Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/9b34b0-301a-41a2-b4c5-a8866aa95c71/1/MGatYcFi3wZQ7gq2DGgHWymiEcg.mft
File: MGatYcFi3wZQ7gq2DGgHWymiEcg.mft (raw, json)
Hash identifier: CYw4WqVy61/ZdI1Q5+PXCue1h44uuyFnFkCQ87mAmsc=
Subject key identifier: 3D:08:03:45:AA:D7:89:E7:00:9E:31:99:2B:01:58:13:B2:8B:66:B6
Authority key identifier: 30:66:AD:61:C1:62:DF:06:50:EE:0A:B6:0C:68:07:5B:29:A2:11:C8
Certificate issuer: /CN=3066ad61c162df0650ee0ab60c68075b29a211c8
Certificate serial: 019A2365548C6F007959EE64988BCBB056E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MGatYcFi3wZQ7gq2DGgHWymiEcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/9b34b0-301a-41a2-b4c5-a8866aa95c71/1/MGatYcFi3wZQ7gq2DGgHWymiEcg.mft
Manifest number: 16F8
Signing time: Mon 27 Oct 2025 02:00:34 +0000
Manifest this update: Mon 27 Oct 2025 02:00:34 +0000
Manifest next update: Tue 28 Oct 2025 02:00:34 +0000
Files and hashes: 1: MGatYcFi3wZQ7gq2DGgHWymiEcg.crl (hash: NXvFa+T42Z+d3cv3re1ps5c3+que6Ud/QNP6GePu8IQ=)
2: akH_-GUofRi3IR9WY9DWc-MBUHc.roa (hash: GH7ew6e0VLPyvTO+mxXZge5TTd6Djbt+GfnJ/q6zgIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/9b34b0-301a-41a2-b4c5-a8866aa95c71/1/MGatYcFi3wZQ7gq2DGgHWymiEcg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/9b34b0-301a-41a2-b4c5-a8866aa95c71/1/MGatYcFi3wZQ7gq2DGgHWymiEcg.mft
rsync://rpki.ripe.net/repository/DEFAULT/MGatYcFi3wZQ7gq2DGgHWymiEcg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:65:54:8c:6f:00:79:59:ee:64:98:8b:cb:b0:56:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3066ad61c162df0650ee0ab60c68075b29a211c8
Validity
Not Before: Oct 27 02:00:34 2025 GMT
Not After : Oct 28 02:00:34 2025 GMT
Subject: CN=3d080345aad789e7009e31992b015813b28b66b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:46:a9:af:50:91:70:c8:91:8d:1c:5b:f7:d1:
4f:14:81:40:4a:70:a1:80:68:04:c0:45:67:90:8e:
34:54:60:62:fa:6b:17:87:75:16:2a:e4:e3:78:91:
6b:32:6a:09:67:4d:53:b3:3b:98:1e:56:db:d3:ca:
6d:cc:69:8b:15:c7:da:a7:2d:cd:44:06:07:6a:77:
45:d1:07:b3:ff:03:b5:a8:1c:af:52:ce:68:1d:f7:
84:3b:80:81:1a:97:aa:26:33:2e:21:d8:10:81:45:
40:c1:8e:e5:d5:ea:90:65:6f:49:d3:04:6a:d1:f4:
e1:08:d5:ef:43:04:cd:ec:48:37:66:09:e5:59:1f:
01:46:f1:b9:f2:25:86:97:83:b1:30:ef:07:1f:71:
ce:f3:86:6a:e6:15:4f:54:72:44:3f:38:66:a9:97:
ac:7c:fa:10:16:74:d0:75:37:f6:5c:63:58:94:89:
ba:86:06:c4:ac:e8:54:a4:e5:56:42:16:67:28:d0:
92:ab:1f:85:da:25:cd:a7:03:fe:e5:6e:e0:c1:ef:
47:fe:5e:f6:f8:3d:24:f0:20:de:8f:c8:4d:7f:83:
46:28:72:48:59:42:69:0c:ed:2d:04:28:bb:f6:98:
ba:76:73:7b:20:da:ff:77:7d:d9:8c:03:51:ff:b9:
d4:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:08:03:45:AA:D7:89:E7:00:9E:31:99:2B:01:58:13:B2:8B:66:B6
X509v3 Authority Key Identifier:
