Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/10fce0-ee47-4ed4-a03d-0d4542920bcb/1/mgheBvLiouMEJW-IE1_xPectBzY.mft
File: mgheBvLiouMEJW-IE1_xPectBzY.mft (raw, json)
Hash identifier: AvjLv8k/M0Ki6hMdm7OeA0yxAHVbhzU+WKknI5ymV48=
Subject key identifier: EC:FD:5C:60:6D:B3:FE:2F:25:49:61:2C:57:BE:3D:A6:13:B6:8B:7F
Authority key identifier: 9A:08:5E:06:F2:E2:A2:E3:04:25:6F:88:13:5F:F1:3D:E7:2D:07:36
Certificate issuer: /CN=9a085e06f2e2a2e304256f88135ff13de72d0736
Certificate serial: 0198590FD1240075DB0EFE2D11795391403A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mgheBvLiouMEJW-IE1_xPectBzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/10fce0-ee47-4ed4-a03d-0d4542920bcb/1/mgheBvLiouMEJW-IE1_xPectBzY.mft
Manifest number: 0CE7
Signing time: Wed 30 Jul 2025 02:01:05 +0000
Manifest this update: Wed 30 Jul 2025 02:01:05 +0000
Manifest next update: Thu 31 Jul 2025 02:01:05 +0000
Files and hashes: 1: 9Dg6tOo6O44yr7jeWe1ba9VjCFs.roa (hash: 26YW4jX+yyct0IS6KpfO0MNuSdKZWiF48vsQnmBErMk=)
2: mgheBvLiouMEJW-IE1_xPectBzY.crl (hash: oqEr5uapAwFGbGe4WpybHEnilWNrdBd1nZLxs/WQV4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/10fce0-ee47-4ed4-a03d-0d4542920bcb/1/mgheBvLiouMEJW-IE1_xPectBzY.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/10fce0-ee47-4ed4-a03d-0d4542920bcb/1/mgheBvLiouMEJW-IE1_xPectBzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/mgheBvLiouMEJW-IE1_xPectBzY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:59:0f:d1:24:00:75:db:0e:fe:2d:11:79:53:91:40:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a085e06f2e2a2e304256f88135ff13de72d0736
Validity
Not Before: Jul 30 02:01:05 2025 GMT
Not After : Jul 31 02:01:05 2025 GMT
Subject: CN=ecfd5c606db3fe2f2549612c57be3da613b68b7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:50:08:3c:ee:7f:a3:f3:c2:1a:88:00:5c:aa:
6a:5a:e0:f0:2f:33:25:74:af:47:c9:c3:ef:bf:67:
39:a8:fb:95:d8:74:3b:e5:2e:99:9c:f1:ae:ba:85:
00:a8:34:d3:f1:62:45:23:ee:8f:4f:ed:5d:69:e8:
71:e9:61:5b:f0:0a:72:9e:dc:12:ca:ef:f6:ac:ef:
86:f2:22:b6:ac:f7:05:c9:30:58:a1:1b:19:0d:b4:
34:8c:c2:ee:92:98:8a:4c:34:ab:db:17:0a:66:1f:
85:30:b9:69:4f:86:b6:2a:c7:0b:2f:78:b8:99:a7:
ae:fb:d5:10:b7:51:c4:21:cf:f2:7a:78:a5:42:64:
03:4e:27:98:ea:db:33:14:6e:01:08:a1:53:e2:49:
96:ee:ec:96:86:8f:56:36:73:9e:0f:66:93:2b:17:
8f:4e:08:0d:c0:55:dc:cc:6d:72:c1:ea:9b:65:26:
d2:90:cc:a5:59:a4:2b:cd:34:20:de:88:46:9d:ca:
05:af:26:1d:54:c2:4a:e7:f4:be:ed:79:4f:36:77:
31:29:c4:33:5e:d8:d6:02:97:02:70:fb:3a:08:89:
e4:bb:ac:24:47:7d:3f:31:44:9c:be:49:ee:ab:7f:
f4:64:0d:8a:f5:c4:21:4b:7d:0f:56:2a:62:3e:9e:
a5:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:FD:5C:60:6D:B3:FE:2F:25:49:61:2C:57:BE:3D:A6:13:B6:8B:7F
X509v3 Authority Key Identifier:
keyid:9A:08:5E:06:F2:E2:A2:E3:04:25:6F:88:13:5F:F1:3D:E7:2D:07:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mgheBvLiouMEJW-IE1_xPectBzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/10fce0-ee47-4ed4-a03d-0d4542920bcb/1/mgheBvLiouMEJW-IE1_xPectBzY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/10fce0-ee47-4ed4-a03d-0d4542920bcb/1/mgheBvLiouMEJW-IE1_xPectBzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:1b:09:60:0d:52:16:ae:47:68:84:17:fe:33:ef:ce:9d:94:
0c:a8:5e:3e:db:39:1c:78:06:3f:12:e8:5d:89:a5:5f:df:b0:
ed:c9:a4:c4:e1:2b:8f:0e:d5:51:4c:fa:0f:a0:19:89:5f:21:
d4:1c:fb:19:13:57:b9:65:c1:3b:56:b8:e2:8f:aa:a5:7a:f2:
ec:3b:7c:86:b5:07:8e:db:f5:28:04:07:74:be:20:c3:0a:d7:
eb:62:9c:81:a6:d4:ad:58:4a:1b:5a:f9:5b:37:27:34:06:71:
11:6a:1e:38:85:91:bc:dc:40:e1:69:6b:7d:cb:a1:de:ab:66:
ec:60:ee:41:e1:dc:7d:4a:3e:5d:4a:78:89:fa:32:91:15:34:
ec:eb:02:f5:18:25:a1:72:c2:9b:cb:5b:0d:35:23:c9:40:78:
76:09:29:8b:86:31:5d:fc:5c:57:06:15:55:d4:1c:81:04:c9:
44:b2:23:62:59:5a:c8:3c:e9:04:c9:11:56:54:e8:be:72:51:
a8:42:a6:92:26:7e:b2:9d:67:fb:44:a1:69:35:2b:95:ae:f9:
9f:91:54:05:1f:f8:04:45:01:50:79:8b:8f:06:1a:99:b0:2e:
41:e4:04:f9:63:56:99:91:b8:83:27:b5:a9:30:74:69:0a:cd:
dc:cf:25:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 06:51:55 2025 by rpki-client