Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/624e63-b876-4ef4-bf19-e43620880cb6/1/MgJHUW6RAX4tvLVyyg8poSKBrPA.mft
File: MgJHUW6RAX4tvLVyyg8poSKBrPA.mft (raw, json)
Hash identifier: e/mYG8jHTWSlu5y8gVkAu8fy62ZTzuo72WU1o/QlFSA=
Subject key identifier: C9:E6:27:1D:F3:2B:8E:F8:C3:B7:61:0D:CB:8B:45:E7:AA:FE:1D:66
Authority key identifier: 32:02:47:51:6E:91:01:7E:2D:BC:B5:72:CA:0F:29:A1:22:81:AC:F0
Certificate issuer: /CN=320247516e91017e2dbcb572ca0f29a12281acf0
Certificate serial: 01976696C93A662B8D928121521B0C1D9828
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MgJHUW6RAX4tvLVyyg8poSKBrPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/624e63-b876-4ef4-bf19-e43620880cb6/1/MgJHUW6RAX4tvLVyyg8poSKBrPA.mft
Manifest number: 0433
Signing time: Fri 13 Jun 2025 00:00:47 +0000
Manifest this update: Fri 13 Jun 2025 00:00:47 +0000
Manifest next update: Sat 14 Jun 2025 00:00:47 +0000
Files and hashes: 1: MgJHUW6RAX4tvLVyyg8poSKBrPA.crl (hash: xT0tu2ELo8zoRAaYYlp4OGcvYImhXXkNRpUFGF5/ihA=)
2: m7C6K0Dm5PPkueps5pZmHrJAHsQ.roa (hash: keru/3nPFQZwhtdrj8XoRvNJqtUTfDmo1KvvBMCi2Bg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/624e63-b876-4ef4-bf19-e43620880cb6/1/MgJHUW6RAX4tvLVyyg8poSKBrPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/624e63-b876-4ef4-bf19-e43620880cb6/1/MgJHUW6RAX4tvLVyyg8poSKBrPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/MgJHUW6RAX4tvLVyyg8poSKBrPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 22:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:66:96:c9:3a:66:2b:8d:92:81:21:52:1b:0c:1d:98:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=320247516e91017e2dbcb572ca0f29a12281acf0
Validity
Not Before: Jun 13 00:00:47 2025 GMT
Not After : Jun 14 00:00:47 2025 GMT
Subject: CN=c9e6271df32b8ef8c3b7610dcb8b45e7aafe1d66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:90:b9:3a:a0:fa:bf:e4:84:6a:ac:b1:29:f6:
d1:64:e7:96:05:a7:63:ab:c8:5e:f5:28:55:70:de:
68:6f:cc:34:6a:19:9e:28:4a:08:19:05:18:f5:d3:
39:b5:f2:fb:fd:51:a8:94:90:71:07:dd:2f:d4:4b:
bc:62:8c:52:73:e0:3f:fa:4b:b5:02:21:4f:80:dd:
7c:41:ae:e3:a2:49:a0:d3:9b:71:5c:63:ea:f4:50:
aa:b4:2d:b8:1f:a2:21:d9:fd:05:93:fc:ba:2d:1f:
4a:96:03:05:7a:4a:d0:08:b9:40:1e:42:b9:ec:e5:
7e:7e:3f:2d:af:db:0b:45:17:81:c0:c2:87:b4:b3:
e5:64:d6:0d:59:64:cb:51:99:a7:95:f0:51:48:6d:
36:3c:77:a6:ae:ec:38:67:0a:b4:36:e5:1a:32:7c:
b8:17:93:58:51:d1:2b:3f:9b:8f:b0:c6:fe:54:9c:
53:1d:1d:42:85:0b:03:15:35:1c:e3:0a:e9:b1:8c:
29:00:0c:25:c4:ca:0e:45:b4:3a:b4:87:ae:af:c7:
59:5b:e0:aa:dd:4a:4e:3d:7e:02:5b:10:a4:41:2f:
c2:d0:e4:ba:7b:2b:16:9a:d1:36:59:22:9d:8a:7f:
6c:62:f6:f7:34:23:9b:53:da:d9:f9:58:92:f2:62:
19:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:E6:27:1D:F3:2B:8E:F8:C3:B7:61:0D:CB:8B:45:E7:AA:FE:1D:66
X509v3 Authority Key Identifier:
keyid:32:02:47:51:6E:91:01:7E:2D:BC:B5:72:CA:0F:29:A1:22:81:AC:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MgJHUW6RAX4tvLVyyg8poSKBrPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/624e63-b876-4ef4-bf19-e43620880cb6/1/MgJHUW6RAX4tvLVyyg8poSKBrPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/624e63-b876-4ef4-bf19-e43620880cb6/1/MgJHUW6RAX4tvLVyyg8poSKBrPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:de:78:32:09:a7:69:18:90:34:31:c3:68:96:da:75:c8:45:
d0:a5:59:14:53:c3:49:64:33:57:dc:b7:71:5b:54:43:ba:57:
d1:29:7c:b9:c7:ec:0a:25:ed:89:6e:04:4f:3f:c6:0c:05:b2:
28:85:be:8f:19:d5:c5:b0:1d:62:23:64:f8:cd:9f:47:c4:3f:
eb:84:61:39:b2:9d:bc:28:4d:88:97:38:81:b6:1f:57:80:40:
60:5a:a0:50:7d:2b:0f:42:40:1c:bf:4d:44:28:9f:21:ad:f5:
5f:8b:b1:aa:1a:41:b5:52:b4:95:bc:5b:cc:b9:d2:ec:88:c7:
6d:9b:b1:98:e0:04:fe:c1:22:7b:50:b4:fc:3d:8b:ae:5c:fe:
35:ef:17:64:48:47:ad:1d:8b:1c:5d:fd:4b:e6:e5:9f:f7:0f:
e5:95:60:4d:51:aa:4b:b7:bf:7d:05:03:8d:ef:79:1a:9a:72:
8d:c5:d7:61:7b:65:06:f9:8c:8b:cf:25:39:c1:2a:7d:93:81:
e4:fe:b7:fc:8e:5b:ea:9c:94:65:60:8f:83:de:c0:8d:49:8f:
f9:9c:b4:93:5a:be:dc:7a:6d:43:3c:56:cd:d4:0e:3a:79:69:
95:1e:9a:1b:9d:09:e6:1b:0b:42:d6:5c:fd:89:69:83:81:84:
03:29:e0:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 07:58:45 2025 by rpki-client