Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.mft
File: Mgax0ge2XA69PyP6djABbYe0E0k.mft (raw, json)
Hash identifier: Hpo2m6MFdbcWNm5Afb6ukkmcPc9sQ4A0EIj/ZP2i1ms=
Subject key identifier: 5C:D2:BE:C5:AA:6E:AF:E9:D1:8E:0E:F3:8B:E0:63:54:75:1F:2A:A5
Authority key identifier: 32:06:B1:D2:07:B6:5C:0E:BD:3F:23:FA:76:30:01:6D:87:B4:13:49
Certificate issuer: /CN=3206b1d207b65c0ebd3f23fa7630016d87b41349
Certificate serial: 0198277E15B39B162D9FEC1722F3077D1AE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mgax0ge2XA69PyP6djABbYe0E0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.mft
Manifest number: 060E
Signing time: Sun 20 Jul 2025 11:00:31 +0000
Manifest this update: Sun 20 Jul 2025 11:00:31 +0000
Manifest next update: Mon 21 Jul 2025 11:00:31 +0000
Files and hashes: 1: M2KDR8dr7-7ZyhSIDyzwELKYUdM.roa (hash: p4F925/VSgNOhwfLh+ZxgpZFhtfFkVdXlw/7VfsIDVw=)
2: Mgax0ge2XA69PyP6djABbYe0E0k.crl (hash: hKLk7EiKDNi7dDG6vYGc5fZoO7b0rV35HRvYM5z6pGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mgax0ge2XA69PyP6djABbYe0E0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 11:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:27:7e:15:b3:9b:16:2d:9f:ec:17:22:f3:07:7d:1a:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3206b1d207b65c0ebd3f23fa7630016d87b41349
Validity
Not Before: Jul 20 11:00:31 2025 GMT
Not After : Jul 21 11:00:31 2025 GMT
Subject: CN=5cd2bec5aa6eafe9d18e0ef38be06354751f2aa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:7f:85:22:87:dc:02:9d:94:ad:f4:c5:76:14:
79:fe:03:0b:83:dc:14:2c:04:b6:e1:ea:9f:ae:3e:
45:ae:28:41:cb:19:43:9f:a7:36:ca:eb:69:bf:1c:
7c:3c:06:b3:7d:80:fa:d4:cc:c6:23:6a:29:75:19:
31:99:03:0e:a8:83:8e:16:c9:92:62:2c:fd:42:3f:
bd:62:2a:9a:5c:31:2c:44:9d:75:10:7a:0d:a4:b2:
6b:64:da:62:c9:82:ef:e2:bd:7d:3e:12:71:20:8c:
76:a8:a9:92:a4:a3:e4:65:d5:11:9b:15:13:00:3c:
97:fb:10:40:d6:e8:54:2b:89:af:42:2a:de:b0:0e:
a5:47:ee:c0:85:aa:b6:17:35:94:54:b1:60:7a:35:
c7:d2:cd:2a:e5:9c:ad:7f:74:24:1a:a4:62:65:f8:
a7:e5:9a:4b:46:44:f9:4c:77:bf:90:e3:c3:10:2f:
ad:02:73:89:cc:3a:1e:94:6b:98:7e:9b:17:c6:91:
fe:1e:7f:14:32:ed:6e:f2:55:6b:33:c1:10:45:96:
f9:93:30:87:eb:a7:50:59:e2:84:e1:5b:ca:b0:6f:
4e:23:48:4c:3d:23:a3:0b:24:92:6b:00:cc:de:3b:
f9:80:0f:c7:e1:d0:a2:d3:9f:99:f7:cb:14:6b:eb:
89:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:D2:BE:C5:AA:6E:AF:E9:D1:8E:0E:F3:8B:E0:63:54:75:1F:2A:A5
X509v3 Authority Key Identifier:
