Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.mft
File: MG1hg1W9iTf3W7RlC7XBr3D5oS4.mft (raw, json)
Hash identifier: 1rH4qtcJoVGAsTgKqVos8/QBghy3HDrkFGU7a9ms+OU=
Subject key identifier: C4:87:38:5C:1A:5D:77:EC:5E:BB:CC:E0:C0:9F:CD:27:D2:30:5C:8F
Authority key identifier: 30:6D:61:83:55:BD:89:37:F7:5B:B4:65:0B:B5:C1:AF:70:F9:A1:2E
Certificate issuer: /CN=306d618355bd8937f75bb4650bb5c1af70f9a12e
Certificate serial: 0199FDD8EE465E6AA4CF31221121DF6B4851
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MG1hg1W9iTf3W7RlC7XBr3D5oS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.mft
Manifest number: 1281
Signing time: Sun 19 Oct 2025 19:01:16 +0000
Manifest this update: Sun 19 Oct 2025 19:01:16 +0000
Manifest next update: Mon 20 Oct 2025 19:01:16 +0000
Files and hashes: 1: 3jZVmIYXRpFGaUpKFxmxg6yk0v4.roa (hash: DxwsnC6ETAvm52TcakM8AMF0oIdLtUXLvOU8uNsDQAw=)
2: MG1hg1W9iTf3W7RlC7XBr3D5oS4.crl (hash: 6PebiSkYU2T0dW/D1bBknNWLb+HBnpkOrX+5+mnK/oM=)
3: OhFs8ELf0BkBqUqSta-UtJTxxOY.roa (hash: eORqJrZ4eHwt+ZtqWQMblZ7ybIDSjazTPoe3DTl1tC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/MG1hg1W9iTf3W7RlC7XBr3D5oS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d8:ee:46:5e:6a:a4:cf:31:22:11:21:df:6b:48:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=306d618355bd8937f75bb4650bb5c1af70f9a12e
Validity
Not Before: Oct 19 19:01:16 2025 GMT
Not After : Oct 20 19:01:16 2025 GMT
Subject: CN=c487385c1a5d77ec5ebbcce0c09fcd27d2305c8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:49:18:98:5b:d5:05:ab:82:4e:15:ae:9e:41:
f3:ab:5b:fc:bf:9d:26:56:8e:4b:c2:a9:d1:ec:28:
c4:6d:f4:18:41:46:8c:7d:63:3a:4a:b4:49:ca:31:
c0:e5:71:90:d5:2d:d1:23:17:28:ef:31:66:78:7f:
f6:e0:5b:e1:88:04:a9:39:4f:73:ef:da:e0:c7:02:
8c:64:8b:a1:1c:00:8f:b9:9b:65:d1:59:00:a4:47:
e3:44:7b:ed:c7:41:c9:b2:d5:e1:8b:74:3a:1d:f9:
c7:87:a3:cb:da:41:f2:7d:cf:0e:03:a6:cc:ba:25:
7b:75:a1:7e:7e:15:52:dc:07:60:f9:4e:45:1a:3f:
82:e1:df:f7:1c:66:f0:4e:d4:eb:58:e0:c1:fd:de:
03:33:79:74:80:6f:4d:e7:6d:b3:89:8c:06:66:8f:
5f:db:7f:f4:da:f7:41:34:ee:4c:c8:d8:4d:89:b9:
7f:c1:b8:b6:e1:8e:20:f6:57:6b:d9:ba:08:07:2f:
5f:03:2b:4a:ab:58:db:de:3c:7d:ae:41:70:db:69:
9f:ae:50:2c:cc:58:09:92:02:ee:a2:50:03:81:a6:
d1:cb:d1:63:f2:73:7b:10:85:22:3c:53:5d:80:76:
8f:67:22:32:21:4e:46:cf:bf:59:62:b6:15:13:83:
8c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:87:38:5C:1A:5D:77:EC:5E:BB:CC:E0:C0:9F:CD:27:D2:30:5C:8F
X509v3 Authority Key Identifier:
