Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/9c27e4-d7b1-43c1-a38f-94914f5ddb3c/1/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.mft
File: Mgskp0Dy5hYyBQrcFGwe5qPmhsU.mft (raw, json)
Hash identifier: N94V5+ulRXdk/ePUA/FugJABkf0uT4e7vWks7UkPLO0=
Subject key identifier: 2B:BD:1A:62:AA:09:03:AF:B6:33:FC:89:CE:64:D8:46:DD:BC:03:72
Authority key identifier: 32:0B:24:A7:40:F2:E6:16:32:05:0A:DC:14:6C:1E:E6:A3:E6:86:C5
Certificate issuer: /CN=320b24a740f2e61632050adc146c1ee6a3e686c5
Certificate serial: 019A718097715C21577728BFEFD0E185734B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/9c27e4-d7b1-43c1-a38f-94914f5ddb3c/1/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 06:00:43 +0000
Manifest this update: Tue 11 Nov 2025 06:00:43 +0000
Manifest next update: Wed 12 Nov 2025 06:00:43 +0000
Files and hashes: 1: L6UZeUjVK5OZ7-mZGSjtJGUXkeo.roa (hash: zQv0Jn9i8JzxV9AzBkluRvg9IIcuWJrvzIFoMGo/YiA=)
2: Mgskp0Dy5hYyBQrcFGwe5qPmhsU.crl (hash: gzrjpKtBRxgf3uV5pa5zReZC8rT9zvUOtSH28LDWAYw=)
3: cE9MAqwQ5qMGLkrFZGC06olWNS8.roa (hash: qikuqaUY8ZBatuemuXHDbHFmATqYtKgaMBnCotzhBRQ=)
4: eNulQrWkb7XXGYDw1_7yfQtfyjU.roa (hash: wqv9AveypucRXaFrqiWm0EqnYUR4U6N703H9MjT8w5I=)
5: ebOku8xEI298KvY-nyvK9tWb6FA.roa (hash: a5+jxAr4ask6hZY3MKueRH2rWcR2j9Q7nIukLKzVuw0=)
6: iDpQNT2zENvZBdlwmVa2eahg-4w.roa (hash: +pNICRMdPczLNv2a8Zb+PvZ8F7nTaRrJXFaN803DnT8=)
7: nOavIXppWmDFhXdDEZ0V1cMIqeg.roa (hash: uLvOIw0+fU0FW9oyjgIp/2zVisu3plAWDz1d4aRwn60=)
8: s9a3pEKBSyjyYAsrYAxiAEP4mCU.roa (hash: 0FpwdS9NLp08wzi3cGdRZXNNnpCGm190316Q+yHGVNo=)
9: v2JqIJBq3wJphTAbwK0-g33RShA.roa (hash: i1c3+hUzjW7SLy+JaUh7BqmO9B9VdI9iEDnKvNZU/ks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/9c27e4-d7b1-43c1-a38f-94914f5ddb3c/1/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/9c27e4-d7b1-43c1-a38f-94914f5ddb3c/1/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 06:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:80:97:71:5c:21:57:77:28:bf:ef:d0:e1:85:73:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=320b24a740f2e61632050adc146c1ee6a3e686c5
Validity
Not Before: Nov 11 06:00:43 2025 GMT
Not After : Nov 12 06:00:43 2025 GMT
Subject: CN=2bbd1a62aa0903afb633fc89ce64d846ddbc0372
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:00:e3:34:34:f3:3a:fe:1d:b6:42:3d:53:35:
89:14:8f:56:57:71:f4:e0:0f:b7:91:db:27:80:00:
1d:5b:e9:56:4d:11:7b:c2:50:ba:2d:16:4f:17:69:
ce:3a:ee:52:28:94:86:5f:19:b0:d2:83:64:71:ec:
8d:32:69:10:78:be:ca:64:98:b2:d6:bb:26:a2:73:
7d:7a:d2:15:51:4c:b5:34:a9:56:85:02:cb:21:40:
5d:04:43:fc:d7:12:a6:d0:16:2a:11:0f:39:63:95:
e1:50:bb:04:f6:9e:58:8d:82:9c:87:36:9f:e8:f8:
ac:df:59:06:58:6d:f8:29:d4:9f:cd:6a:ca:66:ee:
1b:f5:21:48:45:a3:f7:c0:b6:73:06:c9:3c:9b:ac:
03:bc:f9:ca:17:33:46:b0:19:fd:c2:27:8f:f2:06:
86:33:6f:fc:a2:cb:98:7c:f7:8b:f0:31:97:7c:a9:
f7:76:74:70:b5:71:ea:38:8b:10:1b:ad:75:f1:30:
1d:e3:dd:91:df:38:ea:fd:4d:4f:6f:d4:db:e2:f2:
d4:73:9c:66:1d:36:d9:ee:cf:ff:c9:fb:a8:09:66:
5e:a6:d3:e5:5b:1b:df:98:80:d7:8d:94:cb:c3:ac:
11:f2:4e:90:73:a5:d4:89:54:38:7a:15:9c:16:23:
b7:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:BD:1A:62:AA:09:03:AF:B6:33:FC:89:CE:64:D8:46:DD:BC:03:72
X509v3 Authority Key Identifier:
keyid:32:0B:24:A7:40:F2:E6:16:32:05:0A:DC:14:6C:1E:E6:A3:E6:86:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/9c27e4-d7b1-43c1-a38f-94914f5ddb3c/1/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/9c27e4-d7b1-43c1-a38f-94914f5ddb3c/1/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:2b:cc:e4:fd:78:e2:e8:76:58:d1:ad:fa:7b:37:47:26:e6:
10:4e:3d:cc:1c:81:e6:85:78:13:19:5b:f5:f1:25:cc:c2:c1:
f5:80:18:e3:1c:fc:15:42:32:1b:b9:99:6b:9b:b8:75:4f:35:
18:d8:f2:49:81:1d:88:c3:4d:dc:42:fc:c5:70:f0:27:65:89:
2d:32:ca:be:78:24:1a:cb:5c:6a:86:99:c8:e2:d9:91:ce:c1:
c3:4d:4b:7f:95:f1:72:c9:2a:d1:87:c9:76:ad:b0:bf:85:1c:
86:0c:58:60:ec:77:24:c3:66:d4:de:40:d9:d2:fb:9d:dc:1e:
e4:0a:03:b1:27:75:1f:8e:c8:37:a7:48:51:14:a9:80:19:f8:
2b:0a:cc:9c:b8:6d:7a:50:e8:84:9e:4c:bf:e9:85:73:bb:97:
eb:10:4b:a8:cb:65:5e:c1:8f:22:52:d5:da:fa:25:38:d4:83:
e8:70:46:03:01:81:4d:d8:15:c1:57:90:1a:4b:1f:91:80:62:
a7:98:e3:46:62:b7:02:3b:34:51:01:06:e7:7f:40:16:f1:77:
2a:cc:c5:f2:e6:40:e6:05:e1:38:4a:b8:70:76:e8:c3:d5:6b:
d4:ca:d0:1c:ed:25:17:87:17:4d:83:a8:89:ba:ce:be:4b:d2:
c0:25:20:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:03:42 2025 by rpki-client