Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/3d2031-f4a1-437a-9a7e-97c4bbaf4676/1/MJAbMGF-hmq8nOULrb6IRl048Dc.mft
File: MJAbMGF-hmq8nOULrb6IRl048Dc.mft (raw, json)
Hash identifier: JaKbEPCSV73tpLdPCt4frhsVlLIRVJYMN+VL5rBEVZ4=
Subject key identifier: CA:CD:C2:B9:02:19:11:B2:DD:BD:CD:11:48:A2:C6:7C:7A:FF:DF:AF
Authority key identifier: 30:90:1B:30:61:7E:86:6A:BC:9C:E5:0B:AD:BE:88:46:5D:38:F0:37
Certificate issuer: /CN=30901b30617e866abc9ce50badbe88465d38f037
Certificate serial: 0199FFC72ADC10B58B19D4CD529504B22267
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MJAbMGF-hmq8nOULrb6IRl048Dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/3d2031-f4a1-437a-9a7e-97c4bbaf4676/1/MJAbMGF-hmq8nOULrb6IRl048Dc.mft
Manifest number: 0583
Signing time: Mon 20 Oct 2025 04:01:06 +0000
Manifest this update: Mon 20 Oct 2025 04:01:06 +0000
Manifest next update: Tue 21 Oct 2025 04:01:06 +0000
Files and hashes: 1: 2qX7OdgapT1BAlqvcn-h20H3SjY.roa (hash: mYdYSfl5U26j0DpruXdVtTOn2QH2B7ImuHJ/Oabup60=)
2: MJAbMGF-hmq8nOULrb6IRl048Dc.crl (hash: jrcHGyF80LAWjjMmTDW5kdGNvHiSz1m3SAB36exm8ks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/3d2031-f4a1-437a-9a7e-97c4bbaf4676/1/MJAbMGF-hmq8nOULrb6IRl048Dc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/3d2031-f4a1-437a-9a7e-97c4bbaf4676/1/MJAbMGF-hmq8nOULrb6IRl048Dc.mft
rsync://rpki.ripe.net/repository/DEFAULT/MJAbMGF-hmq8nOULrb6IRl048Dc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:2a:dc:10:b5:8b:19:d4:cd:52:95:04:b2:22:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30901b30617e866abc9ce50badbe88465d38f037
Validity
Not Before: Oct 20 04:01:06 2025 GMT
Not After : Oct 21 04:01:06 2025 GMT
Subject: CN=cacdc2b9021911b2ddbdcd1148a2c67c7affdfaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:0d:3f:c4:6f:85:55:4c:44:eb:8f:4a:2c:e5:
30:38:85:d0:65:81:96:c9:23:eb:68:af:58:ee:17:
37:16:f8:0e:b0:21:9d:b8:7b:d9:d3:77:68:13:58:
cb:80:fb:69:e1:b6:2e:3a:11:7e:0a:ae:13:9c:15:
e1:2d:45:89:45:4e:26:a3:26:86:90:f9:ef:90:05:
80:60:19:5b:3c:2e:95:bb:e2:dc:df:2c:c9:32:41:
00:05:2c:ff:9f:04:86:02:7b:67:a3:e3:dc:20:6e:
45:72:42:88:b1:0b:53:40:a6:09:49:24:b4:8f:9e:
47:e9:28:4a:e4:b0:4b:8c:69:95:e4:3d:3b:61:a6:
68:b6:4e:36:e9:5c:0d:9f:17:a8:80:dd:ef:c3:60:
16:6b:8c:37:d7:ca:f0:fe:3f:ed:51:db:06:88:1f:
bc:64:00:8a:0f:d4:f0:92:54:2a:90:fb:22:0f:bf:
30:e9:06:96:39:6e:4e:27:96:5f:a5:90:63:a3:7b:
55:52:a7:40:2a:92:87:00:41:eb:11:5f:9b:eb:b0:
c0:ca:22:6f:93:71:b0:0e:5e:9c:17:83:70:4f:3a:
e3:4d:50:59:da:07:3e:23:fc:cb:e6:f7:6c:f3:4b:
c5:db:d1:37:b1:ae:5c:5d:73:69:1a:f8:ba:65:23:
f6:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:CD:C2:B9:02:19:11:B2:DD:BD:CD:11:48:A2:C6:7C:7A:FF:DF:AF
X509v3 Authority Key Identifier:
keyid:30:90:1B:30:61:7E:86:6A:BC:9C:E5:0B:AD:BE:88:46:5D:38:F0:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MJAbMGF-hmq8nOULrb6IRl048Dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/3d2031-f4a1-437a-9a7e-97c4bbaf4676/1/MJAbMGF-hmq8nOULrb6IRl048Dc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/3d2031-f4a1-437a-9a7e-97c4bbaf4676/1/MJAbMGF-hmq8nOULrb6IRl048Dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:91:83:f0:70:f5:40:02:d3:5b:7a:72:e7:38:c9:b6:67:ad:
a3:c4:26:4c:d5:10:10:2d:7f:7a:76:a3:04:b4:5c:e3:b5:c0:
1f:93:0d:66:8d:f9:9a:51:b4:59:93:a4:20:54:24:cf:97:08:
39:bb:48:00:89:7d:33:7d:5e:a3:71:c4:bb:3d:00:b8:8c:b6:
1b:5c:62:dd:9c:34:c3:e1:4c:06:b0:f5:99:00:f1:91:4a:42:
76:1f:94:7c:c3:b5:53:d6:65:eb:19:96:bf:bc:90:2c:d4:f6:
b4:e4:d9:cd:36:2c:d8:21:48:bd:2b:9f:3f:f4:ec:c5:9f:b0:
5f:ac:cc:8b:5e:62:de:69:80:f5:ba:d4:47:98:b9:a1:1a:7b:
f3:95:88:fc:0c:ed:1f:19:d9:cd:35:5d:37:fb:f1:0d:65:8d:
70:54:3a:e3:53:72:23:8d:1b:0e:7e:75:15:87:18:fa:3e:f8:
ca:f6:ec:cd:a5:a7:d2:49:ac:fa:84:ee:67:2c:e6:07:f4:dc:
96:70:e0:f4:ff:39:2c:aa:a9:25:04:4e:09:0b:d9:22:ed:b7:
90:bf:a1:9c:64:a7:43:ac:a9:b3:bf:fb:b6:62:65:dc:4b:a0:
53:66:83:45:45:53:69:91:09:04:51:9c:2e:2d:30:ae:21:5c:
60:cc:8b:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:48:10 2025 by rpki-client