Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/30f34e-e2ad-4b8d-8ce0-011878255ba7/1/MGY7W3BEIyuYmBjRLMkEkCElJN8.mft
File: MGY7W3BEIyuYmBjRLMkEkCElJN8.mft (raw, json)
Hash identifier: vz3NW78j+bN400NGD/XDfjrA1BCBcAI3IifK4nJapkY=
Subject key identifier: 60:80:A9:4F:73:F8:78:1F:8D:CA:BC:4F:C9:B5:CB:E5:DA:14:15:28
Authority key identifier: 30:66:3B:5B:70:44:23:2B:98:98:18:D1:2C:C9:04:90:21:25:24:DF
Certificate issuer: /CN=30663b5b7044232b989818d12cc90490212524df
Certificate serial: 019A71B7E3BACF4927CE36C82628303ACAD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MGY7W3BEIyuYmBjRLMkEkCElJN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/30f34e-e2ad-4b8d-8ce0-011878255ba7/1/MGY7W3BEIyuYmBjRLMkEkCElJN8.mft
Manifest number: 0234
Signing time: Tue 11 Nov 2025 07:01:08 +0000
Manifest this update: Tue 11 Nov 2025 07:01:08 +0000
Manifest next update: Wed 12 Nov 2025 07:01:08 +0000
Files and hashes: 1: MGY7W3BEIyuYmBjRLMkEkCElJN8.crl (hash: Xky8gkhj9cgdWtp8wwlsRft3gib6DMDLpUZphegGZaU=)
2: jl5BGicOacjnQYcT0f92Ohaidfk.roa (hash: 2+8T//3NgApFzgg77XKjZhpHy2WC3GoSuHjoqbCDjuc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/30f34e-e2ad-4b8d-8ce0-011878255ba7/1/MGY7W3BEIyuYmBjRLMkEkCElJN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/30f34e-e2ad-4b8d-8ce0-011878255ba7/1/MGY7W3BEIyuYmBjRLMkEkCElJN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/MGY7W3BEIyuYmBjRLMkEkCElJN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:e3:ba:cf:49:27:ce:36:c8:26:28:30:3a:ca:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30663b5b7044232b989818d12cc90490212524df
Validity
Not Before: Nov 11 07:01:08 2025 GMT
Not After : Nov 12 07:01:08 2025 GMT
Subject: CN=6080a94f73f8781f8dcabc4fc9b5cbe5da141528
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:73:e6:33:ef:94:b1:90:37:84:c0:7a:14:b0:
35:6c:a8:c5:09:b0:83:a8:22:fd:35:a4:ba:3c:10:
31:6e:36:ea:62:eb:6d:18:c9:a4:a9:aa:09:14:1d:
f6:8a:bd:1e:bc:03:21:5f:3e:53:a1:c3:70:24:0f:
b2:34:d6:10:93:c1:f6:cb:2b:78:39:1b:95:b7:dc:
9e:b9:5d:6d:48:55:be:bd:08:40:9d:7f:4f:cb:34:
ed:82:f7:d1:1a:66:e9:eb:c0:94:a7:40:18:ab:d9:
fc:36:1b:d8:0a:bd:a1:0a:66:dc:cd:57:a0:b3:17:
07:d6:f0:b5:28:bb:01:30:d9:c3:51:d9:de:20:f0:
66:45:c5:3e:b6:c5:9c:14:38:d5:f5:fc:93:e7:eb:
58:7c:21:65:3d:ff:96:78:00:78:58:c8:12:51:c5:
5a:16:d0:3f:21:2e:43:6c:39:9b:2f:5c:a2:c1:4e:
6d:ec:d7:08:19:5e:e8:c0:02:ec:68:fe:23:88:9d:
eb:34:de:af:c8:ab:ea:64:12:12:ee:b0:5d:be:56:
eb:91:c3:8d:09:b2:9e:f1:15:b7:dc:2f:e5:18:12:
55:a0:54:27:8d:a1:40:68:c6:4e:95:2e:73:2c:81:
5f:a9:33:88:8a:5b:c5:ad:17:b0:04:e9:90:6e:76:
cd:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:80:A9:4F:73:F8:78:1F:8D:CA:BC:4F:C9:B5:CB:E5:DA:14:15:28
X509v3 Authority Key Identifier:
keyid:30:66:3B:5B:70:44:23:2B:98:98:18:D1:2C:C9:04:90:21:25:24:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGY7W3BEIyuYmBjRLMkEkCElJN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/30f34e-e2ad-4b8d-8ce0-011878255ba7/1/MGY7W3BEIyuYmBjRLMkEkCElJN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/30f34e-e2ad-4b8d-8ce0-011878255ba7/1/MGY7W3BEIyuYmBjRLMkEkCElJN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:f5:df:cf:9d:f0:49:f0:4f:d3:95:2a:59:c8:01:e2:72:c5:
8c:34:1b:00:d2:1c:8f:1f:89:02:cd:4d:63:b1:79:c4:4a:1b:
2f:6f:6f:a9:2b:4b:88:92:3a:3c:0b:09:de:a1:7e:b0:80:c0:
ff:e4:70:76:ee:65:96:2f:22:5a:a2:da:67:eb:dd:25:f6:21:
9f:22:09:8d:7a:11:35:39:75:e8:79:2f:bf:2b:0f:30:52:1a:
ab:5d:77:32:96:91:c1:90:4d:9a:83:9f:ff:7a:e7:1d:33:f8:
b9:14:2c:e6:1b:e5:bf:ef:c5:4e:3e:7f:70:67:ed:4c:46:1b:
e6:5e:cc:54:b5:2b:fc:95:e1:d4:90:68:dd:fa:a7:dd:87:25:
0d:47:9a:eb:ee:28:17:1f:55:ed:70:94:89:c1:ed:0d:44:5e:
e7:2e:8b:3b:3b:05:b5:12:09:a9:4d:98:0b:49:8c:2c:a7:f7:
5a:e1:c1:29:38:70:18:68:b7:b4:04:0d:42:3d:a3:6d:9b:05:
84:8d:8f:1b:6b:dc:cd:7a:a9:29:e9:d3:5d:4a:68:5f:2b:15:
25:f0:ad:e4:49:bd:91:37:b1:65:eb:d0:c6:53:09:e2:2a:e6:
85:0f:0d:f8:de:07:48:85:7f:5e:5d:39:14:66:cd:5f:9b:54:
99:2b:1a:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:35:50 2025 by rpki-client