keyid:30:6D:61:83:55:BD:89:37:F7:5B:B4:65:0B:B5:C1:AF:70:F9:A1:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MG1hg1W9iTf3W7RlC7XBr3D5oS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:d6:4c:ff:66:0f:52:5b:8e:00:bc:b7:00:32:fa:09:25:f2:
c3:9d:e7:15:56:ce:73:2a:80:d4:bb:f3:88:5c:35:e6:cf:8b:
f0:cf:58:e5:68:c4:44:20:e4:a1:9c:07:39:eb:b8:84:ae:a1:
a9:ff:57:fd:ad:40:c5:22:6b:4d:1b:1b:9b:a4:e9:b5:f8:25:
44:52:5a:26:52:c4:26:14:b3:23:1f:78:3e:ad:66:6a:fb:b0:
14:56:9d:2c:af:26:ed:12:19:1b:52:0b:c9:1c:3c:46:44:e5:
68:91:83:74:31:f6:70:2a:2a:ac:42:32:2e:67:5d:f7:6a:61:
90:ce:e1:0b:be:9d:33:45:54:f6:64:d2:fe:bf:f7:6c:7e:86:
45:bd:81:41:2a:c3:2f:1e:fb:c8:97:b4:bb:61:24:36:db:8b:
b0:2d:9f:e5:8a:79:c0:92:5b:38:33:32:82:ab:a2:4b:b7:4c:
c6:be:ae:ae:bb:47:42:9f:75:28:ad:fa:98:99:ce:c4:de:d7:
26:61:a0:d7:d0:86:18:0e:34:e4:2a:c2:8b:4d:4d:80:ec:a5:
0e:84:b4:ed:5d:7a:90:38:08:19:8d:59:5f:bd:4e:44:cf:83:
be:8a:10:89:3d:86:7b:7d:78:be:79:19:b5:be:d9:f4:0b:ce:
df:fe:e7:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn92O5GXmqkzzEiESHfa0hRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwNmQ2MTgzNTViZDg5MzdmNzViYjQ2NTBiYjVjMWFmNzBm
OWExMmUwHhcNMjUxMDE5MTkwMTE2WhcNMjUxMDIwMTkwMTE2WjAzMTEwLwYDVQQD
EyhjNDg3Mzg1YzFhNWQ3N2VjNWViYmNjZTBjMDlmY2QyN2QyMzA1YzhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkkYmFvVBauCThWunkHzq1v8v50m
Vo5LwqnR7CjEbfQYQUaMfWM6SrRJyjHA5XGQ1S3RIxco7zFmeH/24FvhiASpOU9z
79rgxwKMZIuhHACPuZtl0VkApEfjRHvtx0HJstXhi3Q6HfnHh6PL2kHyfc8OA6bM
uiV7daF+fhVS3Adg+U5FGj+C4d/3HGbwTtTrWODB/d4DM3l0gG9N522ziYwGZo9f
23/02vdBNO5MyNhNibl/wbi24Y4g9ldr2boIBy9fAytKq1jb3jx9rkFw22mfrlAs
zFgJkgLuolADgabRy9Fj8nN7EIUiPFNdgHaPZyIyIU5Gz79ZYrYVE4OM+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMSHOFwaXXfsXrvM4MCfzSfSMFyPMB8GA1UdIwQY
MBaAFDBtYYNVvYk391u0ZQu1wa9w+aEuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUcxaGcxVzlpVGYzVzdSbEM3WEJyM0Q1b1M0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi8zY2RlOWItMzcwNS00ZGMzLThkN2Ut
NTE2ZmZkODczNzZjLzEvTUcxaGcxVzlpVGYzVzdSbEM3WEJyM0Q1b1M0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi8zY2RlOWItMzcwNS00ZGMzLThkN2UtNTE2ZmZkODczNzZj
LzEvTUcxaGcxVzlpVGYzVzdSbEM3WEJyM0Q1b1M0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM9ZM/2YP
UluOALy3ADL6CSXyw53nFVbOcyqA1LvziFw15s+L8M9Y5WjERCDkoZwHOeu4hK6h
qf9X/a1AxSJrTRsbm6TptfglRFJaJlLEJhSzIx94Pq1mavuwFFadLK8m7RIZG1IL
yRw8RkTlaJGDdDH2cCoqrEIyLmdd92phkM7hC76dM0VU9mTS/r/3bH6GRb2BQSrD
Lx77yJe0u2EkNtuLsC2f5Yp5wJJbODMygquiS7dMxr6urrtHQp91KK36mJnOxN7X
JmGg19CGGA405CrCi01NgOylDoS07V16kDgIGY1ZX71ORM+DvooQiT2Ge314vnkZ
tb7Z9AvO3/7nNg==
-----END CERTIFICATE-----
Generated at Mon Oct 20 02:29:53 2025 by rpki-client