Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/10fce0-ee47-4ed4-a03d-0d4542920bcb/1/mgheBvLiouMEJW-IE1_xPectBzY.mft
File: mgheBvLiouMEJW-IE1_xPectBzY.mft (raw, json)
Hash identifier: hytR6Ejfh8r4hp6DqhPi50yZ9fVlYpO2xMqmGZXNndk=
Subject key identifier: E2:C7:B9:36:31:DB:8D:A5:8B:7E:5B:22:41:66:85:10:AE:E2:CB:39
Authority key identifier: 9A:08:5E:06:F2:E2:A2:E3:04:25:6F:88:13:5F:F1:3D:E7:2D:07:36
Certificate issuer: /CN=9a085e06f2e2a2e304256f88135ff13de72d0736
Certificate serial: 0199FC21BBF830EC774A39696C1F83554BDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mgheBvLiouMEJW-IE1_xPectBzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/10fce0-ee47-4ed4-a03d-0d4542920bcb/1/mgheBvLiouMEJW-IE1_xPectBzY.mft
Manifest number: 0DC0
Signing time: Sun 19 Oct 2025 11:01:33 +0000
Manifest this update: Sun 19 Oct 2025 11:01:33 +0000
Manifest next update: Mon 20 Oct 2025 11:01:33 +0000
Files and hashes: 1: 9Dg6tOo6O44yr7jeWe1ba9VjCFs.roa (hash: 26YW4jX+yyct0IS6KpfO0MNuSdKZWiF48vsQnmBErMk=)
2: mgheBvLiouMEJW-IE1_xPectBzY.crl (hash: 6ywhGgP9f1djPo6oJ9FrJeoSs2YDpQs3zyZtFHsVei8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/10fce0-ee47-4ed4-a03d-0d4542920bcb/1/mgheBvLiouMEJW-IE1_xPectBzY.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/10fce0-ee47-4ed4-a03d-0d4542920bcb/1/mgheBvLiouMEJW-IE1_xPectBzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/mgheBvLiouMEJW-IE1_xPectBzY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:bb:f8:30:ec:77:4a:39:69:6c:1f:83:55:4b:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a085e06f2e2a2e304256f88135ff13de72d0736
Validity
Not Before: Oct 19 11:01:33 2025 GMT
Not After : Oct 20 11:01:33 2025 GMT
Subject: CN=e2c7b93631db8da58b7e5b2241668510aee2cb39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ee:23:cf:5a:1b:ed:be:f9:90:3c:4a:52:12:
12:0c:ca:28:9a:e7:b4:dd:c9:c9:b7:18:ef:be:ab:
ee:b3:88:a5:98:2a:70:e4:93:63:76:f0:64:b1:79:
1c:ed:37:7c:7e:6d:5c:84:c2:ad:dd:cf:01:46:c8:
4a:01:a2:48:98:d2:c3:d4:c0:a0:b8:56:0b:f5:e5:
a3:ff:30:2b:2d:8e:6d:3e:57:62:8c:3e:3c:ce:be:
78:28:b7:3b:b9:17:d3:f5:7e:7c:d9:65:a9:f5:c2:
79:5f:6f:a1:90:4f:32:41:9a:6a:6e:45:b5:3e:e0:
cb:b5:86:fd:e7:e1:10:13:f6:44:6e:6b:bc:41:ef:
3e:5e:60:1b:32:c6:99:f2:df:ec:2a:32:b9:78:11:
48:a2:72:1b:3a:9a:f5:45:52:ed:79:fe:3e:5b:33:
8a:3c:c4:4a:50:5e:44:48:94:2d:3b:4b:a8:56:0b:
91:9a:9c:ca:d9:de:bc:64:02:0e:3c:42:e8:2e:64:
57:78:ba:10:d0:47:0a:18:94:47:5f:bc:11:48:82:
91:d5:27:6e:91:4b:67:8b:71:3c:25:a4:37:74:a9:
1a:92:a9:4d:61:89:d5:6c:d4:5b:c1:95:38:3e:79:
eb:9e:ef:c6:34:00:62:43:53:30:44:fe:41:3b:14:
5a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:C7:B9:36:31:DB:8D:A5:8B:7E:5B:22:41:66:85:10:AE:E2:CB:39
X509v3 Authority Key Identifier:
keyid:9A:08:5E:06:F2:E2:A2:E3:04:25:6F:88:13:5F:F1:3D:E7:2D:07:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mgheBvLiouMEJW-IE1_xPectBzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/10fce0-ee47-4ed4-a03d-0d4542920bcb/1/mgheBvLiouMEJW-IE1_xPectBzY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/10fce0-ee47-4ed4-a03d-0d4542920bcb/1/mgheBvLiouMEJW-IE1_xPectBzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:36:b9:a4:cf:9e:6e:a5:0b:17:15:f4:81:11:f6:6d:56:9c:
4f:ba:5a:a1:5b:ba:e2:7e:d8:5d:f4:df:02:a3:11:77:5a:24:
48:71:07:8a:0b:6b:ba:21:e9:5a:33:09:71:ca:66:5d:03:fa:
f1:af:9d:e3:7b:59:2f:6f:e3:57:c2:d5:e8:51:ba:80:47:94:
e8:53:ca:da:4e:10:38:19:ab:b7:92:3a:39:90:8a:d4:53:57:
b0:5d:79:53:4a:d8:b4:d6:de:a7:a1:a3:d6:03:06:d4:15:ca:
78:ac:5c:24:46:0b:e3:f8:d6:0b:aa:d0:9e:3e:90:f5:fc:af:
5b:96:2a:bd:bb:42:f5:b2:00:f3:f5:06:70:cc:50:ae:cf:5d:
42:0a:81:20:84:bc:e3:6f:f7:cd:ce:26:91:c3:f5:74:ce:fe:
25:c4:c2:b0:c7:1f:f7:82:dd:7c:cf:5d:dc:93:a8:df:82:1e:
17:da:19:5c:ce:03:4d:bc:4f:eb:7b:28:5f:b4:59:73:b3:7b:
3a:00:a6:56:be:8b:a6:8d:70:de:58:1c:0a:d9:c9:3b:62:86:
e8:14:7a:fe:08:c3:ac:ca:50:b7:a3:8d:50:a3:ad:34:cb:04:
fd:4b:b7:e0:c2:97:3b:7a:fb:df:85:d9:c1:c6:a8:c4:ec:b7:
54:c2:f9:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:49:18 2025 by rpki-client