Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/5908a9-0c0f-40ab-bfd6-69af0a6e989b/1/mBGGh_3W_4D7CYqe7vBt43f4XW4.mft
File: mBGGh_3W_4D7CYqe7vBt43f4XW4.mft (raw, json)
Hash identifier: CRSer9ddLWuqwbzVPD/DsAUETjf0+7tVmNM+qIy1yUU=
Subject key identifier: 42:B3:2B:91:17:99:9A:F3:8C:F5:CD:47:0A:76:78:03:56:B3:01:21
Authority key identifier: 98:11:86:87:FD:D6:FF:80:FB:09:8A:9E:EE:F0:6D:E3:77:F8:5D:6E
Certificate issuer: /CN=98118687fdd6ff80fb098a9eeef06de377f85d6e
Certificate serial: 0199FD349F6847867B5A214829226DBC674B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mBGGh_3W_4D7CYqe7vBt43f4XW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/5908a9-0c0f-40ab-bfd6-69af0a6e989b/1/mBGGh_3W_4D7CYqe7vBt43f4XW4.mft
Manifest number: 0C3D
Signing time: Sun 19 Oct 2025 16:01:48 +0000
Manifest this update: Sun 19 Oct 2025 16:01:48 +0000
Manifest next update: Mon 20 Oct 2025 16:01:48 +0000
Files and hashes: 1: 1lsllJIGemqZ89xHiZQkdlO1fKw.roa (hash: z+LS30vNnG/3Pd/eJpUiR3agQpnmviOChE1etXIcdSc=)
2: 3lXi1_g77NKzjT3HhPoXoOvjf4w.roa (hash: Ay8Ub8kwHojvnn8g9zm4+05FafWEgsI4HELIX5EKY7A=)
3: mBGGh_3W_4D7CYqe7vBt43f4XW4.crl (hash: 6LqhPFr+Yb6uTC1ftMo4S4mtcIO6S8tAwC0FhWszwLc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/5908a9-0c0f-40ab-bfd6-69af0a6e989b/1/mBGGh_3W_4D7CYqe7vBt43f4XW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/5908a9-0c0f-40ab-bfd6-69af0a6e989b/1/mBGGh_3W_4D7CYqe7vBt43f4XW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/mBGGh_3W_4D7CYqe7vBt43f4XW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:9f:68:47:86:7b:5a:21:48:29:22:6d:bc:67:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98118687fdd6ff80fb098a9eeef06de377f85d6e
Validity
Not Before: Oct 19 16:01:48 2025 GMT
Not After : Oct 20 16:01:48 2025 GMT
Subject: CN=42b32b9117999af38cf5cd470a76780356b30121
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:47:e0:2a:a4:68:82:8c:fc:86:1c:74:99:33:
fe:27:b2:3a:13:29:15:12:19:88:1f:ee:de:07:bc:
42:24:ee:05:67:e6:03:10:56:f3:9b:38:00:c0:11:
2a:7f:0d:95:0b:6e:71:2f:58:b1:53:c2:ed:bf:2b:
c8:a3:50:29:c7:76:fd:e0:98:dc:3d:b3:c7:47:23:
96:5b:66:68:38:21:8e:43:05:9f:64:d9:8b:29:c7:
d2:bb:94:85:ff:e1:59:07:91:de:80:39:0a:f1:1b:
44:74:fa:c5:1c:71:4a:10:49:ef:4a:27:33:5d:6e:
06:8f:fe:94:df:2a:c5:b7:4d:5e:bd:ce:f4:cf:28:
3b:de:4c:a9:a8:0d:e6:c5:ef:93:18:cc:88:8f:91:
7d:b7:16:6c:07:6b:3b:d8:1a:57:25:3b:a9:5e:cc:
e0:87:6e:b0:3a:54:72:81:c2:c2:62:04:08:81:15:
06:82:ac:76:b4:a2:8d:8e:9f:a4:36:2f:b0:ff:cb:
19:bc:c9:b7:e6:70:9e:87:ad:80:bd:6c:83:48:62:
08:3a:4f:20:cb:de:26:ba:b0:65:2f:75:9e:f0:7a:
f5:2e:48:ef:6a:d9:c0:8b:ea:9e:86:d1:f8:39:e2:
f2:03:8e:b3:7f:a7:ef:23:f2:dd:c8:68:cd:4d:b7:
92:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:B3:2B:91:17:99:9A:F3:8C:F5:CD:47:0A:76:78:03:56:B3:01:21
X509v3 Authority Key Identifier:
keyid:98:11:86:87:FD:D6:FF:80:FB:09:8A:9E:EE:F0:6D:E3:77:F8:5D:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mBGGh_3W_4D7CYqe7vBt43f4XW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/5908a9-0c0f-40ab-bfd6-69af0a6e989b/1/mBGGh_3W_4D7CYqe7vBt43f4XW4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/5908a9-0c0f-40ab-bfd6-69af0a6e989b/1/mBGGh_3W_4D7CYqe7vBt43f4XW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:2a:49:2c:bf:0d:ac:40:e0:d7:ab:c1:93:2b:56:60:db:76:
b0:ed:c4:c7:22:d0:b7:e6:84:ed:56:7b:38:9d:dc:3e:a9:7b:
c4:24:f9:27:c9:f7:b5:5f:aa:9a:a2:2a:4d:dd:09:05:7b:42:
26:0c:55:e1:bd:a5:c8:77:01:a3:0b:ea:7b:9e:81:e6:5f:91:
af:d6:f8:64:df:42:e6:10:64:91:35:31:ef:fd:13:7b:e5:47:
b2:36:23:59:db:dc:2c:7f:30:f9:44:0e:2d:be:ba:bf:e7:52:
9c:09:d1:8a:ba:7b:dc:01:dd:eb:41:f3:61:bc:32:33:64:0e:
6c:45:26:d6:c0:c0:a0:fa:32:25:91:94:6d:a4:bd:e9:3f:18:
20:e4:96:0c:d7:c4:0d:74:3d:6d:0f:e3:c9:cb:ef:8f:2a:3c:
31:13:77:ac:f6:e2:02:94:7b:98:1a:10:0e:45:84:34:8e:a3:
36:bb:36:18:b9:32:b6:f8:24:60:87:2d:4c:67:19:1c:79:5b:
44:3c:aa:32:64:7f:1f:e2:28:a5:69:5f:9e:c2:94:c4:b9:77:
93:c4:24:8f:04:3c:cb:46:40:ae:b1:63:6c:ae:3d:cb:01:1d:
79:9d:45:d7:e0:0f:60:f0:bb:5e:2b:29:fa:cc:09:80:b4:e3:
90:44:dc:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:49:26 2025 by rpki-client