Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.mft
File: Mgax0ge2XA69PyP6djABbYe0E0k.mft (raw, json)
Hash identifier: fc9R88grI0kmsXPcSHTfV4cbjZpcekP3dNctnUPE0Mk=
Subject key identifier: CB:F2:11:C6:AA:EB:C3:06:42:2A:33:8D:9A:48:CD:F5:A4:E3:F7:CE
Authority key identifier: 32:06:B1:D2:07:B6:5C:0E:BD:3F:23:FA:76:30:01:6D:87:B4:13:49
Certificate issuer: /CN=3206b1d207b65c0ebd3f23fa7630016d87b41349
Certificate serial: 019736184A58E94FDFB1190022B14332FCBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mgax0ge2XA69PyP6djABbYe0E0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.mft
Manifest number: 0591
Signing time: Tue 03 Jun 2025 14:00:50 +0000
Manifest this update: Tue 03 Jun 2025 14:00:50 +0000
Manifest next update: Wed 04 Jun 2025 14:00:50 +0000
Files and hashes: 1: M2KDR8dr7-7ZyhSIDyzwELKYUdM.roa (hash: p4F925/VSgNOhwfLh+ZxgpZFhtfFkVdXlw/7VfsIDVw=)
2: Mgax0ge2XA69PyP6djABbYe0E0k.crl (hash: r9QHsadsJO2Kd49C80FCrkM1lNKAH4qSEnc5skXaciM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mgax0ge2XA69PyP6djABbYe0E0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Jun 2025 14:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:36:18:4a:58:e9:4f:df:b1:19:00:22:b1:43:32:fc:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3206b1d207b65c0ebd3f23fa7630016d87b41349
Validity
Not Before: Jun 3 14:00:50 2025 GMT
Not After : Jun 4 14:00:50 2025 GMT
Subject: CN=cbf211c6aaebc306422a338d9a48cdf5a4e3f7ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:96:2e:30:0e:12:7f:50:e8:6a:36:fb:4d:9c:
b4:b4:9a:42:44:74:4c:33:f1:11:b9:d0:3e:10:8e:
25:0e:25:b8:7d:bf:8d:41:08:c5:c8:e0:e6:ea:a0:
99:12:e7:69:fa:fd:75:24:41:86:29:2f:24:19:d6:
43:52:ae:12:01:f8:9f:72:d7:61:20:b6:37:c3:e8:
2f:3f:2b:54:79:16:c1:6d:3c:4c:c2:3b:38:d8:e5:
28:11:19:3f:d5:b2:69:ec:23:91:5a:42:35:69:11:
77:19:21:ac:2a:07:90:6d:59:1d:cc:4e:94:41:ad:
e9:09:67:98:5a:ec:2d:ce:84:b5:ae:b7:46:cb:72:
5c:eb:d6:a5:6e:0c:0c:d8:be:04:5f:08:75:83:43:
b5:15:47:53:ef:5e:e7:d7:17:08:dd:d6:20:e2:7c:
85:13:37:f5:48:5a:ee:4b:2c:ad:1f:df:ff:46:8e:
1a:a1:26:73:b1:41:32:12:60:12:d5:59:60:9a:28:
eb:34:77:99:e9:2f:3b:ad:9c:1d:43:02:65:8a:db:
97:60:69:80:4e:25:10:47:91:6d:92:2f:31:c2:e7:
64:fe:09:98:72:9d:f9:0f:92:93:71:38:36:85:49:
98:b6:e5:81:b3:48:7e:7f:fa:68:d5:a6:01:ff:68:
1e:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:F2:11:C6:AA:EB:C3:06:42:2A:33:8D:9A:48:CD:F5:A4:E3:F7:CE
X509v3 Authority Key Identifier:
keyid:32:06:B1:D2:07:B6:5C:0E:BD:3F:23:FA:76:30:01:6D:87:B4:13:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mgax0ge2XA69PyP6djABbYe0E0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:fd:c0:a4:10:88:ec:4a:f9:ca:18:71:18:b3:75:d1:f4:d3:
28:c4:06:07:af:3d:12:a2:13:9e:24:f5:01:8a:a4:da:77:d8:
a4:2d:97:bc:58:ff:20:fd:f9:a0:51:e1:b6:b5:12:da:ae:75:
96:20:81:5a:24:83:90:03:17:f1:fc:5b:df:79:7a:df:2a:d0:
89:6b:05:90:43:50:54:92:23:80:2c:f4:8f:fa:9e:95:c7:84:
55:b0:da:af:9c:af:be:7c:11:ff:86:95:aa:25:70:74:c2:4c:
f2:0e:dc:b4:60:bd:30:73:18:88:14:82:30:26:ca:de:0b:dd:
e1:af:f0:ed:da:02:f5:d6:cd:f1:d9:c1:9f:82:8e:4c:a3:9d:
ed:00:6a:b9:9e:b8:a5:e2:93:0a:fb:30:10:dc:57:0e:92:05:
53:72:b0:c1:c9:75:2c:54:e7:12:b9:03:4a:f3:35:dd:b4:63:
d2:eb:57:4f:b7:b0:1a:26:29:4a:08:c5:93:94:5a:39:4f:f8:
de:5b:01:33:31:75:0d:af:0c:54:a5:dc:f3:19:16:71:a1:ca:
a5:0f:1d:6f:08:43:99:7f:27:f5:34:35:45:f9:6d:73:c5:15:
03:aa:4a:3c:44:58:36:7b:17:7e:81:bd:f0:e2:2a:59:a2:33:
72:ae:ae:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 23:42:09 2025 by rpki-client