Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/7e4ea8-8950-4183-abc0-3382794049c2/1/MGtGjMMe86PQgayPArJx4xR1Wb8.mft
File: MGtGjMMe86PQgayPArJx4xR1Wb8.mft (raw, json)
Hash identifier: w5LWqsQGRte3y8KCEe98Z8XWrEzsmiccJE8P3BMjoHc=
Subject key identifier: BF:8D:83:20:E0:2B:5B:90:C2:47:EC:C3:A4:42:FF:F3:10:4F:76:71
Authority key identifier: 30:6B:46:8C:C3:1E:F3:A3:D0:81:AC:8F:02:B2:71:E3:14:75:59:BF
Certificate issuer: /CN=306b468cc31ef3a3d081ac8f02b271e3147559bf
Certificate serial: 019933B6E9C80A90055BE69A7554AFED402D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MGtGjMMe86PQgayPArJx4xR1Wb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/7e4ea8-8950-4183-abc0-3382794049c2/1/MGtGjMMe86PQgayPArJx4xR1Wb8.mft
Manifest number: 0B36
Signing time: Wed 10 Sep 2025 13:00:49 +0000
Manifest this update: Wed 10 Sep 2025 13:00:49 +0000
Manifest next update: Thu 11 Sep 2025 13:00:49 +0000
Files and hashes: 1: MGtGjMMe86PQgayPArJx4xR1Wb8.crl (hash: TylzUH3rHUXpdPPTW/ulOUi3bmFO1hsGcCsTvyBDzV0=)
2: zCf3OK6AbL-GLEVW2m2fiyVZR2o.roa (hash: T9wprypvgjd5UjKaL97Qh7s/fP7I922vE5XInqdd1G4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/7e4ea8-8950-4183-abc0-3382794049c2/1/MGtGjMMe86PQgayPArJx4xR1Wb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/7e4ea8-8950-4183-abc0-3382794049c2/1/MGtGjMMe86PQgayPArJx4xR1Wb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/MGtGjMMe86PQgayPArJx4xR1Wb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:b6:e9:c8:0a:90:05:5b:e6:9a:75:54:af:ed:40:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=306b468cc31ef3a3d081ac8f02b271e3147559bf
Validity
Not Before: Sep 10 13:00:49 2025 GMT
Not After : Sep 11 13:00:49 2025 GMT
Subject: CN=bf8d8320e02b5b90c247ecc3a442fff3104f7671
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:4d:b6:a8:8c:35:87:72:54:5c:44:74:68:b6:
bb:56:94:f7:6b:8d:1e:84:18:dc:0a:ea:b2:24:ce:
3c:73:69:25:8a:9e:82:cc:48:21:c0:3b:8a:d3:cd:
a8:d1:c3:b9:72:36:be:73:68:46:4f:ff:09:34:3a:
df:cc:45:65:0d:1c:5c:09:ca:c2:f6:73:cc:25:9a:
49:53:c4:2b:bf:1e:31:09:ae:d0:ac:42:c6:56:1f:
27:5f:be:3f:0b:b2:ed:77:b6:f9:88:b8:0f:78:60:
36:5c:c4:ad:a0:a1:64:ec:86:21:38:55:cc:51:a4:
e8:be:99:60:ca:69:1c:c1:b3:c3:49:a2:fe:8f:6e:
6b:cf:17:16:b0:b6:73:c2:1f:3f:a8:f5:44:e1:e5:
24:6c:a4:29:08:42:aa:08:ec:62:3e:ab:16:2c:62:
f6:54:76:59:9d:e0:aa:6d:07:35:15:83:55:b9:38:
c1:a7:84:99:eb:f5:10:68:83:38:97:22:14:e6:7f:
c5:0d:9b:9f:8d:4d:53:6a:d8:57:f7:ae:bc:19:32:
db:79:dd:08:b9:5f:22:85:d8:f7:cc:50:d3:92:0e:
46:90:fd:d0:ae:8d:fe:20:9d:16:1f:d6:14:f8:1a:
f2:aa:28:0e:e1:4c:fd:7c:2e:20:4b:14:e9:66:09:
a2:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:8D:83:20:E0:2B:5B:90:C2:47:EC:C3:A4:42:FF:F3:10:4F:76:71
X509v3 Authority Key Identifier:
keyid:30:6B:46:8C:C3:1E:F3:A3:D0:81:AC:8F:02:B2:71:E3:14:75:59:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGtGjMMe86PQgayPArJx4xR1Wb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7e4ea8-8950-4183-abc0-3382794049c2/1/MGtGjMMe86PQgayPArJx4xR1Wb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7e4ea8-8950-4183-abc0-3382794049c2/1/MGtGjMMe86PQgayPArJx4xR1Wb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:61:36:8c:b1:62:4a:18:9d:e6:2b:8a:e1:85:90:ed:99:47:
8b:67:14:2c:35:5d:ca:b4:1e:05:75:2f:18:66:0f:fd:a5:2d:
d3:72:fe:54:f8:1b:11:2b:25:94:0a:00:d7:b5:3a:d5:a5:21:
98:6e:a0:1f:f2:78:f0:bc:d9:1b:05:8f:6f:24:37:b0:87:5b:
37:07:46:fe:88:f8:96:f1:a3:78:03:dd:10:e6:7d:fe:0c:65:
d5:dd:4e:3c:90:61:39:21:21:f3:e9:74:58:16:f5:bd:f5:c2:
87:b9:bd:43:7d:62:d8:af:4e:59:ae:ad:1f:99:e5:a4:55:e3:
a3:21:a0:2d:3d:71:d9:b6:d1:60:d3:01:48:5b:1e:68:44:85:
87:af:4a:db:70:a2:b1:16:df:12:5c:ff:8d:3b:2a:de:e2:d8:
aa:4c:ef:7e:ce:bb:89:03:cc:1c:62:57:ed:a3:d9:fa:57:ab:
e9:40:55:71:50:15:ad:63:43:86:7c:bc:2a:1f:af:57:ef:f0:
2c:f6:41:1e:85:1b:c7:29:4f:68:5c:01:c4:7e:16:ff:2d:cc:
44:af:34:20:33:d3:89:77:4c:f9:01:a4:af:1c:1d:53:af:b5:
6a:32:b2:45:f5:6f:c6:6f:59:37:58:27:c2:31:24:c3:c1:5e:
ac:0d:66:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 21:11:52 2025 by rpki-client