Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/624e63-b876-4ef4-bf19-e43620880cb6/1/MgJHUW6RAX4tvLVyyg8poSKBrPA.mft
File: MgJHUW6RAX4tvLVyyg8poSKBrPA.mft (raw, json)
Hash identifier: NZKi4Eid3kfP02g2fUlBwc/v3jtR3O2bmfT2OmQ3bss=
Subject key identifier: 1B:D7:3C:18:27:3C:67:38:44:7E:AE:0C:BE:EB:1D:0B:96:F0:7D:9B
Authority key identifier: 32:02:47:51:6E:91:01:7E:2D:BC:B5:72:CA:0F:29:A1:22:81:AC:F0
Certificate issuer: /CN=320247516e91017e2dbcb572ca0f29a12281acf0
Certificate serial: 019760CB77E41B6D12A270DE77B5ADCFE215
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MgJHUW6RAX4tvLVyyg8poSKBrPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/624e63-b876-4ef4-bf19-e43620880cb6/1/MgJHUW6RAX4tvLVyyg8poSKBrPA.mft
Manifest number: 0430
Signing time: Wed 11 Jun 2025 21:00:36 +0000
Manifest this update: Wed 11 Jun 2025 21:00:36 +0000
Manifest next update: Thu 12 Jun 2025 21:00:36 +0000
Files and hashes: 1: MgJHUW6RAX4tvLVyyg8poSKBrPA.crl (hash: TGI+OebtWc1NC9gZwFIP8Q81zduzyykNmyukkZfBCzg=)
2: m7C6K0Dm5PPkueps5pZmHrJAHsQ.roa (hash: keru/3nPFQZwhtdrj8XoRvNJqtUTfDmo1KvvBMCi2Bg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/624e63-b876-4ef4-bf19-e43620880cb6/1/MgJHUW6RAX4tvLVyyg8poSKBrPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/624e63-b876-4ef4-bf19-e43620880cb6/1/MgJHUW6RAX4tvLVyyg8poSKBrPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/MgJHUW6RAX4tvLVyyg8poSKBrPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 15:40:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:60:cb:77:e4:1b:6d:12:a2:70:de:77:b5:ad:cf:e2:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=320247516e91017e2dbcb572ca0f29a12281acf0
Validity
Not Before: Jun 11 21:00:36 2025 GMT
Not After : Jun 12 21:00:36 2025 GMT
Subject: CN=1bd73c18273c6738447eae0cbeeb1d0b96f07d9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6f:1e:0c:70:c1:a1:45:38:46:99:2e:cc:17:
3d:ae:b9:cc:9e:57:a7:c4:80:0c:f9:d3:59:6d:77:
0b:ca:a5:de:23:d8:f8:00:19:56:ea:dd:d8:4f:22:
da:5a:15:cc:b3:45:87:1a:93:4a:8a:b5:2f:19:da:
c0:08:15:88:19:c4:39:0e:ec:23:95:d0:ea:c2:31:
41:d3:21:b2:e9:86:0d:e5:22:1d:47:80:e9:b9:aa:
4c:68:c0:79:ed:07:62:82:cd:b4:e8:32:3c:d0:8b:
db:14:5a:a1:c8:52:b0:7c:c2:ad:40:8e:90:ee:cb:
b3:fa:b5:82:f1:92:68:3a:79:61:52:5a:9b:be:80:
49:b8:60:a5:78:ba:fe:d2:7c:c1:f0:bd:95:fb:14:
ab:d3:dc:12:0f:b0:c8:a5:a4:b8:67:ce:86:38:cc:
fa:63:c1:1b:80:b0:09:4a:a4:59:c4:8c:c1:3f:54:
b0:a6:35:7c:a8:a2:19:29:9b:7c:f6:f0:69:75:2b:
0c:7c:d2:10:b0:4e:65:98:d6:a8:de:0a:d1:d6:e6:
fb:77:ff:1f:ea:b6:41:5a:fb:c6:22:c5:4d:30:41:
1a:37:30:7f:0b:53:f4:f8:6a:ab:4c:43:66:10:bf:
4b:6c:31:dd:a4:38:63:53:85:d7:ab:5c:dc:0f:b8:
2c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:D7:3C:18:27:3C:67:38:44:7E:AE:0C:BE:EB:1D:0B:96:F0:7D:9B
X509v3 Authority Key Identifier:
keyid:32:02:47:51:6E:91:01:7E:2D:BC:B5:72:CA:0F:29:A1:22:81:AC:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MgJHUW6RAX4tvLVyyg8poSKBrPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/624e63-b876-4ef4-bf19-e43620880cb6/1/MgJHUW6RAX4tvLVyyg8poSKBrPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/624e63-b876-4ef4-bf19-e43620880cb6/1/MgJHUW6RAX4tvLVyyg8poSKBrPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:3e:dd:e9:51:b3:0b:e8:e5:fa:2e:4c:76:83:e2:0b:46:d5:
43:75:61:a7:af:f6:f7:fa:b5:77:d8:c1:2a:e4:cd:3a:c2:ac:
3b:be:d9:29:70:af:aa:5b:74:c1:19:12:c0:10:9c:18:3c:a6:
b2:f4:72:ac:67:d9:9d:81:ee:5f:27:27:7f:e8:df:23:e0:df:
c2:85:d8:e3:01:0c:78:13:a3:24:8b:c6:ca:49:ae:39:51:3b:
3d:6a:8a:14:33:05:79:a6:58:d6:c0:ca:b2:76:89:b0:7f:90:
cd:bd:e9:cb:d8:cf:8d:58:ce:2e:3d:47:51:a1:de:c1:c2:8c:
f2:8c:a4:d9:5e:c9:9f:70:74:6e:b0:63:c3:79:24:b1:8e:fc:
a1:09:f7:f5:e9:a8:e8:05:68:11:07:eb:9c:cb:c6:86:d9:ad:
b7:d5:f8:93:4f:db:ce:2d:0b:68:47:ec:48:54:40:63:2d:67:
b8:0a:8e:e7:c8:dd:ed:9d:f5:f8:d5:f7:1d:3e:48:ed:68:3c:
f8:6b:8a:39:27:b0:ae:81:36:12:23:46:4a:d1:ca:6c:58:cc:
d1:51:8a:92:6f:23:c8:80:94:73:4a:8e:12:4c:6c:cc:b9:03:
91:83:e0:40:20:88:df:b3:5e:05:8d:77:16:67:c9:ec:98:03:
bd:ee:79:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 23:47:13 2025 by rpki-client