Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/5a7e46-ce1b-4955-9f39-4b311326c230/1/mgNSX2jrayNfHeIrYLG67S_H_4M.mft
File: mgNSX2jrayNfHeIrYLG67S_H_4M.mft (raw, json)
Hash identifier: YOO0j3bu+W+9Dr7bKILROATMirkzUsWJi1CzcVhW/z4=
Subject key identifier: D6:CD:05:8D:46:DB:C4:29:E2:92:C4:73:C1:1D:8A:1B:5E:7B:67:2E
Authority key identifier: 9A:03:52:5F:68:EB:6B:23:5F:1D:E2:2B:60:B1:BA:ED:2F:C7:FF:83
Certificate issuer: /CN=9a03525f68eb6b235f1de22b60b1baed2fc7ff83
Certificate serial: 019A7225C1EE45F081099F1F049562D8B06F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mgNSX2jrayNfHeIrYLG67S_H_4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/5a7e46-ce1b-4955-9f39-4b311326c230/1/mgNSX2jrayNfHeIrYLG67S_H_4M.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 09:01:08 +0000
Manifest this update: Tue 11 Nov 2025 09:01:08 +0000
Manifest next update: Wed 12 Nov 2025 09:01:08 +0000
Files and hashes: 1: mgNSX2jrayNfHeIrYLG67S_H_4M.crl (hash: uNwofnsKEuh9+1GM6ZsjK0PssH9r9Dr0OFYvMUmjwpg=)
2: xV2TYyNPjWPupKmb43ad00Tt3n8.roa (hash: +ey9CZvGJrxa71wfksSgu55Jb8r1NMsse9tFxoel7Ig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/5a7e46-ce1b-4955-9f39-4b311326c230/1/mgNSX2jrayNfHeIrYLG67S_H_4M.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/5a7e46-ce1b-4955-9f39-4b311326c230/1/mgNSX2jrayNfHeIrYLG67S_H_4M.mft
rsync://rpki.ripe.net/repository/DEFAULT/mgNSX2jrayNfHeIrYLG67S_H_4M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:c1:ee:45:f0:81:09:9f:1f:04:95:62:d8:b0:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a03525f68eb6b235f1de22b60b1baed2fc7ff83
Validity
Not Before: Nov 11 09:01:08 2025 GMT
Not After : Nov 12 09:01:08 2025 GMT
Subject: CN=d6cd058d46dbc429e292c473c11d8a1b5e7b672e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:8b:05:2a:73:74:c6:3b:e3:ec:1b:d8:7e:01:
a5:af:b0:21:f3:fb:f8:cc:e1:a8:a0:55:79:06:00:
09:93:65:41:a5:0c:a5:66:e3:ce:62:52:58:68:d1:
57:00:21:d2:7d:fa:6f:60:29:48:6a:35:65:9d:3f:
9f:23:26:f6:9d:72:79:65:01:05:13:ea:b5:3a:2c:
0b:ba:76:4a:65:9e:28:53:e2:ec:dd:67:9d:6f:41:
3c:ef:8b:06:26:25:54:aa:18:99:ea:82:e2:a3:60:
2c:8c:fa:00:37:08:0b:4e:17:53:a5:fe:70:28:84:
53:4f:d3:50:76:2d:56:13:ce:8d:db:70:c1:a0:97:
cd:fd:eb:5b:9b:12:11:b7:67:24:1a:71:a1:9a:4c:
e6:13:e3:2c:56:3a:1f:b4:7b:ce:d2:70:90:1b:47:
1b:51:7d:c1:3d:18:bb:cf:b2:0c:1e:f7:a0:18:66:
5f:ff:b9:61:9a:43:cd:a2:08:b1:82:2c:8e:2e:f4:
46:6f:94:f8:12:9b:eb:7f:e8:e1:07:47:99:cb:b1:
0a:f1:8d:79:62:85:71:19:29:12:a9:42:5e:b2:21:
5f:01:ce:a4:0b:e2:bf:4b:37:55:f8:a8:de:85:0d:
90:52:53:3c:e4:42:1a:27:0f:68:55:e0:c5:ba:85:
86:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:CD:05:8D:46:DB:C4:29:E2:92:C4:73:C1:1D:8A:1B:5E:7B:67:2E
X509v3 Authority Key Identifier:
