Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/863c04-b07e-4c3a-9f45-fe2474d2f07c/1/mgGl7N4ueVkyWREG0II9DRVPcAI.mft
File: mgGl7N4ueVkyWREG0II9DRVPcAI.mft (raw, json)
Hash identifier: QzFMTQeyzGkWX79UIal3456Zf4fNmA6snjnZ5XdOKnc=
Subject key identifier: C4:5A:D1:80:E0:37:E6:E2:9F:C9:49:87:62:BC:04:0B:E1:93:D0:91
Authority key identifier: 9A:01:A5:EC:DE:2E:79:59:32:59:11:06:D0:82:3D:0D:15:4F:70:02
Certificate issuer: /CN=9a01a5ecde2e795932591106d0823d0d154f7002
Certificate serial: 019A01B564C623DB3AF7641EF6CAA0F81588
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mgGl7N4ueVkyWREG0II9DRVPcAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/863c04-b07e-4c3a-9f45-fe2474d2f07c/1/mgGl7N4ueVkyWREG0II9DRVPcAI.mft
Manifest number: 0811
Signing time: Mon 20 Oct 2025 13:00:56 +0000
Manifest this update: Mon 20 Oct 2025 13:00:56 +0000
Manifest next update: Tue 21 Oct 2025 13:00:56 +0000
Files and hashes: 1: mgGl7N4ueVkyWREG0II9DRVPcAI.crl (hash: BsWdcVacCKZjBPmgpX/XfoBhnBMfPQ5SsMc6XAqLCNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/863c04-b07e-4c3a-9f45-fe2474d2f07c/1/mgGl7N4ueVkyWREG0II9DRVPcAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/863c04-b07e-4c3a-9f45-fe2474d2f07c/1/mgGl7N4ueVkyWREG0II9DRVPcAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/mgGl7N4ueVkyWREG0II9DRVPcAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:b5:64:c6:23:db:3a:f7:64:1e:f6:ca:a0:f8:15:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a01a5ecde2e795932591106d0823d0d154f7002
Validity
Not Before: Oct 20 13:00:56 2025 GMT
Not After : Oct 21 13:00:56 2025 GMT
Subject: CN=c45ad180e037e6e29fc9498762bc040be193d091
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:93:24:e1:db:37:09:8f:80:68:e6:f0:69:3e:
b8:51:e1:e2:fd:dc:4e:40:17:30:d7:e3:d5:40:32:
e4:9d:98:89:03:4d:72:20:41:0c:f5:17:f8:8f:31:
54:d0:40:db:ec:0f:a2:17:e9:88:a6:c5:bb:86:8a:
61:7d:74:2e:ff:a6:c6:5c:43:bd:c4:d0:8e:37:77:
69:e0:3d:40:9a:b1:3b:07:ea:23:23:78:5c:c5:5d:
88:19:c4:28:20:3b:d9:ca:ea:d2:fe:9b:22:bf:d8:
89:cf:3f:bf:1f:66:98:83:e8:42:d0:e9:d4:89:b5:
d1:39:01:88:54:8c:94:00:a4:8f:07:fc:41:08:67:
85:35:4b:37:79:3a:00:6b:e5:d1:ef:19:a0:01:45:
df:34:db:af:51:0a:36:d9:58:63:d9:ed:5d:40:e9:
c4:e8:c8:e9:e4:2e:96:a9:e6:b2:c3:61:da:de:b6:
47:58:fe:de:17:64:c5:e4:f2:77:85:48:3f:cd:f2:
54:53:d0:3f:4c:1b:0e:14:e6:46:44:16:7b:a0:26:
da:53:b5:ba:70:1f:74:0c:f2:50:dc:0f:2d:bd:70:
ff:23:69:84:22:48:4d:4d:be:b7:0a:f0:6b:15:77:
4c:25:dd:74:44:73:d4:25:34:81:a9:4c:65:cf:5f:
c1:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:5A:D1:80:E0:37:E6:E2:9F:C9:49:87:62:BC:04:0B:E1:93:D0:91
X509v3 Authority Key Identifier:
keyid:9A:01:A5:EC:DE:2E:79:59:32:59:11:06:D0:82:3D:0D:15:4F:70:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mgGl7N4ueVkyWREG0II9DRVPcAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/863c04-b07e-4c3a-9f45-fe2474d2f07c/1/mgGl7N4ueVkyWREG0II9DRVPcAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/863c04-b07e-4c3a-9f45-fe2474d2f07c/1/mgGl7N4ueVkyWREG0II9DRVPcAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:de:5e:b2:3c:c2:bf:bf:20:ae:25:81:95:36:4d:fc:dd:bc:
31:8d:8b:a5:e1:29:8a:1b:ed:af:e2:80:c3:9b:4d:95:0c:ad:
cd:d1:8b:40:81:3e:d8:4f:50:3a:18:14:34:86:43:ce:18:c0:
ad:e3:9c:d8:31:c6:23:37:aa:cb:aa:8b:97:0b:69:81:97:03:
37:63:43:2f:52:b8:61:b3:16:5c:c9:8f:b4:86:81:08:cb:7e:
b0:f2:6d:02:32:69:97:63:14:0e:57:82:c9:b1:23:da:48:3b:
5e:83:24:12:0a:a6:5e:8d:1c:55:08:f4:23:bf:81:d1:0c:3e:
e2:4b:bf:fc:ef:6d:92:51:e6:cd:65:fc:53:f3:43:a4:df:4a:
ad:d2:76:e5:bf:17:8a:bf:a1:b4:0a:9c:0d:b2:a6:9d:59:7f:
f0:d5:a2:2e:61:4d:8e:ee:d8:34:e1:a7:dc:5c:a5:b7:e1:4c:
38:a3:7d:9c:34:a9:b5:67:03:f0:41:eb:6d:73:3d:6b:8b:cb:
7d:11:83:8c:23:4e:23:9e:fb:c3:cd:84:42:31:97:a7:a7:ac:
bb:d6:b0:15:76:7d:f9:9a:b2:d1:b0:ea:47:75:4a:47:0a:54:
5c:c4:b5:cd:7a:76:0d:20:81:cb:2b:b2:16:56:f3:d3:d4:fd:
bc:84:b5:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:07:52 2025 by rpki-client