Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/232cfd-76dc-49e9-a94d-5188ea17d9a9/1/MGavc-_zrCH_F6CVL_Nw5gykS10.mft
File: MGavc-_zrCH_F6CVL_Nw5gykS10.mft (raw, json)
Hash identifier: g92EAdHv3a8YkLp0qnz/3w75pZZG9++yuNo/6WMcPTs=
Subject key identifier: 8F:CD:49:2A:FC:E8:CF:49:54:02:44:73:D5:F1:DD:A4:F7:5D:C0:93
Authority key identifier: 30:66:AF:73:EF:F3:AC:21:FF:17:A0:95:2F:F3:70:E6:0C:A4:4B:5D
Certificate issuer: /CN=3066af73eff3ac21ff17a0952ff370e60ca44b5d
Certificate serial: 0199FBEBC83EC624CC460A18076C19BE07B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MGavc-_zrCH_F6CVL_Nw5gykS10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/232cfd-76dc-49e9-a94d-5188ea17d9a9/1/MGavc-_zrCH_F6CVL_Nw5gykS10.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 10:02:37 +0000
Manifest this update: Sun 19 Oct 2025 10:02:37 +0000
Manifest next update: Mon 20 Oct 2025 10:02:37 +0000
Files and hashes: 1: MGavc-_zrCH_F6CVL_Nw5gykS10.crl (hash: EqLWaUmPSgw0UUM+8KMtZnzfk83KnQGjWNtkCQFvb8o=)
2: iic_3MWvnXwRjdS-4rnJnbVlZdw.roa (hash: ft3o3Jhs8krX+yoAKh9srXW+5Ly/fpaA/Ux+H2kgUMA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/232cfd-76dc-49e9-a94d-5188ea17d9a9/1/MGavc-_zrCH_F6CVL_Nw5gykS10.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/232cfd-76dc-49e9-a94d-5188ea17d9a9/1/MGavc-_zrCH_F6CVL_Nw5gykS10.mft
rsync://rpki.ripe.net/repository/DEFAULT/MGavc-_zrCH_F6CVL_Nw5gykS10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:c8:3e:c6:24:cc:46:0a:18:07:6c:19:be:07:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3066af73eff3ac21ff17a0952ff370e60ca44b5d
Validity
Not Before: Oct 19 10:02:37 2025 GMT
Not After : Oct 20 10:02:37 2025 GMT
Subject: CN=8fcd492afce8cf4954024473d5f1dda4f75dc093
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:97:14:4c:ed:be:d2:6e:53:e9:c5:09:6a:59:
85:45:a6:c6:1e:ea:1f:fb:ca:9f:75:3a:ba:ad:59:
94:f2:00:d5:b5:b9:dd:fc:f7:18:c2:3d:29:31:1c:
e9:ef:d9:b6:23:e2:9a:99:13:67:42:2c:cf:81:b4:
69:32:5e:71:39:00:d8:b6:18:ad:b7:6a:ac:ce:b6:
1a:1f:45:62:63:cd:ee:90:a5:f9:19:00:a4:0b:90:
aa:46:f9:ef:ff:b1:9a:fa:d5:23:e8:a8:db:1e:96:
b9:36:f0:cc:8b:17:ee:0a:f5:7f:0c:2c:22:55:22:
41:88:4b:ff:0a:3c:b7:18:a6:08:ef:91:38:cb:2e:
42:62:7d:bb:07:0b:5b:78:2a:d1:96:f9:4d:9e:8c:
7c:f0:b8:20:96:ab:04:9e:b1:f3:eb:25:a3:91:fe:
8d:c0:ee:ba:36:9e:89:e4:15:51:74:8b:4d:d2:f1:
d6:61:0a:36:76:8b:66:9b:93:1f:c1:7d:b0:83:54:
b8:01:9c:86:47:97:51:ac:52:94:ff:d4:1e:b4:43:
bf:ce:0f:80:7c:0d:6d:15:c6:d7:9e:a9:0b:dd:1b:
72:19:c1:57:aa:da:35:e2:8e:a4:4e:c6:51:98:bd:
ed:3f:29:25:18:d3:a2:44:5a:69:8f:fb:9a:1e:4b:
39:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:CD:49:2A:FC:E8:CF:49:54:02:44:73:D5:F1:DD:A4:F7:5D:C0:93
X509v3 Authority Key Identifier:
keyid:30:66:AF:73:EF:F3:AC:21:FF:17:A0:95:2F:F3:70:E6:0C:A4:4B:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGavc-_zrCH_F6CVL_Nw5gykS10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/232cfd-76dc-49e9-a94d-5188ea17d9a9/1/MGavc-_zrCH_F6CVL_Nw5gykS10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/232cfd-76dc-49e9-a94d-5188ea17d9a9/1/MGavc-_zrCH_F6CVL_Nw5gykS10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:30:31:4b:7d:d8:7f:96:52:e2:c4:ba:ae:66:d4:05:7c:1b:
6c:2e:60:a5:ef:2d:74:06:2e:ab:46:84:bb:bf:05:f8:61:a9:
da:0a:cf:23:ed:81:ca:b4:7c:4d:9a:7f:ac:80:2c:cb:88:49:
88:d2:54:fe:2b:50:5a:96:ac:09:42:2d:97:3c:64:db:ca:58:
7e:fc:2f:4a:80:ca:c4:c0:5f:34:bf:37:4f:80:1b:7c:12:f4:
94:16:c4:c8:5c:8f:10:cc:f2:ec:76:05:4a:63:16:02:f6:3d:
f3:8d:1c:bf:3f:68:de:fd:e7:3b:48:17:e5:3b:41:e2:09:76:
64:07:37:4a:fd:3f:53:44:a0:e1:3e:f1:e3:b7:82:57:b1:93:
e7:1b:27:7c:5c:3a:c5:13:5f:bc:5d:82:6d:52:58:e4:ca:69:
cd:0f:a1:19:4d:1a:5e:69:28:ca:a9:a3:83:fa:32:26:fb:51:
ed:3d:37:6d:ee:76:e5:df:aa:55:19:2d:e8:d0:92:b8:a5:df:
85:70:c5:c5:f4:2b:70:1a:ff:ce:3b:af:17:dc:05:e1:d9:5d:
96:2a:55:81:13:d2:d9:4a:8d:ea:43:2d:80:7e:7e:26:01:47:
24:95:d4:0f:b4:00:c0:03:36:e8:ed:c0:bb:79:b8:64:20:40:
e5:33:01:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:13:38 2025 by rpki-client