Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/624e63-b876-4ef4-bf19-e43620880cb6/1/MgJHUW6RAX4tvLVyyg8poSKBrPA.mft
File: MgJHUW6RAX4tvLVyyg8poSKBrPA.mft (raw, json)
Hash identifier: rl/6F1jtOhFOvkYZ2U1z62EtZL24zrYAf1lh1cGNSts=
Subject key identifier: BC:17:21:23:FD:D0:CD:50:63:CB:2E:08:E5:04:AC:97:0A:C4:C3:47
Authority key identifier: 32:02:47:51:6E:91:01:7E:2D:BC:B5:72:CA:0F:29:A1:22:81:AC:F0
Certificate issuer: /CN=320247516e91017e2dbcb572ca0f29a12281acf0
Certificate serial: 0199FB0F19D4E0D85AB21CD8965E98A48FDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MgJHUW6RAX4tvLVyyg8poSKBrPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/624e63-b876-4ef4-bf19-e43620880cb6/1/MgJHUW6RAX4tvLVyyg8poSKBrPA.mft
Manifest number: 0589
Signing time: Sun 19 Oct 2025 06:01:34 +0000
Manifest this update: Sun 19 Oct 2025 06:01:34 +0000
Manifest next update: Mon 20 Oct 2025 06:01:34 +0000
Files and hashes: 1: MgJHUW6RAX4tvLVyyg8poSKBrPA.crl (hash: 4MvDXyRgQdV63GSCFEqhO6VNDFRhNX6p6tDTF0+3too=)
2: m7C6K0Dm5PPkueps5pZmHrJAHsQ.roa (hash: keru/3nPFQZwhtdrj8XoRvNJqtUTfDmo1KvvBMCi2Bg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/624e63-b876-4ef4-bf19-e43620880cb6/1/MgJHUW6RAX4tvLVyyg8poSKBrPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/624e63-b876-4ef4-bf19-e43620880cb6/1/MgJHUW6RAX4tvLVyyg8poSKBrPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/MgJHUW6RAX4tvLVyyg8poSKBrPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0f:19:d4:e0:d8:5a:b2:1c:d8:96:5e:98:a4:8f:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=320247516e91017e2dbcb572ca0f29a12281acf0
Validity
Not Before: Oct 19 06:01:34 2025 GMT
Not After : Oct 20 06:01:34 2025 GMT
Subject: CN=bc172123fdd0cd5063cb2e08e504ac970ac4c347
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:4b:ab:e3:73:33:40:10:97:83:b5:0c:a4:70:
64:c7:eb:04:85:d3:9d:a8:2e:0d:76:17:d7:08:01:
13:f0:8c:d6:8d:33:3c:7d:2c:02:31:38:cb:b7:83:
f5:b3:72:c7:d5:7e:83:f1:65:2e:a2:fb:fd:10:82:
48:23:5e:21:6d:12:ef:d1:8f:5b:4e:6b:05:3b:61:
d3:31:3c:1c:a7:e2:30:51:33:eb:33:b9:65:d2:cc:
a7:48:f9:0b:d5:98:e5:dc:71:86:b2:d6:e4:4b:76:
15:80:21:ef:07:43:80:a7:09:d6:e0:73:44:a8:ea:
24:45:b2:88:ed:40:61:88:5d:dd:ae:d2:ba:79:95:
74:6f:5d:04:5f:8d:96:01:e1:a3:29:ca:12:78:6c:
7f:57:75:63:48:3d:8f:29:57:c4:6a:81:b0:a6:64:
9a:cd:4e:1d:7c:3c:d2:db:99:e0:27:8f:b1:0f:1c:
62:c1:4f:55:90:8a:e0:c1:91:55:0d:51:96:19:c3:
68:19:da:d8:04:1d:af:2a:a3:3b:33:02:83:25:52:
25:21:5f:59:90:d4:76:35:e9:91:80:e0:0c:28:d8:
c8:ce:52:23:09:b1:15:98:4e:01:63:4b:6f:bd:f0:
00:fe:8d:70:56:70:08:92:35:38:36:18:14:5c:a0:
ae:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:17:21:23:FD:D0:CD:50:63:CB:2E:08:E5:04:AC:97:0A:C4:C3:47
X509v3 Authority Key Identifier:
keyid:32:02:47:51:6E:91:01:7E:2D:BC:B5:72:CA:0F:29:A1:22:81:AC:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MgJHUW6RAX4tvLVyyg8poSKBrPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/624e63-b876-4ef4-bf19-e43620880cb6/1/MgJHUW6RAX4tvLVyyg8poSKBrPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/624e63-b876-4ef4-bf19-e43620880cb6/1/MgJHUW6RAX4tvLVyyg8poSKBrPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:09:05:b8:76:78:36:c3:af:1e:fc:af:d8:09:f3:e2:d0:be:
36:d1:5a:25:47:f6:66:e5:90:e1:de:66:77:d3:07:75:a1:08:
86:f3:2e:bc:e6:20:4d:48:98:a6:ae:bd:31:ab:9a:f1:78:aa:
fc:43:42:61:f2:d2:84:ee:d3:05:4a:ea:3e:8a:0e:43:ab:7c:
f9:2c:b3:65:f1:fb:da:7a:12:6d:12:43:80:6c:61:5b:f9:8f:
4e:b7:ce:11:03:80:2d:50:c4:86:b0:82:4a:12:f4:b8:04:d8:
ad:6b:de:8b:6f:0f:c7:5c:d0:ea:35:5a:a3:6b:b0:21:b2:ff:
68:63:c1:f3:a7:18:f4:fd:0d:75:2a:ac:9b:9a:57:12:d0:91:
e8:00:dd:06:53:63:08:1f:0b:3a:7f:aa:63:06:c5:2e:38:34:
00:53:a6:d0:26:37:40:70:79:f1:86:ff:3f:11:db:e5:65:56:
dd:65:51:3e:9d:e1:f9:34:6f:c3:d0:90:c9:f6:56:bd:81:13:
02:37:0d:71:58:86:0a:d6:9e:12:7e:2c:0e:12:40:2c:90:1c:
f2:a0:6d:55:b6:28:86:a6:11:ff:06:ec:d2:b7:16:23:6a:45:
f7:11:81:92:84:c4:1a:5a:87:38:5c:86:5b:b2:90:2e:25:d5:
71:2d:a9:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:43:22 2025 by rpki-client