Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/4cba2f-4a5b-4435-8aec-923cb50abe2e/1/MGm6frw7Zy3QnsA0Th-AqhEx79A.mft
File: MGm6frw7Zy3QnsA0Th-AqhEx79A.mft (raw, json)
Hash identifier: hZ+avgBXfKHkZNEhZ+gNA4wzCWG/8k1y0vjaYzWXrhY=
Subject key identifier: E6:A2:37:56:09:5B:17:19:A2:FB:CD:0D:13:87:7A:D0:B6:B3:78:9C
Authority key identifier: 30:69:BA:7E:BC:3B:67:2D:D0:9E:C0:34:4E:1F:80:AA:11:31:EF:D0
Certificate issuer: /CN=3069ba7ebc3b672dd09ec0344e1f80aa1131efd0
Certificate serial: 019A4C97ED51ACC467CDAEA80E9206A7396D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MGm6frw7Zy3QnsA0Th-AqhEx79A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/4cba2f-4a5b-4435-8aec-923cb50abe2e/1/MGm6frw7Zy3QnsA0Th-AqhEx79A.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 02:00:16 +0000
Manifest this update: Tue 04 Nov 2025 02:00:16 +0000
Manifest next update: Wed 05 Nov 2025 02:00:16 +0000
Files and hashes: 1: MGm6frw7Zy3QnsA0Th-AqhEx79A.crl (hash: /neZu9UlAk7LA/aiKRoV+65rEwA2pWkCj89DC2Xamw4=)
2: eqJAEOy6NaY4mZwa5RQJfzteBn0.roa (hash: 4ycDfdQF4RJy7Cm3II/1bQM7j6qQFueYRHKWr/2hsvQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/4cba2f-4a5b-4435-8aec-923cb50abe2e/1/MGm6frw7Zy3QnsA0Th-AqhEx79A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/4cba2f-4a5b-4435-8aec-923cb50abe2e/1/MGm6frw7Zy3QnsA0Th-AqhEx79A.mft
rsync://rpki.ripe.net/repository/DEFAULT/MGm6frw7Zy3QnsA0Th-AqhEx79A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 02:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:97:ed:51:ac:c4:67:cd:ae:a8:0e:92:06:a7:39:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3069ba7ebc3b672dd09ec0344e1f80aa1131efd0
Validity
Not Before: Nov 4 02:00:16 2025 GMT
Not After : Nov 5 02:00:16 2025 GMT
Subject: CN=e6a23756095b1719a2fbcd0d13877ad0b6b3789c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:3b:f7:b9:66:5e:13:c8:2e:0c:98:05:55:31:
94:cf:b6:93:c7:81:fb:ad:80:cf:b9:7f:b6:96:6e:
15:8e:72:96:80:ef:2f:66:3b:cd:59:b3:e8:98:3d:
00:53:04:06:85:f9:1e:ae:39:25:11:77:f6:37:c6:
32:0d:58:cb:b4:69:4a:c1:88:82:2f:f7:f6:bd:15:
9e:ef:90:73:67:33:4c:7a:fd:81:a2:83:32:15:e2:
bf:4b:c7:62:e8:7b:6d:85:61:03:03:ac:1d:2e:f0:
b8:de:be:b1:4a:73:02:fe:77:08:29:36:9d:e1:0b:
55:f1:66:6f:80:cc:f6:62:69:9d:ca:4c:08:76:d1:
de:73:3b:bc:70:2a:d2:94:63:cd:54:7c:6a:b3:e9:
6c:6a:f0:62:63:70:56:85:4c:e7:d2:80:5d:b5:19:
a7:29:56:17:92:7f:44:3f:d0:eb:64:04:3e:f5:c1:
02:f8:67:63:5d:66:df:a0:c6:9f:9f:9d:b4:cf:aa:
96:e2:18:20:9c:e0:65:3b:7c:c2:83:e3:10:eb:71:
47:82:03:d2:77:98:11:bb:40:30:f8:bf:0c:0d:e3:
55:af:3c:44:4d:cb:7f:1f:f6:aa:20:66:65:0d:bc:
89:2d:ed:c7:73:35:91:6d:0f:97:70:4b:fd:17:28:
1c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:A2:37:56:09:5B:17:19:A2:FB:CD:0D:13:87:7A:D0:B6:B3:78:9C
X509v3 Authority Key Identifier:
