Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/d0beb2-c576-4e8d-b148-d79508e16869/1/MgOPanu3dwpyrnANMbagCoHujbs.mft
File: MgOPanu3dwpyrnANMbagCoHujbs.mft (raw, json)
Hash identifier: BHoFWm/3mmu22jpGxwWmt3b9eaxefNdqatHru+mlyhI=
Subject key identifier: AE:BD:51:C5:17:FB:A5:2A:6D:C1:77:78:95:D0:B5:35:E8:E7:74:5A
Authority key identifier: 32:03:8F:6A:7B:B7:77:0A:72:AE:70:0D:31:B6:A0:0A:81:EE:8D:BB
Certificate issuer: /CN=32038f6a7bb7770a72ae700d31b6a00a81ee8dbb
Certificate serial: 019A71B9578961EE04DBFADAB96BAE582212
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MgOPanu3dwpyrnANMbagCoHujbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/d0beb2-c576-4e8d-b148-d79508e16869/1/MgOPanu3dwpyrnANMbagCoHujbs.mft
Manifest number: 0D08
Signing time: Tue 11 Nov 2025 07:02:43 +0000
Manifest this update: Tue 11 Nov 2025 07:02:43 +0000
Manifest next update: Wed 12 Nov 2025 07:02:43 +0000
Files and hashes: 1: MgOPanu3dwpyrnANMbagCoHujbs.crl (hash: D6vwSb8xTtRLQxQCmHpZAZcltivyHCQPxByNHLmTfbc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/d0beb2-c576-4e8d-b148-d79508e16869/1/MgOPanu3dwpyrnANMbagCoHujbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/d0beb2-c576-4e8d-b148-d79508e16869/1/MgOPanu3dwpyrnANMbagCoHujbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/MgOPanu3dwpyrnANMbagCoHujbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:57:89:61:ee:04:db:fa:da:b9:6b:ae:58:22:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32038f6a7bb7770a72ae700d31b6a00a81ee8dbb
Validity
Not Before: Nov 11 07:02:43 2025 GMT
Not After : Nov 12 07:02:43 2025 GMT
Subject: CN=aebd51c517fba52a6dc1777895d0b535e8e7745a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:da:a0:9f:6d:fc:b2:be:02:97:94:22:b8:94:
e6:80:8e:8f:4b:d4:c4:16:5f:1a:95:a8:b5:ff:c2:
f5:32:b7:c0:4a:1f:ea:a7:3f:af:36:d7:20:81:8a:
c2:af:68:e0:31:47:74:d5:1f:a6:35:3f:7a:01:d6:
54:27:57:bf:11:48:7d:2a:57:4d:60:7a:cc:27:3b:
bb:96:23:4c:de:21:d2:da:8f:e6:22:e4:40:9c:bc:
f8:30:1e:e1:fe:8a:a5:67:7c:11:70:32:e7:40:9f:
6a:c1:52:7b:5a:e9:df:4b:4e:8d:9f:4f:3b:34:49:
56:06:b0:e4:f4:de:d4:f7:fc:41:69:2b:e4:1e:44:
7a:ea:35:0b:f6:f1:9b:13:49:4c:f4:01:d4:cc:39:
5a:e1:41:10:4c:3c:81:5a:e9:50:a4:4e:9d:49:47:
7c:83:35:0f:58:f5:27:3d:fa:0a:1d:dc:3d:bd:c6:
4b:75:ac:59:cb:ef:55:b7:52:8c:16:4c:1c:4d:93:
cb:fe:c6:81:7b:1a:c7:f1:e1:27:bb:81:07:94:aa:
d1:28:23:8b:a9:1e:eb:c2:94:60:9d:11:df:a0:7c:
b8:df:6e:2a:dd:47:72:1a:cd:64:9c:58:0c:07:f4:
e7:f2:9b:2f:a6:af:43:61:19:d6:05:3b:c8:b2:f2:
8b:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:BD:51:C5:17:FB:A5:2A:6D:C1:77:78:95:D0:B5:35:E8:E7:74:5A
X509v3 Authority Key Identifier:
keyid:32:03:8F:6A:7B:B7:77:0A:72:AE:70:0D:31:B6:A0:0A:81:EE:8D:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MgOPanu3dwpyrnANMbagCoHujbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d0beb2-c576-4e8d-b148-d79508e16869/1/MgOPanu3dwpyrnANMbagCoHujbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d0beb2-c576-4e8d-b148-d79508e16869/1/MgOPanu3dwpyrnANMbagCoHujbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:d3:2c:ea:20:a8:6e:fc:2c:cb:2f:d7:85:95:40:7f:e5:92:
f4:47:8a:7e:66:d1:87:40:e8:28:15:56:cd:7d:94:de:d1:8b:
c0:4f:c5:f0:62:7c:4d:9f:45:47:67:22:07:78:fc:8f:ef:eb:
71:56:97:6e:6e:a0:7c:74:1c:1b:4a:b8:b1:7a:7c:fb:7c:19:
4e:b0:7e:2a:9c:2c:9d:34:23:dc:fa:59:b6:10:98:fb:d0:18:
3c:5a:07:b1:5d:54:54:e4:db:f0:e4:46:99:bf:4f:d9:dc:fc:
5c:dd:6d:98:d7:2f:be:b2:fe:b2:b7:8f:3e:7d:0d:96:6b:17:
3a:f1:ad:91:cd:ea:2c:ac:28:85:97:72:19:b6:aa:22:e4:ab:
43:66:36:d8:19:f6:2c:c3:d6:0d:71:de:2a:0e:97:84:08:db:
a1:12:09:52:aa:e3:61:e5:ed:00:36:08:1b:d1:6b:49:af:a4:
5b:30:d0:00:0a:43:9a:33:98:02:62:b8:2b:86:93:b2:49:29:
66:0b:c3:60:c3:6a:d5:7a:4a:e7:08:f2:fa:b2:19:b2:15:28:
31:07:5b:37:f6:76:a7:49:28:63:db:1d:85:92:a5:10:10:99:
ac:81:c4:cf:20:53:71:18:f1:fd:69:57:6a:7e:35:37:f8:85:
be:23:4b:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:07:16 2025 by rpki-client