
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.mft
File: rMGajH8XQRRJx9SP-TCNJIMulSs.mft (raw, json)
Hash identifier: mhpuHeZWoz64zj1NZ4YrrGrhGvU/tfmFIU2d9lY3VIQ=
Subject key identifier: A0:94:8E:1B:97:9C:9E:A1:03:61:4C:05:EC:4F:29:1C:EF:7A:E5:D6
Authority key identifier: AC:C1:9A:8C:7F:17:41:14:49:C7:D4:8F:F9:30:8D:24:83:2E:95:2B
Certificate issuer: /CN=acc19a8c7f17411449c7d48ff9308d24832e952b
Certificate serial: 0199FBEA9EA3D2498B007E627A49BE8EE695
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rMGajH8XQRRJx9SP-TCNJIMulSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 10:01:21 +0000
Manifest this update: Sun 19 Oct 2025 10:01:21 +0000
Manifest next update: Mon 20 Oct 2025 10:01:21 +0000
Files and hashes: 1: Qwfm7iyTFcUFA4cP-BGJUr6nVGo.roa (hash: cGT3x4JJQpP+f+7JmlJEaoJ5r1uUvYJMBAOOSckaWRE=)
2: rMGajH8XQRRJx9SP-TCNJIMulSs.crl (hash: B2dKGPOZZvAWEdwpYP/YbJupKTwPDC7lKPi4bSobzQo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.mft
rsync://rpki.ripe.net/repository/DEFAULT/rMGajH8XQRRJx9SP-TCNJIMulSs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:9e:a3:d2:49:8b:00:7e:62:7a:49:be:8e:e6:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acc19a8c7f17411449c7d48ff9308d24832e952b
Validity
Not Before: Oct 19 10:01:21 2025 GMT
Not After : Oct 20 10:01:21 2025 GMT
Subject: CN=a0948e1b979c9ea103614c05ec4f291cef7ae5d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:33:e5:b4:a3:7c:ab:90:67:84:50:62:16:34:
10:cc:74:54:00:7d:e7:9d:47:90:8e:0d:b3:7e:80:
c5:8b:84:72:41:8c:d6:8a:d0:10:dd:e2:3a:a5:b3:
47:29:b9:42:f7:b4:72:58:86:1b:85:2c:c8:a4:ee:
a7:27:ff:75:09:58:ca:4f:59:9b:31:e3:03:e3:44:
a6:a1:90:bd:e8:12:34:5b:b7:77:95:19:86:e2:23:
8e:a9:4c:0a:1c:6e:08:50:76:af:41:27:a6:f6:ee:
dc:1e:a6:f0:39:77:e8:15:55:f1:9d:ab:0f:2a:d2:
5e:29:fe:6f:45:46:be:43:da:a2:4d:da:e4:5b:a7:
e4:5e:22:65:5e:30:63:4a:aa:49:31:ea:3c:92:89:
44:de:99:fb:26:83:d2:be:ce:0b:72:b6:5a:d2:a4:
c5:4b:e3:6a:21:2e:c7:6a:8b:6d:a0:bd:9e:37:80:
6b:73:30:45:19:cf:8c:ce:fe:5f:5c:9a:90:d7:14:
ac:8c:f0:9d:3a:58:06:9b:e5:a3:93:79:a1:39:9c:
da:6e:1a:ca:b4:67:9a:27:aa:b5:52:dd:4e:00:ea:
1b:98:28:f9:02:66:e0:5c:e2:91:49:35:ed:e9:25:
99:49:5d:2c:7b:fe:86:c8:32:0d:35:b8:31:02:4e:
43:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:94:8E:1B:97:9C:9E:A1:03:61:4C:05:EC:4F:29:1C:EF:7A:E5:D6
X509v3 Authority Key Identifier:
keyid:AC:C1:9A:8C:7F:17:41:14:49:C7:D4:8F:F9:30:8D:24:83:2E:95:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rMGajH8XQRRJx9SP-TCNJIMulSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:20:64:99:87:d1:02:d1:dd:13:aa:be:4e:65:a7:59:26:73:
86:d5:0a:6b:2d:4d:76:bf:23:af:60:f8:36:d7:65:12:95:ef:
b6:ba:99:7c:7c:88:c0:ab:6e:83:72:45:0a:12:c3:76:0c:62:
68:c1:61:d1:c8:a8:89:88:ce:ca:27:35:c2:3e:76:ec:ab:c6:
6c:a6:c8:e2:1e:cb:7f:99:12:39:e8:7e:41:0e:c5:d5:61:13:
fe:4e:0c:a8:66:80:5b:18:e1:52:00:dc:6a:b4:54:06:4a:1d:
35:92:5b:ed:7c:c8:bf:1f:e3:20:6e:e6:fa:16:0d:f8:e9:38:
85:00:71:ca:72:9f:9d:43:3c:b5:14:c5:23:db:f9:87:c4:8a:
7a:1f:d9:9c:88:84:ae:c2:bf:f3:ca:a6:fd:ea:ef:49:3b:e6:
a0:64:17:3d:10:c7:52:0f:33:47:37:c8:13:3b:70:65:7a:6e:
41:2a:3f:46:ed:8d:bf:d6:cd:a5:0c:cc:f7:67:6d:3d:ad:bc:
62:19:9a:cb:8d:1d:91:1c:92:34:de:e9:60:68:d3:70:4e:f1:
cd:2e:d1:ac:ee:27:4f:16:88:be:a8:38:2b:73:9d:c1:96:2b:
67:f1:92:8a:d3:ae:05:6e:b5:13:3b:69:55:23:7b:0c:2e:10:
53:14:3b:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:05:36 2025 by rpki-client