Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/5bf797-bc55-48c1-9e92-992825cd3214/1/MgTAPDbIBtaH6D6o0nIM7ru9w0M.mft
File: MgTAPDbIBtaH6D6o0nIM7ru9w0M.mft (raw, json)
Hash identifier: 6pkIJ2gpgov0FBs3MC+Pe3BYZuGGtXx+49UNIHmYqwE=
Subject key identifier: C7:CD:4A:AD:61:07:CC:42:0C:89:29:BE:95:A5:9B:D4:AC:A2:D8:2E
Authority key identifier: 32:04:C0:3C:36:C8:06:D6:87:E8:3E:A8:D2:72:0C:EE:BB:BD:C3:43
Certificate issuer: /CN=3204c03c36c806d687e83ea8d2720ceebbbdc343
Certificate serial: 019A71B86E16B141E5D28D3DC168EB865536
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MgTAPDbIBtaH6D6o0nIM7ru9w0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/5bf797-bc55-48c1-9e92-992825cd3214/1/MgTAPDbIBtaH6D6o0nIM7ru9w0M.mft
Manifest number: 0702
Signing time: Tue 11 Nov 2025 07:01:43 +0000
Manifest this update: Tue 11 Nov 2025 07:01:43 +0000
Manifest next update: Wed 12 Nov 2025 07:01:43 +0000
Files and hashes: 1: 4iEprq9S0niaPUM7nGF34QiTqwo.roa (hash: f7Epr5pWf6vu+WKqHqf6izv8485TY6ZobKvsLuSbPr4=)
2: MgTAPDbIBtaH6D6o0nIM7ru9w0M.crl (hash: efauz2IFzo7MGXg8jGtC9UzaSEuw+44c7xeG5c1O/7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/5bf797-bc55-48c1-9e92-992825cd3214/1/MgTAPDbIBtaH6D6o0nIM7ru9w0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/5bf797-bc55-48c1-9e92-992825cd3214/1/MgTAPDbIBtaH6D6o0nIM7ru9w0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/MgTAPDbIBtaH6D6o0nIM7ru9w0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:6e:16:b1:41:e5:d2:8d:3d:c1:68:eb:86:55:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3204c03c36c806d687e83ea8d2720ceebbbdc343
Validity
Not Before: Nov 11 07:01:43 2025 GMT
Not After : Nov 12 07:01:43 2025 GMT
Subject: CN=c7cd4aad6107cc420c8929be95a59bd4aca2d82e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:0d:9f:aa:58:65:97:5b:1b:53:d0:6e:fc:3a:
d8:8d:00:b7:d7:b2:d1:e0:49:bd:1b:22:14:44:28:
64:63:d7:b2:e5:cd:66:75:8e:73:99:23:60:ac:83:
be:9b:f7:27:57:72:01:17:75:d6:08:fe:c3:b7:a2:
3f:32:da:97:06:b6:57:3b:c2:c0:2b:86:0a:05:36:
5a:f7:99:e4:32:46:2b:53:f1:bf:86:cb:27:ae:54:
29:c3:29:df:d6:ed:e8:d4:0e:02:82:09:b3:79:05:
76:f1:70:a1:83:ca:fd:bc:05:95:55:02:19:65:82:
80:af:7a:7c:8a:cf:48:1a:1c:15:eb:81:dc:95:a4:
b5:36:ec:ea:a0:58:63:d5:37:72:91:02:e4:0c:d7:
bc:b0:08:17:47:1a:22:11:fa:ff:80:27:61:b3:54:
3c:8c:2d:0c:44:06:50:69:d2:71:8a:f8:d7:51:27:
cd:63:76:a1:a0:fb:43:80:4b:e7:1b:fa:da:85:d4:
79:79:d9:4c:0f:e4:1c:02:80:d6:7d:60:be:80:47:
8d:76:15:54:f1:37:0f:34:62:59:d5:55:98:f9:6b:
07:f5:28:f5:1f:39:ed:57:e4:fe:92:9f:49:86:01:
9e:ee:dd:53:06:ef:eb:af:ec:6d:70:4f:70:dc:43:
83:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:CD:4A:AD:61:07:CC:42:0C:89:29:BE:95:A5:9B:D4:AC:A2:D8:2E
X509v3 Authority Key Identifier:
keyid:32:04:C0:3C:36:C8:06:D6:87:E8:3E:A8:D2:72:0C:EE:BB:BD:C3:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MgTAPDbIBtaH6D6o0nIM7ru9w0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/5bf797-bc55-48c1-9e92-992825cd3214/1/MgTAPDbIBtaH6D6o0nIM7ru9w0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/5bf797-bc55-48c1-9e92-992825cd3214/1/MgTAPDbIBtaH6D6o0nIM7ru9w0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:36:f6:83:d3:f2:43:3d:d2:63:c7:01:18:a3:1a:40:6f:29:
d6:4e:67:d1:de:71:1f:ea:9d:b1:88:b7:04:38:86:92:85:a7:
da:89:a8:5c:9a:01:20:34:76:60:1a:ad:91:20:19:c4:dc:f7:
5e:63:6a:93:61:6c:0f:e0:b1:59:2c:7f:00:c0:a2:5f:b5:1b:
23:b2:00:eb:83:51:e1:e9:b5:a4:c2:a4:e1:6f:34:a0:f1:cc:
18:eb:04:ac:b2:ea:4c:fb:ce:f1:6e:5c:30:7f:48:38:9a:d3:
ff:02:aa:99:79:c7:2a:1d:7e:94:a9:b1:6c:2a:30:c4:e3:18:
a3:22:5a:ae:4e:80:6a:c6:41:f4:27:52:54:f9:77:f6:3a:57:
ce:bd:16:9b:20:b2:f8:43:e6:44:d8:fd:e3:1f:23:62:00:41:
9c:d3:ec:f9:ab:54:f2:05:18:87:09:4a:24:4d:ae:68:64:f1:
3a:b7:f0:ac:27:b4:25:86:6f:62:b3:f3:d1:94:f1:17:47:e4:
88:43:9e:8d:89:14:4f:9d:77:73:13:d3:8d:34:c0:e0:28:59:
82:c8:02:81:21:eb:2f:7f:90:7d:09:c8:e3:1e:65:61:d4:3c:
1b:1e:f5:23:74:5c:b3:de:67:b8:e3:1e:6c:8a:0a:5f:41:5d:
f0:52:15:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:53:32 2025 by rpki-client