Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/232cfd-76dc-49e9-a94d-5188ea17d9a9/1/MGavc-_zrCH_F6CVL_Nw5gykS10.mft
File: MGavc-_zrCH_F6CVL_Nw5gykS10.mft (raw, json)
Hash identifier: 2GLYtZE5TzRcPJLBjWqBWf8QbHxoGAXSC6rkAKw/1sg=
Subject key identifier: C6:E4:FA:77:25:6B:A6:E7:65:75:4C:11:BF:D5:6C:01:20:E0:3C:43
Authority key identifier: 30:66:AF:73:EF:F3:AC:21:FF:17:A0:95:2F:F3:70:E6:0C:A4:4B:5D
Certificate issuer: /CN=3066af73eff3ac21ff17a0952ff370e60ca44b5d
Certificate serial: 01974A43DB76F4F518B0416105AA3D0FBD96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MGavc-_zrCH_F6CVL_Nw5gykS10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/232cfd-76dc-49e9-a94d-5188ea17d9a9/1/MGavc-_zrCH_F6CVL_Nw5gykS10.mft
Manifest number: 157C
Signing time: Sat 07 Jun 2025 12:00:50 +0000
Manifest this update: Sat 07 Jun 2025 12:00:50 +0000
Manifest next update: Sun 08 Jun 2025 12:00:50 +0000
Files and hashes: 1: MGavc-_zrCH_F6CVL_Nw5gykS10.crl (hash: Y5QSVGyaT6tqm6SjI9kqD8R6nimAjh7N8subuDd9coo=)
2: iic_3MWvnXwRjdS-4rnJnbVlZdw.roa (hash: ft3o3Jhs8krX+yoAKh9srXW+5Ly/fpaA/Ux+H2kgUMA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/232cfd-76dc-49e9-a94d-5188ea17d9a9/1/MGavc-_zrCH_F6CVL_Nw5gykS10.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/232cfd-76dc-49e9-a94d-5188ea17d9a9/1/MGavc-_zrCH_F6CVL_Nw5gykS10.mft
rsync://rpki.ripe.net/repository/DEFAULT/MGavc-_zrCH_F6CVL_Nw5gykS10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:43:db:76:f4:f5:18:b0:41:61:05:aa:3d:0f:bd:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3066af73eff3ac21ff17a0952ff370e60ca44b5d
Validity
Not Before: Jun 7 12:00:50 2025 GMT
Not After : Jun 8 12:00:50 2025 GMT
Subject: CN=c6e4fa77256ba6e765754c11bfd56c0120e03c43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:41:ee:07:5e:e6:46:d6:f3:05:5e:0c:ec:8f:
53:23:50:12:13:e2:e1:86:de:cc:bb:b1:f9:66:40:
64:61:3a:b4:6e:b9:41:bf:d8:f9:7a:d4:96:e1:d6:
d7:91:78:a1:14:28:49:a8:75:71:ca:f6:26:df:c8:
ba:27:9e:63:08:4a:d3:c1:15:c9:2c:4c:71:48:57:
a7:f7:f0:65:bf:da:be:76:b1:d7:ab:d9:d8:d2:d2:
6e:8f:ac:19:3b:6d:00:2a:e6:f9:76:2e:24:ad:36:
ee:ae:24:ee:2f:2b:bd:c9:69:bb:55:0a:13:60:ce:
93:f5:db:a1:39:cf:b2:62:ff:9d:1a:81:85:e1:4b:
8a:ae:e5:75:f0:c5:89:b7:8e:07:30:3c:93:1d:a9:
ae:c1:17:65:b9:51:c0:f1:11:2f:ba:16:97:70:a3:
af:55:32:f3:e6:49:cb:42:0c:8b:04:e2:80:35:6c:
92:e0:45:45:fa:82:6e:a2:9e:3b:3a:b6:45:74:dd:
d9:4a:6c:4c:1c:13:36:1e:9d:e8:8d:68:25:d3:00:
a0:a1:57:20:4a:0e:91:83:6d:13:09:ba:fd:3c:51:
84:65:49:24:96:f4:db:79:e4:16:c7:c9:13:8c:d8:
95:aa:af:d1:22:51:e7:a7:e3:e0:4e:01:82:38:0b:
3f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:E4:FA:77:25:6B:A6:E7:65:75:4C:11:BF:D5:6C:01:20:E0:3C:43
X509v3 Authority Key Identifier:
keyid:30:66:AF:73:EF:F3:AC:21:FF:17:A0:95:2F:F3:70:E6:0C:A4:4B:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGavc-_zrCH_F6CVL_Nw5gykS10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/232cfd-76dc-49e9-a94d-5188ea17d9a9/1/MGavc-_zrCH_F6CVL_Nw5gykS10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/232cfd-76dc-49e9-a94d-5188ea17d9a9/1/MGavc-_zrCH_F6CVL_Nw5gykS10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:4d:6d:03:67:f3:a1:9a:16:3b:cd:4d:45:ec:4a:da:ee:2e:
3f:a7:c6:4f:23:72:1f:c7:4a:12:86:14:0a:e8:2d:1e:0c:8f:
f2:6e:7c:b3:89:10:b4:3b:b1:d4:fb:2f:ac:39:55:8a:14:3a:
3b:00:03:eb:dc:58:6f:f5:ca:2f:1b:bf:d0:fe:f4:9a:81:f5:
25:58:01:0f:f6:72:d3:70:fc:2d:61:6e:44:c3:2c:a3:ea:a0:
48:37:cb:4f:c7:9d:40:69:20:76:35:25:c7:54:3b:4c:48:db:
15:cf:44:59:5c:32:5f:f7:7a:1a:4d:00:e9:de:5b:7f:d6:c0:
31:b5:9d:62:b3:46:d8:4f:da:7b:18:8b:df:4c:67:16:bc:2b:
03:86:6c:39:6d:80:51:bb:37:3d:6f:71:3e:27:d7:6d:44:66:
13:09:37:37:36:ed:64:31:6d:8d:fa:f6:f4:e0:23:d6:1c:3c:
be:53:0e:8f:58:81:5b:0b:4b:c2:2d:58:29:93:19:cf:4f:99:
c0:c6:7e:ba:97:46:d8:e2:db:ce:86:f9:82:c9:ad:d7:74:e5:
97:02:c2:71:c5:06:a3:eb:b2:d1:08:b4:d3:d0:41:4e:35:fa:
7d:8e:1e:fe:d8:86:93:0f:cf:de:91:62:d5:35:e9:5e:43:9f:
bd:66:99:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:45:37 2025 by rpki-client