keyid:30:69:BA:7E:BC:3B:67:2D:D0:9E:C0:34:4E:1F:80:AA:11:31:EF:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGm6frw7Zy3QnsA0Th-AqhEx79A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4cba2f-4a5b-4435-8aec-923cb50abe2e/1/MGm6frw7Zy3QnsA0Th-AqhEx79A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4cba2f-4a5b-4435-8aec-923cb50abe2e/1/MGm6frw7Zy3QnsA0Th-AqhEx79A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:af:38:8e:c6:f2:92:8c:05:28:60:bc:c4:72:08:27:e8:7f:
3c:4a:c0:ee:26:c4:0c:1e:03:55:ca:48:6f:fe:8d:b1:8a:27:
bc:8c:aa:4a:22:70:fa:7c:d1:25:ec:a2:cd:ce:50:da:74:c7:
d4:3f:1e:7c:3b:31:09:be:8b:bd:94:99:53:84:5c:db:a2:fa:
ab:73:f5:fe:bc:e7:f6:b9:d3:06:c5:58:f5:54:b7:ec:38:9a:
4e:96:b9:01:08:1b:3b:43:3d:4e:c4:90:24:3f:38:3f:65:6a:
cf:04:2f:cb:e1:76:e8:ea:67:72:22:b2:88:57:4f:a1:8d:1e:
65:f7:ad:76:44:bb:63:89:e5:74:c0:a4:74:6a:2b:9f:1e:1c:
13:4f:3e:72:88:14:b8:76:b6:ba:bf:cf:fb:0b:e8:13:e2:5e:
d6:a6:dc:f5:4a:3c:76:86:81:f6:65:a4:10:47:f8:1a:7c:e1:
82:ac:db:2e:0c:b9:ce:bf:b6:86:84:ac:ca:d7:e3:f8:21:f5:
41:93:d6:04:5a:05:bb:a8:b2:dd:ae:a9:e6:c8:7a:ff:77:52:
ff:84:3f:06:5c:79:e8:c1:95:dc:25:9c:94:9c:c8:b6:7b:ce:
ad:0f:75:dc:0a:cf:11:74:ad:3c:3a:c4:63:da:38:bd:83:de:
c7:88:d0:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpMl+1RrMRnza6oDpIGpzltMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwNjliYTdlYmMzYjY3MmRkMDllYzAzNDRlMWY4MGFhMTEz
MWVmZDAwHhcNMjUxMTA0MDIwMDE2WhcNMjUxMTA1MDIwMDE2WjAzMTEwLwYDVQQD
EyhlNmEyMzc1NjA5NWIxNzE5YTJmYmNkMGQxMzg3N2FkMGI2YjM3ODljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwzv3uWZeE8guDJgFVTGUz7aTx4H7
rYDPuX+2lm4VjnKWgO8vZjvNWbPomD0AUwQGhfkerjklEXf2N8YyDVjLtGlKwYiC
L/f2vRWe75BzZzNMev2BooMyFeK/S8di6HtthWEDA6wdLvC43r6xSnMC/ncIKTad
4QtV8WZvgMz2YmmdykwIdtHeczu8cCrSlGPNVHxqs+lsavBiY3BWhUzn0oBdtRmn
KVYXkn9EP9DrZAQ+9cEC+GdjXWbfoMafn520z6qW4hggnOBlO3zCg+MQ63FHggPS
d5gRu0Aw+L8MDeNVrzxETct/H/aqIGZlDbyJLe3HczWRbQ+XcEv9Fygc7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOaiN1YJWxcZovvNDROHetC2s3icMB8GA1UdIwQY
MBaAFDBpun68O2ct0J7ANE4fgKoRMe/QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUdtNmZydzdaeTNRbnNBMFRoLUFxaEV4NzlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi80Y2JhMmYtNGE1Yi00NDM1LThhZWMt
OTIzY2I1MGFiZTJlLzEvTUdtNmZydzdaeTNRbnNBMFRoLUFxaEV4NzlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi80Y2JhMmYtNGE1Yi00NDM1LThhZWMtOTIzY2I1MGFiZTJl
LzEvTUdtNmZydzdaeTNRbnNBMFRoLUFxaEV4NzlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAia84jsby
kowFKGC8xHIIJ+h/PErA7ibEDB4DVcpIb/6NsYonvIyqSiJw+nzRJeyizc5Q2nTH
1D8efDsxCb6LvZSZU4Rc26L6q3P1/rzn9rnTBsVY9VS37DiaTpa5AQgbO0M9TsSQ
JD84P2VqzwQvy+F26OpnciKyiFdPoY0eZfetdkS7Y4nldMCkdGornx4cE08+cogU
uHa2ur/P+wvoE+Je1qbc9Uo8doaB9mWkEEf4GnzhgqzbLgy5zr+2hoSsytfj+CH1
QZPWBFoFu6iy3a6p5sh6/3dS/4Q/Blx56MGV3CWclJzItnvOrQ913ArPEXStPDrE
Y9o4vYPex4jQoA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 10:47:02 2025 by rpki-client