Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.mft
File: rMGajH8XQRRJx9SP-TCNJIMulSs.mft (raw, json)
Hash identifier: w/PkK5993WHY0/6hWHiDRqoNtX4HAF0Y/ofvuZIVSZg=
Subject key identifier: 56:75:D8:35:AB:E3:C7:CB:5C:6B:3B:DB:58:D6:61:5C:5A:41:3F:53
Authority key identifier: AC:C1:9A:8C:7F:17:41:14:49:C7:D4:8F:F9:30:8D:24:83:2E:95:2B
Certificate issuer: /CN=acc19a8c7f17411449c7d48ff9308d24832e952b
Certificate serial: 019A2289AD7517CDB24054E4AEE566173304
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rMGajH8XQRRJx9SP-TCNJIMulSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.mft
Manifest number: 16F7
Signing time: Sun 26 Oct 2025 22:00:39 +0000
Manifest this update: Sun 26 Oct 2025 22:00:39 +0000
Manifest next update: Mon 27 Oct 2025 22:00:39 +0000
Files and hashes: 1: Qwfm7iyTFcUFA4cP-BGJUr6nVGo.roa (hash: cGT3x4JJQpP+f+7JmlJEaoJ5r1uUvYJMBAOOSckaWRE=)
2: rMGajH8XQRRJx9SP-TCNJIMulSs.crl (hash: tOuqu+NEnKLzYs0cvADVHuZQllL0BcYwYl+EP2yD068=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.mft
rsync://rpki.ripe.net/repository/DEFAULT/rMGajH8XQRRJx9SP-TCNJIMulSs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:89:ad:75:17:cd:b2:40:54:e4:ae:e5:66:17:33:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acc19a8c7f17411449c7d48ff9308d24832e952b
Validity
Not Before: Oct 26 22:00:39 2025 GMT
Not After : Oct 27 22:00:39 2025 GMT
Subject: CN=5675d835abe3c7cb5c6b3bdb58d6615c5a413f53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:59:cf:a8:c4:10:f8:af:ab:1f:fe:3b:10:25:
20:1d:de:41:9b:9b:99:51:f5:ab:ac:2e:c5:7c:d2:
c9:50:03:fa:a2:63:a9:50:71:ad:3b:2b:81:0a:39:
31:28:8c:50:cb:db:df:86:99:e0:c7:68:fa:62:bd:
1b:30:f3:3d:7a:5f:8d:56:03:cc:4e:4d:d8:ef:0b:
4d:6c:48:a5:94:eb:42:c2:f3:71:6c:02:91:9e:51:
8a:2e:a9:4e:51:d3:ad:9e:c4:49:78:07:e7:f5:f2:
61:ce:b3:dd:04:b5:e3:d1:68:8e:8c:64:d8:33:66:
e1:7b:1f:f8:59:cd:9c:74:ff:e8:89:7d:00:8f:fc:
e6:85:1f:75:10:b0:2d:9b:03:00:a5:1e:89:c2:50:
14:15:7e:46:99:c4:b2:ef:d5:c3:9b:2a:a4:d2:32:
8f:c1:12:0a:5d:a3:df:ee:0e:a5:a4:9c:8f:87:51:
96:b4:f1:2f:b4:f3:5c:a6:cf:ad:7e:37:f0:2b:3d:
93:c4:9e:23:76:c9:a1:f8:7e:5b:9b:68:7f:c2:53:
74:c5:39:66:38:fe:10:29:55:15:61:e8:c7:e8:3b:
13:34:a1:55:01:4a:a7:6e:b3:b5:ca:50:17:91:72:
2a:fa:e8:5d:61:db:63:84:24:18:71:72:e9:58:11:
ea:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:75:D8:35:AB:E3:C7:CB:5C:6B:3B:DB:58:D6:61:5C:5A:41:3F:53
X509v3 Authority Key Identifier:
keyid:AC:C1:9A:8C:7F:17:41:14:49:C7:D4:8F:F9:30:8D:24:83:2E:95:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rMGajH8XQRRJx9SP-TCNJIMulSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:de:a7:b1:43:c7:08:4c:a9:3c:2f:45:33:0d:58:96:c3:fd:
13:1a:b1:33:e9:e8:41:26:f0:af:55:a6:98:06:b0:a0:e6:38:
41:85:df:14:c2:36:b9:84:45:db:22:d2:21:33:b4:e4:ed:c0:
3f:ed:bc:ea:bf:8d:a7:3b:cd:cd:a5:8f:3f:4d:9d:d2:29:cf:
58:d5:f3:fe:41:a6:90:0d:d1:70:ee:3d:31:5f:56:2b:d7:3c:
57:7b:54:f3:35:e1:20:6f:36:9b:4e:c9:cb:69:5c:08:96:09:
18:b6:e0:58:09:b3:72:7b:77:b7:8d:b1:44:da:41:fb:1c:82:
93:3b:82:42:e8:e9:24:44:33:10:2b:17:24:38:cf:38:df:88:
c4:56:b0:4f:94:22:71:18:a7:83:31:51:e2:73:3c:eb:7b:60:
3b:0d:6e:99:be:18:e8:ae:0a:9e:e2:4b:31:87:c9:68:e0:4d:
af:39:89:e4:02:7f:6a:68:fc:19:f8:02:ca:58:e5:9b:87:06:
16:c5:f6:66:6e:56:79:fc:d1:49:6d:7b:6a:36:80:c6:fe:86:
71:d4:e4:1f:03:f3:2b:00:24:7d:e0:85:f6:12:8e:1b:50:bf:
93:52:76:5e:a4:ea:fe:04:3a:71:07:7b:18:dc:0d:28:68:00:
93:f7:6a:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:37:21 2025 by rpki-client