Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/3d838c-8622-4e58-870f-de9e02d41797/1/mgdjMrvSgPCFLbafYVsPFJkUgxs.mft
File: mgdjMrvSgPCFLbafYVsPFJkUgxs.mft (raw, json)
Hash identifier: eLSXvjLN0CXlj78bV69zV+GruayoC6aycPJm03EHgdo=
Subject key identifier: 80:A4:DB:C7:71:02:AA:05:D7:81:95:60:EA:2A:B1:B9:CF:36:08:DD
Authority key identifier: 9A:07:63:32:BB:D2:80:F0:85:2D:B6:9F:61:5B:0F:14:99:14:83:1B
Certificate issuer: /CN=9a076332bbd280f0852db69f615b0f149914831b
Certificate serial: 0199FD340F506C0ADAEEA992E53AA5B4913A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mgdjMrvSgPCFLbafYVsPFJkUgxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/3d838c-8622-4e58-870f-de9e02d41797/1/mgdjMrvSgPCFLbafYVsPFJkUgxs.mft
Manifest number: 046F
Signing time: Sun 19 Oct 2025 16:01:11 +0000
Manifest this update: Sun 19 Oct 2025 16:01:11 +0000
Manifest next update: Mon 20 Oct 2025 16:01:11 +0000
Files and hashes: 1: mgdjMrvSgPCFLbafYVsPFJkUgxs.crl (hash: nABnYqt12pi/Dw1nudlkji7w0zo1+v58PvZyjiqyWds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/3d838c-8622-4e58-870f-de9e02d41797/1/mgdjMrvSgPCFLbafYVsPFJkUgxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/3d838c-8622-4e58-870f-de9e02d41797/1/mgdjMrvSgPCFLbafYVsPFJkUgxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/mgdjMrvSgPCFLbafYVsPFJkUgxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:0f:50:6c:0a:da:ee:a9:92:e5:3a:a5:b4:91:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a076332bbd280f0852db69f615b0f149914831b
Validity
Not Before: Oct 19 16:01:11 2025 GMT
Not After : Oct 20 16:01:11 2025 GMT
Subject: CN=80a4dbc77102aa05d7819560ea2ab1b9cf3608dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:5a:44:51:40:f3:92:ae:5e:4d:a3:d0:66:f0:
b0:82:b5:59:fe:6c:aa:e5:5e:9c:5f:18:52:ac:99:
2c:f7:25:1b:5c:ae:08:c4:6f:f3:5b:dd:fd:a1:f7:
81:a1:54:bc:4e:78:b9:ab:00:de:cf:d5:f2:cf:a5:
4a:a9:3c:a3:0b:38:2f:15:9d:77:8c:1e:73:94:2a:
61:25:ae:00:70:a4:47:05:43:09:06:0a:4d:41:9a:
ef:7c:77:f0:9b:1e:26:a2:fe:85:fc:a3:c2:34:0b:
a1:5f:ae:2d:be:7a:44:33:5a:d1:11:b0:28:59:bb:
d4:1f:01:37:0d:7a:a3:95:08:10:29:0b:d6:f1:c4:
95:a7:9a:88:32:1c:0d:9b:51:27:e3:a4:79:0f:06:
ae:ce:3c:35:01:f7:29:2d:de:b6:1b:16:a4:e0:64:
15:b5:1b:e7:1a:df:8f:07:d4:fd:60:4a:ab:ce:10:
48:d4:aa:e7:b8:11:2c:64:ab:23:50:d3:9f:7e:39:
87:d8:27:49:76:81:92:27:d9:b0:8c:30:7e:19:55:
b6:4b:89:2c:bb:36:48:80:13:25:d6:db:f0:c3:c6:
e2:1b:2f:b1:a3:2d:d4:2f:49:17:e6:f4:2c:a4:62:
af:35:43:59:15:e8:cb:99:ba:69:16:4d:db:31:89:
4c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:A4:DB:C7:71:02:AA:05:D7:81:95:60:EA:2A:B1:B9:CF:36:08:DD
X509v3 Authority Key Identifier:
