Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/624e63-b876-4ef4-bf19-e43620880cb6/1/MgJHUW6RAX4tvLVyyg8poSKBrPA.mft
File: MgJHUW6RAX4tvLVyyg8poSKBrPA.mft (raw, json)
Hash identifier: n3//bpb5gTaMgagq4aDG+ge2ztUf4p7E39eQFKI/BQ0=
Subject key identifier: 2C:2F:68:35:61:7B:68:4B:CD:F2:79:59:1A:53:1D:B5:F2:77:FB:03
Authority key identifier: 32:02:47:51:6E:91:01:7E:2D:BC:B5:72:CA:0F:29:A1:22:81:AC:F0
Certificate issuer: /CN=320247516e91017e2dbcb572ca0f29a12281acf0
Certificate serial: 019755353F8CC7790CBEF7B0B0106A2E554D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MgJHUW6RAX4tvLVyyg8poSKBrPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/624e63-b876-4ef4-bf19-e43620880cb6/1/MgJHUW6RAX4tvLVyyg8poSKBrPA.mft
Manifest number: 042A
Signing time: Mon 09 Jun 2025 15:00:42 +0000
Manifest this update: Mon 09 Jun 2025 15:00:42 +0000
Manifest next update: Tue 10 Jun 2025 15:00:42 +0000
Files and hashes: 1: MgJHUW6RAX4tvLVyyg8poSKBrPA.crl (hash: GSC04ZVz9wmon6bwGS4lMTLGmIcHdh9nGHONYscIcfA=)
2: m7C6K0Dm5PPkueps5pZmHrJAHsQ.roa (hash: keru/3nPFQZwhtdrj8XoRvNJqtUTfDmo1KvvBMCi2Bg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/624e63-b876-4ef4-bf19-e43620880cb6/1/MgJHUW6RAX4tvLVyyg8poSKBrPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/624e63-b876-4ef4-bf19-e43620880cb6/1/MgJHUW6RAX4tvLVyyg8poSKBrPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/MgJHUW6RAX4tvLVyyg8poSKBrPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:55:35:3f:8c:c7:79:0c:be:f7:b0:b0:10:6a:2e:55:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=320247516e91017e2dbcb572ca0f29a12281acf0
Validity
Not Before: Jun 9 15:00:42 2025 GMT
Not After : Jun 10 15:00:42 2025 GMT
Subject: CN=2c2f6835617b684bcdf279591a531db5f277fb03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e7:0b:9d:14:68:d8:b6:cf:1b:9f:05:a2:99:
b8:98:73:3f:5d:1b:a2:69:b4:3d:4e:01:ca:8e:93:
94:2f:0b:77:d7:1f:dc:a5:43:03:b5:b5:88:eb:b7:
1c:0f:a1:93:d0:27:a0:22:83:8f:13:ec:b7:68:0e:
87:00:22:4f:6c:98:32:43:ad:3b:4f:c4:fc:d2:f7:
20:86:20:1d:fd:d3:45:9e:ce:7e:06:57:b0:7d:12:
6c:d0:88:43:a2:d6:91:46:68:6b:3b:28:1f:ea:0e:
f3:04:2a:a8:43:f7:c6:ef:ad:bd:2b:46:ea:8a:b6:
4c:91:19:b5:c6:5b:79:6a:00:94:71:a7:d4:66:8c:
e3:f4:88:2e:0e:b8:4e:36:e9:3e:3a:63:7d:37:c5:
14:9e:95:a1:f9:eb:b3:7e:41:4e:e8:07:2b:ac:d5:
3b:c1:fe:08:d4:00:9c:95:56:9b:24:72:86:2f:0e:
ea:b0:d3:27:33:b2:b4:98:b6:76:f7:39:01:cd:de:
b8:3c:73:b2:f9:4f:00:fc:3f:7e:27:f1:34:13:c5:
0d:22:bb:57:c0:b6:bc:72:71:96:24:56:31:f1:64:
10:97:00:16:e4:a6:2a:c6:ee:b4:78:ee:88:d6:c6:
2c:ce:1c:5e:5e:ac:e3:62:b9:53:cd:9a:38:3b:5f:
02:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:2F:68:35:61:7B:68:4B:CD:F2:79:59:1A:53:1D:B5:F2:77:FB:03
X509v3 Authority Key Identifier:
keyid:32:02:47:51:6E:91:01:7E:2D:BC:B5:72:CA:0F:29:A1:22:81:AC:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MgJHUW6RAX4tvLVyyg8poSKBrPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/624e63-b876-4ef4-bf19-e43620880cb6/1/MgJHUW6RAX4tvLVyyg8poSKBrPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/624e63-b876-4ef4-bf19-e43620880cb6/1/MgJHUW6RAX4tvLVyyg8poSKBrPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:18:02:5e:7b:c4:7a:85:d6:cf:c7:1a:d6:ce:57:04:c9:3e:
0b:30:f8:2f:a1:8a:80:24:ae:18:a5:fc:87:f9:e6:6b:53:87:
e0:bb:34:0f:d0:b5:29:52:d1:2e:e9:08:02:4b:38:b4:13:e9:
1e:74:27:dc:61:9e:01:ca:cc:ec:08:ab:0f:24:6f:7c:a0:65:
f7:3e:1e:77:0c:5b:84:77:6f:ce:81:d7:7b:8d:6a:1c:30:8e:
9f:63:db:46:6b:e3:3e:fe:73:3c:cb:b6:03:cd:b2:e2:d1:89:
33:29:b5:7b:14:2e:45:e9:06:78:c5:19:48:44:35:7c:c5:40:
f5:f8:02:55:4d:5c:12:df:3b:35:24:11:91:2f:d0:3a:e2:22:
f2:d7:db:d9:62:3c:bc:fe:aa:0e:12:22:15:48:ac:5a:58:84:
8e:15:4e:b9:16:da:06:47:69:ec:26:0e:5d:ea:f0:d1:e7:69:
f9:41:7f:95:07:41:9e:80:4a:90:dc:ee:1a:09:35:38:3f:b3:
28:fb:b5:9f:9d:ae:c9:30:ea:01:1c:ae:ac:e4:36:f0:0a:62:
8e:62:0c:65:f4:aa:a0:25:0d:ab:97:16:b1:39:a7:b0:e1:1b:
f9:99:91:f0:89:d6:00:7e:7a:4a:5b:6b:8d:5e:5d:85:b1:6f:
46:75:c9:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 23:40:17 2025 by rpki-client