Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/624e63-b876-4ef4-bf19-e43620880cb6/1/MgJHUW6RAX4tvLVyyg8poSKBrPA.mft
File: MgJHUW6RAX4tvLVyyg8poSKBrPA.mft (raw, json)
Hash identifier: UBZnqfe2Ult3b5vwBvytw0y6z1oQYSjTcpdK28aZA6s=
Subject key identifier: 09:E0:2C:3F:C7:E8:25:6B:EB:39:EA:74:B4:28:FC:90:E8:53:56:D2
Authority key identifier: 32:02:47:51:6E:91:01:7E:2D:BC:B5:72:CA:0F:29:A1:22:81:AC:F0
Certificate issuer: /CN=320247516e91017e2dbcb572ca0f29a12281acf0
Certificate serial: 019922C33363BABD8AD3AD731B0A00D33929
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MgJHUW6RAX4tvLVyyg8poSKBrPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/624e63-b876-4ef4-bf19-e43620880cb6/1/MgJHUW6RAX4tvLVyyg8poSKBrPA.mft
Manifest number: 0519
Signing time: Sun 07 Sep 2025 06:00:41 +0000
Manifest this update: Sun 07 Sep 2025 06:00:41 +0000
Manifest next update: Mon 08 Sep 2025 06:00:41 +0000
Files and hashes: 1: MgJHUW6RAX4tvLVyyg8poSKBrPA.crl (hash: eLkUIfu1dDjFyyoKwbYaZe5Zcwau9Z2xMRbqu9ijF10=)
2: m7C6K0Dm5PPkueps5pZmHrJAHsQ.roa (hash: keru/3nPFQZwhtdrj8XoRvNJqtUTfDmo1KvvBMCi2Bg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/624e63-b876-4ef4-bf19-e43620880cb6/1/MgJHUW6RAX4tvLVyyg8poSKBrPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/624e63-b876-4ef4-bf19-e43620880cb6/1/MgJHUW6RAX4tvLVyyg8poSKBrPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/MgJHUW6RAX4tvLVyyg8poSKBrPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:33:63:ba:bd:8a:d3:ad:73:1b:0a:00:d3:39:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=320247516e91017e2dbcb572ca0f29a12281acf0
Validity
Not Before: Sep 7 06:00:41 2025 GMT
Not After : Sep 8 06:00:41 2025 GMT
Subject: CN=09e02c3fc7e8256beb39ea74b428fc90e85356d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:2b:05:6e:58:93:d0:30:f1:29:5a:96:bb:8f:
d0:0a:13:ff:c7:cb:f0:a8:8e:89:c7:95:f5:c2:b1:
c2:7d:70:65:40:7c:02:87:a1:7e:f9:98:0b:a3:4e:
d2:cc:a9:29:49:0a:2e:df:e8:27:72:b1:f3:58:fd:
ec:f4:a8:5a:56:ec:95:7b:89:62:be:db:22:95:67:
ae:cb:b9:82:1e:27:8d:68:fa:06:2a:04:f6:1e:8e:
50:3e:ca:74:e4:db:4f:7b:fb:d3:bd:66:1e:7d:14:
d1:05:49:ce:ac:3e:80:08:20:5f:92:1b:83:7f:9f:
26:d5:74:7e:6f:d0:de:c4:f7:ad:12:35:bc:84:36:
59:69:ab:39:f6:7b:a6:8d:e7:32:80:1b:a6:61:75:
e0:02:c0:44:f8:4c:2c:00:46:fb:67:2d:6c:2b:64:
4a:65:9f:dd:f9:44:20:5d:3d:ce:46:2b:19:61:77:
5a:65:54:a0:7b:3f:e8:be:02:7e:3d:bb:9a:37:74:
2f:7d:5b:3a:d8:d0:47:21:1c:f0:84:fc:3f:dd:a5:
d0:41:b5:37:4d:f1:46:19:64:69:7c:8d:bd:1a:b4:
f5:9c:fc:00:7c:d5:e6:3a:e4:5d:7e:d4:23:7c:af:
77:ac:ab:69:99:ea:02:75:cf:9a:ab:b2:61:e8:64:
a4:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:E0:2C:3F:C7:E8:25:6B:EB:39:EA:74:B4:28:FC:90:E8:53:56:D2
X509v3 Authority Key Identifier:
keyid:32:02:47:51:6E:91:01:7E:2D:BC:B5:72:CA:0F:29:A1:22:81:AC:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MgJHUW6RAX4tvLVyyg8poSKBrPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/624e63-b876-4ef4-bf19-e43620880cb6/1/MgJHUW6RAX4tvLVyyg8poSKBrPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/624e63-b876-4ef4-bf19-e43620880cb6/1/MgJHUW6RAX4tvLVyyg8poSKBrPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:fa:9e:7f:0f:3d:31:31:62:2c:b3:9a:f0:60:71:71:84:c8:
f7:c8:c7:88:a5:96:89:59:eb:8a:fa:40:b6:9c:e5:25:bb:36:
cc:96:b3:6a:bb:e6:8a:d6:aa:39:9b:94:14:62:6c:ad:ad:09:
7a:e5:9d:a5:d2:48:91:2d:49:37:93:84:b6:8a:79:e8:dc:ac:
e3:40:db:bc:0a:cb:a8:cc:ba:cb:72:b4:1d:f3:16:e8:b6:73:
0f:f3:3e:9d:c8:f5:ff:81:d0:e1:74:8a:d3:17:2f:86:ba:a2:
34:6c:87:1a:4a:0b:e2:fd:86:4b:36:89:e8:35:d9:ee:02:40:
db:ea:a3:4b:d1:1d:e0:d0:ff:fd:b9:f1:dd:c6:6f:01:c5:bb:
ac:c2:c9:d0:c7:17:d9:6b:d5:07:a4:66:67:e3:9c:21:12:c3:
f4:5f:e7:e4:3d:3b:fb:e9:b2:9a:a8:30:95:a8:d0:04:04:5e:
79:80:ec:1b:c1:11:6f:22:c3:aa:49:a6:26:48:7a:b5:eb:d7:
b7:59:5f:7a:ed:02:cc:90:b6:17:8b:ab:12:7c:5d:85:ce:a4:
79:43:b7:8c:f1:d9:60:68:f6:71:fa:ae:85:77:68:10:7f:cd:
ce:0c:16:c5:c3:fc:c7:3f:67:12:fc:0b:82:55:81:53:de:e3:
52:93:0b:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:13:32 2025 by rpki-client