Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/5a7e46-ce1b-4955-9f39-4b311326c230/1/mgNSX2jrayNfHeIrYLG67S_H_4M.mft
File: mgNSX2jrayNfHeIrYLG67S_H_4M.mft (raw, json)
Hash identifier: ewglArKIcawca42Sk6Ir8+tC8foiFKMiWUZDZuMsK+w=
Subject key identifier: 39:36:D2:AE:A8:FA:1C:03:86:7D:08:CE:EB:2A:D1:B7:94:E5:3E:E3
Authority key identifier: 9A:03:52:5F:68:EB:6B:23:5F:1D:E2:2B:60:B1:BA:ED:2F:C7:FF:83
Certificate issuer: /CN=9a03525f68eb6b235f1de22b60b1baed2fc7ff83
Certificate serial: 0199FE46F9FFADECD24FD0F83EA7F8B4636C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mgNSX2jrayNfHeIrYLG67S_H_4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/5a7e46-ce1b-4955-9f39-4b311326c230/1/mgNSX2jrayNfHeIrYLG67S_H_4M.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 21:01:28 +0000
Manifest this update: Sun 19 Oct 2025 21:01:28 +0000
Manifest next update: Mon 20 Oct 2025 21:01:28 +0000
Files and hashes: 1: mgNSX2jrayNfHeIrYLG67S_H_4M.crl (hash: Q7+4Cm0Humhp/3EpnH4nz7XAhltS/gi+pEK2eZ+nX54=)
2: xV2TYyNPjWPupKmb43ad00Tt3n8.roa (hash: +ey9CZvGJrxa71wfksSgu55Jb8r1NMsse9tFxoel7Ig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/5a7e46-ce1b-4955-9f39-4b311326c230/1/mgNSX2jrayNfHeIrYLG67S_H_4M.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/5a7e46-ce1b-4955-9f39-4b311326c230/1/mgNSX2jrayNfHeIrYLG67S_H_4M.mft
rsync://rpki.ripe.net/repository/DEFAULT/mgNSX2jrayNfHeIrYLG67S_H_4M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:46:f9:ff:ad:ec:d2:4f:d0:f8:3e:a7:f8:b4:63:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a03525f68eb6b235f1de22b60b1baed2fc7ff83
Validity
Not Before: Oct 19 21:01:28 2025 GMT
Not After : Oct 20 21:01:28 2025 GMT
Subject: CN=3936d2aea8fa1c03867d08ceeb2ad1b794e53ee3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:7c:0c:ef:13:41:e8:fa:38:c6:a7:30:db:6a:
50:0d:59:fc:06:6d:d7:26:f1:89:2c:58:61:bf:99:
ff:28:df:99:76:12:35:d0:4c:76:0f:da:b3:32:75:
b9:25:3e:cc:3d:68:6e:41:38:9b:ce:ab:f7:fb:52:
52:6d:18:e1:a3:bf:bd:0f:67:10:a7:42:92:c3:d5:
1f:bb:3a:66:d7:d4:81:e9:b9:16:84:4a:4a:c2:6a:
8b:50:44:9d:47:b2:22:64:86:32:88:c3:4b:5f:37:
6d:1b:c2:61:74:12:b7:79:2b:9b:c9:d7:91:c2:97:
73:24:17:02:37:fe:96:bf:b5:c2:64:fc:f7:47:e5:
57:3a:a9:41:b9:c9:e1:ec:04:f2:b6:f6:73:6c:bc:
de:ef:dd:97:26:8a:52:04:bc:bc:dd:c2:7b:72:85:
28:e4:82:ef:fc:f9:32:e9:82:1d:72:d8:62:d9:7a:
8f:9a:2d:5e:86:09:b1:59:e1:20:85:71:62:2b:76:
16:a7:ce:47:b3:ce:f9:b8:4d:da:a0:1d:d9:c6:af:
9e:2b:eb:fb:ae:f4:b0:c6:08:00:53:55:c3:00:b1:
93:72:8f:0b:8c:f5:79:7a:77:f4:97:30:67:2c:ea:
e3:d6:6a:88:c8:ae:41:07:bf:fc:15:3b:e0:3a:d2:
fb:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:36:D2:AE:A8:FA:1C:03:86:7D:08:CE:EB:2A:D1:B7:94:E5:3E:E3
X509v3 Authority Key Identifier:
