Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/7e4ea8-8950-4183-abc0-3382794049c2/1/MGtGjMMe86PQgayPArJx4xR1Wb8.mft
File: MGtGjMMe86PQgayPArJx4xR1Wb8.mft (raw, json)
Hash identifier: nMaA/as3/bIqHl35A893rDxZmJHOKpsP4lO/Lh5rAMo=
Subject key identifier: 06:3A:53:33:74:72:57:B7:E2:CA:D0:4C:B2:E2:11:15:38:15:67:D2
Authority key identifier: 30:6B:46:8C:C3:1E:F3:A3:D0:81:AC:8F:02:B2:71:E3:14:75:59:BF
Certificate issuer: /CN=306b468cc31ef3a3d081ac8f02b271e3147559bf
Certificate serial: 01964A4607DB02A1FE6F4C107FA859F6C909
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MGtGjMMe86PQgayPArJx4xR1Wb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/7e4ea8-8950-4183-abc0-3382794049c2/1/MGtGjMMe86PQgayPArJx4xR1Wb8.mft
Manifest number: 09B4
Signing time: Fri 18 Apr 2025 19:00:25 +0000
Manifest this update: Fri 18 Apr 2025 19:00:25 +0000
Manifest next update: Sat 19 Apr 2025 19:00:25 +0000
Files and hashes: 1: MGtGjMMe86PQgayPArJx4xR1Wb8.crl (hash: 28BanHNNE33xwWVohx3PjH7vL425S7X854I/z/OUmQg=)
2: zCf3OK6AbL-GLEVW2m2fiyVZR2o.roa (hash: T9wprypvgjd5UjKaL97Qh7s/fP7I922vE5XInqdd1G4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/7e4ea8-8950-4183-abc0-3382794049c2/1/MGtGjMMe86PQgayPArJx4xR1Wb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/7e4ea8-8950-4183-abc0-3382794049c2/1/MGtGjMMe86PQgayPArJx4xR1Wb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/MGtGjMMe86PQgayPArJx4xR1Wb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:46:07:db:02:a1:fe:6f:4c:10:7f:a8:59:f6:c9:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=306b468cc31ef3a3d081ac8f02b271e3147559bf
Validity
Not Before: Apr 18 19:00:25 2025 GMT
Not After : Apr 19 19:00:25 2025 GMT
Subject: CN=063a5333747257b7e2cad04cb2e21115381567d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:85:cd:36:38:bb:17:aa:a2:d6:38:74:22:9f:
46:3b:13:52:2c:9e:01:c2:4b:2c:a9:fd:33:14:1a:
b2:19:65:27:db:14:0c:8b:00:87:46:68:01:47:9a:
6c:bc:08:dc:f7:2b:85:94:e6:90:ab:53:03:2c:52:
98:14:95:15:88:a4:15:cb:e6:da:fe:29:c1:e5:20:
e3:03:af:da:dd:24:20:8e:d2:96:36:81:e9:79:12:
0b:fd:fd:29:04:8c:93:10:54:cb:d9:f4:c0:92:34:
ca:f3:52:1c:96:a1:1a:89:1b:c2:b0:4e:49:43:90:
5b:9e:1d:1d:20:ad:9a:a3:e6:06:d8:5d:dc:4b:2f:
96:71:30:8a:c2:d9:9d:2f:f0:8a:b3:ba:a8:9c:ba:
5f:dd:eb:8d:cf:a7:f0:0f:d7:d4:0b:c7:91:18:4e:
f7:94:cb:f5:32:8e:5d:82:d8:2c:91:68:ad:16:8c:
5a:1c:9d:eb:22:2c:fd:ae:53:c2:09:96:04:df:6d:
c8:06:15:03:a8:97:5f:62:ac:fd:02:96:a5:3c:08:
bd:95:a5:4e:63:f4:6a:f8:e6:c4:71:42:bb:5a:3f:
61:4f:87:bb:8f:03:0a:fa:f4:bd:c2:d5:0b:af:09:
b4:f7:47:ff:f6:0a:04:94:08:12:45:60:ca:5d:cc:
07:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:3A:53:33:74:72:57:B7:E2:CA:D0:4C:B2:E2:11:15:38:15:67:D2
X509v3 Authority Key Identifier:
keyid:30:6B:46:8C:C3:1E:F3:A3:D0:81:AC:8F:02:B2:71:E3:14:75:59:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGtGjMMe86PQgayPArJx4xR1Wb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7e4ea8-8950-4183-abc0-3382794049c2/1/MGtGjMMe86PQgayPArJx4xR1Wb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7e4ea8-8950-4183-abc0-3382794049c2/1/MGtGjMMe86PQgayPArJx4xR1Wb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:24:8b:75:3c:85:bd:a7:05:f5:56:52:6a:7b:e0:62:b4:fb:
2d:2f:fd:87:33:d3:6f:ce:e0:85:3f:0b:c2:12:fd:c3:90:ba:
0c:12:cc:a4:0a:34:f1:d0:66:63:82:cc:e1:62:f7:cb:c3:17:
ee:d7:6f:3c:59:44:b2:52:76:6a:9f:6e:85:45:b6:9b:1d:0c:
d9:e8:b4:e6:7c:56:3d:81:1e:36:28:73:a9:bd:f2:b1:6f:9a:
68:1c:e4:40:14:0a:70:85:84:2a:e8:43:e9:54:b7:b2:07:67:
61:99:a4:6c:51:00:6e:ea:07:4f:5a:7b:9c:17:77:27:58:17:
08:fa:17:19:6f:2b:3b:be:93:d4:d2:6e:9e:c7:07:c2:5b:d7:
1a:58:f8:3b:9f:cd:a9:ef:27:16:07:dc:ec:2e:80:d1:be:19:
f4:f9:c5:45:3e:69:59:94:9b:b8:2a:e6:5f:2b:f2:2b:a6:86:
8a:dd:d9:06:8e:34:52:e9:49:db:a7:b8:b1:53:bb:07:d5:1d:
14:14:35:05:a0:e9:cb:53:2a:7b:d7:26:d7:43:9a:55:72:36:
7b:f9:da:f3:f4:2f:d1:4e:c1:6f:ab:c7:c4:81:93:eb:79:c7:
23:fb:1c:54:14:73:b0:18:55:c2:39:31:f7:ca:ae:d3:24:05:
b0:4e:28:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 02:13:23 2025 by rpki-client