Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/5a7e46-ce1b-4955-9f39-4b311326c230/1/mgNSX2jrayNfHeIrYLG67S_H_4M.mft
File: mgNSX2jrayNfHeIrYLG67S_H_4M.mft (raw, json)
Hash identifier: VlWOOZI5p6EaAZls5Ujd3ZsA0RojGgxMlMdQFAeuPZY=
Subject key identifier: 51:17:59:AD:CE:C6:A5:E9:75:6F:5E:08:67:E3:07:E4:73:92:2B:B8
Authority key identifier: 9A:03:52:5F:68:EB:6B:23:5F:1D:E2:2B:60:B1:BA:ED:2F:C7:FF:83
Certificate issuer: /CN=9a03525f68eb6b235f1de22b60b1baed2fc7ff83
Certificate serial: 0199240D1B9D948C28630474AC15BB591B1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mgNSX2jrayNfHeIrYLG67S_H_4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/5a7e46-ce1b-4955-9f39-4b311326c230/1/mgNSX2jrayNfHeIrYLG67S_H_4M.mft
Manifest number: 1670
Signing time: Sun 07 Sep 2025 12:01:02 +0000
Manifest this update: Sun 07 Sep 2025 12:01:02 +0000
Manifest next update: Mon 08 Sep 2025 12:01:02 +0000
Files and hashes: 1: mgNSX2jrayNfHeIrYLG67S_H_4M.crl (hash: b2jj6S9dMOcgsv9ErCL6bXPzmPKOPWZabXCuSpOUvrY=)
2: xV2TYyNPjWPupKmb43ad00Tt3n8.roa (hash: +ey9CZvGJrxa71wfksSgu55Jb8r1NMsse9tFxoel7Ig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/5a7e46-ce1b-4955-9f39-4b311326c230/1/mgNSX2jrayNfHeIrYLG67S_H_4M.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/5a7e46-ce1b-4955-9f39-4b311326c230/1/mgNSX2jrayNfHeIrYLG67S_H_4M.mft
rsync://rpki.ripe.net/repository/DEFAULT/mgNSX2jrayNfHeIrYLG67S_H_4M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:24:0d:1b:9d:94:8c:28:63:04:74:ac:15:bb:59:1b:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a03525f68eb6b235f1de22b60b1baed2fc7ff83
Validity
Not Before: Sep 7 12:01:02 2025 GMT
Not After : Sep 8 12:01:02 2025 GMT
Subject: CN=511759adcec6a5e9756f5e0867e307e473922bb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:2d:05:d4:86:e8:d1:a2:30:74:8a:d0:c0:51:
ae:59:5e:47:c9:04:83:0e:2f:ac:9c:ff:df:95:78:
81:0f:c5:c5:af:ce:8c:35:96:89:63:c9:93:7a:46:
b0:f6:41:09:bf:0a:fb:64:b1:d3:9c:0b:d6:0d:e6:
75:2c:f9:2d:ee:97:58:46:78:af:43:d8:1d:29:c0:
6c:7e:26:7a:3d:3f:f5:d5:2c:99:d3:81:5f:0b:81:
e2:61:30:92:25:ce:54:41:56:06:b1:99:7b:8c:a1:
4c:8f:11:46:ea:d1:ed:72:fc:13:a7:8b:04:42:b0:
75:c2:6b:c1:41:d1:5d:95:82:ff:b6:d0:43:57:02:
f5:b6:1b:a3:2b:e0:d4:07:cd:a8:6d:0f:f3:40:ad:
db:10:9e:20:39:dc:fe:67:61:96:c6:16:9e:0e:b1:
32:11:a2:2c:c6:78:d8:d1:74:2c:ee:28:18:22:50:
48:2b:f9:66:ce:69:11:b4:22:93:27:51:13:75:79:
fd:e9:98:55:88:37:79:fb:f7:7a:8d:78:83:2d:97:
82:42:8d:36:a6:90:e2:95:bb:20:68:f8:d1:d4:fd:
f4:43:1d:62:3e:f5:2e:58:61:01:ed:d4:5f:31:fa:
bd:0e:ce:39:81:7f:55:62:a1:8c:69:28:d5:e3:1f:
f5:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:17:59:AD:CE:C6:A5:E9:75:6F:5E:08:67:E3:07:E4:73:92:2B:B8
X509v3 Authority Key Identifier:
