Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/4cba2f-4a5b-4435-8aec-923cb50abe2e/1/MGm6frw7Zy3QnsA0Th-AqhEx79A.mft
File: MGm6frw7Zy3QnsA0Th-AqhEx79A.mft (raw, json)
Hash identifier: iSC/30GvpRdJf/d70BYCW+LI3jQ3Y1u7Vk8+sOJ4MRc=
Subject key identifier: 96:30:A3:7F:33:4D:B8:37:94:D5:28:14:F3:19:01:83:DC:FE:92:48
Authority key identifier: 30:69:BA:7E:BC:3B:67:2D:D0:9E:C0:34:4E:1F:80:AA:11:31:EF:D0
Certificate issuer: /CN=3069ba7ebc3b672dd09ec0344e1f80aa1131efd0
Certificate serial: 0199FB7CC00BD7822771F5A97FEE157FA671
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MGm6frw7Zy3QnsA0Th-AqhEx79A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/4cba2f-4a5b-4435-8aec-923cb50abe2e/1/MGm6frw7Zy3QnsA0Th-AqhEx79A.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 08:01:20 +0000
Manifest this update: Sun 19 Oct 2025 08:01:20 +0000
Manifest next update: Mon 20 Oct 2025 08:01:20 +0000
Files and hashes: 1: MGm6frw7Zy3QnsA0Th-AqhEx79A.crl (hash: 4/K/7f9sKSLTR3TtDL13qCChaaHa7a1206vT2HJMVs4=)
2: eqJAEOy6NaY4mZwa5RQJfzteBn0.roa (hash: 4ycDfdQF4RJy7Cm3II/1bQM7j6qQFueYRHKWr/2hsvQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/4cba2f-4a5b-4435-8aec-923cb50abe2e/1/MGm6frw7Zy3QnsA0Th-AqhEx79A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/4cba2f-4a5b-4435-8aec-923cb50abe2e/1/MGm6frw7Zy3QnsA0Th-AqhEx79A.mft
rsync://rpki.ripe.net/repository/DEFAULT/MGm6frw7Zy3QnsA0Th-AqhEx79A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:c0:0b:d7:82:27:71:f5:a9:7f:ee:15:7f:a6:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3069ba7ebc3b672dd09ec0344e1f80aa1131efd0
Validity
Not Before: Oct 19 08:01:20 2025 GMT
Not After : Oct 20 08:01:20 2025 GMT
Subject: CN=9630a37f334db83794d52814f3190183dcfe9248
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:d3:cb:72:3b:98:f5:d4:37:b5:8b:16:a5:df:
76:d4:c7:ea:2b:35:38:bc:3f:33:d5:dd:b4:96:ff:
5a:5a:f9:2a:98:6d:1c:92:c7:a6:ec:c9:44:ff:0d:
44:df:96:20:05:fa:09:a2:1a:40:bd:ed:13:bf:a6:
2b:51:68:fc:00:81:25:63:16:7e:48:63:d9:d2:28:
66:f9:dc:4f:e7:e6:e4:b8:99:12:e8:3b:e8:53:02:
6b:53:9d:9d:3a:b5:4e:14:65:31:6e:f6:dc:43:e1:
9b:56:24:de:42:ad:b2:cb:54:8b:2c:2b:cc:b3:5d:
6c:0f:f6:26:d6:97:e4:4e:c8:c1:d1:be:b7:52:a1:
f3:2b:21:55:e3:06:39:38:75:bc:2c:0e:68:c7:d8:
d2:88:e1:77:5f:9b:c4:61:8e:d0:4f:08:93:01:15:
06:62:f2:1e:69:77:be:a4:b1:d1:64:77:bc:8a:ee:
80:06:28:12:81:d9:c2:1f:dc:d4:59:72:36:48:89:
d5:42:b2:9c:a6:b9:19:f0:d2:25:62:f4:91:9d:cd:
ab:da:62:e1:fe:df:a4:05:81:f2:53:cc:c3:b4:fb:
b7:ad:1d:b0:87:43:11:bf:01:39:00:8b:90:28:e9:
97:d0:48:8e:48:31:5c:86:0f:ac:d1:2c:0f:99:3e:
21:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:30:A3:7F:33:4D:B8:37:94:D5:28:14:F3:19:01:83:DC:FE:92:48
X509v3 Authority Key Identifier:
keyid:30:69:BA:7E:BC:3B:67:2D:D0:9E:C0:34:4E:1F:80:AA:11:31:EF:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGm6frw7Zy3QnsA0Th-AqhEx79A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4cba2f-4a5b-4435-8aec-923cb50abe2e/1/MGm6frw7Zy3QnsA0Th-AqhEx79A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4cba2f-4a5b-4435-8aec-923cb50abe2e/1/MGm6frw7Zy3QnsA0Th-AqhEx79A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:ce:f8:e9:a3:e8:d0:46:25:9a:6c:c7:4e:38:c2:82:64:e3:
68:a7:48:21:2c:7e:67:cc:0f:63:19:84:fe:5c:06:27:60:83:
c7:f3:3d:5a:65:19:8d:16:d5:31:bd:09:09:9e:f8:c6:6b:57:
56:f3:41:50:80:24:a3:68:da:f4:5f:eb:3f:dd:34:b3:22:f6:
18:e9:3e:92:ea:fd:7a:af:86:ae:a1:ab:9a:38:34:49:63:02:
62:9f:66:2b:b2:e8:13:30:0a:96:b9:b6:55:e9:d7:e0:9b:23:
36:06:2c:29:53:ee:c1:92:8c:66:27:8e:4e:73:b4:bc:69:b0:
9d:00:b0:62:97:c8:d2:29:74:34:1f:7b:f6:9e:b9:88:e2:07:
7a:20:33:e6:07:ac:b1:b2:6e:8b:39:b6:b8:79:ae:94:a6:15:
54:f7:80:6c:c6:4a:cf:c5:df:1b:0e:bd:7d:da:b7:b8:da:85:
c3:5f:a8:da:ad:04:e2:b2:64:db:92:dc:dd:c4:aa:a1:35:87:
3a:b9:31:34:2e:02:f3:72:cb:af:9b:a6:39:2a:a4:ee:a0:b4:
d3:0a:81:20:93:03:dc:72:53:31:d2:32:9f:01:c1:1f:73:4c:
f4:df:9f:48:f2:02:f0:b1:06:0e:37:9c:28:40:b0:3e:fc:6f:
e5:37:e7:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:40:40 2025 by rpki-client