Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/624e63-b876-4ef4-bf19-e43620880cb6/1/MgJHUW6RAX4tvLVyyg8poSKBrPA.mft
File: MgJHUW6RAX4tvLVyyg8poSKBrPA.mft (raw, json)
Hash identifier: jojuSpl8iupye1Fv2ZwC8U+YqdNthi3s275xixg02dw=
Subject key identifier: E2:4D:9F:1F:B6:09:FD:47:E2:A5:8C:DA:CD:F3:73:E9:FA:AC:42:93
Authority key identifier: 32:02:47:51:6E:91:01:7E:2D:BC:B5:72:CA:0F:29:A1:22:81:AC:F0
Certificate issuer: /CN=320247516e91017e2dbcb572ca0f29a12281acf0
Certificate serial: 01976C61FC1A26F75FCFFED2B55101BD93DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MgJHUW6RAX4tvLVyyg8poSKBrPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/624e63-b876-4ef4-bf19-e43620880cb6/1/MgJHUW6RAX4tvLVyyg8poSKBrPA.mft
Manifest number: 0436
Signing time: Sat 14 Jun 2025 03:00:50 +0000
Manifest this update: Sat 14 Jun 2025 03:00:50 +0000
Manifest next update: Sun 15 Jun 2025 03:00:50 +0000
Files and hashes: 1: MgJHUW6RAX4tvLVyyg8poSKBrPA.crl (hash: v8COFel8Qg5GUIuB2UJMxsyJHtkSabWrnrWMwxou2ko=)
2: m7C6K0Dm5PPkueps5pZmHrJAHsQ.roa (hash: keru/3nPFQZwhtdrj8XoRvNJqtUTfDmo1KvvBMCi2Bg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/624e63-b876-4ef4-bf19-e43620880cb6/1/MgJHUW6RAX4tvLVyyg8poSKBrPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/624e63-b876-4ef4-bf19-e43620880cb6/1/MgJHUW6RAX4tvLVyyg8poSKBrPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/MgJHUW6RAX4tvLVyyg8poSKBrPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:61:fc:1a:26:f7:5f:cf:fe:d2:b5:51:01:bd:93:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=320247516e91017e2dbcb572ca0f29a12281acf0
Validity
Not Before: Jun 14 03:00:50 2025 GMT
Not After : Jun 15 03:00:50 2025 GMT
Subject: CN=e24d9f1fb609fd47e2a58cdacdf373e9faac4293
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:0c:ee:f8:b4:7b:53:c6:be:5f:cf:ce:c2:b0:
26:9f:55:dd:7a:d0:56:39:e4:91:26:6b:a7:41:05:
cf:1b:8d:aa:2a:52:aa:07:c5:5d:4a:10:76:3b:ac:
8c:83:87:78:cd:54:4c:65:30:ac:a2:f0:db:99:85:
f2:70:ce:e7:5e:ae:98:4e:0b:23:68:32:cf:61:7f:
83:17:5b:46:e2:69:a3:25:ec:5c:78:6a:e5:f1:bd:
b5:43:ce:03:78:2f:e4:25:14:12:1a:84:63:7a:94:
ca:9a:62:c6:e7:9e:49:2b:15:e5:60:42:b4:aa:ca:
67:9c:9d:5f:35:b1:fe:8d:42:fd:c6:c7:a5:77:e6:
33:12:b0:39:40:10:ce:be:b8:cb:48:38:90:92:dc:
1d:e5:9f:de:1e:c9:26:f9:56:e4:40:fd:04:71:55:
f9:97:88:16:9d:42:fc:e5:2e:b6:0e:44:d1:3b:20:
b1:33:84:bf:ee:78:dc:67:4f:ca:db:d4:1e:3f:4a:
73:4a:d8:c9:ca:a0:c0:b5:d7:c0:96:ab:48:13:12:
44:08:c7:ca:c1:ae:46:25:82:57:17:16:dd:1d:96:
be:1b:fd:c6:83:3e:31:68:29:a9:50:21:d7:29:2f:
f5:be:c4:a7:88:4e:47:00:a0:ec:e8:cb:36:4d:be:
10:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:4D:9F:1F:B6:09:FD:47:E2:A5:8C:DA:CD:F3:73:E9:FA:AC:42:93
X509v3 Authority Key Identifier:
keyid:32:02:47:51:6E:91:01:7E:2D:BC:B5:72:CA:0F:29:A1:22:81:AC:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MgJHUW6RAX4tvLVyyg8poSKBrPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/624e63-b876-4ef4-bf19-e43620880cb6/1/MgJHUW6RAX4tvLVyyg8poSKBrPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/624e63-b876-4ef4-bf19-e43620880cb6/1/MgJHUW6RAX4tvLVyyg8poSKBrPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:8b:5b:49:ec:90:55:8b:5d:ca:da:4f:ea:c4:81:d0:e3:60:
72:d6:e0:65:d3:ba:70:36:8f:67:96:08:f1:74:35:e3:b7:b0:
5f:8a:9c:09:98:bd:67:39:7b:f5:16:b4:a7:59:0a:0b:54:0e:
32:6b:e6:a4:16:d5:31:4d:60:7d:07:c5:cd:33:4e:56:03:21:
c5:32:d6:ec:12:a9:58:dc:58:fd:80:72:92:67:7d:06:5f:89:
97:11:99:1c:32:a6:a8:af:f0:ba:f9:f8:17:2a:5b:b5:eb:3e:
b9:d1:b2:27:7b:7c:ba:c4:3e:6c:c5:f0:a5:43:3d:d9:fa:e1:
1d:f8:7b:4e:9f:14:96:54:87:48:65:04:79:b2:1c:20:02:6a:
b9:ba:e8:26:84:49:27:ad:2b:9e:93:fa:9f:00:c4:5d:e8:99:
f2:96:93:3d:57:09:e8:6d:a9:0c:56:67:cc:b7:fe:ff:88:67:
e6:f2:ea:6d:07:22:f4:52:a3:fc:5b:f3:2a:1c:a3:9d:c8:32:
01:37:3d:b7:d5:31:a5:04:2c:4b:eb:b0:db:12:6f:e0:38:d5:
ae:02:0c:c8:9b:25:6c:13:4f:32:fc:ba:b4:18:6e:b8:aa:2a:
f0:95:d6:76:c3:06:4e:f1:a0:e2:0f:de:a3:0c:42:6f:81:7f:
30:7c:ae:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:06:18 2025 by rpki-client