Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/7e4ea8-8950-4183-abc0-3382794049c2/1/MGtGjMMe86PQgayPArJx4xR1Wb8.mft
File: MGtGjMMe86PQgayPArJx4xR1Wb8.mft (raw, json)
Hash identifier: 2Nu3uejaFLZ+aH4lftuCMoKvbneSAlQm8KKq0XB5s3c=
Subject key identifier: 05:DA:69:A1:A1:A0:11:CB:16:5E:AB:09:37:C0:E7:32:38:4A:81:F6
Authority key identifier: 30:6B:46:8C:C3:1E:F3:A3:D0:81:AC:8F:02:B2:71:E3:14:75:59:BF
Certificate issuer: /CN=306b468cc31ef3a3d081ac8f02b271e3147559bf
Certificate serial: 0197605DAFE95D6E3ABCF0B6C67141981C38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MGtGjMMe86PQgayPArJx4xR1Wb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/7e4ea8-8950-4183-abc0-3382794049c2/1/MGtGjMMe86PQgayPArJx4xR1Wb8.mft
Manifest number: 0A44
Signing time: Wed 11 Jun 2025 19:00:41 +0000
Manifest this update: Wed 11 Jun 2025 19:00:41 +0000
Manifest next update: Thu 12 Jun 2025 19:00:41 +0000
Files and hashes: 1: MGtGjMMe86PQgayPArJx4xR1Wb8.crl (hash: 8W9ON1psa9IeCU19oW/3tu28nxm1rsiSeSrkqO+cvqg=)
2: zCf3OK6AbL-GLEVW2m2fiyVZR2o.roa (hash: T9wprypvgjd5UjKaL97Qh7s/fP7I922vE5XInqdd1G4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/7e4ea8-8950-4183-abc0-3382794049c2/1/MGtGjMMe86PQgayPArJx4xR1Wb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/7e4ea8-8950-4183-abc0-3382794049c2/1/MGtGjMMe86PQgayPArJx4xR1Wb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/MGtGjMMe86PQgayPArJx4xR1Wb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 15:40:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:60:5d:af:e9:5d:6e:3a:bc:f0:b6:c6:71:41:98:1c:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=306b468cc31ef3a3d081ac8f02b271e3147559bf
Validity
Not Before: Jun 11 19:00:41 2025 GMT
Not After : Jun 12 19:00:41 2025 GMT
Subject: CN=05da69a1a1a011cb165eab0937c0e732384a81f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d3:40:89:f3:13:1c:8e:9f:47:ee:90:e0:33:
f9:97:78:6d:71:ab:74:3a:f6:24:23:7d:92:1e:00:
37:fb:37:57:28:84:ce:d3:1d:3a:f2:da:7f:22:5a:
52:9c:f1:8c:7c:9b:db:bd:37:e0:92:6b:76:27:4b:
2b:88:d7:9a:f3:5c:64:f6:f2:cf:2d:8b:76:21:63:
d1:35:d4:b1:ad:7b:b5:ed:8b:bf:0d:8c:f5:fb:6d:
9c:d0:1f:32:6e:96:e1:d1:0b:2f:37:fa:e5:7e:ee:
e2:ac:52:a7:a8:d8:72:b2:0a:d8:0e:49:ff:fc:6d:
cc:ec:d9:b1:ce:a6:a0:64:97:94:5e:87:99:59:22:
62:86:df:df:91:6d:28:da:2f:98:8f:0a:f8:1c:f5:
d3:96:3d:9c:19:32:c7:67:f5:41:5a:06:51:dd:3d:
b7:76:c1:6f:cc:69:88:b7:47:f8:61:b4:c7:04:a5:
b4:bd:34:c9:64:8d:91:5b:fe:ed:84:04:d5:7c:52:
06:bd:4e:86:ab:80:a2:9c:b5:11:61:ea:44:cb:95:
73:bf:50:c5:3a:be:1d:19:f8:5b:9c:d1:56:36:3f:
bd:5e:b3:47:a5:20:59:d8:4f:96:c1:43:23:50:a3:
09:83:56:08:cf:0e:61:f4:74:bc:e3:4e:e5:55:db:
c8:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:DA:69:A1:A1:A0:11:CB:16:5E:AB:09:37:C0:E7:32:38:4A:81:F6
X509v3 Authority Key Identifier:
keyid:30:6B:46:8C:C3:1E:F3:A3:D0:81:AC:8F:02:B2:71:E3:14:75:59:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGtGjMMe86PQgayPArJx4xR1Wb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7e4ea8-8950-4183-abc0-3382794049c2/1/MGtGjMMe86PQgayPArJx4xR1Wb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7e4ea8-8950-4183-abc0-3382794049c2/1/MGtGjMMe86PQgayPArJx4xR1Wb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:71:70:f7:73:db:4b:a5:1f:c0:f1:4a:bc:07:65:a4:a4:fc:
e0:3a:1f:a4:04:93:29:5c:af:c2:90:76:7d:68:b7:a3:54:4d:
94:33:4d:17:cc:19:4a:68:82:e5:0c:bb:84:e3:c7:d1:56:e1:
4b:9c:e3:56:e1:36:a9:7d:72:69:e2:d4:89:d4:65:4d:3a:4b:
01:a3:94:d8:8b:19:60:a3:03:a4:a0:a3:ee:67:1f:87:1e:3c:
79:70:8b:f6:a7:9f:9d:f3:78:e7:f7:40:5e:74:29:47:11:f8:
4e:63:39:f9:f1:96:d3:1d:50:e8:3b:d6:93:af:e5:6f:33:b7:
89:ee:ed:96:da:b0:e9:d6:d4:d5:16:2d:94:e4:ba:db:7d:52:
33:64:95:62:00:23:65:ff:aa:ad:3f:db:92:53:bb:2a:b2:d9:
01:c1:c5:58:c8:81:2f:3a:81:22:d3:5c:f6:47:53:2a:8e:20:
8e:bf:da:17:66:e9:d8:c9:1b:88:25:90:49:0b:4a:f3:93:a8:
c8:06:52:1b:2e:bc:cc:76:ec:4d:3f:05:77:09:a1:42:6e:50:
a6:19:8e:cd:05:26:22:6a:87:5e:0c:34:5e:cd:cd:cf:b5:08:
45:ba:7f:3a:d7:28:ba:92:6e:40:88:2d:cd:3f:cd:51:e5:89:
ff:dc:ed:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 00:41:01 2025 by rpki-client