Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/a8941a-7250-48ec-aaf8-6d8ea9d1cd73/1/MGE0vPWfWB1rdmMM-oeGeHaikhU.mft
File: MGE0vPWfWB1rdmMM-oeGeHaikhU.mft (raw, json)
Hash identifier: de/o/9He7BhZb6QrTmzqzyYxdfTUWxYPTiMt9PWFZ1M=
Subject key identifier: 7A:9E:C4:E5:C1:FD:68:F3:6F:D1:9E:A6:BE:2B:25:B6:87:4E:48:81
Authority key identifier: 30:61:34:BC:F5:9F:58:1D:6B:76:63:0C:FA:87:86:78:76:A2:92:15
Certificate issuer: /CN=306134bcf59f581d6b76630cfa87867876a29215
Certificate serial: 019A33EAFF937B147DD9926DE7C0A62B7B6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MGE0vPWfWB1rdmMM-oeGeHaikhU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/a8941a-7250-48ec-aaf8-6d8ea9d1cd73/1/MGE0vPWfWB1rdmMM-oeGeHaikhU.mft
Manifest number: 129E
Signing time: Thu 30 Oct 2025 07:00:30 +0000
Manifest this update: Thu 30 Oct 2025 07:00:30 +0000
Manifest next update: Fri 31 Oct 2025 07:00:30 +0000
Files and hashes: 1: MGE0vPWfWB1rdmMM-oeGeHaikhU.crl (hash: LYojz8JbtLGjgoWv5mJIUqXievSVcsbc3oWukWM2cGI=)
2: iyT2rEaTLGTQJtoCzDixmDHk4q8.roa (hash: DJdcXuwOyrFSr66rkLo/Y+8lRD0xwqdql+52mCZmuDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/a8941a-7250-48ec-aaf8-6d8ea9d1cd73/1/MGE0vPWfWB1rdmMM-oeGeHaikhU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/a8941a-7250-48ec-aaf8-6d8ea9d1cd73/1/MGE0vPWfWB1rdmMM-oeGeHaikhU.mft
rsync://rpki.ripe.net/repository/DEFAULT/MGE0vPWfWB1rdmMM-oeGeHaikhU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 31 Oct 2025 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:33:ea:ff:93:7b:14:7d:d9:92:6d:e7:c0:a6:2b:7b:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=306134bcf59f581d6b76630cfa87867876a29215
Validity
Not Before: Oct 30 07:00:30 2025 GMT
Not After : Oct 31 07:00:30 2025 GMT
Subject: CN=7a9ec4e5c1fd68f36fd19ea6be2b25b6874e4881
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:93:4d:0c:6c:20:71:25:ea:ad:5e:c7:75:4c:
d6:34:14:7c:05:cf:ff:7c:f3:43:c3:af:ea:26:af:
76:4a:34:b2:1e:bf:09:52:2c:5d:28:06:c7:20:00:
aa:63:38:ac:bd:8e:96:0c:95:28:8b:e4:e8:9a:80:
09:f4:e4:91:95:b3:7f:bc:59:b7:15:f3:85:73:7d:
f8:87:8b:9c:c0:5d:a0:97:ff:f1:f5:11:80:b0:7a:
ca:e0:c2:61:8c:f0:b8:80:e4:ef:7e:53:3c:ca:50:
c9:32:c6:da:cf:0b:84:bf:ed:dd:de:f8:da:83:a8:
78:d0:5e:56:d9:02:a1:10:06:4f:e1:18:91:50:d3:
ef:2d:c5:4e:2e:8f:bd:8d:3b:83:18:71:f3:c7:2a:
a8:80:08:6b:66:8a:61:7f:2d:b7:c0:5d:5b:fe:c9:
64:27:e1:b4:bc:94:da:75:ea:84:67:5f:4f:9c:f5:
51:c4:75:58:7b:39:8a:86:7f:44:3d:8b:ea:c2:d6:
ce:27:b0:9a:00:5b:69:12:43:78:40:55:de:8c:37:
1d:68:8d:ba:7a:04:9b:95:31:08:7a:0a:39:ff:6d:
5e:b4:ba:5d:11:9a:25:d0:7d:59:f1:a8:02:6e:89:
66:3d:c7:9e:d2:bf:56:48:71:10:8c:ab:33:85:74:
9e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:9E:C4:E5:C1:FD:68:F3:6F:D1:9E:A6:BE:2B:25:B6:87:4E:48:81
X509v3 Authority Key Identifier:
keyid:30:61:34:BC:F5:9F:58:1D:6B:76:63:0C:FA:87:86:78:76:A2:92:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGE0vPWfWB1rdmMM-oeGeHaikhU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a8941a-7250-48ec-aaf8-6d8ea9d1cd73/1/MGE0vPWfWB1rdmMM-oeGeHaikhU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a8941a-7250-48ec-aaf8-6d8ea9d1cd73/1/MGE0vPWfWB1rdmMM-oeGeHaikhU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:3d:6f:9a:e4:a3:b3:7f:51:2b:44:3e:15:17:01:3b:56:5e:
a6:81:e9:12:ff:31:5f:9d:c0:ad:e4:87:40:2f:da:99:05:57:
4a:30:b0:88:56:00:85:81:62:ed:7a:81:46:d2:02:4a:9a:6b:
62:71:63:f8:75:f8:47:29:eb:67:e0:cd:46:20:c2:7c:32:65:
1b:86:58:0b:a9:6d:f9:b5:49:f6:06:87:94:5e:9c:d9:40:9c:
a3:c1:7d:6a:14:c8:db:ad:3e:39:54:f6:a5:01:9c:33:3e:14:
24:fb:d8:37:bd:e9:f0:50:b3:53:de:7f:b8:85:f9:08:f1:1d:
53:ae:78:03:c9:c1:c8:2f:0f:f8:a5:99:58:f3:9c:f2:e9:b9:
c5:6f:bb:88:90:25:4f:63:9b:ae:8f:b3:0c:4f:cc:ae:41:d5:
eb:ff:ec:7f:f7:74:da:86:b7:45:f3:2b:c9:a8:15:f1:8e:07:
78:10:f1:78:47:ca:5d:65:15:00:03:9d:d2:1e:40:0c:b4:64:
a7:01:dd:09:51:3d:c4:ca:17:e4:80:43:f3:f4:9a:78:4c:5a:
4e:24:78:74:79:7f:7f:82:3b:61:6f:5e:60:61:a8:1f:b7:28:
91:0d:91:86:30:43:b4:0d:1a:24:ce:78:5d:f0:1b:b9:b8:75:
a6:b2:49:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 30 14:56:52 2025 by rpki-client