Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/7e4ea8-8950-4183-abc0-3382794049c2/1/MGtGjMMe86PQgayPArJx4xR1Wb8.mft
File: MGtGjMMe86PQgayPArJx4xR1Wb8.mft (raw, json)
Hash identifier: aQUVvr3guDPtzYUm+RGXXi+vdmI+/2D6kUJH6jeBwJ8=
Subject key identifier: EC:A6:19:19:F0:D7:B8:DA:D8:A0:98:34:85:E8:42:1B:D4:8E:20:1D
Authority key identifier: 30:6B:46:8C:C3:1E:F3:A3:D0:81:AC:8F:02:B2:71:E3:14:75:59:BF
Certificate issuer: /CN=306b468cc31ef3a3d081ac8f02b271e3147559bf
Certificate serial: 019A2EC45CE2DA1EB59BF0A5D767D1454C76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MGtGjMMe86PQgayPArJx4xR1Wb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/7e4ea8-8950-4183-abc0-3382794049c2/1/MGtGjMMe86PQgayPArJx4xR1Wb8.mft
Manifest number: 0BB8
Signing time: Wed 29 Oct 2025 07:00:11 +0000
Manifest this update: Wed 29 Oct 2025 07:00:11 +0000
Manifest next update: Thu 30 Oct 2025 07:00:11 +0000
Files and hashes: 1: MGtGjMMe86PQgayPArJx4xR1Wb8.crl (hash: tjHpktp7iLztWN79s4DpHmCaZPwcnipr5omKHJzsEQk=)
2: zCf3OK6AbL-GLEVW2m2fiyVZR2o.roa (hash: T9wprypvgjd5UjKaL97Qh7s/fP7I922vE5XInqdd1G4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/7e4ea8-8950-4183-abc0-3382794049c2/1/MGtGjMMe86PQgayPArJx4xR1Wb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/7e4ea8-8950-4183-abc0-3382794049c2/1/MGtGjMMe86PQgayPArJx4xR1Wb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/MGtGjMMe86PQgayPArJx4xR1Wb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Oct 2025 07:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2e:c4:5c:e2:da:1e:b5:9b:f0:a5:d7:67:d1:45:4c:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=306b468cc31ef3a3d081ac8f02b271e3147559bf
Validity
Not Before: Oct 29 07:00:11 2025 GMT
Not After : Oct 30 07:00:11 2025 GMT
Subject: CN=eca61919f0d7b8dad8a0983485e8421bd48e201d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:3e:04:e7:96:39:86:2c:6c:57:7b:eb:0e:c3:
f2:33:c1:77:d4:ac:c1:b4:d2:ea:dc:47:84:8e:da:
7d:bd:a7:fa:99:6c:7e:52:e5:13:c2:4f:7f:ab:80:
f0:06:7d:d2:48:1d:ef:cc:a0:8a:ae:7e:ba:26:c7:
65:3d:17:b9:63:4d:95:7b:3c:ed:dc:58:ea:a2:05:
6f:f4:99:b1:19:c3:16:94:4b:b4:ed:c3:d5:83:89:
f4:b3:36:68:25:1f:92:fb:3c:63:5f:22:0d:60:c8:
f7:f7:e7:09:78:78:d1:98:78:32:4b:bf:5f:c8:f4:
e1:52:a1:1e:93:36:63:0d:35:52:f5:16:27:9c:0b:
77:05:4b:56:b5:37:da:da:f6:12:04:74:d2:73:96:
43:18:64:ba:ab:57:cc:43:39:6d:6e:f6:04:ac:eb:
61:7e:fc:c7:08:68:27:0e:9b:ff:79:a6:4d:9f:dd:
2b:78:ad:79:05:c4:9b:8f:3c:be:ee:48:7f:39:88:
06:f6:e6:ca:11:71:68:98:d1:72:db:e7:bc:a4:86:
cd:9e:7b:c4:dd:77:c2:3f:9e:cf:95:79:1f:05:03:
f0:90:34:25:ff:dc:6a:dd:23:21:99:2a:95:c8:28:
d1:dd:fb:fa:a2:62:c1:b4:3c:97:e1:ed:75:b0:de:
f0:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:A6:19:19:F0:D7:B8:DA:D8:A0:98:34:85:E8:42:1B:D4:8E:20:1D
X509v3 Authority Key Identifier:
