Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/624e63-b876-4ef4-bf19-e43620880cb6/1/MgJHUW6RAX4tvLVyyg8poSKBrPA.mft
File: MgJHUW6RAX4tvLVyyg8poSKBrPA.mft (raw, json)
Hash identifier: xDTOeRTez2f5TJMf4zgvenKGvLv9AzjiYqVdzehtvXE=
Subject key identifier: D3:88:9E:46:E6:BD:EE:9A:55:60:AF:76:5C:8E:46:40:EC:08:DB:B4
Authority key identifier: 32:02:47:51:6E:91:01:7E:2D:BC:B5:72:CA:0F:29:A1:22:81:AC:F0
Certificate issuer: /CN=320247516e91017e2dbcb572ca0f29a12281acf0
Certificate serial: 0196564A31E0D5CF648BFC0DADF357170B24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MgJHUW6RAX4tvLVyyg8poSKBrPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/624e63-b876-4ef4-bf19-e43620880cb6/1/MgJHUW6RAX4tvLVyyg8poSKBrPA.mft
Manifest number: 03A6
Signing time: Mon 21 Apr 2025 03:00:25 +0000
Manifest this update: Mon 21 Apr 2025 03:00:25 +0000
Manifest next update: Tue 22 Apr 2025 03:00:25 +0000
Files and hashes: 1: MgJHUW6RAX4tvLVyyg8poSKBrPA.crl (hash: b02FFcKeRPPM7XwO4HyIRX0HF2l3qYL0Q0EtBHzniFo=)
2: m7C6K0Dm5PPkueps5pZmHrJAHsQ.roa (hash: keru/3nPFQZwhtdrj8XoRvNJqtUTfDmo1KvvBMCi2Bg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/624e63-b876-4ef4-bf19-e43620880cb6/1/MgJHUW6RAX4tvLVyyg8poSKBrPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/624e63-b876-4ef4-bf19-e43620880cb6/1/MgJHUW6RAX4tvLVyyg8poSKBrPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/MgJHUW6RAX4tvLVyyg8poSKBrPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:4a:31:e0:d5:cf:64:8b:fc:0d:ad:f3:57:17:0b:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=320247516e91017e2dbcb572ca0f29a12281acf0
Validity
Not Before: Apr 21 03:00:25 2025 GMT
Not After : Apr 22 03:00:25 2025 GMT
Subject: CN=d3889e46e6bdee9a5560af765c8e4640ec08dbb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:6e:f8:e2:78:2e:b2:86:65:8b:c5:94:a3:a2:
16:d6:e4:45:b7:b8:c0:19:4b:c9:d6:1d:eb:0a:cf:
b8:3d:1d:75:86:f6:47:fd:e0:25:5c:c2:48:03:01:
f6:eb:5e:5b:4d:f1:ac:80:1e:a7:82:a8:06:77:bb:
7a:6a:c6:8a:26:a2:9c:bb:29:82:08:16:f1:a0:69:
2d:b8:bc:7a:25:95:57:18:54:41:27:f4:6f:c8:80:
bb:d9:e8:5b:ff:64:8b:2d:3e:9e:35:9f:4f:34:18:
6d:6d:ad:1b:f4:2b:f3:ca:87:35:41:86:f5:94:ff:
2b:e0:a5:48:89:2e:c5:81:ab:b2:92:88:db:71:55:
22:5b:29:bf:8a:a9:23:c4:6a:e1:cd:52:af:49:94:
c7:a0:f2:9f:8c:13:6a:0f:d5:b6:9a:05:6e:74:21:
4f:f4:6f:2e:d7:5f:dc:a3:7b:d7:2b:ac:75:99:41:
5d:09:e5:c5:57:0b:ec:56:34:3f:ca:fe:75:b0:1f:
3c:ab:2c:38:7f:8d:d8:7d:92:97:00:37:03:6a:d7:
5f:62:10:aa:1d:9f:32:19:98:2b:d1:24:ae:ba:55:
49:bc:b3:fb:92:cf:13:9a:c5:47:3d:a8:10:1e:b6:
83:ea:71:23:f9:9b:5c:f1:e4:e8:d4:ac:4c:2f:ef:
6a:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:88:9E:46:E6:BD:EE:9A:55:60:AF:76:5C:8E:46:40:EC:08:DB:B4
X509v3 Authority Key Identifier:
keyid:32:02:47:51:6E:91:01:7E:2D:BC:B5:72:CA:0F:29:A1:22:81:AC:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MgJHUW6RAX4tvLVyyg8poSKBrPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/624e63-b876-4ef4-bf19-e43620880cb6/1/MgJHUW6RAX4tvLVyyg8poSKBrPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/624e63-b876-4ef4-bf19-e43620880cb6/1/MgJHUW6RAX4tvLVyyg8poSKBrPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:c3:5b:c8:b4:bf:11:3f:dd:be:36:bc:d5:06:c3:35:ed:77:
2c:93:e0:ff:b3:04:ac:c9:fa:79:60:c5:48:9f:aa:d0:b6:0d:
94:d0:08:b2:b3:2c:e6:f4:94:70:aa:53:ab:8a:28:97:bd:04:
64:c8:42:c8:aa:f3:9d:5b:01:c7:25:b6:2e:97:81:f8:d0:22:
eb:9d:3f:3b:b4:aa:82:b6:e9:f8:da:f4:46:5f:6c:96:19:e0:
2d:2c:e8:b7:0c:a4:21:4e:29:42:a3:4b:b2:b8:46:43:5e:6e:
30:2e:a9:9e:0f:a5:1d:d5:14:5d:2c:0e:c7:38:98:5d:21:fa:
82:4a:92:98:38:50:f1:37:94:11:35:16:41:be:ce:71:a0:65:
d0:ba:65:43:59:6d:3d:47:17:45:07:3d:52:1a:82:df:4e:d2:
10:cf:68:56:65:3f:1f:b2:a0:98:f1:8d:e5:34:66:db:71:17:
11:c6:e7:a1:78:63:c5:ef:fc:b1:89:4b:91:ab:ea:73:ca:66:
39:9a:2a:c1:5c:c3:1e:11:6d:0a:27:f1:b6:41:17:02:0b:7f:
22:04:0c:07:6f:1f:13:62:4f:ff:1a:77:83:0c:2a:d2:13:fc:
6f:b9:6c:62:4b:af:15:7f:31:b6:a5:0f:c5:49:e7:b8:6b:20:
ba:56:f8:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 07:52:11 2025 by rpki-client