Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/9c27e4-d7b1-43c1-a38f-94914f5ddb3c/1/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.mft
File: Mgskp0Dy5hYyBQrcFGwe5qPmhsU.mft (raw, json)
Hash identifier: D3J1/7zRqSP8p062JCn+TbyDABGaSBBgJ9FmrytD6PI=
Subject key identifier: 4F:EC:C0:1A:BF:58:59:CD:B2:09:05:D9:EF:21:78:A7:94:3E:F7:6D
Authority key identifier: 32:0B:24:A7:40:F2:E6:16:32:05:0A:DC:14:6C:1E:E6:A3:E6:86:C5
Certificate issuer: /CN=320b24a740f2e61632050adc146c1ee6a3e686c5
Certificate serial: 0198499C6BD773BE90F88BB9602E54D450FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/9c27e4-d7b1-43c1-a38f-94914f5ddb3c/1/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.mft
Manifest number: 1603
Signing time: Sun 27 Jul 2025 02:00:44 +0000
Manifest this update: Sun 27 Jul 2025 02:00:44 +0000
Manifest next update: Mon 28 Jul 2025 02:00:44 +0000
Files and hashes: 1: L6UZeUjVK5OZ7-mZGSjtJGUXkeo.roa (hash: zQv0Jn9i8JzxV9AzBkluRvg9IIcuWJrvzIFoMGo/YiA=)
2: Mgskp0Dy5hYyBQrcFGwe5qPmhsU.crl (hash: cEBpTpU//4x5c1pvchmDVZ2y8rdKvRsUm4MlbSl39rQ=)
3: cE9MAqwQ5qMGLkrFZGC06olWNS8.roa (hash: qikuqaUY8ZBatuemuXHDbHFmATqYtKgaMBnCotzhBRQ=)
4: eNulQrWkb7XXGYDw1_7yfQtfyjU.roa (hash: wqv9AveypucRXaFrqiWm0EqnYUR4U6N703H9MjT8w5I=)
5: ebOku8xEI298KvY-nyvK9tWb6FA.roa (hash: a5+jxAr4ask6hZY3MKueRH2rWcR2j9Q7nIukLKzVuw0=)
6: nOavIXppWmDFhXdDEZ0V1cMIqeg.roa (hash: uLvOIw0+fU0FW9oyjgIp/2zVisu3plAWDz1d4aRwn60=)
7: s9a3pEKBSyjyYAsrYAxiAEP4mCU.roa (hash: 0FpwdS9NLp08wzi3cGdRZXNNnpCGm190316Q+yHGVNo=)
8: v2JqIJBq3wJphTAbwK0-g33RShA.roa (hash: i1c3+hUzjW7SLy+JaUh7BqmO9B9VdI9iEDnKvNZU/ks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/9c27e4-d7b1-43c1-a38f-94914f5ddb3c/1/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/9c27e4-d7b1-43c1-a38f-94914f5ddb3c/1/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:9c:6b:d7:73:be:90:f8:8b:b9:60:2e:54:d4:50:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=320b24a740f2e61632050adc146c1ee6a3e686c5
Validity
Not Before: Jul 27 02:00:44 2025 GMT
Not After : Jul 28 02:00:44 2025 GMT
Subject: CN=4fecc01abf5859cdb20905d9ef2178a7943ef76d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e1:88:d2:1a:6e:26:bf:83:be:a1:72:1c:6b:
8f:94:64:2f:e3:00:ef:ac:23:24:9e:d7:36:3f:0b:
ed:2e:cf:c4:b5:16:38:b5:c5:6f:56:e5:cd:89:4d:
42:8c:58:e1:74:70:ca:8a:ed:be:f3:51:62:63:7c:
29:23:22:1a:44:45:97:58:94:71:c3:e1:b9:08:c6:
b6:bf:f9:87:96:8f:aa:e8:00:34:e1:f7:01:dc:64:
d9:65:b7:bc:37:8f:76:12:27:35:60:ab:f0:fa:e8:
4c:73:2b:d8:f3:bb:39:f7:26:34:0d:6f:ca:dc:70:
8b:83:d6:5d:27:15:b6:59:92:41:1c:9c:48:36:36:
e7:e8:8a:67:ae:4d:e1:ad:aa:45:b7:f1:31:af:f1:
0f:ac:06:1e:1e:4f:b2:30:67:52:3d:b4:cb:d8:4a:
83:e8:c1:d0:56:da:56:e4:46:36:8b:f4:ed:08:d5:
42:9d:52:35:22:3d:26:3e:d2:09:e0:e7:c0:fd:53:
a1:04:95:63:2f:96:fa:fe:f2:b0:bc:17:ac:2f:3b:
b6:44:41:17:81:c4:64:75:61:4d:76:70:63:4d:23:
a5:7e:fa:4c:0c:3c:82:1a:53:8d:28:4e:83:0c:47:
ca:e2:d8:e5:d7:f5:15:8f:ea:17:ff:2c:93:9e:9d:
