Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.mft
File: Mgax0ge2XA69PyP6djABbYe0E0k.mft (raw, json)
Hash identifier: +m7KfSVSAOebQc4scY7eUGG/UDwMsLwLmEFTPvRqzTw=
Subject key identifier: 1D:82:5A:5E:91:E1:BB:F5:7C:35:FF:6F:50:C2:31:4A:AD:5A:5F:14
Authority key identifier: 32:06:B1:D2:07:B6:5C:0E:BD:3F:23:FA:76:30:01:6D:87:B4:13:49
Certificate issuer: /CN=3206b1d207b65c0ebd3f23fa7630016d87b41349
Certificate serial: 0199228C8D165C0A473DB7772ECE06F9055A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mgax0ge2XA69PyP6djABbYe0E0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.mft
Manifest number: 0690
Signing time: Sun 07 Sep 2025 05:01:00 +0000
Manifest this update: Sun 07 Sep 2025 05:01:00 +0000
Manifest next update: Mon 08 Sep 2025 05:01:00 +0000
Files and hashes: 1: M2KDR8dr7-7ZyhSIDyzwELKYUdM.roa (hash: p4F925/VSgNOhwfLh+ZxgpZFhtfFkVdXlw/7VfsIDVw=)
2: Mgax0ge2XA69PyP6djABbYe0E0k.crl (hash: fOpw018KJhvPIvWSEO3fqEsrwnRQibuJujNTUlXhmKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mgax0ge2XA69PyP6djABbYe0E0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:8d:16:5c:0a:47:3d:b7:77:2e:ce:06:f9:05:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3206b1d207b65c0ebd3f23fa7630016d87b41349
Validity
Not Before: Sep 7 05:01:00 2025 GMT
Not After : Sep 8 05:01:00 2025 GMT
Subject: CN=1d825a5e91e1bbf57c35ff6f50c2314aad5a5f14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:db:d7:0e:a4:d3:49:e5:a1:cd:69:b8:cc:53:
f6:71:da:f7:73:cf:c8:00:7c:4c:ae:bb:70:a1:b3:
e8:4c:0f:cb:45:a8:5f:eb:12:3a:1d:40:bd:71:19:
a1:bd:ef:5f:21:57:fa:9a:9f:d9:1a:56:f7:94:f1:
56:59:1d:12:97:51:04:ce:00:5d:db:71:f2:b6:3c:
00:7e:ac:03:00:74:59:d6:2b:94:68:f5:4d:ff:37:
ee:21:ca:fa:d3:97:ad:95:79:f2:cf:5d:16:ee:e1:
82:2d:c2:03:d4:91:b8:72:5c:e5:1e:4d:25:09:6a:
fc:57:9c:8d:e8:24:97:02:b5:34:e2:8b:3e:cf:2a:
bf:9f:b8:66:ab:e6:2c:77:e3:4e:8d:ab:85:28:fd:
80:6d:5c:79:19:e0:58:6b:c0:80:20:c7:57:36:6f:
25:b4:59:a1:7e:cc:8f:09:e4:2a:61:56:32:f1:5d:
1a:f0:29:6c:82:1e:10:6b:c6:e0:58:93:57:a6:a6:
b1:bc:74:57:ff:f7:2c:e5:1f:2c:b6:d5:b5:4e:6c:
10:86:1c:8f:88:97:7a:3b:dc:3c:82:7b:28:2c:a2:
cb:c5:9f:0f:bf:26:9b:0d:ff:0c:d2:ee:cf:71:28:
1c:78:cf:8d:9a:a0:3b:0f:36:02:9c:f0:8b:b5:13:
31:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:82:5A:5E:91:E1:BB:F5:7C:35:FF:6F:50:C2:31:4A:AD:5A:5F:14
X509v3 Authority Key Identifier:
keyid:32:06:B1:D2:07:B6:5C:0E:BD:3F:23:FA:76:30:01:6D:87:B4:13:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mgax0ge2XA69PyP6djABbYe0E0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:7f:51:82:cd:ff:8f:5d:1c:e1:f1:09:c3:a5:14:bb:07:b4:
47:67:7e:db:e9:9e:dc:17:ec:84:ff:77:ca:a7:e6:06:39:bc:
a0:0d:f5:f6:fb:48:16:7e:c7:34:b8:4d:c3:f5:bd:ed:5d:d6:
99:96:1b:0f:92:65:84:fc:d1:a2:69:06:2e:62:6c:36:e0:4f:
c0:b1:f7:97:06:1f:84:0d:5e:4a:8f:0c:df:42:de:d8:c7:04:
ae:f6:15:d7:8c:68:9b:9b:3d:b0:e9:c0:2a:f5:e0:de:84:3b:
95:f2:21:f5:85:ad:2c:90:ae:c9:d5:50:92:f5:e4:95:8f:d7:
0d:e9:b7:f6:b9:52:c0:ef:35:59:9e:ef:05:57:a3:d7:c5:82:
c7:6b:49:38:15:38:74:7e:de:69:5e:ad:c7:94:74:04:d8:f2:
54:a3:23:9f:6a:a2:3f:b0:2f:3b:11:fe:7c:a9:6c:70:7d:37:
92:b9:57:63:48:62:d3:d2:da:53:13:00:bb:35:c4:c4:bf:49:
03:63:b1:42:9f:27:ca:5c:19:e1:07:d9:99:27:67:93:d2:a0:
38:12:0f:f0:c3:af:95:e7:b8:33:f5:2b:47:08:14:48:1f:16:
cd:6e:a6:f7:f9:79:28:51:53:03:ff:a3:c2:77:22:86:6c:15:
5c:ad:e8:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:38:39 2025 by rpki-client