Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/863c04-b07e-4c3a-9f45-fe2474d2f07c/1/mgGl7N4ueVkyWREG0II9DRVPcAI.mft
File: mgGl7N4ueVkyWREG0II9DRVPcAI.mft (raw, json)
Hash identifier: Nghck5ru3lDl9npjVzcy+3EJ4/w8MzCu2AV0m46iWak=
Subject key identifier: 0B:65:A3:C0:16:36:AB:E6:D0:A4:17:16:C1:49:BD:5C:90:16:89:F2
Authority key identifier: 9A:01:A5:EC:DE:2E:79:59:32:59:11:06:D0:82:3D:0D:15:4F:70:02
Certificate issuer: /CN=9a01a5ecde2e795932591106d0823d0d154f7002
Certificate serial: 019A71B9366677012406B044B12B3CA26613
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mgGl7N4ueVkyWREG0II9DRVPcAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/863c04-b07e-4c3a-9f45-fe2474d2f07c/1/mgGl7N4ueVkyWREG0II9DRVPcAI.mft
Manifest number: 084B
Signing time: Tue 11 Nov 2025 07:02:34 +0000
Manifest this update: Tue 11 Nov 2025 07:02:34 +0000
Manifest next update: Wed 12 Nov 2025 07:02:34 +0000
Files and hashes: 1: mgGl7N4ueVkyWREG0II9DRVPcAI.crl (hash: +wy+GtcTz3+aHUjEAww3zyZTVUE1xy4G6XxFYg9eQ7Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/863c04-b07e-4c3a-9f45-fe2474d2f07c/1/mgGl7N4ueVkyWREG0II9DRVPcAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/863c04-b07e-4c3a-9f45-fe2474d2f07c/1/mgGl7N4ueVkyWREG0II9DRVPcAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/mgGl7N4ueVkyWREG0II9DRVPcAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:36:66:77:01:24:06:b0:44:b1:2b:3c:a2:66:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a01a5ecde2e795932591106d0823d0d154f7002
Validity
Not Before: Nov 11 07:02:34 2025 GMT
Not After : Nov 12 07:02:34 2025 GMT
Subject: CN=0b65a3c01636abe6d0a41716c149bd5c901689f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0f:71:65:17:e9:45:08:8b:7e:3f:9b:c8:11:
82:79:6c:ee:21:c6:fe:27:8a:2f:d7:02:80:c2:02:
a3:3c:d6:5d:86:a0:f2:c7:50:1a:c3:fb:b9:ec:93:
8c:56:e1:c2:77:4f:e9:e5:34:15:f7:90:21:5d:57:
85:4c:5d:d5:7e:5d:fd:f4:82:8b:bc:a7:96:59:0d:
e8:9a:e9:c8:50:39:f5:50:8a:04:8a:dd:29:b7:e1:
bc:0f:df:35:74:7c:22:61:fd:f0:ad:05:76:c1:ea:
c6:5a:97:1b:6e:fa:81:39:be:66:c6:5d:43:fd:c5:
0e:7c:23:8c:3b:3a:10:54:94:6c:f8:2c:f4:a1:fe:
19:c8:9b:03:b2:02:44:98:87:91:53:ce:06:7b:52:
6d:39:e5:9f:f4:da:a8:24:50:17:b0:6f:71:10:5a:
aa:eb:4d:f5:72:ff:f0:17:24:06:29:9f:11:07:b1:
42:c6:cc:2b:0d:77:7c:50:ac:41:23:be:0e:df:2b:
0b:b1:92:c6:9d:6e:c3:b6:f1:09:8e:83:a1:35:93:
b0:14:48:40:95:c6:b1:bd:dd:65:3d:83:04:24:73:
18:cb:40:1a:03:50:94:5e:71:c4:cc:1f:23:cb:c9:
1f:04:d1:f1:38:c3:69:af:87:85:b6:0d:56:2c:94:
ef:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:65:A3:C0:16:36:AB:E6:D0:A4:17:16:C1:49:BD:5C:90:16:89:F2
X509v3 Authority Key Identifier:
keyid:9A:01:A5:EC:DE:2E:79:59:32:59:11:06:D0:82:3D:0D:15:4F:70:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mgGl7N4ueVkyWREG0II9DRVPcAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/863c04-b07e-4c3a-9f45-fe2474d2f07c/1/mgGl7N4ueVkyWREG0II9DRVPcAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/863c04-b07e-4c3a-9f45-fe2474d2f07c/1/mgGl7N4ueVkyWREG0II9DRVPcAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:6b:4f:43:59:0d:73:93:b7:ed:ab:52:e6:af:54:04:51:c3:
12:96:18:4d:48:16:09:f2:5d:f8:b2:66:a9:8f:df:e7:1e:5f:
0d:26:b7:9a:c9:b4:5d:9a:27:19:9e:ec:47:49:69:37:fd:57:
07:e5:ea:48:4e:36:4d:e6:d1:e3:49:0c:64:f4:f2:a8:0b:21:
0b:32:d2:1a:11:eb:7a:3f:90:a3:9d:88:b1:8a:be:06:7d:28:
25:77:d0:9f:16:8e:8a:f7:5a:ba:9a:d9:8a:9a:e2:8b:44:f7:
b2:5f:a7:7d:84:1a:1b:6f:df:6a:8e:ff:6f:34:32:29:47:1e:
c1:f5:e1:8a:cd:c6:39:ac:88:f0:51:de:bd:66:55:10:c1:25:
f5:75:42:a4:8c:cd:44:3c:62:64:08:93:d0:07:9f:d7:75:34:
e2:2a:70:46:25:e9:db:fd:aa:35:ca:a9:c4:4a:36:83:ba:a2:
bc:88:e5:f8:52:7f:19:a0:15:26:76:d9:ea:74:a7:95:62:58:
51:17:e7:cd:7c:9f:e1:24:3f:ed:c4:36:4f:d9:ce:13:55:fb:
f3:3e:d2:4a:11:81:95:0b:99:dc:3c:cc:23:f0:8a:cd:b9:56:
bd:d7:13:8a:32:42:0a:cd:21:4a:6e:a6:f4:d0:5b:d5:2f:73:
4a:84:77:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:19:18 2025 by rpki-client