Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/9b34b0-301a-41a2-b4c5-a8866aa95c71/1/MGatYcFi3wZQ7gq2DGgHWymiEcg.mft
File: MGatYcFi3wZQ7gq2DGgHWymiEcg.mft (raw, json)
Hash identifier: KWQu/Fzr8RMlCHChvtBrd+YzC6Pi/b1MHCeKOs2f464=
Subject key identifier: DA:97:1B:28:1D:19:06:C4:9B:9B:E3:5D:7F:C3:D6:81:66:F3:B5:8C
Authority key identifier: 30:66:AD:61:C1:62:DF:06:50:EE:0A:B6:0C:68:07:5B:29:A2:11:C8
Certificate issuer: /CN=3066ad61c162df0650ee0ab60c68075b29a211c8
Certificate serial: 0198409996B71FAACA1D2BE90CF6D9C72DAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MGatYcFi3wZQ7gq2DGgHWymiEcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/9b34b0-301a-41a2-b4c5-a8866aa95c71/1/MGatYcFi3wZQ7gq2DGgHWymiEcg.mft
Manifest number: 15FE
Signing time: Fri 25 Jul 2025 08:01:04 +0000
Manifest this update: Fri 25 Jul 2025 08:01:04 +0000
Manifest next update: Sat 26 Jul 2025 08:01:04 +0000
Files and hashes: 1: MGatYcFi3wZQ7gq2DGgHWymiEcg.crl (hash: 1hKT95uJfc+nppw+T9808ROVMv03WvZUqX2bVSbxcl0=)
2: akH_-GUofRi3IR9WY9DWc-MBUHc.roa (hash: GH7ew6e0VLPyvTO+mxXZge5TTd6Djbt+GfnJ/q6zgIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/9b34b0-301a-41a2-b4c5-a8866aa95c71/1/MGatYcFi3wZQ7gq2DGgHWymiEcg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/9b34b0-301a-41a2-b4c5-a8866aa95c71/1/MGatYcFi3wZQ7gq2DGgHWymiEcg.mft
rsync://rpki.ripe.net/repository/DEFAULT/MGatYcFi3wZQ7gq2DGgHWymiEcg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:40:99:96:b7:1f:aa:ca:1d:2b:e9:0c:f6:d9:c7:2d:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3066ad61c162df0650ee0ab60c68075b29a211c8
Validity
Not Before: Jul 25 08:01:04 2025 GMT
Not After : Jul 26 08:01:04 2025 GMT
Subject: CN=da971b281d1906c49b9be35d7fc3d68166f3b58c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:8c:8f:e1:13:a9:8f:b7:8a:8d:7b:d7:9f:59:
fb:91:b5:24:aa:7e:53:ce:6f:ae:ba:f9:8d:58:92:
0a:bf:0f:ae:d6:22:54:0a:ec:ec:b3:ef:e5:88:da:
26:c4:16:b6:7c:fc:61:30:17:01:76:48:35:9e:14:
87:6d:ab:a4:ef:5c:32:a0:c9:94:4e:86:90:f0:fc:
72:19:e9:61:20:75:e0:6b:a4:c7:7a:3a:4b:33:f3:
65:cf:6c:22:4b:b5:be:ee:ed:a9:4d:79:9d:16:79:
9c:2c:7c:92:59:9a:8a:b7:fe:b5:ff:ad:91:c7:4d:
60:22:73:e2:86:8e:9d:1a:69:e6:5d:2a:bb:1f:3c:
b1:ed:ff:23:07:b6:d2:5e:a1:31:d8:15:cf:c1:35:
6a:0a:6f:76:cf:ce:f2:bb:1a:22:42:5c:55:11:91:
55:7d:e5:e0:31:39:ca:54:a3:58:47:d0:99:08:a4:
33:18:b7:cf:e8:aa:46:df:c8:b4:bc:5f:14:7d:11:
88:cc:c6:2a:86:57:6f:65:8c:45:bc:71:fc:d2:70:
c1:1e:89:19:dd:0d:81:e6:85:13:db:7a:d3:66:75:
ce:cf:ce:e4:f9:ba:2a:dc:6b:64:85:43:4b:09:16:
80:dd:91:d3:89:ff:f4:e4:57:d2:4f:5f:94:f7:e6:
e8:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:97:1B:28:1D:19:06:C4:9B:9B:E3:5D:7F:C3:D6:81:66:F3:B5:8C
X509v3 Authority Key Identifier:
keyid:30:66:AD:61:C1:62:DF:06:50:EE:0A:B6:0C:68:07:5B:29:A2:11:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGatYcFi3wZQ7gq2DGgHWymiEcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9b34b0-301a-41a2-b4c5-a8866aa95c71/1/MGatYcFi3wZQ7gq2DGgHWymiEcg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9b34b0-301a-41a2-b4c5-a8866aa95c71/1/MGatYcFi3wZQ7gq2DGgHWymiEcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:d2:eb:06:d5:c7:4d:33:63:df:7a:79:05:b5:68:4c:36:9c:
01:25:60:45:65:86:50:17:8b:34:36:8f:ad:b8:8e:a8:12:26:
84:22:36:d7:cb:07:72:51:52:5d:49:f8:1c:de:a0:0c:cb:dd:
41:81:65:5a:f6:9e:46:d4:e9:82:05:ef:e5:ce:a9:b2:3a:05:
a7:7e:a6:9b:49:d9:7a:15:c0:b1:19:9b:06:93:56:6b:02:0c:
03:aa:56:0c:0b:b7:ff:af:f7:bb:e9:3c:2d:f8:fc:97:47:c5:
bc:3d:eb:a4:41:1a:6c:16:82:22:0c:09:09:a0:79:08:81:c5:
a9:e7:f9:6e:2e:aa:cf:1f:84:54:60:fe:c8:ec:34:21:f0:fa:
b7:a9:46:68:3e:4d:2b:4e:f5:ef:93:fe:d3:3f:4e:3a:73:52:
0a:c1:81:a1:8d:01:9b:fb:a3:83:2c:25:a0:ef:6d:70:2b:df:
61:c6:44:2d:90:d7:97:0c:5d:56:a1:c7:c6:5f:bc:46:09:5c:
76:37:47:0f:a4:4c:a0:86:b4:f6:2b:b3:56:8e:31:85:61:5e:
58:da:46:07:79:98:36:45:5e:ea:d8:da:90:50:37:7f:9e:f8:
24:f6:28:0f:af:1b:99:07:84:aa:2b:70:0e:3c:bd:ff:d1:c9:
32:00:79:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 12:43:12 2025 by rpki-client