Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.mft
File: Mgax0ge2XA69PyP6djABbYe0E0k.mft (raw, json)
Hash identifier: 4BwHvwGriCpW8JqxIL4/9NcqzwwceAVe/GdIqVgnSyo=
Subject key identifier: F9:34:5D:81:77:57:0F:AA:9E:F6:6C:FE:BA:33:A8:29:55:17:BB:E6
Authority key identifier: 32:06:B1:D2:07:B6:5C:0E:BD:3F:23:FA:76:30:01:6D:87:B4:13:49
Certificate issuer: /CN=3206b1d207b65c0ebd3f23fa7630016d87b41349
Certificate serial: 019A72935E95789EAC18BD58B87E09643BEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mgax0ge2XA69PyP6djABbYe0E0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.mft
Manifest number: 073E
Signing time: Tue 11 Nov 2025 11:00:51 +0000
Manifest this update: Tue 11 Nov 2025 11:00:51 +0000
Manifest next update: Wed 12 Nov 2025 11:00:51 +0000
Files and hashes: 1: M2KDR8dr7-7ZyhSIDyzwELKYUdM.roa (hash: p4F925/VSgNOhwfLh+ZxgpZFhtfFkVdXlw/7VfsIDVw=)
2: Mgax0ge2XA69PyP6djABbYe0E0k.crl (hash: GRmuSdIbDOIbn64iBJlbfZzVvOnya6bVOuB+FRbBuFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mgax0ge2XA69PyP6djABbYe0E0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:5e:95:78:9e:ac:18:bd:58:b8:7e:09:64:3b:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3206b1d207b65c0ebd3f23fa7630016d87b41349
Validity
Not Before: Nov 11 11:00:51 2025 GMT
Not After : Nov 12 11:00:51 2025 GMT
Subject: CN=f9345d8177570faa9ef66cfeba33a8295517bbe6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:fc:90:7f:84:4b:d1:5d:0d:5f:96:aa:6b:a3:
09:ba:96:77:b1:8c:e3:38:7a:35:14:3b:26:89:80:
80:56:09:45:b8:ea:c7:07:90:b0:bf:d4:26:cb:36:
37:c3:d4:44:d2:73:67:15:a1:01:17:10:67:6d:8a:
f7:48:3d:da:b6:0e:4d:6f:84:15:72:2c:7e:5d:79:
de:50:d4:9d:4c:12:dd:b9:e2:cd:10:8c:94:8c:9b:
08:3f:b7:30:44:7c:85:87:a5:8d:a4:4a:bd:cc:05:
45:ea:5b:52:3e:10:d4:16:9b:9b:87:9e:ab:27:4e:
ef:a2:53:8f:30:81:d0:f0:23:0b:49:d1:5e:d0:77:
5a:40:58:3c:aa:4e:17:6a:91:a6:53:8d:5d:27:ff:
39:24:4b:b5:f5:90:c5:0c:0e:94:b5:78:4e:87:f2:
77:cb:d6:94:a2:e6:f5:7c:92:d1:d2:72:c3:9c:4f:
4c:56:ce:c6:d0:54:21:fe:f1:06:e3:55:74:c7:5b:
08:1f:22:16:cb:bd:57:3a:03:c7:cc:25:4f:14:c8:
4d:77:f6:35:0b:e2:c6:bc:61:07:64:a9:1f:9f:c2:
37:c7:6a:0b:da:5b:18:bd:89:99:0a:42:46:2f:38:
17:71:ea:00:fc:d6:bf:15:f7:01:28:db:67:8a:d7:
37:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:34:5D:81:77:57:0F:AA:9E:F6:6C:FE:BA:33:A8:29:55:17:BB:E6
X509v3 Authority Key Identifier:
keyid:32:06:B1:D2:07:B6:5C:0E:BD:3F:23:FA:76:30:01:6D:87:B4:13:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mgax0ge2XA69PyP6djABbYe0E0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:ec:6d:29:d8:94:68:d2:3b:b0:37:e3:94:76:ec:b0:fe:7f:
64:9e:81:53:03:b5:ba:5f:3e:d7:c2:9f:d0:0e:f9:dc:28:1f:
06:cf:c9:8b:8c:63:93:00:56:a6:92:e6:d8:17:98:5f:ca:90:
d2:a4:68:c9:e0:ad:d4:04:28:82:bc:da:d8:fe:c3:de:97:d1:
f6:19:95:c7:18:61:3c:21:dc:20:26:94:42:70:c1:49:7f:a0:
ee:df:f5:b1:31:bc:17:28:02:ac:54:bf:3b:24:5f:f1:71:cd:
1d:f4:ff:86:8e:0a:78:47:35:c9:61:2f:37:f3:38:6f:bc:75:
1c:e5:d9:6e:bf:c7:14:ca:e9:3e:26:f9:d4:87:04:00:1d:21:
52:86:cc:32:ee:c6:0e:e7:45:44:a1:dd:4e:96:41:96:fc:c3:
1f:80:5f:c1:e2:b2:03:50:2c:f3:6b:32:5a:98:0e:af:b1:c1:
c7:85:73:79:49:c2:2d:dc:81:e9:55:39:d6:a5:ad:a9:74:8c:
99:00:7c:07:c0:02:86:b8:12:7f:cd:04:34:79:2c:ee:e4:27:
2f:a0:2d:8f:a3:71:cd:f2:67:be:04:80:20:af:a2:db:1c:42:
03:66:1c:ee:18:99:16:2c:62:15:e3:d3:97:c1:92:bb:ec:20:
1b:13:ac:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:36:50 2025 by rpki-client