Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/9b34b0-301a-41a2-b4c5-a8866aa95c71/1/MGatYcFi3wZQ7gq2DGgHWymiEcg.mft
File: MGatYcFi3wZQ7gq2DGgHWymiEcg.mft (raw, json)
Hash identifier: +o8mEnjop1pT94u8zYmj29eNc5/Z7motGPbxp9OL7KY=
Subject key identifier: CA:3A:AB:BA:6E:91:0E:E6:A9:2C:97:65:82:AE:D5:1C:7D:17:B1:29
Authority key identifier: 30:66:AD:61:C1:62:DF:06:50:EE:0A:B6:0C:68:07:5B:29:A2:11:C8
Certificate issuer: /CN=3066ad61c162df0650ee0ab60c68075b29a211c8
Certificate serial: 01992C346CD5C46EAA46162465461471C90A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MGatYcFi3wZQ7gq2DGgHWymiEcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/9b34b0-301a-41a2-b4c5-a8866aa95c71/1/MGatYcFi3wZQ7gq2DGgHWymiEcg.mft
Manifest number: 1678
Signing time: Tue 09 Sep 2025 02:00:57 +0000
Manifest this update: Tue 09 Sep 2025 02:00:57 +0000
Manifest next update: Wed 10 Sep 2025 02:00:57 +0000
Files and hashes: 1: MGatYcFi3wZQ7gq2DGgHWymiEcg.crl (hash: slKWH1ln33laJNBkwkueg15LEDVoPPhoe7rc+NCN+ww=)
2: akH_-GUofRi3IR9WY9DWc-MBUHc.roa (hash: GH7ew6e0VLPyvTO+mxXZge5TTd6Djbt+GfnJ/q6zgIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/9b34b0-301a-41a2-b4c5-a8866aa95c71/1/MGatYcFi3wZQ7gq2DGgHWymiEcg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/9b34b0-301a-41a2-b4c5-a8866aa95c71/1/MGatYcFi3wZQ7gq2DGgHWymiEcg.mft
rsync://rpki.ripe.net/repository/DEFAULT/MGatYcFi3wZQ7gq2DGgHWymiEcg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2c:34:6c:d5:c4:6e:aa:46:16:24:65:46:14:71:c9:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3066ad61c162df0650ee0ab60c68075b29a211c8
Validity
Not Before: Sep 9 02:00:57 2025 GMT
Not After : Sep 10 02:00:57 2025 GMT
Subject: CN=ca3aabba6e910ee6a92c976582aed51c7d17b129
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:21:c9:4c:43:40:87:d7:94:b0:15:4a:31:9d:
ab:ee:fe:5c:4f:ae:e0:0b:47:61:c1:c3:67:4c:46:
44:9d:6a:88:06:23:2d:7a:ee:50:ab:45:3f:ce:4d:
5b:6c:76:27:4f:2d:bb:59:77:6f:b8:87:f3:38:c2:
eb:b9:f9:c5:a3:76:6e:f0:1b:0b:49:94:61:57:21:
a7:e7:67:46:b2:b2:aa:c6:48:ef:5a:b9:15:09:65:
82:5f:ea:b2:a9:65:eb:91:64:1b:54:20:88:80:78:
73:c5:34:4d:4e:b9:ab:da:04:6e:2a:37:c2:0a:02:
5e:cc:35:e2:fb:90:83:0f:d9:b4:33:60:94:42:4f:
f8:3b:2a:5b:e4:c7:df:0f:2e:4e:2c:f2:a4:fb:7b:
3c:a7:52:ed:02:78:eb:60:16:d9:3c:f4:3a:63:b6:
11:73:30:4e:30:fd:8c:fa:24:94:fa:49:6e:e7:8e:
2e:b5:13:37:d0:6b:68:9f:ce:26:5b:fc:9d:71:4f:
59:a6:8e:ae:e2:a7:bf:45:57:4d:1b:3d:49:ca:10:
4a:ce:e8:b2:58:ba:a8:4d:36:76:59:2e:bf:7e:a4:
4f:b3:98:9a:79:67:c2:3e:80:61:f6:c2:e0:e3:de:
69:0c:eb:f1:9a:28:b8:ab:79:8c:6b:8e:f4:15:6f:
6e:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:3A:AB:BA:6E:91:0E:E6:A9:2C:97:65:82:AE:D5:1C:7D:17:B1:29
X509v3 Authority Key Identifier:
keyid:30:66:AD:61:C1:62:DF:06:50:EE:0A:B6:0C:68:07:5B:29:A2:11:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGatYcFi3wZQ7gq2DGgHWymiEcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9b34b0-301a-41a2-b4c5-a8866aa95c71/1/MGatYcFi3wZQ7gq2DGgHWymiEcg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9b34b0-301a-41a2-b4c5-a8866aa95c71/1/MGatYcFi3wZQ7gq2DGgHWymiEcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:f3:8a:95:83:88:01:fd:58:da:b3:9b:bc:ca:8b:94:5d:12:
5d:19:61:27:05:c8:13:94:0e:ab:48:2a:39:15:94:bc:4e:e8:
42:72:29:c2:da:28:2f:30:cb:a0:f1:a9:f9:0e:96:e1:2e:72:
f0:32:0e:bb:6e:19:1a:69:9d:06:b8:c5:ef:c9:8c:1b:61:a3:
36:a5:7f:03:9b:31:cb:2a:56:08:c3:c1:38:f2:f8:20:c1:11:
78:23:5e:84:9d:95:34:0c:06:73:ee:e6:b9:20:dd:bb:36:ea:
a4:8a:61:3a:db:ca:dc:c2:9a:f1:f5:e8:00:65:76:3b:4e:68:
54:53:ba:2b:35:3f:fc:fe:2e:12:e4:9f:5c:76:23:f7:ce:9a:
43:6e:7f:94:33:17:72:78:50:fd:76:e2:fb:96:1a:89:d2:5d:
2f:1d:30:10:65:d0:70:a0:b5:b2:6d:28:c2:a1:c8:47:73:d0:
e1:68:a0:b4:7e:f3:61:54:16:00:1e:5f:39:40:0a:9d:ad:b7:
bd:60:a5:8e:ac:fc:f7:23:48:92:b7:ae:41:69:70:15:24:2d:
ac:5e:7e:41:3c:33:20:3f:98:b5:7c:2d:bc:54:74:f8:36:cb:
be:e1:65:6b:96:80:1c:7d:b0:44:ad:36:75:05:94:1a:40:17:
1f:d8:c8:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 09:00:29 2025 by rpki-client