keyid:9A:07:63:32:BB:D2:80:F0:85:2D:B6:9F:61:5B:0F:14:99:14:83:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mgdjMrvSgPCFLbafYVsPFJkUgxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3d838c-8622-4e58-870f-de9e02d41797/1/mgdjMrvSgPCFLbafYVsPFJkUgxs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3d838c-8622-4e58-870f-de9e02d41797/1/mgdjMrvSgPCFLbafYVsPFJkUgxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:91:dd:86:cb:3f:50:b3:e2:41:70:59:7e:15:a7:45:5b:37:
85:fb:8d:a2:7e:07:6b:2a:de:48:69:85:f7:38:b7:d4:2c:84:
d6:09:58:64:82:70:a2:79:4e:6c:9b:31:c2:44:76:a3:7a:76:
83:07:aa:38:ab:8b:6c:e2:af:88:ed:30:29:d4:6c:21:c6:53:
93:f0:07:b0:dd:bf:3d:e1:3e:a8:05:16:81:6c:68:f2:58:97:
d6:7f:ef:08:0b:bb:b1:01:9d:0e:24:6b:ec:ea:04:80:94:04:
72:a9:58:b1:58:84:fc:b3:58:0c:21:86:f8:c6:f2:5e:23:61:
b3:2b:95:58:23:7a:36:13:9c:30:3b:7a:3c:54:a0:f6:ed:58:
bb:7e:e1:3d:83:30:c4:32:b2:8e:ae:62:d1:47:f3:ea:4d:a6:
a5:c7:06:53:6e:f9:b3:cb:5e:be:b5:e5:30:92:58:81:f2:8d:
50:e8:49:94:70:48:52:05:12:5e:e4:b8:60:c2:96:de:1a:b0:
f0:ab:55:f8:2e:41:08:a8:b1:94:d5:f8:63:c5:35:9a:ca:2c:
79:43:2c:2c:3d:03:96:3e:7a:27:21:47:d7:2b:b6:8e:3a:db:
9b:32:1d:ef:ba:8a:ed:d6:70:bc:ac:49:34:9b:c1:b5:1e:94:
44:e2:84:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9NA9QbAra7qmS5TqltJE6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhMDc2MzMyYmJkMjgwZjA4NTJkYjY5ZjYxNWIwZjE0OTkx
NDgzMWIwHhcNMjUxMDE5MTYwMTExWhcNMjUxMDIwMTYwMTExWjAzMTEwLwYDVQQD
Eyg4MGE0ZGJjNzcxMDJhYTA1ZDc4MTk1NjBlYTJhYjFiOWNmMzYwOGRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx1pEUUDzkq5eTaPQZvCwgrVZ/myq
5V6cXxhSrJks9yUbXK4IxG/zW939ofeBoVS8Tni5qwDez9Xyz6VKqTyjCzgvFZ13
jB5zlCphJa4AcKRHBUMJBgpNQZrvfHfwmx4mov6F/KPCNAuhX64tvnpEM1rREbAo
WbvUHwE3DXqjlQgQKQvW8cSVp5qIMhwNm1En46R5Dwauzjw1AfcpLd62Gxak4GQV
tRvnGt+PB9T9YEqrzhBI1KrnuBEsZKsjUNOffjmH2CdJdoGSJ9mwjDB+GVW2S4ks
uzZIgBMl1tvww8biGy+xoy3UL0kX5vQspGKvNUNZFejLmbppFk3bMYlMBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFICk28dxAqoF14GVYOoqsbnPNgjdMB8GA1UdIwQY
MBaAFJoHYzK70oDwhS22n2FbDxSZFIMbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWdkak1ydlNnUENGTGJhZllWc1BGSmtVZ3hzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8zZDgzOGMtODYyMi00ZTU4LTg3MGYt
ZGU5ZTAyZDQxNzk3LzEvbWdkak1ydlNnUENGTGJhZllWc1BGSmtVZ3hzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy8zZDgzOGMtODYyMi00ZTU4LTg3MGYtZGU5ZTAyZDQxNzk3
LzEvbWdkak1ydlNnUENGTGJhZllWc1BGSmtVZ3hzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEZHdhss/
ULPiQXBZfhWnRVs3hfuNon4HayreSGmF9zi31CyE1glYZIJwonlObJsxwkR2o3p2
gweqOKuLbOKviO0wKdRsIcZTk/AHsN2/PeE+qAUWgWxo8liX1n/vCAu7sQGdDiRr
7OoEgJQEcqlYsViE/LNYDCGG+MbyXiNhsyuVWCN6NhOcMDt6PFSg9u1Yu37hPYMw
xDKyjq5i0Ufz6k2mpccGU275s8tevrXlMJJYgfKNUOhJlHBIUgUSXuS4YMKW3hqw
8KtV+C5BCKixlNX4Y8U1msoseUMsLD0Dlj56JyFH1yu2jjrbmzId77qK7dZwvKxJ
NJvBtR6UROKETQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:56:04 2025 by rpki-client