Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/7e4ea8-8950-4183-abc0-3382794049c2/1/MGtGjMMe86PQgayPArJx4xR1Wb8.mft
File: MGtGjMMe86PQgayPArJx4xR1Wb8.mft (raw, json)
Hash identifier: KnUyUblVJEnZ6Q6M9bP9dcFVr4XMRNYg3wZjpX1GoCw=
Subject key identifier: D2:C9:07:E7:CF:96:49:51:A1:CD:3A:DD:82:9B:A5:C8:46:43:AF:B8
Authority key identifier: 30:6B:46:8C:C3:1E:F3:A3:D0:81:AC:8F:02:B2:71:E3:14:75:59:BF
Certificate issuer: /CN=306b468cc31ef3a3d081ac8f02b271e3147559bf
Certificate serial: 01976A062385E525A76B8F02BD06BBDBFE81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MGtGjMMe86PQgayPArJx4xR1Wb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/7e4ea8-8950-4183-abc0-3382794049c2/1/MGtGjMMe86PQgayPArJx4xR1Wb8.mft
Manifest number: 0A49
Signing time: Fri 13 Jun 2025 16:01:16 +0000
Manifest this update: Fri 13 Jun 2025 16:01:16 +0000
Manifest next update: Sat 14 Jun 2025 16:01:16 +0000
Files and hashes: 1: MGtGjMMe86PQgayPArJx4xR1Wb8.crl (hash: 7PLAZ0Ayb8TVzKwwHsnvnDGa5YkHvBEIYOyHHN5frCo=)
2: zCf3OK6AbL-GLEVW2m2fiyVZR2o.roa (hash: T9wprypvgjd5UjKaL97Qh7s/fP7I922vE5XInqdd1G4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/7e4ea8-8950-4183-abc0-3382794049c2/1/MGtGjMMe86PQgayPArJx4xR1Wb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/7e4ea8-8950-4183-abc0-3382794049c2/1/MGtGjMMe86PQgayPArJx4xR1Wb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/MGtGjMMe86PQgayPArJx4xR1Wb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:06:23:85:e5:25:a7:6b:8f:02:bd:06:bb:db:fe:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=306b468cc31ef3a3d081ac8f02b271e3147559bf
Validity
Not Before: Jun 13 16:01:16 2025 GMT
Not After : Jun 14 16:01:16 2025 GMT
Subject: CN=d2c907e7cf964951a1cd3add829ba5c84643afb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:84:c0:2a:e5:94:a8:57:40:fc:5b:c5:91:72:
c6:e7:4f:04:62:7b:0a:69:e0:bc:09:78:14:e4:bb:
03:92:14:a7:53:55:b0:a3:2f:42:ea:21:62:92:c0:
0a:ad:8f:a2:0e:1b:6b:cf:78:ba:dd:af:96:cc:07:
95:1f:81:76:9e:66:fb:07:0b:ab:a9:cd:4b:80:81:
df:36:2a:c3:c9:48:1e:c9:df:82:40:7a:b2:3e:dd:
84:89:13:06:9f:e7:e6:f1:c8:61:12:04:d8:09:fc:
4d:30:93:2e:90:3b:ed:b4:a4:f9:28:48:f5:8f:1b:
37:45:85:61:d8:15:f9:30:81:eb:65:c5:1f:20:b4:
a9:2c:58:30:57:1f:cb:86:a5:d0:25:3f:bf:dd:e9:
d7:97:fe:b6:be:4b:2c:ca:6b:11:97:d4:e3:b2:7a:
88:12:c7:9f:48:51:fc:fb:e9:99:3b:14:65:30:1f:
f5:be:dd:a1:d8:fb:a0:d5:c9:4d:ee:d6:8f:ec:73:
3f:f3:be:a9:da:9d:39:24:eb:76:a8:95:f9:7c:9d:
79:24:c5:4e:0b:79:b3:b1:62:8d:03:36:84:54:73:
23:de:34:5e:f9:90:15:c2:38:df:af:95:3f:aa:af:
4b:c4:f1:8e:8c:ba:05:e2:93:9d:b3:77:79:51:90:
92:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:C9:07:E7:CF:96:49:51:A1:CD:3A:DD:82:9B:A5:C8:46:43:AF:B8
X509v3 Authority Key Identifier:
keyid:30:6B:46:8C:C3:1E:F3:A3:D0:81:AC:8F:02:B2:71:E3:14:75:59:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGtGjMMe86PQgayPArJx4xR1Wb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7e4ea8-8950-4183-abc0-3382794049c2/1/MGtGjMMe86PQgayPArJx4xR1Wb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7e4ea8-8950-4183-abc0-3382794049c2/1/MGtGjMMe86PQgayPArJx4xR1Wb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:44:67:5d:b8:cf:e1:fe:b6:6b:59:84:23:d5:53:ae:88:77:
1a:61:55:8f:a7:14:97:7e:a5:05:d3:d2:0d:af:51:90:26:83:
2c:e8:29:07:38:96:12:97:9d:44:74:82:49:48:6e:24:19:19:
61:5d:74:1d:ad:bc:6b:d5:3b:b9:52:e1:a5:ee:12:c8:d1:75:
ba:6c:ce:b6:3e:4e:cc:1e:f4:51:99:17:6b:a8:16:2c:59:2e:
10:da:c9:62:24:f0:e4:de:92:b3:cd:1b:b5:63:38:5c:3b:37:
c4:53:23:5f:75:22:e6:8b:a4:45:6a:74:ce:a9:82:6a:aa:d0:
b5:14:8d:85:62:c1:ba:c9:28:19:7f:62:03:a5:44:08:67:a7:
70:32:17:6d:0d:3d:3d:70:6d:c4:5e:96:65:d9:69:9c:d0:99:
37:72:e4:f9:cd:3a:ea:61:0e:59:11:64:8b:8e:0d:f5:fd:6d:
a7:02:2a:93:cc:1c:8c:f0:41:cc:8e:c6:46:fa:75:c5:6b:70:
d4:b7:ef:9a:70:4a:c1:2f:c4:ff:1f:7e:df:9d:10:ee:17:5b:
f3:ae:ef:c9:3c:d2:8e:f8:bd:29:0f:e5:45:89:19:6f:d0:01:
60:74:4d:e0:fe:b4:89:69:26:56:d3:ef:de:9d:ed:2d:88:43:
ed:a0:99:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 23:49:24 2025 by rpki-client