
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.mft
File: mGihmSu4A33egdDIzcBpX87hfCc.mft (raw, json)
Hash identifier: mU5NVnMvLeNwEdtIJxhyJdwA+jnoRjbMTU6Z21zh5RM=
Subject key identifier: E5:FD:6A:F7:0D:FD:A2:DF:C7:12:CC:C6:ED:AA:46:25:BC:53:F1:29
Authority key identifier: 98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27
Certificate issuer: /CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
Certificate serial: 019A1CBECE10AC2400C84567F8CF5D88B354
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.mft
Manifest number: 10F7
Signing time: Sat 25 Oct 2025 19:00:57 +0000
Manifest this update: Sat 25 Oct 2025 19:00:57 +0000
Manifest next update: Sun 26 Oct 2025 19:00:57 +0000
Files and hashes: 1: 9_JhIw-bjUbjcsXjaRSJlNBXD-s.roa (hash: Hm59eKak2mRBLnGzAb7+vw2g+CNCplTmTg9aukFT0JE=)
2: Cm5DqrbsctqFvXQRRyRwNPG00IY.roa (hash: O06PA3Ks3knW3J57m8lSN/Hv9kQ6nHGAf+goTnk1j04=)
3: FPzxN2ymmUH78y5haV0PaZXdLVY.roa (hash: DdUQ7lpUro6lEFuSiN9fKQg9b9UllNMKrwO6ynxkjos=)
4: JPO6PlbO7T2lxOXw7VKbRM2Ge5Q.roa (hash: kV6T9GvL2JmIx9RKefMlHDbvnYr8DiGL3xFPvQ3Jx8U=)
5: JfmWtf32dZhRVwJQ1ZtKQrQQAfg.roa (hash: ucBbFh4z7Smi+4uRRA6FLN/GqDjNQS+yFNEoMPGwvug=)
6: VQJlRnI_FsEKIbEWGLyhLwP0NtM.roa (hash: onaEyOz4ocmnu3HOOu4gakiggdji6MdLGBGGPS11inY=)
7: ZBv1VZ75Z-edNoZRcvYjkb7NpN8.roa (hash: WTUxj+sidK096ykp4PAhTaXWq6bYZtjXmE5iUhcAutU=)
8: a0GKpzKa2l-eFBlKQIWeWorMYWE.roa (hash: ToDMarZPFqTg+Vik2NKe1VnAgzMIR0HHOC5Xh17RUK0=)
9: aEXJ-GLDzjyP60FhTQdWJ8Fvt7E.roa (hash: 0YpF7CPYi6PyoAg9TvQlat07FWQyIu8cHA137q7nQSc=)
10: bmd97yvzsY5Yo2HfnEE_aGsiLVw.roa (hash: rBbiHBTIds8AVFd6SWdPqBeLyfTxB+l6zirCVR5u1u4=)
11: mGihmSu4A33egdDIzcBpX87hfCc.crl (hash: fBQ7bPt+QoVxN0kZ4DmoE+oD6O2eO2PILq9rleWk3II=)
12: pygxQHbvGZKVLzuvUJnRE055Ymk.roa (hash: jTpMpBKEIx8o2FyniDrKdnhuTZAZvNKL8hZwfmfGnMs=)
13: qYL6kaPJ2b0Ev5p7Oziqiiv4qTc.roa (hash: WBI5DwkHHee0G2mSopIcnWotDs7K8/Lvby/GArK324A=)
14: vY3Y3etrniGVDWVqa-wGwlb4wOM.roa (hash: 3iBpAllkx0+u9qLlhBtBBscqzISkhr+UuWv9+CbK7ew=)
15: yQafrAusZTwTPZBFL3M0qrFQZ04.roa (hash: Bj+Dm5K+2i3MwGi4viuLKNvUn9KDeSK+/ogiA8Pwh18=)
