Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/5908a9-0c0f-40ab-bfd6-69af0a6e989b/1/mBGGh_3W_4D7CYqe7vBt43f4XW4.mft
File: mBGGh_3W_4D7CYqe7vBt43f4XW4.mft (raw, json)
Hash identifier: N+gh851pdpVLxMHd+81ow82Jj9VQfR+3nMEw1QjJEJ0=
Subject key identifier: 71:B2:87:8E:CC:53:AF:F5:EB:B0:20:53:0A:1E:03:DC:9E:78:E5:37
Authority key identifier: 98:11:86:87:FD:D6:FF:80:FB:09:8A:9E:EE:F0:6D:E3:77:F8:5D:6E
Certificate issuer: /CN=98118687fdd6ff80fb098a9eeef06de377f85d6e
Certificate serial: 019A2B8CD771F92C4113A93594564EFDE410
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mBGGh_3W_4D7CYqe7vBt43f4XW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/5908a9-0c0f-40ab-bfd6-69af0a6e989b/1/mBGGh_3W_4D7CYqe7vBt43f4XW4.mft
Manifest number: 0C55
Signing time: Tue 28 Oct 2025 16:00:41 +0000
Manifest this update: Tue 28 Oct 2025 16:00:41 +0000
Manifest next update: Wed 29 Oct 2025 16:00:41 +0000
Files and hashes: 1: 1lsllJIGemqZ89xHiZQkdlO1fKw.roa (hash: z+LS30vNnG/3Pd/eJpUiR3agQpnmviOChE1etXIcdSc=)
2: 3lXi1_g77NKzjT3HhPoXoOvjf4w.roa (hash: Ay8Ub8kwHojvnn8g9zm4+05FafWEgsI4HELIX5EKY7A=)
3: mBGGh_3W_4D7CYqe7vBt43f4XW4.crl (hash: QpFjQcFBUyCK5m7KKihkRsk9U/3cnKYmijtqdPKPdP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/5908a9-0c0f-40ab-bfd6-69af0a6e989b/1/mBGGh_3W_4D7CYqe7vBt43f4XW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/5908a9-0c0f-40ab-bfd6-69af0a6e989b/1/mBGGh_3W_4D7CYqe7vBt43f4XW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/mBGGh_3W_4D7CYqe7vBt43f4XW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 14:12:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2b:8c:d7:71:f9:2c:41:13:a9:35:94:56:4e:fd:e4:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98118687fdd6ff80fb098a9eeef06de377f85d6e
Validity
Not Before: Oct 28 16:00:41 2025 GMT
Not After : Oct 29 16:00:41 2025 GMT
Subject: CN=71b2878ecc53aff5ebb020530a1e03dc9e78e537
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:dd:57:86:76:4a:aa:37:12:c3:ef:f8:91:3d:
0f:fd:15:45:ba:68:01:fb:8e:d7:f6:b1:f7:fc:60:
8f:fc:98:b1:37:a4:6f:49:45:1c:9e:05:ae:4a:61:
76:93:c3:e9:99:81:ed:fc:94:83:62:38:7a:ac:2e:
63:33:11:64:c7:8a:41:fa:25:f0:17:a7:5c:6b:58:
a3:02:3c:2f:f1:08:c5:c5:6c:69:4d:81:fe:15:ad:
c5:34:34:72:f5:92:4c:c0:37:2c:8f:90:0b:df:76:
ec:05:a0:a6:58:3a:92:78:62:07:01:9a:d9:ee:fb:
98:4c:f3:52:e6:ca:68:4c:90:bc:cd:a6:56:15:b3:
90:a9:bc:f2:9f:0d:4f:7a:e4:c1:17:5b:11:4f:32:
83:74:aa:fe:9e:3c:ff:2c:15:21:c0:84:61:ea:c7:
3f:12:ed:96:fb:9e:b0:ce:24:ee:eb:b6:c3:9f:52:
aa:23:dc:7d:6f:f6:6e:d8:62:99:0a:e2:bb:07:ff:
d2:f2:71:fa:48:b8:e6:2e:af:22:20:12:e1:37:a8:
64:10:11:fc:ae:7e:22:91:73:42:61:3a:6d:13:61:
84:02:47:0f:d5:39:8a:42:5c:a5:5c:8d:ed:b4:f4:
38:65:92:05:dc:fa:a6:24:9d:af:ae:d8:29:c1:d9:
db:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:B2:87:8E:CC:53:AF:F5:EB:B0:20:53:0A:1E:03:DC:9E:78:E5:37
X509v3 Authority Key Identifier:
keyid:98:11:86:87:FD:D6:FF:80:FB:09:8A:9E:EE:F0:6D:E3:77:F8:5D:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mBGGh_3W_4D7CYqe7vBt43f4XW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/5908a9-0c0f-40ab-bfd6-69af0a6e989b/1/mBGGh_3W_4D7CYqe7vBt43f4XW4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/5908a9-0c0f-40ab-bfd6-69af0a6e989b/1/mBGGh_3W_4D7CYqe7vBt43f4XW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:7e:13:06:7a:c0:e2:10:77:6b:4a:cb:c9:76:c9:72:31:b2:
9d:d1:8f:85:b1:25:09:8c:e6:9d:db:01:36:2c:27:46:4a:ad:
76:1d:97:3e:ac:b7:16:26:54:87:f3:ec:6d:d9:81:85:9c:57:
5e:5c:b0:f3:dd:76:7a:d6:6c:15:ca:9a:c0:0c:d6:1e:26:6c:
87:9b:09:e1:61:c3:9e:c9:57:21:3d:fa:ad:b2:a9:8f:54:20:
ef:d3:a8:31:a1:15:74:ed:f3:eb:8e:fc:b3:00:ca:a7:8f:00:
5e:b5:8a:de:79:6c:1a:33:01:85:18:3c:4a:8f:68:c5:0f:3d:
39:bd:ce:13:14:49:0b:38:b1:d6:6c:ab:93:32:39:e6:aa:e6:
13:6b:f1:03:eb:ff:c1:e0:6f:b5:59:42:0e:2f:af:de:7c:70:
34:a4:13:0a:59:e7:a1:88:72:2f:8c:f9:fe:78:1d:da:f4:3c:
39:60:c5:ec:2f:5b:dc:8a:30:92:78:8d:ee:33:2f:bf:8e:53:
b0:f1:5d:41:14:84:8b:38:8c:1f:64:a3:5f:bc:72:be:bc:9a:
2e:08:1c:d9:d6:91:8a:b2:f8:fe:8e:af:3c:5e:00:0e:a3:36:
69:b9:4e:aa:cc:01:bf:8b:e2:52:71:c9:98:c4:86:f9:39:f3:
4c:d7:32:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZorjNdx+SxBE6k1lFZO/eQQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4MTE4Njg3ZmRkNmZmODBmYjA5OGE5ZWVlZjA2ZGUzNzdm
ODVkNmUwHhcNMjUxMDI4MTYwMDQxWhcNMjUxMDI5MTYwMDQxWjAzMTEwLwYDVQQD
Eyg3MWIyODc4ZWNjNTNhZmY1ZWJiMDIwNTMwYTFlMDNkYzllNzhlNTM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs91XhnZKqjcSw+/4kT0P/RVFumgB
+47X9rH3/GCP/JixN6RvSUUcngWuSmF2k8PpmYHt/JSDYjh6rC5jMxFkx4pB+iXw
F6dca1ijAjwv8QjFxWxpTYH+Fa3FNDRy9ZJMwDcsj5AL33bsBaCmWDqSeGIHAZrZ
7vuYTPNS5spoTJC8zaZWFbOQqbzynw1PeuTBF1sRTzKDdKr+njz/LBUhwIRh6sc/
Eu2W+56wziTu67bDn1KqI9x9b/Zu2GKZCuK7B//S8nH6SLjmLq8iIBLhN6hkEBH8
rn4ikXNCYTptE2GEAkcP1TmKQlylXI3ttPQ4ZZIF3PqmJJ2vrtgpwdnbIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHGyh47MU6/167AgUwoeA9yeeOU3MB8GA1UdIwQY
MBaAFJgRhof91v+A+wmKnu7wbeN3+F1uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUJHR2hfM1dfNEQ3Q1lxZTd2QnQ0M2Y0WFc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy81OTA4YTktMGMwZi00MGFiLWJmZDYt
NjlhZjBhNmU5ODliLzEvbUJHR2hfM1dfNEQ3Q1lxZTd2QnQ0M2Y0WFc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy81OTA4YTktMGMwZi00MGFiLWJmZDYtNjlhZjBhNmU5ODli
LzEvbUJHR2hfM1dfNEQ3Q1lxZTd2QnQ0M2Y0WFc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXX4TBnrA
4hB3a0rLyXbJcjGyndGPhbElCYzmndsBNiwnRkqtdh2XPqy3FiZUh/PsbdmBhZxX
Xlyw8912etZsFcqawAzWHiZsh5sJ4WHDnslXIT36rbKpj1Qg79OoMaEVdO3z6478
swDKp48AXrWK3nlsGjMBhRg8So9oxQ89Ob3OExRJCzix1myrkzI55qrmE2vxA+v/
weBvtVlCDi+v3nxwNKQTClnnoYhyL4z5/ngd2vQ8OWDF7C9b3IowkniN7jMvv45T
sPFdQRSEiziMH2SjX7xyvryaLggc2daRirL4/o6vPF4ADqM2ablOqswBv4viUnHJ
mMSG+TnzTNcyhQ==
-----END CERTIFICATE-----
Generated at Tue Oct 28 21:10:28 2025 by rpki-client