Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.mft
File: Mgax0ge2XA69PyP6djABbYe0E0k.mft (raw, json)
Hash identifier: g75xc383ne0tB3DflKLFVkzjcONUIWcTvx9XteUaLzY=
Subject key identifier: C9:1A:6F:85:7C:78:61:9D:10:11:7F:75:63:AC:80:2B:D7:8E:1D:36
Authority key identifier: 32:06:B1:D2:07:B6:5C:0E:BD:3F:23:FA:76:30:01:6D:87:B4:13:49
Certificate issuer: /CN=3206b1d207b65c0ebd3f23fa7630016d87b41349
Certificate serial: 019A00A3046A0BA5EB79DCD96C6AE9FBEFA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mgax0ge2XA69PyP6djABbYe0E0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.mft
Manifest number: 0703
Signing time: Mon 20 Oct 2025 08:01:14 +0000
Manifest this update: Mon 20 Oct 2025 08:01:14 +0000
Manifest next update: Tue 21 Oct 2025 08:01:14 +0000
Files and hashes: 1: M2KDR8dr7-7ZyhSIDyzwELKYUdM.roa (hash: p4F925/VSgNOhwfLh+ZxgpZFhtfFkVdXlw/7VfsIDVw=)
2: Mgax0ge2XA69PyP6djABbYe0E0k.crl (hash: tA872QdJdWH7T2TM0F0F3CofrryLBcmK9mzEwH6REPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mgax0ge2XA69PyP6djABbYe0E0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 08:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:a3:04:6a:0b:a5:eb:79:dc:d9:6c:6a:e9:fb:ef:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3206b1d207b65c0ebd3f23fa7630016d87b41349
Validity
Not Before: Oct 20 08:01:14 2025 GMT
Not After : Oct 21 08:01:14 2025 GMT
Subject: CN=c91a6f857c78619d10117f7563ac802bd78e1d36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5e:25:72:5e:42:c2:7b:6e:77:81:c1:65:a8:
83:bb:09:d5:4e:db:2f:1d:ea:c3:d2:d0:7c:80:69:
c0:24:7b:83:4a:15:44:d3:50:56:eb:21:e6:8c:17:
b3:c4:9b:89:82:80:0a:c7:44:c5:d5:52:92:ba:fa:
5d:2d:5a:39:18:7a:08:c1:8e:c6:ab:91:2b:0b:94:
08:a1:c6:93:08:db:2f:0a:b6:8b:5c:d3:f5:5d:7d:
f2:51:2c:0a:58:9a:3e:e3:22:d5:c8:bb:f7:e4:4c:
cb:8b:d5:8a:97:eb:53:fd:b4:8d:ce:e9:2a:9c:7c:
d1:09:f2:b9:5b:e1:c0:db:3a:73:17:5d:c2:98:19:
60:28:1f:02:01:10:2f:80:6f:25:67:56:a2:0c:fe:
59:1a:08:87:b8:a3:9a:6a:8a:34:3e:33:ec:0a:f5:
0c:4a:9e:f8:e2:d2:18:c2:c3:34:17:de:78:7c:97:
fc:f6:31:aa:d7:7e:79:7c:b1:44:ba:8d:77:2b:d0:
0b:3e:82:4b:86:ec:5e:30:26:06:46:24:af:1d:58:
f6:45:2a:06:2a:81:85:21:3e:59:40:7f:e6:32:d0:
8a:84:5f:5c:4a:cc:e0:85:9b:b5:7c:ca:42:6f:72:
85:a7:4f:06:b3:7c:a1:be:81:de:50:45:6e:be:00:
37:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:1A:6F:85:7C:78:61:9D:10:11:7F:75:63:AC:80:2B:D7:8E:1D:36
X509v3 Authority Key Identifier:
keyid:32:06:B1:D2:07:B6:5C:0E:BD:3F:23:FA:76:30:01:6D:87:B4:13:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mgax0ge2XA69PyP6djABbYe0E0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:77:63:8c:e3:03:58:bf:f1:e9:dd:21:3b:c7:38:f1:bd:b6:
65:d9:e1:67:22:95:d6:cf:ee:87:c5:5e:4d:89:cc:1a:e4:b1:
e2:6c:1a:25:88:bd:70:34:8b:49:84:0b:33:1c:3e:d4:44:45:
52:c6:d6:6c:d1:c2:64:ac:b3:35:a1:35:91:3a:cf:f3:d0:7b:
fe:ec:af:0b:cc:02:1f:ac:67:b5:13:50:41:85:ca:89:51:b9:
1d:81:1f:93:23:23:50:cf:68:f1:32:1f:40:93:60:b3:0d:86:
63:fc:90:8f:02:cf:af:de:d0:9d:ab:d5:55:e7:3b:70:f1:be:
1a:9b:a1:5b:9c:a1:32:99:ed:0f:b2:d5:c7:4f:e7:92:63:5d:
64:34:11:ae:ac:f3:75:0a:f8:6f:b4:95:90:43:e6:3a:1c:5b:
d7:b6:84:fc:dc:bf:77:52:12:e3:c6:89:08:e1:1d:4c:ae:11:
5c:5a:9e:08:3b:4b:e0:08:3a:6a:20:9f:9f:36:c6:e7:32:70:
68:c8:cc:f7:2f:b9:f0:83:c4:62:e9:c6:63:da:fa:55:d0:59:
e7:6c:5a:85:3a:0a:63:49:7e:8b:b0:7e:6e:22:e5:ae:b9:2a:
d9:55:eb:ed:8a:2f:00:8d:a4:c8:06:86:cf:02:1c:18:1d:b2:
76:7f:e6:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:12:45 2025 by rpki-client