Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.mft
File: MG1hg1W9iTf3W7RlC7XBr3D5oS4.mft (raw, json)
Hash identifier: kvSMC7LjTvLfJVCrU3z1oiXRyWITsSAS8FV8Onng0ik=
Subject key identifier: 4E:96:47:5D:9E:81:C6:C2:93:C6:8E:C0:65:EE:EA:BA:D1:9B:8D:37
Authority key identifier: 30:6D:61:83:55:BD:89:37:F7:5B:B4:65:0B:B5:C1:AF:70:F9:A1:2E
Certificate issuer: /CN=306d618355bd8937f75bb4650bb5c1af70f9a12e
Certificate serial: 0199277DAF665DD23D38567C9195DBE19DE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MG1hg1W9iTf3W7RlC7XBr3D5oS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.mft
Manifest number: 1212
Signing time: Mon 08 Sep 2025 04:02:52 +0000
Manifest this update: Mon 08 Sep 2025 04:02:52 +0000
Manifest next update: Tue 09 Sep 2025 04:02:52 +0000
Files and hashes: 1: 3jZVmIYXRpFGaUpKFxmxg6yk0v4.roa (hash: DxwsnC6ETAvm52TcakM8AMF0oIdLtUXLvOU8uNsDQAw=)
2: MG1hg1W9iTf3W7RlC7XBr3D5oS4.crl (hash: X1rostN/1KJmEkPiKlEIza8BmH/41Fne/MaIbR939Lo=)
3: OhFs8ELf0BkBqUqSta-UtJTxxOY.roa (hash: eORqJrZ4eHwt+ZtqWQMblZ7ybIDSjazTPoe3DTl1tC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/MG1hg1W9iTf3W7RlC7XBr3D5oS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:27:7d:af:66:5d:d2:3d:38:56:7c:91:95:db:e1:9d:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=306d618355bd8937f75bb4650bb5c1af70f9a12e
Validity
Not Before: Sep 8 04:02:52 2025 GMT
Not After : Sep 9 04:02:52 2025 GMT
Subject: CN=4e96475d9e81c6c293c68ec065eeeabad19b8d37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:4a:17:26:d3:63:8c:c9:e3:09:c7:09:7d:5a:
ed:ce:5b:1f:90:a3:d8:b0:25:17:20:e5:83:30:5b:
48:97:bd:28:ea:95:c7:de:34:36:1f:4c:2f:fb:50:
82:12:23:0a:f3:0a:87:ea:1d:f7:03:04:29:ea:b7:
6f:8d:5c:2c:0f:1a:c1:1c:24:d6:27:dc:b7:b9:cf:
d0:4c:07:5f:df:10:1b:6a:9c:5b:98:b3:ac:a9:8a:
33:a4:fa:f3:2a:a0:bc:92:a4:af:d8:7d:d2:66:7c:
11:de:b6:a2:dd:66:2d:0a:04:ff:fe:6a:0a:90:bf:
a1:af:a8:12:c9:12:35:76:60:8b:0e:23:c9:51:b8:
50:bb:ff:84:0b:d3:77:83:49:fb:0f:cc:20:5e:96:
fb:f9:62:47:18:90:75:0a:75:71:69:e1:e0:b4:c8:
a6:c7:cb:89:03:0d:a9:79:24:82:26:27:96:dc:cb:
ac:22:cf:d4:76:ad:81:35:71:c7:ee:fb:f2:c4:c5:
dc:ce:dc:00:87:be:19:42:ae:f6:18:7d:3b:7b:fb:
af:17:59:f8:20:17:b2:f1:82:36:af:6d:90:c7:78:
e6:5f:19:ec:9b:ab:eb:f6:00:b3:25:4c:a1:66:dc:
ca:e8:31:fa:c9:b2:cc:4d:06:b2:a8:d9:dd:20:5b:
5e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:96:47:5D:9E:81:C6:C2:93:C6:8E:C0:65:EE:EA:BA:D1:9B:8D:37
X509v3 Authority Key Identifier:
keyid:30:6D:61:83:55:BD:89:37:F7:5B:B4:65:0B:B5:C1:AF:70:F9:A1:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MG1hg1W9iTf3W7RlC7XBr3D5oS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:43:78:9a:b8:d4:8a:ae:8f:c3:b6:8d:f1:61:c8:21:4a:a6:
4e:44:71:2f:c2:cf:cd:03:08:cf:6e:b8:b1:e8:47:d5:15:50:
60:51:6a:cf:45:21:80:74:9e:db:da:99:13:80:a0:47:a8:87:
a6:a0:39:ea:09:35:06:3a:04:b6:07:3f:d4:fe:a2:1d:4c:d1:
3b:3c:3b:4b:1d:2e:5b:cf:87:a0:ce:8d:96:1c:83:a6:cb:a0:
a4:60:9f:79:2a:d6:13:ce:4f:d3:63:64:87:cd:c6:21:a1:c7:
4a:6b:ff:dc:a6:a9:bb:5e:cf:7b:34:a6:b1:60:9a:eb:17:b4:
83:92:93:ab:07:84:b2:e8:39:13:51:cb:2f:1c:a0:c8:4a:b4:
7c:35:b2:58:01:63:12:e6:94:c4:a3:ad:ee:48:5d:ae:65:81:
aa:c5:96:25:13:6a:c5:1c:78:80:b7:3a:e9:83:27:99:18:bb:
c2:46:ec:d5:c3:de:3b:4e:c4:35:3e:fb:94:b1:26:13:bc:41:
e3:cc:5c:54:24:3d:77:60:57:0f:b2:30:2b:0c:dc:be:72:2e:
99:90:0e:af:5f:ab:fc:73:cb:00:67:0d:db:a2:56:da:6d:07:
41:44:2d:eb:5b:2f:ce:6d:8f:35:2d:c9:24:e1:09:7f:d7:af:
52:52:da:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 08:35:21 2025 by rpki-client