Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/fb42e6-cc51-4d2b-8637-a243cbfaaef3/1/mGzlJJY15OKWTTdEk9zDeoddBTk.mft
File: mGzlJJY15OKWTTdEk9zDeoddBTk.mft (raw, json)
Hash identifier: zT9XbUJJW0jEnJ109EQJybNtNP2pFojnnC4E7+0tKd4=
Subject key identifier: A8:5E:10:2B:E9:E4:2E:2C:6D:1E:13:1D:2E:17:DF:E8:85:75:44:3E
Authority key identifier: 98:6C:E5:24:96:35:E4:E2:96:4D:37:44:93:DC:C3:7A:87:5D:05:39
Certificate issuer: /CN=986ce5249635e4e2964d374493dcc37a875d0539
Certificate serial: 019A2666A54FA14374503C61245933F18473
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGzlJJY15OKWTTdEk9zDeoddBTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/fb42e6-cc51-4d2b-8637-a243cbfaaef3/1/mGzlJJY15OKWTTdEk9zDeoddBTk.mft
Manifest number: 16F7
Signing time: Mon 27 Oct 2025 16:00:52 +0000
Manifest this update: Mon 27 Oct 2025 16:00:52 +0000
Manifest next update: Tue 28 Oct 2025 16:00:52 +0000
Files and hashes: 1: I46JWrJ0wkgqhhjcXFEe1Gwyho8.roa (hash: DdJIf3u90dazdq9CZo2Xm0G5puQXvhN9Fr/LhJUcUXI=)
2: mGzlJJY15OKWTTdEk9zDeoddBTk.crl (hash: nmnf+a7Ju6MM890AJjRHGPtcJYJmh/GV5u2pRst3zqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/fb42e6-cc51-4d2b-8637-a243cbfaaef3/1/mGzlJJY15OKWTTdEk9zDeoddBTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/fb42e6-cc51-4d2b-8637-a243cbfaaef3/1/mGzlJJY15OKWTTdEk9zDeoddBTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/mGzlJJY15OKWTTdEk9zDeoddBTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 15:57:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:26:66:a5:4f:a1:43:74:50:3c:61:24:59:33:f1:84:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=986ce5249635e4e2964d374493dcc37a875d0539
Validity
Not Before: Oct 27 16:00:52 2025 GMT
Not After : Oct 28 16:00:52 2025 GMT
Subject: CN=a85e102be9e42e2c6d1e131d2e17dfe88575443e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:41:80:46:10:82:fb:ee:95:75:a7:0d:9a:b2:
19:f2:6c:20:80:02:15:65:9e:22:c2:28:5a:3f:76:
b5:a2:9f:1e:68:c4:9c:8f:da:bb:41:ed:11:89:ae:
77:68:09:ff:d5:48:c5:82:82:c4:5f:b9:2a:ac:e8:
8f:1a:9b:aa:d8:c1:92:f2:a4:e4:71:6b:10:7c:04:
b1:f0:f0:87:59:04:be:e0:48:a7:f0:07:77:a8:41:
02:2b:20:e6:41:5d:ac:45:bd:77:5e:a8:c5:32:5f:
76:d4:43:b9:7a:b6:af:d4:b6:64:f5:9c:53:cb:a1:
31:8f:e3:1c:ac:cf:e6:61:33:4f:33:fc:9c:b3:4b:
fb:04:2c:c7:0c:4c:27:a8:29:ee:5b:da:45:fd:cf:
c1:76:6c:97:a5:e5:c0:4c:0c:09:46:47:6c:dc:52:
53:1d:ca:07:a9:f7:b4:85:4f:41:47:13:6a:5e:eb:
12:f2:4d:6b:41:36:92:61:c9:96:42:4a:24:49:e2:
0a:63:b5:f8:bd:ee:e3:0d:b3:5e:d8:03:e8:27:34:
f1:d0:2b:14:77:e4:43:71:dd:b3:3b:10:72:93:77:
d6:1f:b8:93:b1:ec:5f:32:61:25:46:0f:a5:e8:5d:
21:68:4a:85:03:0d:b6:fa:8b:8f:c2:52:34:a6:69:
7e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:5E:10:2B:E9:E4:2E:2C:6D:1E:13:1D:2E:17:DF:E8:85:75:44:3E
X509v3 Authority Key Identifier:
keyid:98:6C:E5:24:96:35:E4:E2:96:4D:37:44:93:DC:C3:7A:87:5D:05:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGzlJJY15OKWTTdEk9zDeoddBTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/fb42e6-cc51-4d2b-8637-a243cbfaaef3/1/mGzlJJY15OKWTTdEk9zDeoddBTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/fb42e6-cc51-4d2b-8637-a243cbfaaef3/1/mGzlJJY15OKWTTdEk9zDeoddBTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:a2:84:39:84:54:7d:a1:15:e4:57:3d:36:b8:73:ac:c9:05:
70:a9:2b:49:c3:db:49:d8:e6:19:b2:b4:ce:2e:42:d6:01:1b:
74:0b:48:71:fe:07:1e:c8:6d:ed:a2:f5:d7:9c:e1:ca:f0:fa:
43:ef:61:46:bc:a8:57:cc:33:98:a5:4d:6e:67:d8:2a:4e:f3:
44:fb:71:cc:82:26:1b:9c:da:a1:a6:fe:e7:60:d9:9f:69:7b:
0d:d6:17:f0:1d:78:f9:3a:12:41:61:0f:d6:d4:4f:d6:e7:d5:
b6:b4:ef:57:cb:f9:ed:6b:8d:94:f1:5d:08:eb:4a:16:c5:0a:
ce:1d:4d:ac:d6:3b:71:f2:75:c8:69:3f:cb:83:ec:a9:b3:29:
47:e7:93:93:24:66:9b:5c:d5:8e:f5:b4:a7:d3:e5:3b:00:75:
dc:f0:a7:a8:6c:6c:e5:98:02:97:25:68:2f:81:6b:4e:11:da:
1c:fc:1f:6a:97:73:68:5c:57:38:10:da:5c:4e:67:69:43:78:
04:41:4f:79:67:3f:9a:64:77:fb:df:eb:0a:61:e1:f1:06:8b:
a6:7e:8f:5a:31:fb:3b:c1:50:dd:33:56:9b:48:39:d6:45:72:
8b:86:be:b4:66:b3:73:90:47:fb:c7:59:82:82:93:ae:ef:82:
0f:2c:82:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 18:20:09 2025 by rpki-client