4c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:EC:C0:1A:BF:58:59:CD:B2:09:05:D9:EF:21:78:A7:94:3E:F7:6D
X509v3 Authority Key Identifier:
keyid:32:0B:24:A7:40:F2:E6:16:32:05:0A:DC:14:6C:1E:E6:A3:E6:86:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/9c27e4-d7b1-43c1-a38f-94914f5ddb3c/1/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/9c27e4-d7b1-43c1-a38f-94914f5ddb3c/1/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:ca:be:04:1d:03:03:f1:5b:29:fe:22:eb:31:b1:6f:ae:dd:
53:45:85:2c:fb:0f:76:f2:d6:3d:3e:2d:3b:72:f9:ab:a9:67:
83:c1:71:52:17:7f:6a:be:15:d2:37:98:2f:17:c8:c7:e5:2c:
29:a4:6b:ff:1c:7a:c3:09:f4:8d:cf:5f:5b:41:c7:9d:d3:74:
a6:66:b4:dc:49:81:49:66:5b:d1:e7:ef:c8:5c:41:36:80:50:
c3:ee:5b:af:3c:8e:50:00:cb:f8:92:e8:fa:2a:1b:ae:40:f5:
71:4a:8f:51:1e:63:67:75:dc:2b:83:98:5f:c1:81:b7:85:a3:
3e:93:48:60:ea:8d:7c:41:7c:ed:b9:d2:2a:4d:4e:61:74:79:
d0:e8:ad:a7:19:0f:76:e2:a1:88:19:78:a7:4e:eb:c2:91:15:
f2:24:5f:d9:de:0b:53:52:bf:47:05:e8:db:39:6e:e7:2f:29:
ec:83:50:17:6f:68:2a:78:c8:8a:74:70:73:26:ff:af:b4:d0:
6b:4b:89:1e:b4:26:d8:d5:78:75:a1:2e:c4:b1:2f:f9:cf:1e:
12:ef:68:8a:bd:71:65:92:44:58:f8:c2:ed:c0:4b:0a:30:ad:
ad:06:82:b2:5a:dd:d7:ae:a0:5f:67:e4:b4:ad:bb:35:e9:40:
53:4b:25:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJnGvXc76Q+Iu5YC5U1FD9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyMGIyNGE3NDBmMmU2MTYzMjA1MGFkYzE0NmMxZWU2YTNl
Njg2YzUwHhcNMjUwNzI3MDIwMDQ0WhcNMjUwNzI4MDIwMDQ0WjAzMTEwLwYDVQQD
Eyg0ZmVjYzAxYWJmNTg1OWNkYjIwOTA1ZDllZjIxNzhhNzk0M2VmNzZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzOGI0hpuJr+DvqFyHGuPlGQv4wDv
rCMkntc2PwvtLs/EtRY4tcVvVuXNiU1CjFjhdHDKiu2+81FiY3wpIyIaREWXWJRx
w+G5CMa2v/mHlo+q6AA04fcB3GTZZbe8N492Eic1YKvw+uhMcyvY87s59yY0DW/K
3HCLg9ZdJxW2WZJBHJxINjbn6Ipnrk3hrapFt/Exr/EPrAYeHk+yMGdSPbTL2EqD
6MHQVtpW5EY2i/TtCNVCnVI1Ij0mPtIJ4OfA/VOhBJVjL5b6/vKwvBesLzu2REEX
gcRkdWFNdnBjTSOlfvpMDDyCGlONKE6DDEfK4tjl1/UVj+oX/yyTnp1MuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE/swBq/WFnNsgkF2e8heKeUPvdtMB8GA1UdIwQY
MBaAFDILJKdA8uYWMgUK3BRsHuaj5obFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWdza3AwRHk1aFl5QlFyY0ZHd2U1cVBtaHNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy85YzI3ZTQtZDdiMS00M2MxLWEzOGYt
OTQ5MTRmNWRkYjNjLzEvTWdza3AwRHk1aFl5QlFyY0ZHd2U1cVBtaHNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy85YzI3ZTQtZDdiMS00M2MxLWEzOGYtOTQ5MTRmNWRkYjNj
LzEvTWdza3AwRHk1aFl5QlFyY0ZHd2U1cVBtaHNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMcq+BB0D
A/FbKf4i6zGxb67dU0WFLPsPdvLWPT4tO3L5q6lng8FxUhd/ar4V0jeYLxfIx+Us
KaRr/xx6wwn0jc9fW0HHndN0pma03EmBSWZb0efvyFxBNoBQw+5brzyOUADL+JLo
+iobrkD1cUqPUR5jZ3XcK4OYX8GBt4WjPpNIYOqNfEF87bnSKk1OYXR50OitpxkP
duKhiBl4p07rwpEV8iRf2d4LU1K/RwXo2zlu5y8p7INQF29oKnjIinRwcyb/r7TQ
a0uJHrQm2NV4daEuxLEv+c8eEu9oir1xZZJEWPjC7cBLCjCtrQaCslrd166gX2fk
tK27NelAU0slrg==
-----END CERTIFICATE-----
Generated at Sun Jul 27 07:12:18 2025 by rpki-client