Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/40e57e-c627-4b9b-9577-596fa8c0a57a/1/MGKNkjjiPWv0xzWZXJ4t6gBQ8Aw.mft
File: MGKNkjjiPWv0xzWZXJ4t6gBQ8Aw.mft (raw, json)
Hash identifier: 6Q2Gfb4RaFj4XrYbvZSUxorXat+vsCN7+/82rWbmd7s=
Subject key identifier: 50:4F:6D:D3:6C:1F:A4:3A:A4:29:7A:6A:EC:4D:F7:AE:2F:DB:B0:60
Authority key identifier: 30:62:8D:92:38:E2:3D:6B:F4:C7:35:99:5C:9E:2D:EA:00:50:F0:0C
Certificate issuer: /CN=30628d9238e23d6bf4c735995c9e2dea0050f00c
Certificate serial: 019A725CCB13BFEEA0174C6D97011208CC9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MGKNkjjiPWv0xzWZXJ4t6gBQ8Aw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/40e57e-c627-4b9b-9577-596fa8c0a57a/1/MGKNkjjiPWv0xzWZXJ4t6gBQ8Aw.mft
Manifest number: 0785
Signing time: Tue 11 Nov 2025 10:01:15 +0000
Manifest this update: Tue 11 Nov 2025 10:01:15 +0000
Manifest next update: Wed 12 Nov 2025 10:01:15 +0000
Files and hashes: 1: MGKNkjjiPWv0xzWZXJ4t6gBQ8Aw.crl (hash: runsFYVF0mcerkoeKmotTNjS27i9gzV/ooT7sINmRPY=)
2: gVZpy_aU2P0Pr-2EJHA1HwKJhRU.roa (hash: P5u1LpZGGtQaGv/FeFmSXhXnEGgm7B33JQ+aoyUNOOk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/40e57e-c627-4b9b-9577-596fa8c0a57a/1/MGKNkjjiPWv0xzWZXJ4t6gBQ8Aw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/40e57e-c627-4b9b-9577-596fa8c0a57a/1/MGKNkjjiPWv0xzWZXJ4t6gBQ8Aw.mft
rsync://rpki.ripe.net/repository/DEFAULT/MGKNkjjiPWv0xzWZXJ4t6gBQ8Aw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:cb:13:bf:ee:a0:17:4c:6d:97:01:12:08:cc:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30628d9238e23d6bf4c735995c9e2dea0050f00c
Validity
Not Before: Nov 11 10:01:15 2025 GMT
Not After : Nov 12 10:01:15 2025 GMT
Subject: CN=504f6dd36c1fa43aa4297a6aec4df7ae2fdbb060
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2b:82:65:ca:fe:38:77:cf:a1:bc:7d:26:7e:
96:18:2c:c8:d8:0a:2e:d4:2a:e2:2a:1b:a3:c4:18:
14:f5:ca:ca:57:a6:2a:e9:82:8e:c4:dc:64:99:a7:
ca:39:68:a8:e6:e3:fe:65:23:a2:f5:95:29:bf:05:
73:1a:dd:12:ff:4f:7e:5e:7a:2c:39:c0:e9:31:0d:
f8:70:57:fc:a8:38:24:0d:09:a4:c8:b9:c3:46:15:
7b:96:d8:9c:68:66:db:f0:e5:e4:ee:9b:b2:c3:a7:
ab:3e:63:da:10:2a:66:2d:61:19:54:f6:df:cb:65:
bc:99:6d:53:0b:7d:29:ab:5b:1c:bc:9e:fd:2f:1e:
c8:3f:df:f7:fd:e6:5f:9d:07:44:fe:b7:7b:77:7f:
e3:53:5e:44:1e:50:ea:2e:f8:a7:69:31:60:c7:0e:
be:92:41:1f:fa:df:1c:5a:1f:56:47:d6:94:75:42:
88:6d:bd:7a:5c:4c:2f:10:31:82:a3:b1:b5:76:a0:
d4:5c:6f:c9:67:01:72:00:bc:36:8f:2b:11:bb:10:
bc:24:2e:c1:89:9c:51:43:df:66:c0:dc:28:b7:1e:
ae:29:b8:a7:8f:39:f0:41:cf:11:f2:46:9a:0e:d4:
f2:d5:29:2b:3b:15:ba:93:e9:33:e0:4f:70:d7:25:
2f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:4F:6D:D3:6C:1F:A4:3A:A4:29:7A:6A:EC:4D:F7:AE:2F:DB:B0:60
X509v3 Authority Key Identifier:
keyid:30:62:8D:92:38:E2:3D:6B:F4:C7:35:99:5C:9E:2D:EA:00:50:F0:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGKNkjjiPWv0xzWZXJ4t6gBQ8Aw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/40e57e-c627-4b9b-9577-596fa8c0a57a/1/MGKNkjjiPWv0xzWZXJ4t6gBQ8Aw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/40e57e-c627-4b9b-9577-596fa8c0a57a/1/MGKNkjjiPWv0xzWZXJ4t6gBQ8Aw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:7a:32:dd:5c:95:99:82:fc:de:92:04:66:e6:9c:6f:60:3b:
30:bf:cf:ef:42:bb:6a:3c:a3:b3:1f:d9:be:c9:eb:da:e5:af:
1d:10:1d:1c:01:89:af:ce:06:98:6a:09:56:2b:25:a1:7f:91:
92:a1:48:8c:d7:0b:51:f4:21:fb:d7:32:22:f1:96:95:67:1f:
65:51:4f:81:a3:6f:e4:1b:2b:6c:b2:2e:33:12:a8:f9:67:2c:
7f:2f:37:5f:56:9a:75:9e:d7:b1:ca:ad:74:02:ed:a2:e5:3e:
3c:a2:8f:f0:48:e6:61:7e:58:7b:04:41:d2:e0:c8:e0:ee:24:
c8:aa:90:cf:a6:70:b0:da:8a:70:80:11:4e:cb:aa:b6:a4:b0:
0b:6b:12:d0:2d:ca:ab:1f:05:fc:73:0b:25:1f:31:34:54:18:
83:22:fe:e5:39:77:59:36:8f:84:d6:43:04:5d:71:fb:a8:bf:
84:b5:70:92:38:6a:c8:9e:49:23:e8:2d:d8:d5:fc:62:b2:66:
b0:eb:02:22:d5:60:c5:61:5e:d3:13:8f:43:af:df:78:a9:5f:
58:4d:b5:12:75:0c:54:dd:18:b8:ae:e4:17:c6:dd:eb:48:77:
66:f7:33:7c:67:a8:52:25:22:45:2b:03:6e:db:de:b8:7a:91:
57:ed:a8:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:17:28 2025 by rpki-client