keyid:9A:03:52:5F:68:EB:6B:23:5F:1D:E2:2B:60:B1:BA:ED:2F:C7:FF:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mgNSX2jrayNfHeIrYLG67S_H_4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/5a7e46-ce1b-4955-9f39-4b311326c230/1/mgNSX2jrayNfHeIrYLG67S_H_4M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/5a7e46-ce1b-4955-9f39-4b311326c230/1/mgNSX2jrayNfHeIrYLG67S_H_4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:1c:86:48:1d:fd:4b:1d:d3:ed:fd:1e:10:fa:00:e1:6b:12:
b9:43:f9:25:bc:77:e5:0f:e0:15:22:c6:12:57:de:a2:24:b4:
48:b5:2d:d9:0f:ed:fd:24:9f:a3:46:7b:97:67:7e:3d:25:80:
10:b7:00:9e:8e:0d:c7:b7:95:b5:36:c2:be:91:63:c6:ef:37:
a1:f0:09:10:f4:2e:f4:d5:99:ff:81:f8:87:84:90:4f:b1:8b:
cc:a9:bb:7d:9e:e8:0c:2e:f1:27:cc:ff:81:85:c5:da:ef:8e:
b2:e9:e5:ce:45:93:ba:ce:18:c2:29:27:d5:16:f3:de:cc:68:
0c:c9:69:7d:95:d0:de:6c:98:36:4e:7a:63:5e:30:19:29:57:
a1:c7:87:57:4f:86:90:3d:ca:45:cb:8f:0b:a4:9d:c0:74:fe:
46:7e:87:22:0e:81:44:91:d9:6d:9b:7e:c6:a3:8c:12:44:6f:
79:46:39:c1:24:e4:fd:bc:cc:12:b7:44:ad:7d:4b:ac:00:f5:
40:de:24:71:06:43:86:c3:f7:fe:f6:30:f3:77:6b:19:87:df:
d8:76:7e:55:55:d2:3d:c3:0f:9f:bb:f3:b5:ca:80:b7:3d:a9:
84:a8:0c:b4:0f:b1:ae:03:73:e7:68:02:ea:23:f0:2f:f2:b6:
00:82:42:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJcHuRfCBCZ8fBJVi2LBvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhMDM1MjVmNjhlYjZiMjM1ZjFkZTIyYjYwYjFiYWVkMmZj
N2ZmODMwHhcNMjUxMTExMDkwMTA4WhcNMjUxMTEyMDkwMTA4WjAzMTEwLwYDVQQD
EyhkNmNkMDU4ZDQ2ZGJjNDI5ZTI5MmM0NzNjMTFkOGExYjVlN2I2NzJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzIsFKnN0xjvj7BvYfgGlr7Ah8/v4
zOGooFV5BgAJk2VBpQylZuPOYlJYaNFXACHSffpvYClIajVlnT+fIyb2nXJ5ZQEF
E+q1OiwLunZKZZ4oU+Ls3Wedb0E874sGJiVUqhiZ6oLio2AsjPoANwgLThdTpf5w
KIRTT9NQdi1WE86N23DBoJfN/etbmxIRt2ckGnGhmkzmE+MsVjoftHvO0nCQG0cb
UX3BPRi7z7IMHvegGGZf/7lhmkPNogixgiyOLvRGb5T4Epvrf+jhB0eZy7EK8Y15
YoVxGSkSqUJesiFfAc6kC+K/SzdV+KjehQ2QUlM85EIaJw9oVeDFuoWGhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNbNBY1G28Qp4pLEc8Edihtee2cuMB8GA1UdIwQY
MBaAFJoDUl9o62sjXx3iK2Cxuu0vx/+DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWdOU1gyanJheU5mSGVJcllMRzY3U19IXzRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy81YTdlNDYtY2UxYi00OTU1LTlmMzkt
NGIzMTEzMjZjMjMwLzEvbWdOU1gyanJheU5mSGVJcllMRzY3U19IXzRNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy81YTdlNDYtY2UxYi00OTU1LTlmMzktNGIzMTEzMjZjMjMw
LzEvbWdOU1gyanJheU5mSGVJcllMRzY3U19IXzRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlxyGSB39
Sx3T7f0eEPoA4WsSuUP5Jbx35Q/gFSLGElfeoiS0SLUt2Q/t/SSfo0Z7l2d+PSWA
ELcAno4Nx7eVtTbCvpFjxu83ofAJEPQu9NWZ/4H4h4SQT7GLzKm7fZ7oDC7xJ8z/
gYXF2u+OsunlzkWTus4Ywikn1Rbz3sxoDMlpfZXQ3myYNk56Y14wGSlXoceHV0+G
kD3KRcuPC6SdwHT+Rn6HIg6BRJHZbZt+xqOMEkRveUY5wSTk/bzMErdErX1LrAD1
QN4kcQZDhsP3/vYw83drGYff2HZ+VVXSPcMPn7vztcqAtz2phKgMtA+xrgNz52gC
6iPwL/K2AIJCag==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:58 2025 by rpki-client