Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/232cfd-76dc-49e9-a94d-5188ea17d9a9/1/MGavc-_zrCH_F6CVL_Nw5gykS10.mft
File: MGavc-_zrCH_F6CVL_Nw5gykS10.mft (raw, json)
Hash identifier: fva0OQi5jIovTIgugHIhrENtes/tUKwbnZj7EOKRVq4=
Subject key identifier: 43:3A:72:BC:97:4D:6A:31:00:6A:92:39:CB:01:21:36:2E:3D:6A:CE
Authority key identifier: 30:66:AF:73:EF:F3:AC:21:FF:17:A0:95:2F:F3:70:E6:0C:A4:4B:5D
Certificate issuer: /CN=3066af73eff3ac21ff17a0952ff370e60ca44b5d
Certificate serial: 019A71B8E28F451675E953F186785C75AF86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MGavc-_zrCH_F6CVL_Nw5gykS10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/232cfd-76dc-49e9-a94d-5188ea17d9a9/1/MGavc-_zrCH_F6CVL_Nw5gykS10.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 07:02:13 +0000
Manifest this update: Tue 11 Nov 2025 07:02:13 +0000
Manifest next update: Wed 12 Nov 2025 07:02:13 +0000
Files and hashes: 1: MGavc-_zrCH_F6CVL_Nw5gykS10.crl (hash: d3BsXpcd/0Jjzo/6kwDuBkqjo+BTGLlcynFyubiXzVs=)
2: iic_3MWvnXwRjdS-4rnJnbVlZdw.roa (hash: ft3o3Jhs8krX+yoAKh9srXW+5Ly/fpaA/Ux+H2kgUMA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/232cfd-76dc-49e9-a94d-5188ea17d9a9/1/MGavc-_zrCH_F6CVL_Nw5gykS10.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/232cfd-76dc-49e9-a94d-5188ea17d9a9/1/MGavc-_zrCH_F6CVL_Nw5gykS10.mft
rsync://rpki.ripe.net/repository/DEFAULT/MGavc-_zrCH_F6CVL_Nw5gykS10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:e2:8f:45:16:75:e9:53:f1:86:78:5c:75:af:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3066af73eff3ac21ff17a0952ff370e60ca44b5d
Validity
Not Before: Nov 11 07:02:13 2025 GMT
Not After : Nov 12 07:02:13 2025 GMT
Subject: CN=433a72bc974d6a31006a9239cb0121362e3d6ace
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:39:45:4c:7d:65:3e:32:52:4b:de:9c:23:31:
a8:88:92:22:7a:d0:57:ab:2e:03:82:21:81:2b:bc:
65:9c:1f:cf:85:e9:8d:ea:36:2e:34:01:42:59:2f:
5f:06:cc:ca:1d:27:1c:fe:45:ca:15:cd:3e:b3:2e:
3d:e7:3b:96:fd:3b:ba:3b:1d:91:b8:f4:0e:76:dc:
3d:c1:bf:03:94:fd:c6:46:2a:3f:d5:1f:ee:60:a2:
bb:b9:ac:96:59:f3:df:11:09:91:3e:55:5c:ac:7d:
c4:c0:f7:32:b1:d2:7a:b0:23:e5:8a:d8:7b:69:85:
fc:17:f8:54:93:a1:1f:a8:da:34:13:5d:7e:a8:d5:
62:d8:4b:76:36:ff:e7:a0:8d:e6:01:c2:7f:93:77:
74:70:76:a4:b7:ef:19:3f:05:43:98:46:63:e7:c9:
5a:62:a7:59:0b:1c:19:76:cf:cc:44:c1:f0:83:48:
c7:b7:72:df:f0:f8:d0:d1:92:e1:7d:e4:59:34:86:
c1:3c:d7:29:ee:ee:be:4c:11:ef:f9:7a:57:e8:8e:
7c:28:a8:04:21:e8:bd:52:b2:cc:5e:35:9a:5e:3d:
dc:d2:d0:08:c4:8c:aa:6a:ce:17:d2:b1:93:4c:f2:
6e:16:33:8e:64:26:eb:fe:f3:29:04:d4:c8:7b:73:
8e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:3A:72:BC:97:4D:6A:31:00:6A:92:39:CB:01:21:36:2E:3D:6A:CE
X509v3 Authority Key Identifier:
keyid:30:66:AF:73:EF:F3:AC:21:FF:17:A0:95:2F:F3:70:E6:0C:A4:4B:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGavc-_zrCH_F6CVL_Nw5gykS10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/232cfd-76dc-49e9-a94d-5188ea17d9a9/1/MGavc-_zrCH_F6CVL_Nw5gykS10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/232cfd-76dc-49e9-a94d-5188ea17d9a9/1/MGavc-_zrCH_F6CVL_Nw5gykS10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:0e:7d:2b:48:79:6c:a5:4b:9b:98:ec:3b:a4:f2:df:1e:40:
62:97:2e:b8:52:0b:72:98:4a:f0:0b:50:89:9e:a7:74:6b:20:
eb:f9:91:f8:c6:10:db:04:00:af:44:e1:39:ab:01:87:fc:81:
40:3d:ed:c4:e3:47:01:51:52:14:e4:c7:a0:19:3c:2b:a7:e3:
c6:5c:b9:a4:6b:40:57:3b:8c:1d:ea:6f:e5:db:07:6e:13:9f:
65:30:42:5b:66:b5:30:20:75:68:f6:73:ce:24:7b:c0:f3:bd:
5b:00:a5:91:20:79:39:28:c6:42:cb:2d:7a:f1:aa:39:85:25:
7d:03:36:d6:d4:a2:21:9a:5a:3a:d9:e7:c9:b7:f5:2b:81:10:
2c:a5:29:a7:20:43:d8:ad:e3:91:50:cb:05:53:e2:4c:09:04:
c0:d8:a0:e5:71:9a:67:4b:68:2b:ec:fb:e2:73:22:e4:ad:52:
2b:da:3c:5d:6f:23:bb:9b:b5:69:f4:ef:18:34:57:19:b2:be:
86:0a:ed:9f:56:56:7a:6a:5d:45:e4:f2:a6:ea:32:30:90:74:
0d:e1:ed:df:8a:07:9b:6a:f6:62:de:11:02:ac:fa:e5:78:b9:
43:cd:07:72:e2:f2:55:ff:57:c9:34:df:36:8c:9e:75:af:0a:
fd:c7:9c:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:20:29 2025 by rpki-client