Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/5908a9-0c0f-40ab-bfd6-69af0a6e989b/1/mBGGh_3W_4D7CYqe7vBt43f4XW4.mft
File: mBGGh_3W_4D7CYqe7vBt43f4XW4.mft (raw, json)
Hash identifier: qQEtg2Zqh2xt1EYgpRdZnCbpJXG2uZFnScWndOwGhPI=
Subject key identifier: 44:C8:CD:99:55:21:A1:DE:C4:FE:4F:E6:0A:75:17:8B:8B:5B:6D:1B
Authority key identifier: 98:11:86:87:FD:D6:FF:80:FB:09:8A:9E:EE:F0:6D:E3:77:F8:5D:6E
Certificate issuer: /CN=98118687fdd6ff80fb098a9eeef06de377f85d6e
Certificate serial: 019A4E4FD785D71550043E0B1B496CDDCCBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mBGGh_3W_4D7CYqe7vBt43f4XW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/5908a9-0c0f-40ab-bfd6-69af0a6e989b/1/mBGGh_3W_4D7CYqe7vBt43f4XW4.mft
Manifest number: 0C67
Signing time: Tue 04 Nov 2025 10:00:46 +0000
Manifest this update: Tue 04 Nov 2025 10:00:46 +0000
Manifest next update: Wed 05 Nov 2025 10:00:46 +0000
Files and hashes: 1: 1lsllJIGemqZ89xHiZQkdlO1fKw.roa (hash: z+LS30vNnG/3Pd/eJpUiR3agQpnmviOChE1etXIcdSc=)
2: 3lXi1_g77NKzjT3HhPoXoOvjf4w.roa (hash: Ay8Ub8kwHojvnn8g9zm4+05FafWEgsI4HELIX5EKY7A=)
3: mBGGh_3W_4D7CYqe7vBt43f4XW4.crl (hash: pSysAdNadkd06nvY/kIZK0Tf/5k7kTtlNrLj6P9EPPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/5908a9-0c0f-40ab-bfd6-69af0a6e989b/1/mBGGh_3W_4D7CYqe7vBt43f4XW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/5908a9-0c0f-40ab-bfd6-69af0a6e989b/1/mBGGh_3W_4D7CYqe7vBt43f4XW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/mBGGh_3W_4D7CYqe7vBt43f4XW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:d7:85:d7:15:50:04:3e:0b:1b:49:6c:dd:cc:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98118687fdd6ff80fb098a9eeef06de377f85d6e
Validity
Not Before: Nov 4 10:00:46 2025 GMT
Not After : Nov 5 10:00:46 2025 GMT
Subject: CN=44c8cd995521a1dec4fe4fe60a75178b8b5b6d1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ac:23:b1:25:62:7b:71:c1:d2:65:c4:83:9d:
37:c0:a2:7f:79:44:6d:f4:06:e0:e8:66:51:34:1b:
e8:23:b6:5e:e7:7d:05:77:0d:61:9f:9c:07:50:3d:
b6:19:c9:b8:9f:f8:4a:97:da:cc:a0:8e:8e:f4:2d:
d6:cd:dc:48:16:97:bf:d7:96:50:62:0e:58:08:4c:
e0:37:30:21:8d:a8:71:c9:06:ba:88:68:fe:26:d9:
e8:19:69:6c:d8:22:bf:26:d1:d9:15:ad:d2:a4:4b:
b1:e1:c0:a7:80:fc:80:28:5c:19:31:4e:29:9b:e5:
1f:f1:da:d7:6b:53:aa:d6:2e:78:51:16:ac:49:80:
8d:08:88:35:37:85:69:aa:0b:f0:72:22:e2:22:14:
1a:d1:64:d9:ba:6a:93:3b:e6:89:9c:4c:19:d2:68:
b3:49:44:06:ef:13:20:c1:03:26:03:0a:aa:fb:ab:
78:0e:ff:8c:e9:b8:fc:28:66:6b:4e:9d:b9:2c:e4:
aa:70:c2:8a:47:36:cb:7b:b1:3f:de:4c:28:f1:29:
39:18:3c:48:d0:2d:27:0f:1b:f4:85:27:41:03:8f:
32:41:89:ed:2e:c8:e3:9d:e8:6e:59:0b:77:48:57:
8b:a9:9e:77:74:10:10:83:1b:21:d0:d6:14:84:53:
99:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:C8:CD:99:55:21:A1:DE:C4:FE:4F:E6:0A:75:17:8B:8B:5B:6D:1B
X509v3 Authority Key Identifier:
