Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/624e63-b876-4ef4-bf19-e43620880cb6/1/MgJHUW6RAX4tvLVyyg8poSKBrPA.mft
File: MgJHUW6RAX4tvLVyyg8poSKBrPA.mft (raw, json)
Hash identifier: G91zZTROjGYWbRQ+BBlxS2R8GCE9W+F2otphx3Dafq4=
Subject key identifier: 4D:1A:87:C0:FB:6E:95:05:D8:91:E8:43:96:FC:56:52:F4:79:57:C3
Authority key identifier: 32:02:47:51:6E:91:01:7E:2D:BC:B5:72:CA:0F:29:A1:22:81:AC:F0
Certificate issuer: /CN=320247516e91017e2dbcb572ca0f29a12281acf0
Certificate serial: 0197591221E8853AD0EBB2B753023EFF8E19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MgJHUW6RAX4tvLVyyg8poSKBrPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/624e63-b876-4ef4-bf19-e43620880cb6/1/MgJHUW6RAX4tvLVyyg8poSKBrPA.mft
Manifest number: 042C
Signing time: Tue 10 Jun 2025 09:00:49 +0000
Manifest this update: Tue 10 Jun 2025 09:00:49 +0000
Manifest next update: Wed 11 Jun 2025 09:00:49 +0000
Files and hashes: 1: MgJHUW6RAX4tvLVyyg8poSKBrPA.crl (hash: 9ut4+gqGbHvIj4OIyE44SceayIElohU3s2eP96viptI=)
2: m7C6K0Dm5PPkueps5pZmHrJAHsQ.roa (hash: keru/3nPFQZwhtdrj8XoRvNJqtUTfDmo1KvvBMCi2Bg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/624e63-b876-4ef4-bf19-e43620880cb6/1/MgJHUW6RAX4tvLVyyg8poSKBrPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/624e63-b876-4ef4-bf19-e43620880cb6/1/MgJHUW6RAX4tvLVyyg8poSKBrPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/MgJHUW6RAX4tvLVyyg8poSKBrPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:59:12:21:e8:85:3a:d0:eb:b2:b7:53:02:3e:ff:8e:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=320247516e91017e2dbcb572ca0f29a12281acf0
Validity
Not Before: Jun 10 09:00:49 2025 GMT
Not After : Jun 11 09:00:49 2025 GMT
Subject: CN=4d1a87c0fb6e9505d891e84396fc5652f47957c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c5:f3:1d:de:55:a6:7d:56:d6:e1:17:6d:53:
f6:57:bc:e6:38:5d:5a:27:b0:30:ed:50:71:7f:5e:
1b:4d:fb:64:7f:c0:63:6c:a8:a9:10:67:dc:87:14:
83:61:fe:42:5e:52:5a:da:b0:c5:6e:64:e7:24:e0:
4a:d8:70:f9:59:90:2f:bc:61:64:c8:e6:9d:cb:26:
2d:dd:db:46:3d:fa:e5:2e:d5:fe:1c:d1:6b:8c:cb:
58:0e:00:97:25:87:9b:dd:5e:2e:d0:a4:be:69:8e:
89:eb:8c:64:a7:87:0f:c8:bf:37:17:69:b7:bb:c0:
15:02:84:2b:ac:75:d9:d7:7e:6b:6f:86:18:ca:9c:
cd:91:43:a9:d5:d5:27:a8:00:d1:ff:96:67:42:ea:
3d:1c:0b:9c:ee:5a:a7:01:be:bc:2b:8c:b0:53:df:
89:6c:96:37:a5:95:b0:0c:7a:9a:bc:fc:2b:d7:8e:
83:0f:39:9c:73:1e:cf:72:d8:24:64:14:bb:a2:82:
95:4d:96:83:f9:fc:80:37:3b:73:2f:ba:fc:cb:69:
fe:65:3c:de:c4:99:57:f4:ac:bd:cf:8b:10:b0:85:
db:9f:29:f9:85:ab:59:0d:95:1a:8c:c7:07:a2:85:
17:66:d5:d4:ee:62:9f:4e:f3:ed:e1:72:0e:ef:69:
3c:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:1A:87:C0:FB:6E:95:05:D8:91:E8:43:96:FC:56:52:F4:79:57:C3
X509v3 Authority Key Identifier:
keyid:32:02:47:51:6E:91:01:7E:2D:BC:B5:72:CA:0F:29:A1:22:81:AC:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MgJHUW6RAX4tvLVyyg8poSKBrPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/624e63-b876-4ef4-bf19-e43620880cb6/1/MgJHUW6RAX4tvLVyyg8poSKBrPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/624e63-b876-4ef4-bf19-e43620880cb6/1/MgJHUW6RAX4tvLVyyg8poSKBrPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:9e:d7:3e:51:61:2b:55:a8:85:4c:59:1b:0b:8e:b0:2f:b9:
1f:5e:1b:d8:e2:40:04:64:f5:9a:e9:dd:32:8c:dd:02:5b:bd:
bd:d8:5d:b3:28:d7:9e:92:7e:d4:8f:f9:e4:9b:05:87:3a:1f:
ab:7e:54:a7:55:d5:e6:17:17:3d:5b:8c:47:ce:cd:e7:3e:4e:
e9:f4:d1:0f:08:37:97:f4:b1:5e:f0:2a:c2:f6:67:19:ec:54:
2c:d0:8e:b6:b8:27:7f:bf:f1:7d:f3:36:eb:27:8c:a1:8a:5a:
63:62:e8:20:19:30:23:0d:42:1a:bd:5b:14:80:14:1f:a7:a3:
32:cc:e4:fe:8f:e7:2f:8e:41:96:e7:15:1d:bb:49:f1:6d:8f:
88:aa:24:8e:c6:04:05:d6:c9:40:4c:1c:5c:b6:40:df:e0:90:
a9:02:f0:3f:85:17:a9:3e:27:af:cd:b4:a3:30:c5:3d:26:cc:
89:7f:d9:54:e5:67:6c:05:27:f4:4c:ee:8d:07:2a:ae:c6:4d:
8b:29:23:cd:a5:75:4f:06:db:c6:3c:c8:a7:2e:5b:24:ad:7d:
3d:10:3b:a5:31:e3:f9:e3:71:7b:c2:b3:cf:c8:09:d1:10:a2:
c5:0b:4e:21:f6:9f:60:e0:02:c0:e3:00:84:e9:69:54:a8:47:
f7:73:94:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 17:07:04 2025 by rpki-client