Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/624e63-b876-4ef4-bf19-e43620880cb6/1/MgJHUW6RAX4tvLVyyg8poSKBrPA.mft
File: MgJHUW6RAX4tvLVyyg8poSKBrPA.mft (raw, json)
Hash identifier: rH8DxkYaTjdOJEmoK6XLTbnVXDSfHMG8XV3nrTo3nuk=
Subject key identifier: 0B:27:F2:F4:1E:D5:77:73:E6:DE:A9:08:7A:6C:AE:5E:FC:45:85:1F
Authority key identifier: 32:02:47:51:6E:91:01:7E:2D:BC:B5:72:CA:0F:29:A1:22:81:AC:F0
Certificate issuer: /CN=320247516e91017e2dbcb572ca0f29a12281acf0
Certificate serial: 01975723A39AD1D304F04D8EF7C3BF4D5EE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MgJHUW6RAX4tvLVyyg8poSKBrPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/624e63-b876-4ef4-bf19-e43620880cb6/1/MgJHUW6RAX4tvLVyyg8poSKBrPA.mft
Manifest number: 042B
Signing time: Tue 10 Jun 2025 00:00:42 +0000
Manifest this update: Tue 10 Jun 2025 00:00:42 +0000
Manifest next update: Wed 11 Jun 2025 00:00:42 +0000
Files and hashes: 1: MgJHUW6RAX4tvLVyyg8poSKBrPA.crl (hash: Xg+YGLSiKKdhEImojd17Wa+PTsXDxpTic0kaZQbwXww=)
2: m7C6K0Dm5PPkueps5pZmHrJAHsQ.roa (hash: keru/3nPFQZwhtdrj8XoRvNJqtUTfDmo1KvvBMCi2Bg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/624e63-b876-4ef4-bf19-e43620880cb6/1/MgJHUW6RAX4tvLVyyg8poSKBrPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/624e63-b876-4ef4-bf19-e43620880cb6/1/MgJHUW6RAX4tvLVyyg8poSKBrPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/MgJHUW6RAX4tvLVyyg8poSKBrPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:57:23:a3:9a:d1:d3:04:f0:4d:8e:f7:c3:bf:4d:5e:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=320247516e91017e2dbcb572ca0f29a12281acf0
Validity
Not Before: Jun 10 00:00:42 2025 GMT
Not After : Jun 11 00:00:42 2025 GMT
Subject: CN=0b27f2f41ed57773e6dea9087a6cae5efc45851f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:47:41:a8:96:6b:6f:ae:45:89:06:73:fe:de:
04:df:96:d8:d0:ae:24:b9:5d:5e:2e:e4:d9:c7:41:
7c:83:94:40:56:00:96:ce:04:ba:25:e9:f8:d9:14:
c4:99:4c:52:2d:89:02:fb:85:f4:99:df:85:a6:80:
fe:c1:9a:56:3b:17:20:cd:4f:04:4f:59:16:66:3b:
13:97:e9:f3:fe:6d:25:0d:f0:e7:08:29:ca:22:27:
24:ec:42:42:62:45:95:71:5e:2b:d6:55:37:9d:a3:
a5:bd:3b:3f:74:ba:ac:8e:7f:ce:d2:aa:d3:fa:f2:
04:7c:76:a9:8f:4c:ac:dc:db:cb:a7:a9:33:9d:0f:
ec:10:62:0c:cb:0b:3b:46:2d:f9:ec:ef:45:05:62:
97:88:52:44:69:5d:04:92:33:5d:4f:28:54:aa:67:
80:65:a0:28:c1:85:83:f0:cb:8e:45:33:1b:d2:8d:
74:5d:1e:75:81:4c:bd:3f:7f:b3:63:1b:71:b8:eb:
5d:13:20:c2:08:d6:d1:5f:cc:e2:b8:ca:f9:94:e3:
3d:0d:e4:3a:02:4e:27:84:0f:20:90:e5:da:bd:45:
d6:68:6a:7e:04:fc:3f:ad:85:60:59:ac:00:1a:9c:
24:cd:09:48:03:20:ef:ab:37:9e:f1:11:18:54:a9:
c8:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:27:F2:F4:1E:D5:77:73:E6:DE:A9:08:7A:6C:AE:5E:FC:45:85:1F
X509v3 Authority Key Identifier:
keyid:32:02:47:51:6E:91:01:7E:2D:BC:B5:72:CA:0F:29:A1:22:81:AC:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MgJHUW6RAX4tvLVyyg8poSKBrPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/624e63-b876-4ef4-bf19-e43620880cb6/1/MgJHUW6RAX4tvLVyyg8poSKBrPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/624e63-b876-4ef4-bf19-e43620880cb6/1/MgJHUW6RAX4tvLVyyg8poSKBrPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:4e:82:00:88:28:29:c4:d8:3a:2b:24:f4:ff:2e:91:ec:2c:
15:18:a8:c0:7d:96:78:99:70:38:ba:a9:f1:bf:da:f5:5f:e6:
e2:cb:c4:92:cb:72:2d:d8:78:5e:34:42:69:77:6c:5a:96:a7:
d6:28:70:20:41:34:bc:cc:b5:5c:e9:69:ac:5a:8d:e0:51:dc:
f2:62:35:6e:3c:65:ba:8f:75:e2:ac:bf:d3:90:dc:66:2a:c0:
15:e5:aa:67:cc:05:8a:78:90:af:a3:92:32:fe:33:e3:d8:6e:
18:a1:70:2a:42:5f:c1:97:ff:be:c0:19:6d:f8:68:72:c0:5e:
0c:fa:0d:d0:da:29:a7:db:60:b6:36:c6:7a:73:66:90:04:24:
52:04:7f:e1:60:e6:01:e9:53:63:ae:31:47:95:86:11:29:ee:
03:99:ad:3c:6b:bc:13:91:71:6b:1d:b5:9e:12:07:22:43:10:
44:5a:05:40:db:b9:07:d9:f5:f0:3e:99:12:46:f7:60:5c:13:
7d:68:5c:63:96:1a:cb:4f:88:41:e1:e1:d5:64:2a:35:aa:55:
5b:8f:08:e6:2f:46:70:18:64:2b:52:42:fd:81:be:80:a0:fd:
77:71:fb:ac:47:47:22:e4:80:ba:1b:42:b3:a1:1d:33:3c:49:
bf:b5:0a:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 10:48:58 2025 by rpki-client