Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/3d2031-f4a1-437a-9a7e-97c4bbaf4676/1/MJAbMGF-hmq8nOULrb6IRl048Dc.mft
File: MJAbMGF-hmq8nOULrb6IRl048Dc.mft (raw, json)
Hash identifier: qCJmNQ82o5LsbWrkk8xuuG8F5666iqt9eN9d17NL3Y4=
Subject key identifier: 60:54:9D:DF:33:B5:E8:D7:47:37:AA:B1:13:BB:75:76:50:75:0C:BE
Authority key identifier: 30:90:1B:30:61:7E:86:6A:BC:9C:E5:0B:AD:BE:88:46:5D:38:F0:37
Certificate issuer: /CN=30901b30617e866abc9ce50badbe88465d38f037
Certificate serial: 019A71B8428B8C1E9C1B253B7C2B05D404FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MJAbMGF-hmq8nOULrb6IRl048Dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/3d2031-f4a1-437a-9a7e-97c4bbaf4676/1/MJAbMGF-hmq8nOULrb6IRl048Dc.mft
Manifest number: 05BE
Signing time: Tue 11 Nov 2025 07:01:32 +0000
Manifest this update: Tue 11 Nov 2025 07:01:32 +0000
Manifest next update: Wed 12 Nov 2025 07:01:32 +0000
Files and hashes: 1: 2qX7OdgapT1BAlqvcn-h20H3SjY.roa (hash: mYdYSfl5U26j0DpruXdVtTOn2QH2B7ImuHJ/Oabup60=)
2: MJAbMGF-hmq8nOULrb6IRl048Dc.crl (hash: V3ExeJSYFdg9uQD0VnAqQ6QO7OWfToCLVISFOakQHKQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/3d2031-f4a1-437a-9a7e-97c4bbaf4676/1/MJAbMGF-hmq8nOULrb6IRl048Dc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/3d2031-f4a1-437a-9a7e-97c4bbaf4676/1/MJAbMGF-hmq8nOULrb6IRl048Dc.mft
rsync://rpki.ripe.net/repository/DEFAULT/MJAbMGF-hmq8nOULrb6IRl048Dc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:42:8b:8c:1e:9c:1b:25:3b:7c:2b:05:d4:04:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30901b30617e866abc9ce50badbe88465d38f037
Validity
Not Before: Nov 11 07:01:32 2025 GMT
Not After : Nov 12 07:01:32 2025 GMT
Subject: CN=60549ddf33b5e8d74737aab113bb757650750cbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:83:75:a7:a6:43:66:7a:db:5f:00:3b:21:79:
6b:bb:b7:1d:9d:fa:3c:e7:26:7d:f0:68:8e:53:ef:
66:5f:5a:94:3f:e5:29:cc:f9:7b:2e:d9:6a:c6:17:
5d:03:ed:b7:01:ba:88:64:99:4b:fc:f8:57:43:df:
c6:2d:05:c9:2b:5a:53:8d:16:f6:b9:85:c4:93:c0:
54:7c:c5:32:c9:29:42:2c:a5:87:e3:0a:9f:6d:13:
94:8d:ac:82:e8:1e:22:d8:56:84:de:7a:3c:d0:8d:
63:bf:2b:fc:99:70:89:c3:3d:50:25:fb:d0:11:d0:
8c:1f:59:dc:db:9e:8f:f2:fe:60:6b:45:50:9a:45:
0f:ef:20:f2:9d:35:2d:ce:05:85:ad:92:9d:e8:af:
94:c6:8a:79:7b:f5:89:b1:66:27:8e:94:1a:bf:a0:
a2:d7:37:8a:c6:8c:24:10:e3:04:c1:1b:e8:ec:ea:
5c:88:73:6d:9a:7d:45:c9:1b:e1:02:53:05:f0:54:
87:f3:d1:bf:70:06:36:02:a7:e2:0e:6b:0f:44:4f:
07:09:d4:68:5a:58:e9:63:87:92:95:84:02:cb:51:
fb:bc:ab:15:16:c8:f4:f5:c8:98:fc:00:69:63:ea:
6c:63:7c:61:7c:1c:48:0f:5f:de:b6:33:4d:84:9d:
63:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:54:9D:DF:33:B5:E8:D7:47:37:AA:B1:13:BB:75:76:50:75:0C:BE
X509v3 Authority Key Identifier:
keyid:30:90:1B:30:61:7E:86:6A:BC:9C:E5:0B:AD:BE:88:46:5D:38:F0:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MJAbMGF-hmq8nOULrb6IRl048Dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/3d2031-f4a1-437a-9a7e-97c4bbaf4676/1/MJAbMGF-hmq8nOULrb6IRl048Dc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/3d2031-f4a1-437a-9a7e-97c4bbaf4676/1/MJAbMGF-hmq8nOULrb6IRl048Dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:b6:6f:69:52:06:2e:f0:3d:af:27:71:cb:89:6f:0e:de:f3:
08:33:0f:19:24:e2:78:78:d4:12:d1:18:d3:5a:b4:c5:ae:e8:
dd:13:0f:7f:55:d3:63:a8:83:46:44:17:2d:d5:86:b9:13:18:
3f:aa:5c:c8:30:5f:98:93:33:e8:a3:d9:6e:b7:3d:12:6f:f3:
57:a8:1f:ca:bf:b2:c8:4d:c3:53:07:4d:97:d5:ee:c0:7e:2f:
dc:36:60:ff:ed:f5:12:8b:1c:fc:ba:34:eb:fc:00:46:ec:5d:
2f:6f:53:54:d2:15:be:54:b6:b1:17:40:eb:51:5f:40:2b:b8:
99:3c:7a:4b:53:69:41:f7:3d:45:eb:fd:ef:21:bc:34:1f:33:
1e:14:d5:4b:a5:f7:ba:4a:9a:fc:86:ef:79:fe:da:c9:ef:0e:
3a:6b:1d:b5:4a:b5:d1:d7:83:2a:95:ee:df:e3:2d:5f:56:58:
62:11:79:4f:b6:54:e4:e7:9d:8d:a6:70:e0:d4:9a:4d:30:5c:
0f:4f:da:1b:93:f9:7c:f0:c9:2b:19:d2:06:a0:d5:16:1e:48:
01:09:ac:2c:c9:cb:7b:30:dc:bf:b8:d5:ed:8d:17:2b:ab:c1:
2d:c1:0a:53:a8:48:3c:65:49:f8:fb:aa:a8:ef:2a:c2:3c:2a:
05:de:87:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:20:17 2025 by rpki-client