keyid:30:66:AD:61:C1:62:DF:06:50:EE:0A:B6:0C:68:07:5B:29:A2:11:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGatYcFi3wZQ7gq2DGgHWymiEcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9b34b0-301a-41a2-b4c5-a8866aa95c71/1/MGatYcFi3wZQ7gq2DGgHWymiEcg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9b34b0-301a-41a2-b4c5-a8866aa95c71/1/MGatYcFi3wZQ7gq2DGgHWymiEcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:a4:fd:44:1a:36:2a:2d:31:e5:77:de:05:43:75:93:d9:0c:
4b:33:d9:2a:7f:76:0f:ae:0e:0f:8c:85:e3:87:2e:12:9c:ee:
4d:f3:a2:48:91:99:45:c8:fd:5e:69:73:4f:cb:5b:6c:4e:f2:
ef:69:43:58:2e:4f:e0:bd:97:39:67:1b:44:e1:3e:36:9e:cc:
ed:9d:92:c0:23:ae:ac:ce:0c:4d:c9:cb:11:48:3a:21:86:8b:
a9:73:c8:de:53:1e:7f:5d:62:0d:d9:6b:55:89:52:e3:5b:e6:
06:b9:fb:e0:70:15:09:90:5e:bf:53:ad:09:27:60:78:d9:ca:
3a:c0:56:a2:f0:18:6f:97:31:6e:71:f6:36:a7:a6:7e:bd:d3:
e2:85:20:5f:06:21:eb:07:f6:52:7d:bd:fb:1f:16:fa:12:57:
57:46:56:84:02:96:56:f0:95:d9:88:32:65:19:ff:46:90:1a:
fb:c1:cb:34:73:be:a1:09:5b:02:e4:06:66:c7:fb:c9:90:10:
05:6a:83:c8:95:c0:86:20:14:2f:3f:9b:24:6f:cf:ba:e0:65:
94:8e:f0:00:fd:74:44:20:53:72:a1:f7:ef:de:2b:fe:55:a4:
09:09:90:3e:47:0e:ba:b1:fb:34:2e:5e:0e:91:0c:81:70:ea:
7a:2a:4d:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZojZVSMbwB5We5kmIvLsFbiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwNjZhZDYxYzE2MmRmMDY1MGVlMGFiNjBjNjgwNzViMjlh
MjExYzgwHhcNMjUxMDI3MDIwMDM0WhcNMjUxMDI4MDIwMDM0WjAzMTEwLwYDVQQD
EygzZDA4MDM0NWFhZDc4OWU3MDA5ZTMxOTkyYjAxNTgxM2IyOGI2NmI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzUapr1CRcMiRjRxb99FPFIFASnCh
gGgEwEVnkI40VGBi+msXh3UWKuTjeJFrMmoJZ01TszuYHlbb08ptzGmLFcfapy3N
RAYHandF0Qez/wO1qByvUs5oHfeEO4CBGpeqJjMuIdgQgUVAwY7l1eqQZW9J0wRq
0fThCNXvQwTN7Eg3ZgnlWR8BRvG58iWGl4OxMO8HH3HO84Zq5hVPVHJEPzhmqZes
fPoQFnTQdTf2XGNYlIm6hgbErOhUpOVWQhZnKNCSqx+F2iXNpwP+5W7gwe9H/l72
+D0k8CDej8hNf4NGKHJIWUJpDO0tBCi79pi6dnN7INr/d33ZjANR/7nUpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD0IA0Wq14nnAJ4xmSsBWBOyi2a2MB8GA1UdIwQY
MBaAFDBmrWHBYt8GUO4KtgxoB1spohHIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUdhdFljRmkzd1pRN2dxMkRHZ0hXeW1pRWNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC85YjM0YjAtMzAxYS00MWEyLWI0YzUt
YTg4NjZhYTk1YzcxLzEvTUdhdFljRmkzd1pRN2dxMkRHZ0hXeW1pRWNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC85YjM0YjAtMzAxYS00MWEyLWI0YzUtYTg4NjZhYTk1Yzcx
LzEvTUdhdFljRmkzd1pRN2dxMkRHZ0hXeW1pRWNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjKT9RBo2
Ki0x5XfeBUN1k9kMSzPZKn92D64OD4yF44cuEpzuTfOiSJGZRcj9XmlzT8tbbE7y
72lDWC5P4L2XOWcbROE+Np7M7Z2SwCOurM4MTcnLEUg6IYaLqXPI3lMef11iDdlr
VYlS41vmBrn74HAVCZBev1OtCSdgeNnKOsBWovAYb5cxbnH2Nqemfr3T4oUgXwYh
6wf2Un29+x8W+hJXV0ZWhAKWVvCV2YgyZRn/RpAa+8HLNHO+oQlbAuQGZsf7yZAQ
BWqDyJXAhiAULz+bJG/PuuBllI7wAP10RCBTcqH3794r/lWkCQmQPkcOurH7NC5e
DpEMgXDqeipNbg==
-----END CERTIFICATE-----
Generated at Mon Oct 27 05:47:15 2025 by rpki-client