keyid:32:06:B1:D2:07:B6:5C:0E:BD:3F:23:FA:76:30:01:6D:87:B4:13:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mgax0ge2XA69PyP6djABbYe0E0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:96:5b:ff:7e:6e:70:9f:c2:11:1f:92:c6:e6:7d:44:f3:d9:
6c:3a:76:e5:51:8a:9e:e8:42:61:97:e6:19:0a:27:ee:cf:a5:
56:bf:c1:89:e5:ef:1d:39:83:c8:b1:98:f5:50:9c:e7:af:a4:
72:27:22:d2:3d:40:47:fa:20:8b:94:5b:d7:97:85:c5:c8:f6:
c8:a0:23:88:ba:99:a3:fe:bc:9d:dc:53:7f:e9:a4:06:3a:be:
3a:c4:d8:15:e0:ea:ad:54:00:00:be:c0:cd:32:3d:a7:29:f6:
91:c9:e8:b6:62:73:1b:d4:71:11:8c:49:c6:a2:03:61:5e:08:
33:18:4d:d6:9d:d2:db:71:ae:81:7a:3d:9b:cf:6f:2a:48:3a:
65:dc:7c:f7:58:e0:3c:c2:05:f6:a0:2b:bd:25:21:06:ed:b1:
f4:bc:17:37:85:e5:1b:60:a7:28:f9:0b:8f:47:a1:8c:d1:15:
b4:d3:54:44:5f:ce:fe:37:51:c1:91:54:1c:b1:8e:8b:fe:31:
b8:9a:68:e2:51:ff:b1:93:cc:e6:45:d7:c3:d7:2a:d8:8a:74:
41:2d:d5:1e:b3:c6:5f:0d:60:17:de:41:e8:51:6c:8d:10:29:
78:8b:fb:c3:9d:4a:9d:bf:39:42:e3:53:c4:42:c6:0a:10:4e:
54:3e:85:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZgnfhWzmxYtn+wXIvMHfRrgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyMDZiMWQyMDdiNjVjMGViZDNmMjNmYTc2MzAwMTZkODdi
NDEzNDkwHhcNMjUwNzIwMTEwMDMxWhcNMjUwNzIxMTEwMDMxWjAzMTEwLwYDVQQD
Eyg1Y2QyYmVjNWFhNmVhZmU5ZDE4ZTBlZjM4YmUwNjM1NDc1MWYyYWE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA43+FIofcAp2UrfTFdhR5/gMLg9wU
LAS24eqfrj5FrihByxlDn6c2yutpvxx8PAazfYD61MzGI2opdRkxmQMOqIOOFsmS
Yiz9Qj+9YiqaXDEsRJ11EHoNpLJrZNpiyYLv4r19PhJxIIx2qKmSpKPkZdURmxUT
ADyX+xBA1uhUK4mvQiresA6lR+7Ahaq2FzWUVLFgejXH0s0q5Zytf3QkGqRiZfin
5ZpLRkT5THe/kOPDEC+tAnOJzDoelGuYfpsXxpH+Hn8UMu1u8lVrM8EQRZb5kzCH
66dQWeKE4VvKsG9OI0hMPSOjCySSawDM3jv5gA/H4dCi05+Z98sUa+uJewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFzSvsWqbq/p0Y4O84vgY1R1HyqlMB8GA1UdIwQY
MBaAFDIGsdIHtlwOvT8j+nYwAW2HtBNJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWdheDBnZTJYQTY5UHlQNmRqQUJiWWUwRTBrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy82OTNmZTItZmJhZi00MzBmLThhMjIt
MWJhZTkzY2ZhMDc4LzEvTWdheDBnZTJYQTY5UHlQNmRqQUJiWWUwRTBrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy82OTNmZTItZmJhZi00MzBmLThhMjItMWJhZTkzY2ZhMDc4
LzEvTWdheDBnZTJYQTY5UHlQNmRqQUJiWWUwRTBrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMpZb/35u
cJ/CER+SxuZ9RPPZbDp25VGKnuhCYZfmGQon7s+lVr/BieXvHTmDyLGY9VCc56+k
cici0j1AR/ogi5Rb15eFxcj2yKAjiLqZo/68ndxTf+mkBjq+OsTYFeDqrVQAAL7A
zTI9pyn2kcnotmJzG9RxEYxJxqIDYV4IMxhN1p3S23GugXo9m89vKkg6Zdx891jg
PMIF9qArvSUhBu2x9LwXN4XlG2CnKPkLj0ehjNEVtNNURF/O/jdRwZFUHLGOi/4x
uJpo4lH/sZPM5kXXw9cq2Ip0QS3VHrPGXw1gF95B6FFsjRApeIv7w51Knb85QuNT
xELGChBOVD6F8w==
-----END CERTIFICATE-----
Generated at Sun Jul 20 20:18:06 2025 by rpki-client