16: zsat_Kz6NAhfzEasx4a9lQm7pnc.roa (hash: iKI5HEcwbfP2kx1h4h3ET7Ssp+IpbRLbrY2f8G6eDr4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 19:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1c:be:ce:10:ac:24:00:c8:45:67:f8:cf:5d:88:b3:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
Validity
Not Before: Oct 25 19:00:57 2025 GMT
Not After : Oct 26 19:00:57 2025 GMT
Subject: CN=e5fd6af70dfda2dfc712ccc6edaa4625bc53f129
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:18:11:16:11:17:27:5e:59:c9:c8:62:28:70:
ec:c5:92:96:4a:f1:ca:02:06:67:a3:6a:7a:9f:71:
a0:16:e5:1b:ad:c6:4e:b3:41:06:cc:1f:f9:a6:d6:
0a:a8:dc:a0:ca:fb:f3:d1:ac:f4:b1:08:a9:55:7c:
08:a5:7e:f4:11:6a:9c:80:35:72:ce:a5:be:37:77:
31:17:23:ac:03:ec:b9:b8:63:34:d6:53:64:71:ef:
43:b6:0a:7b:31:51:3e:d9:ad:07:13:67:69:fd:e4:
be:65:a6:0a:b2:25:a6:4b:4c:cf:0c:b7:22:52:cf:
2b:f8:ab:9a:12:e0:7f:e2:de:ee:cc:6d:37:e9:9a:
e6:8a:aa:45:4d:ed:32:88:06:a1:e4:3e:28:df:8d:
4f:fd:d9:f5:32:aa:bd:af:e4:39:e2:32:e2:f3:90:
88:17:f8:d1:e1:c8:ca:ed:53:88:48:67:c3:d3:48:
5b:14:1d:30:e6:cc:ba:d6:e5:52:ca:01:25:f6:47:
56:82:1d:71:d7:5b:82:41:2d:57:6f:78:89:1f:69:
d5:47:17:a6:fa:9a:84:dd:ba:8a:85:1d:c6:13:0c:
f6:80:57:e9:70:b4:28:37:bd:34:67:99:ce:1b:9b:
f6:74:13:24:af:ce:37:01:7e:55:61:46:d8:fc:b3:
8b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:FD:6A:F7:0D:FD:A2:DF:C7:12:CC:C6:ED:AA:46:25:BC:53:F1:29
X509v3 Authority Key Identifier:
keyid:98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:66:92:b8:2b:f5:3c:8f:68:19:6e:a2:ed:ea:aa:3e:7a:26:
ee:76:5b:96:61:61:9a:41:b9:2a:96:ff:6c:74:7b:43:c0:69:
03:bf:f5:91:ad:81:68:9c:b5:90:77:af:ee:9c:8d:b3:4f:35:
14:54:d6:35:00:b6:5d:f3:7c:de:44:1a:39:48:78:b7:e2:62:
9f:d4:f7:60:bf:0c:42:58:a1:e1:ba:0a:3f:45:0d:e8:8d:9e:
67:e7:6f:d4:ec:30:c9:60:66:d5:b0:4d:ee:99:05:ab:ca:5f:
11:cf:fa:03:71:d4:f7:a5:53:6d:fb:f7:8d:77:01:3f:58:c7:
05:0f:e5:0d:1c:7d:64:25:1a:68:90:9a:47:ce:51:6c:e0:42:
4b:c8:3e:2e:47:a9:be:5d:8d:d5:8d:fb:2d:b9:1b:2e:62:a4:
bb:c9:da:01:a6:30:87:51:93:f4:08:13:2b:d7:cd:9a:90:d1:
e3:87:13:fa:77:c8:b2:01:0d:b5:8d:59:76:86:a6:a1:f2:ba:
f6:7b:32:21:42:b7:19:43:65:54:ed:9b:11:1e:34:3d:e8:e0:
b4:3d:7d:e3:28:e4:11:04:8f:2b:a6:22:88:c6:45:d2:a8:72:
62:4b:c1:1e:1e:bb:f3:72:ad:45:ec:aa:c5:fb:d8:d3:b0:3b:
9b:2b:06:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 01:27:58 2025 by rpki-client