Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/30f34e-e2ad-4b8d-8ce0-011878255ba7/1/MGY7W3BEIyuYmBjRLMkEkCElJN8.mft
File: MGY7W3BEIyuYmBjRLMkEkCElJN8.mft (raw, json)
Hash identifier: QFwM4hmCbQWinhAyEjnHq3vGv8BzRC8bulA0j7Dq8oo=
Subject key identifier: BB:E4:19:99:09:80:F0:BB:15:D6:58:75:AC:80:E4:82:4C:05:EE:09
Authority key identifier: 30:66:3B:5B:70:44:23:2B:98:98:18:D1:2C:C9:04:90:21:25:24:DF
Certificate issuer: /CN=30663b5b7044232b989818d12cc90490212524df
Certificate serial: 019659143B9D6FBD3DC4C9912F26596D7ACF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MGY7W3BEIyuYmBjRLMkEkCElJN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/30f34e-e2ad-4b8d-8ce0-011878255ba7/1/MGY7W3BEIyuYmBjRLMkEkCElJN8.mft
Manifest number: 15
Signing time: Mon 21 Apr 2025 16:00:20 +0000
Manifest this update: Mon 21 Apr 2025 16:00:20 +0000
Manifest next update: Tue 22 Apr 2025 16:00:20 +0000
Files and hashes: 1: MGY7W3BEIyuYmBjRLMkEkCElJN8.crl (hash: qClXlMh/YNyyneF0m0A9OaNFOLMwZg7xWGHL0m42Gmk=)
2: jl5BGicOacjnQYcT0f92Ohaidfk.roa (hash: 2+8T//3NgApFzgg77XKjZhpHy2WC3GoSuHjoqbCDjuc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/30f34e-e2ad-4b8d-8ce0-011878255ba7/1/MGY7W3BEIyuYmBjRLMkEkCElJN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/30f34e-e2ad-4b8d-8ce0-011878255ba7/1/MGY7W3BEIyuYmBjRLMkEkCElJN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/MGY7W3BEIyuYmBjRLMkEkCElJN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:14:3b:9d:6f:bd:3d:c4:c9:91:2f:26:59:6d:7a:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30663b5b7044232b989818d12cc90490212524df
Validity
Not Before: Apr 21 16:00:20 2025 GMT
Not After : Apr 22 16:00:20 2025 GMT
Subject: CN=bbe419990980f0bb15d65875ac80e4824c05ee09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:32:a7:e4:c0:a3:cd:7e:b5:ba:55:a6:c8:06:
42:40:8a:36:58:5a:a0:11:2f:a2:2b:c2:7e:f3:31:
58:04:3d:6d:50:4b:3a:6f:f0:b9:92:29:be:a7:35:
25:d1:3d:56:b0:64:6f:3c:c5:a4:aa:a9:87:9a:03:
22:05:62:78:b6:b9:4d:1d:f3:66:c1:b5:a3:0f:6a:
ec:61:49:9a:2b:f5:c1:eb:ab:38:df:3f:dd:78:45:
6c:c3:0f:75:80:4d:62:48:77:74:08:8d:17:9e:41:
cc:a7:ae:74:6c:30:96:6d:38:8d:4f:27:e2:74:c9:
be:dc:1a:39:db:15:3a:21:c0:07:d0:77:e6:8b:11:
f7:be:36:4b:49:a7:50:e7:ef:31:b3:aa:64:44:a9:
7d:52:b5:50:a2:e9:2b:55:35:49:ec:d2:21:92:09:
c8:cd:e0:58:fd:ac:ed:16:9c:59:d9:03:0a:9e:6e:
60:cc:fe:cb:2a:3d:99:b0:f1:fd:05:55:4a:c5:44:
37:3f:d4:1e:d7:d0:b9:cb:a7:a1:c8:55:59:b1:3d:
99:c0:6b:af:b0:7c:80:6c:3b:ba:96:22:e2:f8:13:
1f:ab:40:61:f5:ff:cd:41:b0:12:f4:8b:01:d1:cd:
1f:65:3e:e9:fa:b7:fd:2c:ca:9f:2a:ff:7c:c9:72:
13:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:E4:19:99:09:80:F0:BB:15:D6:58:75:AC:80:E4:82:4C:05:EE:09
X509v3 Authority Key Identifier:
keyid:30:66:3B:5B:70:44:23:2B:98:98:18:D1:2C:C9:04:90:21:25:24:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGY7W3BEIyuYmBjRLMkEkCElJN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/30f34e-e2ad-4b8d-8ce0-011878255ba7/1/MGY7W3BEIyuYmBjRLMkEkCElJN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/30f34e-e2ad-4b8d-8ce0-011878255ba7/1/MGY7W3BEIyuYmBjRLMkEkCElJN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:72:e8:54:f0:51:0e:81:ab:49:2f:f0:03:37:53:f1:93:02:
07:9f:ac:64:fe:11:0b:6a:8a:d2:34:76:ac:0d:2c:e4:7c:83:
1e:8c:2b:1a:00:60:23:b3:00:52:1f:49:7f:bb:d7:3f:10:66:
00:aa:71:8a:8e:56:4f:7b:2c:9b:0e:d8:3a:64:c4:0c:0f:1e:
2e:63:27:58:39:31:a8:af:58:c6:44:41:3b:b9:15:33:d0:a1:
d9:c0:ca:95:10:a9:15:af:77:08:eb:ed:3c:0e:78:2a:3e:95:
56:72:e4:5c:f2:3a:3e:cf:61:83:79:0c:5a:21:9e:99:65:36:
c2:19:5d:03:dc:47:41:d6:d3:f5:a7:e7:f0:e9:49:43:04:52:
2f:7d:79:f9:f7:9d:57:b8:2e:55:3f:33:c8:24:31:cb:b3:8d:
c5:ce:e1:b6:d2:eb:c2:d5:40:dc:aa:d9:c6:31:9e:aa:41:74:
1a:52:f2:79:83:28:82:03:6c:a8:61:a1:27:11:b8:c5:f9:7e:
ef:20:3f:f0:ed:39:88:cc:84:60:9d:87:d7:e8:58:ce:f9:4f:
e7:85:e6:9a:89:c2:86:3e:c3:08:4a:b6:df:cb:50:c6:88:43:
fd:6f:c2:76:67:4a:fd:6c:4e:49:31:93:94:0b:0b:27:e3:59:
8f:0e:ba:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:01:56 2025 by rpki-client