keyid:98:11:86:87:FD:D6:FF:80:FB:09:8A:9E:EE:F0:6D:E3:77:F8:5D:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mBGGh_3W_4D7CYqe7vBt43f4XW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/5908a9-0c0f-40ab-bfd6-69af0a6e989b/1/mBGGh_3W_4D7CYqe7vBt43f4XW4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/5908a9-0c0f-40ab-bfd6-69af0a6e989b/1/mBGGh_3W_4D7CYqe7vBt43f4XW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:d3:97:c7:00:e2:35:b1:f2:db:e1:fc:c1:71:fb:35:0f:74:
af:a2:6c:81:25:23:db:b2:41:c6:55:dc:f4:a3:9f:db:d9:f0:
38:bd:b6:9e:1c:f9:fc:51:39:15:17:ed:99:37:d6:95:4a:38:
42:32:f8:d8:42:e3:3c:99:01:a1:e4:db:47:48:8a:e2:df:6d:
49:c5:f6:f7:6c:6b:50:91:bf:66:d4:b7:60:38:37:fd:aa:68:
6c:b2:24:33:f2:08:38:eb:0e:8f:b2:bd:1d:eb:21:cf:95:a5:
7e:e2:18:c4:a6:8e:a6:55:9d:34:0d:55:e1:7a:8d:b6:50:5c:
a2:01:63:79:f8:bb:bc:6e:6a:bf:d8:7e:33:c8:33:e7:0b:bd:
5d:29:6a:16:54:20:02:29:32:d6:38:63:ba:96:6e:e3:6a:33:
2d:e6:b9:bc:70:62:06:73:d8:9b:df:6a:6a:b8:36:74:aa:1c:
ea:f2:87:83:8c:18:4f:3c:b3:46:a1:2e:03:1b:6b:ac:56:e0:
1f:8f:aa:f3:c2:de:a0:3e:9e:95:2e:3a:88:50:cf:85:4e:3d:
d3:22:6d:59:75:c7:5d:54:54:0a:4c:ba:f3:c3:14:3f:0c:67:
7e:94:2b:df:80:b8:39:38:58:72:02:be:99:36:87:a4:f3:a0:
04:ea:32:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOT9eF1xVQBD4LG0ls3cy6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4MTE4Njg3ZmRkNmZmODBmYjA5OGE5ZWVlZjA2ZGUzNzdm
ODVkNmUwHhcNMjUxMTA0MTAwMDQ2WhcNMjUxMTA1MTAwMDQ2WjAzMTEwLwYDVQQD
Eyg0NGM4Y2Q5OTU1MjFhMWRlYzRmZTRmZTYwYTc1MTc4YjhiNWI2ZDFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyqwjsSVie3HB0mXEg503wKJ/eURt
9Abg6GZRNBvoI7Ze530Fdw1hn5wHUD22Gcm4n/hKl9rMoI6O9C3WzdxIFpe/15ZQ
Yg5YCEzgNzAhjahxyQa6iGj+JtnoGWls2CK/JtHZFa3SpEux4cCngPyAKFwZMU4p
m+Uf8drXa1Oq1i54URasSYCNCIg1N4VpqgvwciLiIhQa0WTZumqTO+aJnEwZ0miz
SUQG7xMgwQMmAwqq+6t4Dv+M6bj8KGZrTp25LOSqcMKKRzbLe7E/3kwo8Sk5GDxI
0C0nDxv0hSdBA48yQYntLsjjnehuWQt3SFeLqZ53dBAQgxsh0NYUhFOZZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFETIzZlVIaHexP5P5gp1F4uLW20bMB8GA1UdIwQY
MBaAFJgRhof91v+A+wmKnu7wbeN3+F1uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUJHR2hfM1dfNEQ3Q1lxZTd2QnQ0M2Y0WFc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy81OTA4YTktMGMwZi00MGFiLWJmZDYt
NjlhZjBhNmU5ODliLzEvbUJHR2hfM1dfNEQ3Q1lxZTd2QnQ0M2Y0WFc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy81OTA4YTktMGMwZi00MGFiLWJmZDYtNjlhZjBhNmU5ODli
LzEvbUJHR2hfM1dfNEQ3Q1lxZTd2QnQ0M2Y0WFc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe9OXxwDi
NbHy2+H8wXH7NQ90r6JsgSUj27JBxlXc9KOf29nwOL22nhz5/FE5FRftmTfWlUo4
QjL42ELjPJkBoeTbR0iK4t9tScX292xrUJG/ZtS3YDg3/apobLIkM/IIOOsOj7K9
Heshz5WlfuIYxKaOplWdNA1V4XqNtlBcogFjefi7vG5qv9h+M8gz5wu9XSlqFlQg
Aiky1jhjupZu42ozLea5vHBiBnPYm99qarg2dKoc6vKHg4wYTzyzRqEuAxtrrFbg
H4+q88LeoD6elS46iFDPhU490yJtWXXHXVRUCky688MUPwxnfpQr34C4OThYcgK+
mTaHpPOgBOoylA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:22:25 2025 by rpki-client