Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/3d838c-8622-4e58-870f-de9e02d41797/1/mgdjMrvSgPCFLbafYVsPFJkUgxs.mft
File: mgdjMrvSgPCFLbafYVsPFJkUgxs.mft (raw, json)
Hash identifier: q67KI4lbRhHeBLTss+lW5P4Lksa5xfta8HfsLxinrN8=
Subject key identifier: 27:8B:AE:4D:49:F8:31:FA:30:C6:2B:B7:79:FC:86:88:96:74:27:61
Authority key identifier: 9A:07:63:32:BB:D2:80:F0:85:2D:B6:9F:61:5B:0F:14:99:14:83:1B
Certificate issuer: /CN=9a076332bbd280f0852db69f615b0f149914831b
Certificate serial: 01974BFB3CF8BEA6D9595D1F450068A6C0F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mgdjMrvSgPCFLbafYVsPFJkUgxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/3d838c-8622-4e58-870f-de9e02d41797/1/mgdjMrvSgPCFLbafYVsPFJkUgxs.mft
Manifest number: 030A
Signing time: Sat 07 Jun 2025 20:00:45 +0000
Manifest this update: Sat 07 Jun 2025 20:00:45 +0000
Manifest next update: Sun 08 Jun 2025 20:00:45 +0000
Files and hashes: 1: mgdjMrvSgPCFLbafYVsPFJkUgxs.crl (hash: CV7ADgeWrzjtzWUuldy2YQR4Mear132lFvIupn19Db0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/3d838c-8622-4e58-870f-de9e02d41797/1/mgdjMrvSgPCFLbafYVsPFJkUgxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/3d838c-8622-4e58-870f-de9e02d41797/1/mgdjMrvSgPCFLbafYVsPFJkUgxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/mgdjMrvSgPCFLbafYVsPFJkUgxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:fb:3c:f8:be:a6:d9:59:5d:1f:45:00:68:a6:c0:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a076332bbd280f0852db69f615b0f149914831b
Validity
Not Before: Jun 7 20:00:45 2025 GMT
Not After : Jun 8 20:00:45 2025 GMT
Subject: CN=278bae4d49f831fa30c62bb779fc868896742761
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:41:4b:69:dc:42:d8:86:c5:dd:14:a2:4e:b8:
08:ea:3e:1d:42:ba:ab:a6:81:71:bd:27:d2:e9:1f:
67:89:4b:08:a1:97:58:a6:7b:33:fd:22:23:17:ab:
32:bc:be:1c:cf:cd:7f:3c:17:d1:64:4d:59:7e:c2:
37:79:88:8f:fb:5e:51:a9:5d:39:64:43:21:5a:f3:
4f:c6:b8:49:da:7f:54:d7:fc:ae:16:a3:6a:46:9c:
45:19:7f:33:9d:6f:30:8d:a4:09:7c:31:b4:42:bb:
d3:66:6b:e6:f6:68:1f:e9:a4:31:f6:ff:75:99:96:
0e:d4:00:f2:61:39:66:3d:45:dc:d0:34:06:14:d7:
6c:03:13:65:48:70:f1:73:55:25:ab:4b:e6:12:0c:
1d:98:27:17:80:4f:83:6a:8a:d3:64:c7:9e:c1:50:
3d:07:0d:5b:90:75:ac:55:0f:b6:88:78:6f:09:1f:
71:94:08:c6:46:b3:82:b0:14:c9:f3:a3:38:29:11:
84:30:2a:44:af:1b:d3:bf:2e:68:1c:f2:87:b1:9f:
9d:99:fb:0d:b9:de:4b:64:eb:97:57:90:b8:3a:b0:
9a:6b:8f:36:02:ae:0e:38:fd:e4:ca:ff:20:f8:33:
95:e8:99:be:2e:97:b3:e2:8a:66:3a:95:d3:89:d5:
bc:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:8B:AE:4D:49:F8:31:FA:30:C6:2B:B7:79:FC:86:88:96:74:27:61
X509v3 Authority Key Identifier:
keyid:9A:07:63:32:BB:D2:80:F0:85:2D:B6:9F:61:5B:0F:14:99:14:83:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mgdjMrvSgPCFLbafYVsPFJkUgxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3d838c-8622-4e58-870f-de9e02d41797/1/mgdjMrvSgPCFLbafYVsPFJkUgxs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3d838c-8622-4e58-870f-de9e02d41797/1/mgdjMrvSgPCFLbafYVsPFJkUgxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:7e:ea:14:2f:84:06:f3:24:8c:79:60:1f:06:c7:89:7a:d0:
44:7d:b3:50:28:d8:fc:5a:74:90:3a:07:8d:95:7d:51:f9:de:
29:74:76:8c:ab:63:45:0b:43:c4:8b:3c:eb:4e:7c:70:b6:77:
4a:7b:83:ea:84:e9:b3:8a:83:5c:e4:16:3f:72:5e:bd:09:e6:
5e:73:9a:1c:c3:ab:ed:20:86:9f:f0:d9:4e:fd:ad:2f:41:e4:
4d:fd:f7:eb:93:7a:67:b3:f1:3e:e2:6d:55:c5:2a:14:7f:d0:
8e:f1:8c:0c:f8:be:20:22:b8:27:90:f0:fd:3a:1f:a9:25:38:
9d:97:9a:05:06:ab:f5:21:30:4d:1f:bf:73:84:6e:38:a6:97:
ec:f9:b2:0e:fd:47:b9:cd:a4:6f:18:0c:dc:12:87:5a:06:c5:
6c:47:ed:a6:d5:e7:b3:6c:01:fc:79:a7:47:6f:13:79:d2:68:
92:ba:c3:b3:bf:92:3f:1a:28:84:e2:76:ce:f1:96:e2:5e:6e:
78:3f:52:c0:f9:9a:29:35:ac:b5:06:f5:de:06:e9:6f:1f:5e:
64:f7:b4:3d:f9:27:01:71:4a:a3:33:fe:70:26:1f:fb:4e:12:
9c:d8:bc:7e:eb:7f:4c:80:69:df:9e:e6:08:d8:db:96:fb:83:
09:00:08:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:21:57 2025 by rpki-client