keyid:30:6B:46:8C:C3:1E:F3:A3:D0:81:AC:8F:02:B2:71:E3:14:75:59:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGtGjMMe86PQgayPArJx4xR1Wb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7e4ea8-8950-4183-abc0-3382794049c2/1/MGtGjMMe86PQgayPArJx4xR1Wb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7e4ea8-8950-4183-abc0-3382794049c2/1/MGtGjMMe86PQgayPArJx4xR1Wb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:e9:6a:29:88:fb:43:c1:31:c4:8f:27:90:43:97:57:18:e2:
80:80:0f:1b:ad:9f:7a:08:7c:55:c2:a3:b2:2f:44:76:40:15:
59:79:9a:9a:3c:27:31:50:dc:e2:21:78:d9:5c:35:65:4e:e2:
d7:67:c5:50:12:86:10:bd:e5:c5:b9:b5:41:97:d7:49:92:a9:
09:75:44:6d:bc:f7:3a:de:01:cf:8a:38:af:f9:ed:88:46:71:
7f:df:9a:a7:29:43:45:09:fa:9e:bf:bb:b8:c2:8d:71:b1:c0:
cd:24:9c:ef:16:44:63:24:8a:00:6b:87:1d:02:bd:2a:b1:33:
c3:c1:ea:b2:8d:6d:7f:0e:f8:aa:52:1b:da:17:eb:06:fb:29:
79:23:15:fd:7b:e3:a9:6e:d4:60:ff:1e:11:77:60:5e:d0:c0:
3c:dc:54:21:cb:cd:1f:1f:40:a0:33:0c:65:49:a8:41:13:73:
02:de:07:a8:fc:0f:93:49:11:7b:a4:39:1f:9d:32:a8:fa:7b:
c2:cf:5b:77:97:26:75:f4:53:ba:37:d8:27:95:a9:ae:75:30:
6c:35:ba:3b:52:9f:37:a1:c0:22:00:9d:f1:f7:a0:e2:2c:a5:
48:79:83:34:a1:f8:bf:46:99:56:76:87:6f:cb:a6:0a:78:d0:
0f:2f:26:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZouxFzi2h61m/Cl12fRRUx2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwNmI0NjhjYzMxZWYzYTNkMDgxYWM4ZjAyYjI3MWUzMTQ3
NTU5YmYwHhcNMjUxMDI5MDcwMDExWhcNMjUxMDMwMDcwMDExWjAzMTEwLwYDVQQD
EyhlY2E2MTkxOWYwZDdiOGRhZDhhMDk4MzQ4NWU4NDIxYmQ0OGUyMDFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzj4E55Y5hixsV3vrDsPyM8F31KzB
tNLq3EeEjtp9vaf6mWx+UuUTwk9/q4DwBn3SSB3vzKCKrn66JsdlPRe5Y02Vezzt
3FjqogVv9JmxGcMWlEu07cPVg4n0szZoJR+S+zxjXyINYMj39+cJeHjRmHgyS79f
yPThUqEekzZjDTVS9RYnnAt3BUtWtTfa2vYSBHTSc5ZDGGS6q1fMQzltbvYErOth
fvzHCGgnDpv/eaZNn90reK15BcSbjzy+7kh/OYgG9ubKEXFomNFy2+e8pIbNnnvE
3XfCP57PlXkfBQPwkDQl/9xq3SMhmSqVyCjR3fv6omLBtDyX4e11sN7wowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOymGRnw17ja2KCYNIXoQhvUjiAdMB8GA1UdIwQY
MBaAFDBrRozDHvOj0IGsjwKyceMUdVm/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUd0R2pNTWU4NlBRZ2F5UEFySng0eFIxV2I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC83ZTRlYTgtODk1MC00MTgzLWFiYzAt
MzM4Mjc5NDA0OWMyLzEvTUd0R2pNTWU4NlBRZ2F5UEFySng0eFIxV2I4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC83ZTRlYTgtODk1MC00MTgzLWFiYzAtMzM4Mjc5NDA0OWMy
LzEvTUd0R2pNTWU4NlBRZ2F5UEFySng0eFIxV2I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVelqKYj7
Q8ExxI8nkEOXVxjigIAPG62fegh8VcKjsi9EdkAVWXmamjwnMVDc4iF42Vw1ZU7i
12fFUBKGEL3lxbm1QZfXSZKpCXVEbbz3Ot4Bz4o4r/ntiEZxf9+apylDRQn6nr+7
uMKNcbHAzSSc7xZEYySKAGuHHQK9KrEzw8Hqso1tfw74qlIb2hfrBvspeSMV/Xvj
qW7UYP8eEXdgXtDAPNxUIcvNHx9AoDMMZUmoQRNzAt4HqPwPk0kRe6Q5H50yqPp7
ws9bd5cmdfRTujfYJ5WprnUwbDW6O1KfN6HAIgCd8feg4iylSHmDNKH4v0aZVnaH
b8umCnjQDy8mlw==
-----END CERTIFICATE-----
Generated at Wed Oct 29 12:44:11 2025 by rpki-client