Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/4cba2f-4a5b-4435-8aec-923cb50abe2e/1/MGm6frw7Zy3QnsA0Th-AqhEx79A.mft
File: MGm6frw7Zy3QnsA0Th-AqhEx79A.mft (raw, json)
Hash identifier: 6s7KmtMXaFkwlFYYgbH6mKfutQH0tt7wl/OCpz0o8/I=
Subject key identifier: 8C:00:E8:BA:F3:85:66:33:27:DD:9D:55:55:CC:DC:E1:D2:20:78:B0
Authority key identifier: 30:69:BA:7E:BC:3B:67:2D:D0:9E:C0:34:4E:1F:80:AA:11:31:EF:D0
Certificate issuer: /CN=3069ba7ebc3b672dd09ec0344e1f80aa1131efd0
Certificate serial: 019A7149CAF8B795C603FAEC8C54DEEE8290
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MGm6frw7Zy3QnsA0Th-AqhEx79A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/4cba2f-4a5b-4435-8aec-923cb50abe2e/1/MGm6frw7Zy3QnsA0Th-AqhEx79A.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 05:00:52 +0000
Manifest this update: Tue 11 Nov 2025 05:00:52 +0000
Manifest next update: Wed 12 Nov 2025 05:00:52 +0000
Files and hashes: 1: MGm6frw7Zy3QnsA0Th-AqhEx79A.crl (hash: pCyxEfMry5T/IpPYo80RxH5NnzWWGHaCjMDQ2pFQ0WY=)
2: eqJAEOy6NaY4mZwa5RQJfzteBn0.roa (hash: 4ycDfdQF4RJy7Cm3II/1bQM7j6qQFueYRHKWr/2hsvQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/4cba2f-4a5b-4435-8aec-923cb50abe2e/1/MGm6frw7Zy3QnsA0Th-AqhEx79A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/4cba2f-4a5b-4435-8aec-923cb50abe2e/1/MGm6frw7Zy3QnsA0Th-AqhEx79A.mft
rsync://rpki.ripe.net/repository/DEFAULT/MGm6frw7Zy3QnsA0Th-AqhEx79A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:ca:f8:b7:95:c6:03:fa:ec:8c:54:de:ee:82:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3069ba7ebc3b672dd09ec0344e1f80aa1131efd0
Validity
Not Before: Nov 11 05:00:52 2025 GMT
Not After : Nov 12 05:00:52 2025 GMT
Subject: CN=8c00e8baf385663327dd9d5555ccdce1d22078b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:97:4d:7e:2b:a9:7f:9d:11:38:48:f2:01:6c:
20:27:cc:15:d3:13:77:c7:18:5b:41:15:9f:4b:78:
c1:3e:e0:80:48:a2:55:03:6c:c5:bc:7e:c0:26:08:
9f:9b:32:62:f5:9b:96:00:82:90:68:30:f9:ff:52:
68:6a:b7:80:9a:b8:cf:99:10:7f:4e:64:85:c9:98:
34:37:04:1c:54:18:4c:cb:a0:a8:d9:c9:91:e9:79:
39:0d:6a:51:5b:c8:13:5e:d4:ed:5e:c8:0b:b1:18:
6f:78:5f:27:14:08:47:9c:c5:1c:a4:ae:ab:96:d9:
b7:49:64:52:e8:d9:1b:07:2f:ef:ce:bc:b9:54:e8:
0c:2c:aa:73:ca:19:21:3a:3e:62:d4:11:ab:09:2d:
7d:d4:e5:44:01:ac:0f:5e:19:2f:e2:da:7e:7a:16:
cb:48:78:08:94:b8:4a:a7:f8:1e:ad:a7:03:94:04:
5e:f6:82:24:f7:20:44:0e:c8:3b:d2:33:bb:d9:bc:
f0:c1:9e:4c:cc:1d:0b:ef:7e:f4:a6:4a:84:23:73:
50:92:53:f0:29:7a:cd:a3:ac:59:53:78:e0:28:1a:
be:be:92:d2:06:34:82:f9:3d:98:12:96:68:66:08:
5b:63:80:2d:cc:f9:b1:d4:b2:94:dd:c1:6e:f7:86:
ce:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:00:E8:BA:F3:85:66:33:27:DD:9D:55:55:CC:DC:E1:D2:20:78:B0
X509v3 Authority Key Identifier:
keyid:30:69:BA:7E:BC:3B:67:2D:D0:9E:C0:34:4E:1F:80:AA:11:31:EF:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGm6frw7Zy3QnsA0Th-AqhEx79A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4cba2f-4a5b-4435-8aec-923cb50abe2e/1/MGm6frw7Zy3QnsA0Th-AqhEx79A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4cba2f-4a5b-4435-8aec-923cb50abe2e/1/MGm6frw7Zy3QnsA0Th-AqhEx79A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:fc:dc:86:9f:22:95:b9:36:68:2e:3a:86:b2:ea:be:cc:0c:
a5:9e:6c:7b:29:34:a3:9b:1a:ad:64:a8:3f:2b:95:72:4c:36:
67:43:fd:73:72:38:cc:78:1b:1f:c3:d1:b3:b4:2c:37:92:4c:
3d:28:d4:7b:ca:33:25:4f:b1:ec:f4:a4:b4:bf:f6:d9:4c:b8:
60:60:1f:74:2c:05:a7:39:f9:78:1e:26:2f:df:24:79:2c:1a:
60:aa:11:6e:d9:79:48:12:b2:e8:86:f2:42:d8:65:a1:fb:24:
91:5a:c6:e1:5d:28:17:84:97:6d:ff:da:ea:a9:28:f4:fd:ba:
34:a9:79:4a:a7:ba:87:6e:99:5c:f1:a9:2c:6d:13:a9:c4:07:
f0:19:f6:44:2c:0c:f7:2a:e2:f0:a7:09:7a:35:c3:3e:b5:df:
c9:33:93:a9:a1:44:c0:f2:b7:84:f2:a4:6c:7f:bf:61:6f:e2:
88:af:d6:fa:e6:76:c6:b2:f6:ed:66:0d:6f:6f:b4:86:d7:b0:
55:64:59:52:d2:5e:be:24:ec:bd:fd:0b:a8:30:f2:c1:06:d3:
33:3f:4e:08:ba:7a:62:d1:da:28:b2:b2:ba:ed:17:75:ba:30:
8b:5a:d2:46:99:88:e4:31:9b:1c:8a:73:03:25:8c:65:f7:50:
25:c7:14:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:13:59 2025 by rpki-client