keyid:9A:03:52:5F:68:EB:6B:23:5F:1D:E2:2B:60:B1:BA:ED:2F:C7:FF:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mgNSX2jrayNfHeIrYLG67S_H_4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/5a7e46-ce1b-4955-9f39-4b311326c230/1/mgNSX2jrayNfHeIrYLG67S_H_4M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/5a7e46-ce1b-4955-9f39-4b311326c230/1/mgNSX2jrayNfHeIrYLG67S_H_4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:89:cf:f6:f6:b9:6d:04:50:45:44:7a:40:ab:ee:f1:76:c8:
b9:a5:79:9e:b8:66:ec:ae:30:81:12:d7:66:03:03:63:26:ea:
24:0c:e7:35:f5:2e:25:85:a1:ac:d7:76:c2:3c:cb:ad:2d:6a:
e7:fd:3c:29:7d:b9:bf:ec:96:c9:ab:34:34:62:98:75:f0:89:
54:dd:94:ae:90:9f:cf:bb:c2:00:32:90:e4:e1:71:95:38:6d:
49:02:f5:e3:74:25:12:9e:3f:62:2b:fc:08:f3:4a:57:25:12:
f5:9c:ca:95:4e:6b:5d:45:27:9f:d4:94:1e:53:26:93:23:cd:
da:99:38:43:3c:66:03:94:1c:47:4b:3c:27:10:3e:eb:03:f1:
9d:ac:84:c1:45:34:4a:5f:0e:15:27:a9:c7:75:c9:27:20:6c:
da:7a:f5:63:96:98:c3:1f:39:cb:00:85:19:6b:00:0b:80:66:
d1:8b:02:77:0e:06:0a:a4:49:06:57:65:17:51:7c:8c:05:c6:
7d:17:03:7a:f8:b0:b6:73:f0:27:d2:0e:82:71:c6:9e:77:7a:
75:f7:a7:78:48:c7:59:c6:18:f5:d8:07:04:36:5b:7d:cc:72:
78:ed:0c:31:d7:dd:13:5f:c8:d1:16:31:c0:67:8b:e3:70:6e:
5e:aa:01:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkkDRudlIwoYwR0rBW7WRscMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhMDM1MjVmNjhlYjZiMjM1ZjFkZTIyYjYwYjFiYWVkMmZj
N2ZmODMwHhcNMjUwOTA3MTIwMTAyWhcNMjUwOTA4MTIwMTAyWjAzMTEwLwYDVQQD
Eyg1MTE3NTlhZGNlYzZhNWU5NzU2ZjVlMDg2N2UzMDdlNDczOTIyYmI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtC0F1Ibo0aIwdIrQwFGuWV5HyQSD
Di+snP/flXiBD8XFr86MNZaJY8mTekaw9kEJvwr7ZLHTnAvWDeZ1LPkt7pdYRniv
Q9gdKcBsfiZ6PT/11SyZ04FfC4HiYTCSJc5UQVYGsZl7jKFMjxFG6tHtcvwTp4sE
QrB1wmvBQdFdlYL/ttBDVwL1thujK+DUB82obQ/zQK3bEJ4gOdz+Z2GWxhaeDrEy
EaIsxnjY0XQs7igYIlBIK/lmzmkRtCKTJ1ETdXn96ZhViDd5+/d6jXiDLZeCQo02
ppDilbsgaPjR1P30Qx1iPvUuWGEB7dRfMfq9Ds45gX9VYqGMaSjV4x/1XwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFEXWa3OxqXpdW9eCGfjB+Rzkiu4MB8GA1UdIwQY
MBaAFJoDUl9o62sjXx3iK2Cxuu0vx/+DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWdOU1gyanJheU5mSGVJcllMRzY3U19IXzRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy81YTdlNDYtY2UxYi00OTU1LTlmMzkt
NGIzMTEzMjZjMjMwLzEvbWdOU1gyanJheU5mSGVJcllMRzY3U19IXzRNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy81YTdlNDYtY2UxYi00OTU1LTlmMzktNGIzMTEzMjZjMjMw
LzEvbWdOU1gyanJheU5mSGVJcllMRzY3U19IXzRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyYnP9va5
bQRQRUR6QKvu8XbIuaV5nrhm7K4wgRLXZgMDYybqJAznNfUuJYWhrNd2wjzLrS1q
5/08KX25v+yWyas0NGKYdfCJVN2UrpCfz7vCADKQ5OFxlThtSQL143QlEp4/Yiv8
CPNKVyUS9ZzKlU5rXUUnn9SUHlMmkyPN2pk4QzxmA5QcR0s8JxA+6wPxnayEwUU0
Sl8OFSepx3XJJyBs2nr1Y5aYwx85ywCFGWsAC4Bm0YsCdw4GCqRJBldlF1F8jAXG
fRcDeviwtnPwJ9IOgnHGnnd6dfeneEjHWcYY9dgHBDZbfcxyeO0MMdfdE1/I0RYx
wGeL43BuXqoBhA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 13:52:49 2025 by rpki-client