Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.mft
File: rMGajH8XQRRJx9SP-TCNJIMulSs.mft (raw, json)
Hash identifier: NgOcNHf+xqV0KZj0m9H0A2G9urYQquPlfTWnL3IWjng=
Subject key identifier: C0:E0:E6:14:8F:2C:6F:3C:7B:4E:CF:31:FF:A9:18:92:23:4B:26:60
Authority key identifier: AC:C1:9A:8C:7F:17:41:14:49:C7:D4:8F:F9:30:8D:24:83:2E:95:2B
Certificate issuer: /CN=acc19a8c7f17411449c7d48ff9308d24832e952b
Certificate serial: 019A50E40049FE0328F4E7B4ECAC98F10D10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rMGajH8XQRRJx9SP-TCNJIMulSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 22:01:50 +0000
Manifest this update: Tue 04 Nov 2025 22:01:50 +0000
Manifest next update: Wed 05 Nov 2025 22:01:50 +0000
Files and hashes: 1: Qwfm7iyTFcUFA4cP-BGJUr6nVGo.roa (hash: cGT3x4JJQpP+f+7JmlJEaoJ5r1uUvYJMBAOOSckaWRE=)
2: rMGajH8XQRRJx9SP-TCNJIMulSs.crl (hash: lNCkIK55GU9hI74aRjaHOP0DbIkMu9Qbdx2cHkPhKRk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.mft
rsync://rpki.ripe.net/repository/DEFAULT/rMGajH8XQRRJx9SP-TCNJIMulSs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e4:00:49:fe:03:28:f4:e7:b4:ec:ac:98:f1:0d:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acc19a8c7f17411449c7d48ff9308d24832e952b
Validity
Not Before: Nov 4 22:01:50 2025 GMT
Not After : Nov 5 22:01:50 2025 GMT
Subject: CN=c0e0e6148f2c6f3c7b4ecf31ffa91892234b2660
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:e9:dd:34:17:a9:52:f6:7c:25:93:a3:15:3f:
47:dd:d5:46:13:3d:46:20:e3:5b:c5:30:52:6e:5a:
d4:f1:39:9b:94:c6:40:43:c7:8b:86:f8:0c:0b:6c:
57:68:97:7f:77:f3:a8:f2:30:ad:12:20:2d:76:6d:
6c:2e:36:f8:68:c5:eb:61:de:4b:f2:1d:08:72:67:
94:33:63:17:f8:eb:00:ac:4e:a8:44:30:d9:ad:f9:
5b:55:a9:0d:7b:c8:89:08:24:f9:bd:a2:08:9f:6d:
90:e7:8f:32:83:c3:f1:05:1e:19:66:62:00:9d:b6:
7a:d2:15:f8:59:5a:b2:28:f3:9d:4d:83:3f:8e:2d:
9c:b9:ae:31:3c:f8:1e:e3:85:65:0c:4c:f5:97:34:
aa:da:33:4a:dd:f4:fb:b6:55:2e:1e:e3:2a:99:c4:
e5:18:ae:d7:b2:e0:7f:2d:d6:dd:99:a1:24:48:d5:
59:b3:9a:b0:6a:af:24:50:fa:15:0b:8b:18:da:4a:
f8:63:83:7b:93:70:16:0d:b8:81:11:12:ef:08:21:
63:43:37:0c:0e:5e:e3:fb:b5:50:a1:3a:1c:25:09:
f2:ca:d2:1a:aa:a9:65:e1:33:05:21:8f:e2:46:68:
0d:9d:c8:14:d3:e0:b3:a6:96:85:6a:7b:18:5a:fc:
ac:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:E0:E6:14:8F:2C:6F:3C:7B:4E:CF:31:FF:A9:18:92:23:4B:26:60
X509v3 Authority Key Identifier:
keyid:AC:C1:9A:8C:7F:17:41:14:49:C7:D4:8F:F9:30:8D:24:83:2E:95:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rMGajH8XQRRJx9SP-TCNJIMulSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:0f:fc:61:24:b4:0c:aa:e6:2d:64:d4:6f:cf:95:28:e7:a2:
2e:47:98:e1:6d:89:92:c3:40:c0:d5:bf:59:15:4c:3e:52:a4:
f2:3e:90:fd:4b:cf:3e:bc:dd:ac:5b:bc:f1:9d:e5:bd:70:ef:
1b:a2:6c:cb:32:d5:e8:e8:08:dc:4e:c5:9a:17:d2:02:46:9e:
ab:32:1c:93:e2:11:0e:67:93:3b:b6:6c:ad:9b:2c:b8:cf:64:
4c:2d:70:fa:5e:bf:63:96:ea:4b:a4:dc:8e:4b:2a:49:6f:a0:
5a:d6:3f:e1:35:66:24:b5:6f:93:a3:f4:e9:6f:d4:f6:1d:c6:
32:bb:dd:c0:84:45:0a:fe:0e:d6:9e:88:ee:58:33:12:45:dd:
8b:75:d5:40:bc:80:e9:ef:57:5e:ff:76:f2:4e:92:d1:cd:cd:
a5:3b:7e:d4:97:78:81:aa:d5:d9:4a:ce:9f:6b:83:ba:2c:92:
88:ab:2e:1c:09:f0:0c:c9:b5:46:56:49:b7:3a:49:ba:11:2d:
56:fd:79:2d:4e:1f:8f:2f:05:10:29:a4:2d:05:95:c2:8e:0d:
37:cd:8c:6a:f7:19:ea:66:c9:50:fa:45:31:ed:02:56:f6:78:
29:1b:9a:99:0c:12:d1:06:19:04:22:f6:f6:0a:24:8c:37:f0:
2f:80:9e:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:18:54 2025 by rpki-client