
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/01f6ed-7b86-4f76-828f-4e19239f0c35/1/MGg8_6Bh8oqeETXJ_DA3amR0y_Q.mft
File: MGg8_6Bh8oqeETXJ_DA3amR0y_Q.mft (raw, json)
Hash identifier: IL04xw4N7KDPM75S1JVkiA85EbT8ljO/YmYO3oNwVow=
Subject key identifier: BA:87:E4:FF:BE:9A:CB:80:0E:D1:5C:A3:22:5D:EC:2F:2C:02:8C:61
Authority key identifier: 30:68:3C:FF:A0:61:F2:8A:9E:11:35:C9:FC:30:37:6A:64:74:CB:F4
Certificate issuer: /CN=30683cffa061f28a9e1135c9fc30376a6474cbf4
Certificate serial: 0199FB7CD06C0C692B8CEB6429E7D78FFBAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MGg8_6Bh8oqeETXJ_DA3amR0y_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/01f6ed-7b86-4f76-828f-4e19239f0c35/1/MGg8_6Bh8oqeETXJ_DA3amR0y_Q.mft
Manifest number: 1556
Signing time: Sun 19 Oct 2025 08:01:24 +0000
Manifest this update: Sun 19 Oct 2025 08:01:24 +0000
Manifest next update: Mon 20 Oct 2025 08:01:24 +0000
Files and hashes: 1: 2B-FwUEQx6Nr4Ray6DAMUlw7Mv8.roa (hash: BBGC/ULum47ycUnwMz9z0fK4GgKW3TWVfbzBiHksvmc=)
2: GtTmoRT7XNVXBnXOsHZVf63eiDE.roa (hash: D+k5RJe28ejPSPya6Jjm6aV5eby1Bwyad8Nl2+QCWeE=)
3: MGg8_6Bh8oqeETXJ_DA3amR0y_Q.crl (hash: OXtVE2JddzwKu0A26AIbcfJSvYXP2+9jVFImkpx21CQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/01f6ed-7b86-4f76-828f-4e19239f0c35/1/MGg8_6Bh8oqeETXJ_DA3amR0y_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/01f6ed-7b86-4f76-828f-4e19239f0c35/1/MGg8_6Bh8oqeETXJ_DA3amR0y_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/MGg8_6Bh8oqeETXJ_DA3amR0y_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:d0:6c:0c:69:2b:8c:eb:64:29:e7:d7:8f:fb:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30683cffa061f28a9e1135c9fc30376a6474cbf4
Validity
Not Before: Oct 19 08:01:24 2025 GMT
Not After : Oct 20 08:01:24 2025 GMT
Subject: CN=ba87e4ffbe9acb800ed15ca3225dec2f2c028c61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:bb:84:4e:4f:2a:2c:9e:14:f9:e3:83:17:13:
cd:4a:53:ef:22:38:1a:18:60:78:b4:d5:bf:92:ee:
88:71:ce:75:3a:14:db:f9:04:89:83:db:50:90:10:
47:2a:a9:69:02:2e:f3:17:6b:2e:e1:36:0f:d1:f5:
e6:53:c4:2e:9a:d6:c4:a0:b0:ed:ea:45:cd:76:58:
a2:13:a8:08:fe:c6:6c:c9:3c:41:10:6c:c6:b1:40:
6c:23:17:7f:af:63:11:89:1e:cd:a4:66:d9:a9:9a:
e7:1c:67:64:b9:5e:38:ce:c7:e7:f2:be:b7:a2:2d:
fe:35:f5:55:b5:77:7a:63:a7:a2:3c:fc:76:45:ba:
95:c4:0f:da:a3:f2:a9:7b:89:5d:28:98:5b:02:b7:
42:56:44:0a:6d:0b:db:ed:91:16:6d:56:ea:6c:6f:
a7:1d:55:d7:2c:96:53:ad:6e:d6:57:bd:13:ed:e1:
34:ba:9e:d5:3c:b9:6c:59:21:04:4a:79:f1:9b:3c:
27:12:73:a8:57:3a:55:e4:b0:4a:48:af:e5:08:ad:
1c:7c:ca:0f:87:54:74:de:18:75:0b:30:43:ef:b2:
7a:4a:a9:6e:5f:1c:c0:07:a4:82:72:a8:62:54:cd:
8f:be:64:d4:04:f6:be:08:bc:b2:f3:06:d3:b9:50:
e2:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:87:E4:FF:BE:9A:CB:80:0E:D1:5C:A3:22:5D:EC:2F:2C:02:8C:61
X509v3 Authority Key Identifier:
keyid:30:68:3C:FF:A0:61:F2:8A:9E:11:35:C9:FC:30:37:6A:64:74:CB:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGg8_6Bh8oqeETXJ_DA3amR0y_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/01f6ed-7b86-4f76-828f-4e19239f0c35/1/MGg8_6Bh8oqeETXJ_DA3amR0y_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/01f6ed-7b86-4f76-828f-4e19239f0c35/1/MGg8_6Bh8oqeETXJ_DA3amR0y_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:3e:a7:9a:e5:9d:e2:74:a2:6f:b8:b5:57:ab:c0:99:b1:99:
fa:19:6f:08:b5:18:3a:6c:fd:84:94:c6:86:5f:ce:f1:8b:dc:
05:59:0c:79:70:d3:b8:ca:ea:2f:db:60:ba:51:5f:19:f7:40:
ef:1a:57:f7:2d:0a:0a:c1:8e:b2:7e:9f:92:11:91:0b:a8:8c:
2e:16:d2:cf:ae:29:31:b0:11:48:3b:99:57:4e:c0:30:ec:d1:
37:75:88:6c:c7:ad:dd:de:1a:2f:4f:ab:f8:ed:41:c9:d6:cb:
fd:a8:36:aa:ee:7b:a4:4b:1b:1a:1a:08:b1:b1:c3:9f:dc:9d:
9e:d2:1c:00:f0:24:a9:c8:c0:fa:b9:96:19:57:62:21:f1:4a:
c8:35:36:3a:c0:72:66:9e:d8:f0:cf:16:da:31:63:22:67:77:
ab:23:5c:63:a5:51:63:6e:7c:06:0f:55:0d:5b:9a:0f:d1:21:
fb:58:fd:db:19:14:d6:a5:e3:12:de:b6:64:f9:84:e9:87:ce:
fa:bf:bd:49:18:9d:1d:c4:08:df:45:85:f4:13:b5:a6:5f:c7:
65:47:01:4c:15:59:3a:00:96:2f:13:09:c6:ff:85:6b:64:c2:
07:01:45:ea:ac:d4:8b:0e:65:a0:05:72:c9:8f:88:14:d1:14:
45:8a:4f:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:05:39 2025 by rpki-client