Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.mft
File: MG1hg1W9iTf3W7RlC7XBr3D5oS4.mft (raw, json)
Hash identifier: cxTf5usHFq2pDTKBpLmeb+NtFKWtAyWe0d77tX4hcbU=
Subject key identifier: 28:00:DF:11:79:21:CF:55:EC:A9:26:30:CC:D8:D1:4F:83:2A:22:6D
Authority key identifier: 30:6D:61:83:55:BD:89:37:F7:5B:B4:65:0B:B5:C1:AF:70:F9:A1:2E
Certificate issuer: /CN=306d618355bd8937f75bb4650bb5c1af70f9a12e
Certificate serial: 019A1CBFB6D3F87E3FED609B43A9285372FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MG1hg1W9iTf3W7RlC7XBr3D5oS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.mft
Manifest number: 1291
Signing time: Sat 25 Oct 2025 19:01:57 +0000
Manifest this update: Sat 25 Oct 2025 19:01:57 +0000
Manifest next update: Sun 26 Oct 2025 19:01:57 +0000
Files and hashes: 1: 3jZVmIYXRpFGaUpKFxmxg6yk0v4.roa (hash: DxwsnC6ETAvm52TcakM8AMF0oIdLtUXLvOU8uNsDQAw=)
2: MG1hg1W9iTf3W7RlC7XBr3D5oS4.crl (hash: 71itf03WHslhJfPq9+/mcwfPTAx5Kisi/vjyV5EOqWA=)
3: OhFs8ELf0BkBqUqSta-UtJTxxOY.roa (hash: eORqJrZ4eHwt+ZtqWQMblZ7ybIDSjazTPoe3DTl1tC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/MG1hg1W9iTf3W7RlC7XBr3D5oS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 19:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1c:bf:b6:d3:f8:7e:3f:ed:60:9b:43:a9:28:53:72:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=306d618355bd8937f75bb4650bb5c1af70f9a12e
Validity
Not Before: Oct 25 19:01:57 2025 GMT
Not After : Oct 26 19:01:57 2025 GMT
Subject: CN=2800df117921cf55eca92630ccd8d14f832a226d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:84:c8:43:4d:61:4a:46:9c:91:4a:1a:4d:16:
67:4a:b1:62:2f:e7:a9:49:ac:12:20:2a:f0:1f:99:
63:12:17:6e:58:7f:a5:30:84:11:d3:ce:ae:9b:00:
fd:5f:0b:82:7c:96:de:a4:55:ab:03:9f:02:8f:1d:
ff:48:4a:8e:54:aa:49:ee:40:1e:b5:f6:33:2e:ee:
50:3f:4f:2c:03:51:88:28:39:2c:08:39:68:c1:1e:
92:5d:d1:14:b4:bb:47:df:1e:73:6b:ad:70:c4:84:
80:c9:70:b1:b7:7e:62:2c:0d:a4:4c:4e:75:65:cc:
7f:5d:7a:aa:87:82:79:8f:c9:2b:66:d7:89:d3:bf:
81:02:93:87:a2:81:4e:9d:39:bc:bf:5a:73:76:cd:
13:7b:82:de:6d:04:b2:9d:7c:41:1f:31:3e:1b:12:
82:62:7b:c6:28:50:62:87:6a:d7:71:59:e0:fd:38:
e6:78:68:f4:80:79:59:45:7c:38:e9:07:55:19:3a:
cf:87:c0:ec:dc:64:9c:8c:30:e8:b2:c4:db:51:0e:
33:6e:c3:74:86:fc:45:10:e5:f7:16:eb:39:ab:a7:
9f:93:ea:ba:dd:87:30:1b:56:d7:8c:9a:a1:f5:16:
20:69:2a:f9:9a:82:51:21:99:ba:d6:a5:66:f8:1d:
6f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:00:DF:11:79:21:CF:55:EC:A9:26:30:CC:D8:D1:4F:83:2A:22:6D
X509v3 Authority Key Identifier:
keyid:30:6D:61:83:55:BD:89:37:F7:5B:B4:65:0B:B5:C1:AF:70:F9:A1:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MG1hg1W9iTf3W7RlC7XBr3D5oS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:b3:23:1f:28:0c:90:7e:cd:1e:93:a2:a2:83:04:cf:b6:39:
f0:2c:81:7b:82:15:b0:35:e5:42:fe:ce:4f:13:c1:fb:9f:b0:
09:cc:3c:3a:56:50:67:db:ed:f9:ec:ae:ec:4c:ef:73:16:94:
4f:e6:57:78:21:d5:3f:53:c9:64:b9:38:ac:9e:12:5d:e6:29:
4c:ca:35:07:c8:8a:ec:87:19:50:08:45:46:2c:44:c8:26:0d:
54:c4:73:58:06:8c:be:8c:9c:c6:fd:45:2d:96:7f:c3:de:c1:
b4:2a:7e:23:ed:fd:72:86:32:e3:16:be:e6:3a:bc:7f:c6:62:
93:ae:72:f9:7a:27:3e:7e:04:6a:38:86:8c:bf:0e:aa:b8:3a:
fb:03:49:4f:15:48:15:df:ae:0f:5f:49:05:64:fc:88:e3:96:
cc:a4:21:d3:b1:21:ed:63:27:3a:aa:4a:b1:e6:e9:d0:57:d3:
8c:22:63:75:44:1a:7a:fc:80:33:e6:7a:b7:25:6a:b1:d7:48:
77:ff:97:bc:0b:cc:f9:aa:49:00:76:c8:a2:2f:78:20:eb:fe:
1c:4e:82:6c:83:d4:b0:93:7b:dc:54:26:95:d5:f1:5a:2f:07:
4a:dc:8f:d4:88:a7:67:16:03:f6:82:11:6b:72:e7:76:59:55:
b4:c9:43:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 03:14:57 2025 by rpki-client