Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.mft
File: MG1hg1W9iTf3W7RlC7XBr3D5oS4.mft (raw, json)
Hash identifier: LmZVCjzH/8F3LdcxKY4lIPt5MnjKA9ddVI0GfeXV6VY=
Subject key identifier: 3A:F2:2B:63:B8:70:58:19:F2:BF:1A:E5:44:47:4E:20:7D:79:6C:D0
Authority key identifier: 30:6D:61:83:55:BD:89:37:F7:5B:B4:65:0B:B5:C1:AF:70:F9:A1:2E
Certificate issuer: /CN=306d618355bd8937f75bb4650bb5c1af70f9a12e
Certificate serial: 0198304A48BD7AD194F21AFE4C90C4160F8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MG1hg1W9iTf3W7RlC7XBr3D5oS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.mft
Manifest number: 1192
Signing time: Tue 22 Jul 2025 04:00:31 +0000
Manifest this update: Tue 22 Jul 2025 04:00:31 +0000
Manifest next update: Wed 23 Jul 2025 04:00:31 +0000
Files and hashes: 1: 3jZVmIYXRpFGaUpKFxmxg6yk0v4.roa (hash: DxwsnC6ETAvm52TcakM8AMF0oIdLtUXLvOU8uNsDQAw=)
2: MG1hg1W9iTf3W7RlC7XBr3D5oS4.crl (hash: MHq4QIGnwg45+aTTt5GTfh6zyKx2FJe9tBwE8KMoC2E=)
3: OhFs8ELf0BkBqUqSta-UtJTxxOY.roa (hash: eORqJrZ4eHwt+ZtqWQMblZ7ybIDSjazTPoe3DTl1tC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/MG1hg1W9iTf3W7RlC7XBr3D5oS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 04:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:30:4a:48:bd:7a:d1:94:f2:1a:fe:4c:90:c4:16:0f:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=306d618355bd8937f75bb4650bb5c1af70f9a12e
Validity
Not Before: Jul 22 04:00:31 2025 GMT
Not After : Jul 23 04:00:31 2025 GMT
Subject: CN=3af22b63b8705819f2bf1ae544474e207d796cd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:fc:eb:ff:77:62:dd:ab:e3:4d:c2:b3:be:14:
a5:fc:5f:8a:9d:ba:b3:ae:e9:40:66:a2:45:f8:81:
38:6e:ee:3a:bc:4d:a3:cb:46:7d:de:71:6a:98:44:
20:b4:f4:54:b3:a4:f1:46:3b:5f:25:46:c2:37:b6:
ac:ae:23:6f:bb:8c:82:8a:83:cd:e1:87:34:9e:59:
cb:92:be:bb:4a:21:a1:db:71:9a:8e:29:5d:7d:e8:
05:14:ba:fe:22:7c:33:24:f4:bd:76:89:1d:24:03:
64:02:65:04:59:73:ab:83:eb:40:2c:23:3b:e4:b3:
53:8d:69:50:a4:98:c3:3c:a3:ba:5a:5c:03:2b:0c:
99:63:a3:b4:3f:e5:ee:f2:e9:52:ba:51:7b:1d:a0:
a5:e8:91:4e:ec:a9:22:79:24:7a:7d:36:04:43:3a:
b4:a1:be:1b:f5:f0:13:0b:9d:69:44:b2:43:ff:93:
08:00:cf:6d:2c:74:12:eb:72:6d:d6:2a:0c:b0:85:
65:60:7f:5f:03:5d:34:ba:a3:0c:11:c1:a2:3b:3c:
74:24:f5:f2:08:b3:39:58:1c:a0:5e:7d:c3:7a:0c:
da:7b:c4:d7:8b:94:3a:2d:24:80:47:cf:3f:47:5e:
21:49:c1:4b:49:ea:66:fa:7c:1b:8d:00:67:2d:95:
ab:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:F2:2B:63:B8:70:58:19:F2:BF:1A:E5:44:47:4E:20:7D:79:6C:D0
X509v3 Authority Key Identifier:
keyid:30:6D:61:83:55:BD:89:37:F7:5B:B4:65:0B:B5:C1:AF:70:F9:A1:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MG1hg1W9iTf3W7RlC7XBr3D5oS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:e8:6f:0d:0f:90:b6:5a:1a:fa:5a:2e:43:d9:c9:05:33:25:
d6:b3:43:ed:b6:08:60:29:83:8a:75:49:65:8f:fb:47:2d:4b:
73:de:08:93:f0:4f:92:c1:72:58:4c:0e:f5:18:4c:de:86:b9:
40:ae:36:15:f1:ee:05:5b:3e:14:61:fe:ac:41:bb:ae:8c:81:
ff:96:5b:74:f5:06:fe:1b:8a:d8:f7:20:47:bc:85:04:b4:9a:
06:3f:a2:27:b8:aa:76:23:4e:15:59:e9:84:65:da:55:b2:dc:
6c:0f:1e:bb:fb:7d:e0:8d:c1:81:60:0c:39:cb:6c:60:4e:6f:
cb:34:25:a0:ee:72:7c:a0:1e:b9:58:31:9c:79:fb:76:e0:23:
77:c7:1c:2f:5a:92:30:4b:c1:78:5c:86:0c:86:7f:9f:12:10:
c4:25:6a:65:4a:82:40:54:86:a3:b2:6b:47:3b:8a:4e:56:3b:
db:25:36:b2:70:62:14:c1:87:92:b1:6e:ed:67:ac:95:02:99:
6c:c1:02:60:7f:d6:03:7e:8f:74:9d:5d:e5:84:17:c4:6f:f1:
b1:e9:32:23:50:4d:8f:04:e3:57:72:23:c1:a0:cf:8c:d7:23:
b8:8f:2d:5e:dc:89:a4:d4:63:95:2f:95:5d:79:ba:64:8b:ac:
ba:69:2e:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 11:45:52 2025 by rpki-client