keyid:9A:03:52:5F:68:EB:6B:23:5F:1D:E2:2B:60:B1:BA:ED:2F:C7:FF:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mgNSX2jrayNfHeIrYLG67S_H_4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/5a7e46-ce1b-4955-9f39-4b311326c230/1/mgNSX2jrayNfHeIrYLG67S_H_4M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/5a7e46-ce1b-4955-9f39-4b311326c230/1/mgNSX2jrayNfHeIrYLG67S_H_4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:b6:6f:14:d2:b2:dd:16:30:3f:22:89:2b:c1:48:1a:4e:23:
77:44:3b:ee:ef:e1:25:c7:7a:bd:80:cf:7b:95:80:b6:3c:7f:
75:67:5c:08:8b:bb:51:9a:66:f2:3f:a5:f2:23:6e:89:b8:27:
6a:75:85:96:a9:7d:33:91:ed:7f:eb:ab:63:1f:d0:1b:ec:7f:
9c:3a:10:ff:b3:ee:46:31:33:8e:91:34:f4:d6:4c:0c:6b:8a:
6e:54:78:a1:25:58:54:95:97:98:05:7d:f2:ac:e5:30:63:2e:
1f:14:c2:27:23:17:ae:f5:7d:a5:e1:01:82:d3:26:37:94:ef:
50:81:6e:76:55:24:92:8e:51:b1:69:b7:a8:01:7c:6f:a1:ed:
0c:9b:cb:86:38:c3:a0:59:db:c0:19:63:88:4e:a3:10:5c:3f:
f7:f9:47:24:ae:b7:83:e3:4b:92:fb:01:28:68:b4:61:14:47:
8f:04:8c:55:54:9f:47:64:d7:d8:14:a2:96:d5:3b:ce:9b:57:
cb:6a:99:0a:7d:6f:83:1f:23:e3:f1:7b:5c:5e:e8:cf:ef:54:
e5:91:96:a2:8c:6e:57:b0:af:dc:37:f0:0e:ab:de:c9:6e:ed:
38:4f:d4:e8:6e:6e:7d:cc:7d:78:cc:ad:34:f4:c6:09:1a:33:
80:93:72:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+Rvn/rezST9D4Pqf4tGNsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhMDM1MjVmNjhlYjZiMjM1ZjFkZTIyYjYwYjFiYWVkMmZj
N2ZmODMwHhcNMjUxMDE5MjEwMTI4WhcNMjUxMDIwMjEwMTI4WjAzMTEwLwYDVQQD
EygzOTM2ZDJhZWE4ZmExYzAzODY3ZDA4Y2VlYjJhZDFiNzk0ZTUzZWUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHwM7xNB6Po4xqcw22pQDVn8Bm3X
JvGJLFhhv5n/KN+ZdhI10Ex2D9qzMnW5JT7MPWhuQTibzqv3+1JSbRjho7+9D2cQ
p0KSw9Ufuzpm19SB6bkWhEpKwmqLUESdR7IiZIYyiMNLXzdtG8JhdBK3eSubydeR
wpdzJBcCN/6Wv7XCZPz3R+VXOqlBucnh7ATytvZzbLze792XJopSBLy83cJ7coUo
5ILv/Pky6YIdcthi2XqPmi1ehgmxWeEghXFiK3YWp85Hs875uE3aoB3Zxq+eK+v7
rvSwxggAU1XDALGTco8LjPV5enf0lzBnLOrj1mqIyK5BB7/8FTvgOtL72wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDk20q6o+hwDhn0Izusq0beU5T7jMB8GA1UdIwQY
MBaAFJoDUl9o62sjXx3iK2Cxuu0vx/+DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWdOU1gyanJheU5mSGVJcllMRzY3U19IXzRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy81YTdlNDYtY2UxYi00OTU1LTlmMzkt
NGIzMTEzMjZjMjMwLzEvbWdOU1gyanJheU5mSGVJcllMRzY3U19IXzRNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy81YTdlNDYtY2UxYi00OTU1LTlmMzktNGIzMTEzMjZjMjMw
LzEvbWdOU1gyanJheU5mSGVJcllMRzY3U19IXzRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhLZvFNKy
3RYwPyKJK8FIGk4jd0Q77u/hJcd6vYDPe5WAtjx/dWdcCIu7UZpm8j+l8iNuibgn
anWFlql9M5Htf+urYx/QG+x/nDoQ/7PuRjEzjpE09NZMDGuKblR4oSVYVJWXmAV9
8qzlMGMuHxTCJyMXrvV9peEBgtMmN5TvUIFudlUkko5RsWm3qAF8b6HtDJvLhjjD
oFnbwBljiE6jEFw/9/lHJK63g+NLkvsBKGi0YRRHjwSMVVSfR2TX2BSiltU7zptX
y2qZCn1vgx8j4/F7XF7oz+9U5ZGWooxuV7Cv3DfwDqveyW7tOE/U6G5ufcx9eMyt
NPTGCRozgJNyIA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 22:37:01 2025 by rpki-client