Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/3d838c-8622-4e58-870f-de9e02d41797/1/mgdjMrvSgPCFLbafYVsPFJkUgxs.mft
File: mgdjMrvSgPCFLbafYVsPFJkUgxs.mft (raw, json)
Hash identifier: GU+9NnT0KqU3lZB4ghFyMxJGRUSf6Ja2mxJCeHPxeWU=
Subject key identifier: 3A:4B:CC:3D:FE:CB:20:28:8F:07:19:4C:6B:83:6E:38:00:ED:B0:A1
Authority key identifier: 9A:07:63:32:BB:D2:80:F0:85:2D:B6:9F:61:5B:0F:14:99:14:83:1B
Certificate issuer: /CN=9a076332bbd280f0852db69f615b0f149914831b
Certificate serial: 01984AE5C66ADE05DB7FCBC641C48378DA33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mgdjMrvSgPCFLbafYVsPFJkUgxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/3d838c-8622-4e58-870f-de9e02d41797/1/mgdjMrvSgPCFLbafYVsPFJkUgxs.mft
Manifest number: 038E
Signing time: Sun 27 Jul 2025 08:00:29 +0000
Manifest this update: Sun 27 Jul 2025 08:00:29 +0000
Manifest next update: Mon 28 Jul 2025 08:00:29 +0000
Files and hashes: 1: mgdjMrvSgPCFLbafYVsPFJkUgxs.crl (hash: mPJI7NtDRpvFbJ+4z3ke0sdJ2g98KpWiL/lWy6SLmVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/3d838c-8622-4e58-870f-de9e02d41797/1/mgdjMrvSgPCFLbafYVsPFJkUgxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/3d838c-8622-4e58-870f-de9e02d41797/1/mgdjMrvSgPCFLbafYVsPFJkUgxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/mgdjMrvSgPCFLbafYVsPFJkUgxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:e5:c6:6a:de:05:db:7f:cb:c6:41:c4:83:78:da:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a076332bbd280f0852db69f615b0f149914831b
Validity
Not Before: Jul 27 08:00:29 2025 GMT
Not After : Jul 28 08:00:29 2025 GMT
Subject: CN=3a4bcc3dfecb20288f07194c6b836e3800edb0a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ed:33:d6:46:8d:40:8a:90:25:a2:5b:49:76:
c7:75:31:39:6c:d6:2f:33:20:2f:df:1d:22:e4:02:
fb:19:01:e2:1e:aa:d6:af:ed:e8:3c:b4:8c:19:fa:
5c:33:e0:2e:c1:f7:b7:50:07:e5:a1:d9:6b:90:a7:
af:b1:36:0c:5b:5e:b6:6e:c6:e9:29:c1:3a:39:1e:
9c:c9:a7:55:d7:7a:b1:cb:3a:b3:62:25:3c:1f:b6:
c1:3f:f5:9d:49:9d:29:fd:67:d8:ff:f1:44:2f:60:
c4:63:12:c8:2e:c4:1f:5f:59:b0:1a:00:37:39:d6:
1f:1c:8e:50:e3:27:7f:82:df:f3:59:52:4a:0a:a3:
00:3a:c6:f5:7d:21:d2:a4:bd:09:cc:52:e6:6d:7d:
6a:99:0c:dd:be:fe:c4:9f:0f:bb:d5:1a:fb:fa:12:
46:52:08:2c:d2:a4:2c:6b:27:40:99:ab:25:2d:0d:
fc:78:0a:9e:58:84:bd:90:b2:1c:fe:3f:36:d3:da:
2c:1e:48:ce:14:d0:e8:15:8c:77:48:ce:72:0b:59:
2f:04:14:f5:7d:86:9d:8c:ee:13:cd:91:8c:31:97:
39:29:90:58:73:dc:9a:7a:75:52:1e:71:47:ed:90:
e7:da:eb:2c:40:2c:94:a9:4c:70:6f:63:f8:87:da:
c6:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:4B:CC:3D:FE:CB:20:28:8F:07:19:4C:6B:83:6E:38:00:ED:B0:A1
X509v3 Authority Key Identifier:
keyid:9A:07:63:32:BB:D2:80:F0:85:2D:B6:9F:61:5B:0F:14:99:14:83:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mgdjMrvSgPCFLbafYVsPFJkUgxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3d838c-8622-4e58-870f-de9e02d41797/1/mgdjMrvSgPCFLbafYVsPFJkUgxs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3d838c-8622-4e58-870f-de9e02d41797/1/mgdjMrvSgPCFLbafYVsPFJkUgxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:ae:5b:1a:42:e2:2f:ab:42:c9:b5:02:9a:5c:85:cc:71:22:
2d:74:c0:67:21:fa:96:09:da:88:6c:f8:60:ee:50:a0:e0:eb:
3a:7d:2d:e0:64:42:f2:b4:7a:8b:c0:b6:10:3d:6e:64:fc:da:
b0:32:3a:c0:d9:2e:85:ab:b0:3e:09:ea:4f:92:e0:89:69:4a:
33:f3:fb:56:3d:15:c8:66:b1:ac:76:fb:02:bb:06:e5:6d:24:
e4:50:9d:e5:62:69:a0:6d:9f:cc:db:c8:9f:17:b5:88:77:55:
56:2a:27:fd:93:97:4a:26:49:21:1d:47:1f:7b:17:aa:ea:66:
70:75:cc:b0:65:6d:c3:e9:3d:97:15:d5:86:39:92:b3:d3:e2:
a7:f2:96:92:50:6b:a6:7e:e6:1e:d0:e8:5f:17:c8:08:6d:4a:
24:04:c4:39:4a:ce:68:65:73:66:8a:99:47:29:ab:1e:24:35:
ca:c6:58:19:39:c1:04:9a:06:3a:8d:92:d2:f5:ea:79:ad:8e:
ae:e6:f4:fe:f5:77:3e:01:7c:49:c1:4b:3b:64:16:05:c4:5c:
37:26:28:b3:c4:ba:8a:09:2a:74:9a:fa:7d:0c:39:0f:7f:8a:
15:40:ba:63:8e:a2:b5:2e:ee:ef:7c:ad:91:28:37:a4:14:4f:
3c:05:96:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:07:41 2025 by rpki-client