Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/5a7e46-ce1b-4955-9f39-4b311326c230/1/mgNSX2jrayNfHeIrYLG67S_H_4M.mft
File: mgNSX2jrayNfHeIrYLG67S_H_4M.mft (raw, json)
Hash identifier: EB81a7WrRKRzeKk6IGfxqd/1ArmaLffe5eTaTgkKdqE=
Subject key identifier: 01:F9:B0:2D:0A:33:A7:2C:3C:E4:F6:AC:44:8F:5E:5B:D5:F4:21:CF
Authority key identifier: 9A:03:52:5F:68:EB:6B:23:5F:1D:E2:2B:60:B1:BA:ED:2F:C7:FF:83
Certificate issuer: /CN=9a03525f68eb6b235f1de22b60b1baed2fc7ff83
Certificate serial: 019A4F62422D39A4B99D2F11457C9524B981
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mgNSX2jrayNfHeIrYLG67S_H_4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/5a7e46-ce1b-4955-9f39-4b311326c230/1/mgNSX2jrayNfHeIrYLG67S_H_4M.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 15:00:30 +0000
Manifest this update: Tue 04 Nov 2025 15:00:30 +0000
Manifest next update: Wed 05 Nov 2025 15:00:30 +0000
Files and hashes: 1: mgNSX2jrayNfHeIrYLG67S_H_4M.crl (hash: awvPRlkLwg4BufBnZi7DvD/4ii4cxRketqNQCDnh3eQ=)
2: xV2TYyNPjWPupKmb43ad00Tt3n8.roa (hash: +ey9CZvGJrxa71wfksSgu55Jb8r1NMsse9tFxoel7Ig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/5a7e46-ce1b-4955-9f39-4b311326c230/1/mgNSX2jrayNfHeIrYLG67S_H_4M.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/5a7e46-ce1b-4955-9f39-4b311326c230/1/mgNSX2jrayNfHeIrYLG67S_H_4M.mft
rsync://rpki.ripe.net/repository/DEFAULT/mgNSX2jrayNfHeIrYLG67S_H_4M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:42:2d:39:a4:b9:9d:2f:11:45:7c:95:24:b9:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a03525f68eb6b235f1de22b60b1baed2fc7ff83
Validity
Not Before: Nov 4 15:00:30 2025 GMT
Not After : Nov 5 15:00:30 2025 GMT
Subject: CN=01f9b02d0a33a72c3ce4f6ac448f5e5bd5f421cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:89:27:d5:47:a4:7f:24:bd:9d:c8:e0:f4:8f:
92:12:3c:df:12:1a:8b:60:0a:d0:17:ca:1c:1f:7b:
54:aa:62:62:85:b8:b9:b0:9c:7a:b4:55:d6:c4:e6:
c2:81:10:07:8d:0f:e5:7d:08:07:a0:a7:3f:76:f2:
6e:75:dc:7f:2a:16:98:52:c6:5f:e2:11:24:57:0c:
f3:5d:64:32:f5:5b:5d:32:08:5f:ef:a9:10:26:1c:
ef:b9:07:d2:ba:a2:00:d3:4c:8f:4b:c1:ad:ec:ca:
d0:16:28:fa:5e:df:ad:c8:2e:7f:46:45:46:b6:95:
df:0a:d1:bb:b6:58:d4:19:22:c2:38:23:21:8f:e3:
61:7c:97:90:7b:2b:3d:d9:9f:01:37:ea:6a:ad:73:
f5:b3:a0:73:e0:7c:06:f3:38:c4:a3:cc:28:71:48:
b4:eb:e7:07:cc:64:d7:92:d3:a4:19:15:f7:64:ce:
de:d3:df:4e:5b:6d:3d:7c:a3:55:51:74:ae:6e:c8:
ca:e0:5f:78:9f:6f:4e:e5:c0:19:31:cb:ea:d4:f8:
bb:65:7b:db:c8:85:2e:8b:c8:f6:c1:10:ec:44:3e:
9f:cb:d2:6e:87:00:77:3e:44:5b:38:83:1f:51:67:
d8:24:64:7e:5f:c0:88:6a:da:a9:53:68:e2:96:69:
5a:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:F9:B0:2D:0A:33:A7:2C:3C:E4:F6:AC:44:8F:5E:5B:D5:F4:21:CF
X509v3 Authority Key Identifier:
