06 2025 GMT
Not After : Nov 6 02:00:06 2025 GMT
Subject: CN=a57a86b6326c482b215aab07c08a47dd0b75e55f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:1b:a5:76:ad:44:7b:68:78:36:cb:5f:d7:1e:
2b:dd:c4:61:24:5a:ba:60:c0:df:8f:df:e3:f2:db:
23:ce:5e:a1:d3:83:0e:60:4e:5a:be:c7:96:e2:24:
7d:1d:dd:38:c7:3c:36:e1:07:33:6b:4b:f4:36:11:
9a:7a:ab:35:20:18:05:bc:97:86:4c:05:10:2e:e1:
27:8d:2b:8f:0f:66:88:8f:35:fb:f7:0a:a4:05:ae:
8e:01:56:db:9f:92:70:43:8e:d1:4e:a0:a0:27:7e:
65:cf:ea:31:63:d5:7c:01:29:84:a2:d9:b5:5e:2b:
c4:0a:5a:80:65:da:b9:be:38:c4:bd:20:46:80:62:
d0:bb:3d:7a:ac:a4:00:ad:ae:4b:7f:a4:85:70:19:
82:28:52:ac:67:e9:84:fa:ee:97:c5:57:97:fe:66:
5e:26:ff:97:8e:2c:87:4c:74:3a:27:24:b3:5d:4f:
c7:7f:a2:a0:ac:36:74:3c:17:e8:d0:1e:9f:b0:0c:
92:e2:06:75:91:27:fc:87:ad:50:68:9b:e3:eb:1f:
b6:b7:fd:b6:74:c5:64:87:8e:18:ea:fb:38:a6:f4:
77:b3:86:9d:0f:c0:cf:1b:b2:ed:9b:7b:55:1b:d7:
c3:9c:dc:f7:11:4b:28:58:ad:c1:90:6f:b7:b2:3c:
23:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:7A:86:B6:32:6C:48:2B:21:5A:AB:07:C0:8A:47:DD:0B:75:E5:5F
X509v3 Authority Key Identifier:
keyid:30:66:AD:61:C1:62:DF:06:50:EE:0A:B6:0C:68:07:5B:29:A2:11:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGatYcFi3wZQ7gq2DGgHWymiEcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9b34b0-301a-41a2-b4c5-a8866aa95c71/1/MGatYcFi3wZQ7gq2DGgHWymiEcg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9b34b0-301a-41a2-b4c5-a8866aa95c71/1/MGatYcFi3wZQ7gq2DGgHWymiEcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:45:46:d5:61:7d:9f:fa:4d:cc:04:8d:bd:6a:a8:93:e0:41:
a8:ba:09:6c:72:e9:18:a9:ad:7d:83:0b:aa:8e:9a:f8:21:ed:
df:1c:e5:bf:36:39:34:c2:d3:bd:b6:b7:3d:f4:6f:e3:1a:5f:
b9:c7:72:52:fe:e6:69:6a:d9:15:c5:e6:19:c0:e2:19:54:ee:
6a:37:bf:ba:2b:30:ef:9f:62:95:9c:5a:9d:ab:ae:bb:c9:68:
d4:5d:61:55:56:b0:6e:48:be:60:c0:2e:f1:4f:7f:76:82:12:
48:9d:a8:34:74:73:e3:b5:65:09:56:0b:4d:24:6d:73:f3:82:
f3:51:fe:36:a3:2b:ca:dd:9e:20:5d:97:dd:db:91:63:00:3f:
80:b4:89:5f:1d:1a:eb:49:e9:c3:19:64:7f:36:10:21:5f:c6:
78:e7:60:bd:26:0c:ad:07:3e:28:3d:b6:70:14:6d:41:2c:70:
2c:99:f4:60:f1:63:25:e7:db:79:f6:33:6e:0d:66:39:3a:0b:
01:ba:01:d4:df:c9:64:4c:e4:6f:61:17:1b:ef:4b:df:5d:dd:
8a:8c:3a:5d:05:e5:2d:65:ab:e1:e9:eb:f6:48:5a:9e:2c:fd:
1e:d0:23:06:ca:81:27:02:3f:43:63:8e:63:f6:b2:c8:97:69:
7e:2f:f8:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:33:49 2025 by rpki-client