keyid:9A:03:52:5F:68:EB:6B:23:5F:1D:E2:2B:60:B1:BA:ED:2F:C7:FF:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mgNSX2jrayNfHeIrYLG67S_H_4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/5a7e46-ce1b-4955-9f39-4b311326c230/1/mgNSX2jrayNfHeIrYLG67S_H_4M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/5a7e46-ce1b-4955-9f39-4b311326c230/1/mgNSX2jrayNfHeIrYLG67S_H_4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:f1:da:a3:ba:df:7b:41:a9:e9:27:bf:db:be:b0:90:72:6d:
c9:e0:53:d7:c6:3b:23:0f:48:b0:e7:64:7a:08:4d:f6:ad:db:
88:ba:b9:0c:74:67:7b:12:d7:96:a5:44:ca:36:d6:65:b7:31:
4a:e3:36:81:cd:31:47:34:e4:2e:75:08:9c:6e:38:63:cf:4b:
b3:fb:e3:25:97:bd:6c:54:67:93:52:85:9b:89:3c:f0:2b:04:
a1:8c:29:5a:fa:51:33:6c:a8:fc:1d:91:3b:73:a4:7e:d7:98:
ae:f7:a1:b1:31:ec:fb:8a:ae:20:f0:c8:14:c1:78:03:0f:8e:
57:f8:0a:00:8c:f6:bd:64:d9:e8:a4:55:47:7c:aa:c3:96:b3:
e9:c9:f3:a2:3f:4b:a6:17:15:79:bb:78:37:2d:65:30:a8:dd:
0a:ba:f6:62:2d:85:a5:b4:1e:5e:66:d4:f9:94:ed:c8:9e:4e:
4b:9a:e9:12:11:40:7d:fe:47:02:9f:6b:0f:f4:b0:c5:f7:50:
a9:c0:1d:70:29:a4:0a:c8:3a:83:b7:70:d4:ea:62:77:e0:49:
9d:e8:74:64:7b:18:aa:25:77:0b:0c:50:84:ab:3e:de:46:cb:
a6:ee:3f:49:77:43:18:5b:11:93:81:b4:9c:a5:81:34:84:77:
40:10:71:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPYkItOaS5nS8RRXyVJLmBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhMDM1MjVmNjhlYjZiMjM1ZjFkZTIyYjYwYjFiYWVkMmZj
N2ZmODMwHhcNMjUxMTA0MTUwMDMwWhcNMjUxMTA1MTUwMDMwWjAzMTEwLwYDVQQD
EygwMWY5YjAyZDBhMzNhNzJjM2NlNGY2YWM0NDhmNWU1YmQ1ZjQyMWNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuokn1UekfyS9ncjg9I+SEjzfEhqL
YArQF8ocH3tUqmJihbi5sJx6tFXWxObCgRAHjQ/lfQgHoKc/dvJuddx/KhaYUsZf
4hEkVwzzXWQy9VtdMghf76kQJhzvuQfSuqIA00yPS8Gt7MrQFij6Xt+tyC5/RkVG
tpXfCtG7tljUGSLCOCMhj+NhfJeQeys92Z8BN+pqrXP1s6Bz4HwG8zjEo8wocUi0
6+cHzGTXktOkGRX3ZM7e099OW209fKNVUXSubsjK4F94n29O5cAZMcvq1Pi7ZXvb
yIUui8j2wRDsRD6fy9JuhwB3PkRbOIMfUWfYJGR+X8CIatqpU2jilmlaOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAH5sC0KM6csPOT2rESPXlvV9CHPMB8GA1UdIwQY
MBaAFJoDUl9o62sjXx3iK2Cxuu0vx/+DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWdOU1gyanJheU5mSGVJcllMRzY3U19IXzRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy81YTdlNDYtY2UxYi00OTU1LTlmMzkt
NGIzMTEzMjZjMjMwLzEvbWdOU1gyanJheU5mSGVJcllMRzY3U19IXzRNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy81YTdlNDYtY2UxYi00OTU1LTlmMzktNGIzMTEzMjZjMjMw
LzEvbWdOU1gyanJheU5mSGVJcllMRzY3U19IXzRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoPHao7rf
e0Gp6Se/276wkHJtyeBT18Y7Iw9IsOdkeghN9q3biLq5DHRnexLXlqVEyjbWZbcx
SuM2gc0xRzTkLnUInG44Y89Ls/vjJZe9bFRnk1KFm4k88CsEoYwpWvpRM2yo/B2R
O3OkfteYrvehsTHs+4quIPDIFMF4Aw+OV/gKAIz2vWTZ6KRVR3yqw5az6cnzoj9L
phcVebt4Ny1lMKjdCrr2Yi2FpbQeXmbU+ZTtyJ5OS5rpEhFAff5HAp9rD/SwxfdQ
qcAdcCmkCsg6g7dw1Opid+BJneh0ZHsYqiV3CwxQhKs+3kbLpu4/SXdDGFsRk4G0
nKWBNIR3QBBxdg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 17:51:49 2025 by rpki-client