Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/9b34b0-301a-41a2-b4c5-a8866aa95c71/1/MGatYcFi3wZQ7gq2DGgHWymiEcg.mft
File: MGatYcFi3wZQ7gq2DGgHWymiEcg.mft (raw, json)
Hash identifier: SvYml04BheMq+CfqQfWUj35SKxKavAd/GEljorH/YTU=
Subject key identifier: 4F:80:45:D5:8B:D3:A3:B3:A7:40:12:12:82:06:22:7C:ED:6D:DE:A0
Authority key identifier: 30:66:AD:61:C1:62:DF:06:50:EE:0A:B6:0C:68:07:5B:29:A2:11:C8
Certificate issuer: /CN=3066ad61c162df0650ee0ab60c68075b29a211c8
Certificate serial: 01974967F9C8F8D0F19B60688A90F802ED15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MGatYcFi3wZQ7gq2DGgHWymiEcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/9b34b0-301a-41a2-b4c5-a8866aa95c71/1/MGatYcFi3wZQ7gq2DGgHWymiEcg.mft
Manifest number: 157E
Signing time: Sat 07 Jun 2025 08:00:40 +0000
Manifest this update: Sat 07 Jun 2025 08:00:40 +0000
Manifest next update: Sun 08 Jun 2025 08:00:40 +0000
Files and hashes: 1: MGatYcFi3wZQ7gq2DGgHWymiEcg.crl (hash: 1frKlNrfg9H77g+3e9EWibpq+kwhkJgOTgeeSDEPxXo=)
2: akH_-GUofRi3IR9WY9DWc-MBUHc.roa (hash: GH7ew6e0VLPyvTO+mxXZge5TTd6Djbt+GfnJ/q6zgIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/9b34b0-301a-41a2-b4c5-a8866aa95c71/1/MGatYcFi3wZQ7gq2DGgHWymiEcg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/9b34b0-301a-41a2-b4c5-a8866aa95c71/1/MGatYcFi3wZQ7gq2DGgHWymiEcg.mft
rsync://rpki.ripe.net/repository/DEFAULT/MGatYcFi3wZQ7gq2DGgHWymiEcg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 08:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:67:f9:c8:f8:d0:f1:9b:60:68:8a:90:f8:02:ed:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3066ad61c162df0650ee0ab60c68075b29a211c8
Validity
Not Before: Jun 7 08:00:40 2025 GMT
Not After : Jun 8 08:00:40 2025 GMT
Subject: CN=4f8045d58bd3a3b3a74012128206227ced6ddea0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:7a:21:df:b3:76:00:29:e2:93:5a:2f:91:d2:
e5:9b:39:1f:b9:c8:13:6e:62:c4:0a:41:1e:6e:92:
b1:1c:b6:04:5a:ff:34:e7:02:ab:d9:8b:e7:b8:d9:
19:a1:8b:3f:93:dd:70:4b:3a:67:69:4d:81:52:af:
71:38:fa:1d:8b:93:27:63:6b:bc:a2:6b:82:c7:69:
a0:0b:35:92:b7:36:5c:12:93:9a:31:75:5b:83:f2:
a7:e9:05:61:aa:8d:93:c7:d8:cb:7f:86:03:e2:e4:
d1:94:6a:91:5e:44:ba:64:0c:2e:b8:3f:ac:b1:14:
a4:a3:27:9f:c0:c7:b3:01:8d:b0:00:7e:4e:29:05:
db:31:bc:8d:36:79:6c:20:f9:6e:f2:27:fc:a2:13:
cc:8b:2e:c2:1e:cc:8d:52:d4:1e:d2:d4:a9:bf:7d:
51:27:59:ca:10:79:b7:ab:2f:da:a1:0d:2b:15:65:
2f:c6:68:44:f8:d8:ad:ea:d7:18:31:2e:6b:e1:c6:
d1:35:f8:00:57:7d:f6:22:1f:a6:c8:cc:7a:02:87:
ff:15:da:6c:ff:c2:3f:11:68:f1:d4:a5:67:aa:a8:
bf:a7:90:32:c0:c2:00:5e:fd:79:14:42:a8:21:40:
0c:3c:0d:80:16:3f:6c:d5:53:72:42:d0:ef:0b:d2:
15:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:80:45:D5:8B:D3:A3:B3:A7:40:12:12:82:06:22:7C:ED:6D:DE:A0
X509v3 Authority Key Identifier:
keyid:30:66:AD:61:C1:62:DF:06:50:EE:0A:B6:0C:68:07:5B:29:A2:11:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGatYcFi3wZQ7gq2DGgHWymiEcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9b34b0-301a-41a2-b4c5-a8866aa95c71/1/MGatYcFi3wZQ7gq2DGgHWymiEcg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9b34b0-301a-41a2-b4c5-a8866aa95c71/1/MGatYcFi3wZQ7gq2DGgHWymiEcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:e9:b2:d7:74:48:fe:c1:05:fc:77:9c:41:37:74:13:5a:83:
74:d3:f4:60:44:44:55:2e:28:d1:22:d7:09:53:2f:a3:79:56:
82:cf:2e:7c:cc:cf:48:d1:26:58:5b:99:d5:c7:a1:fe:05:d2:
ea:b0:31:db:50:de:6e:23:13:fe:5a:a0:3c:c8:c4:34:5e:ea:
d1:f9:66:29:e6:65:69:81:cc:97:e5:0d:72:40:01:96:62:5d:
56:c0:c8:c1:83:41:de:28:6e:f3:81:18:a6:1f:26:f9:b5:fe:
7e:85:2f:a8:d9:51:5a:37:3d:cc:66:4c:27:b3:e5:66:c7:05:
ea:14:35:88:56:2d:19:6c:dd:11:bc:ed:a0:d2:1a:5e:ba:59:
b9:9e:75:0a:ed:29:93:14:fb:52:dd:66:51:e4:0e:47:55:1e:
03:88:b0:af:a2:0e:f0:65:33:27:89:ef:19:8a:94:b1:e5:77:
bb:95:da:9b:8b:6e:f0:3d:37:45:c4:7c:f1:67:de:f3:28:9a:
1e:65:34:9e:86:91:85:d7:27:d4:e9:70:25:64:85:64:09:b5:
bd:eb:5d:5e:94:1a:31:7a:42:f9:9b:28:40:c1:b4:37:a2:f9:
d9:73:ab:c7:7b:d1:84:0d:f2:a9:2e:a1:45:01:6f:e5:32:2f:
95:db:a2:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:06:28 2025 by rpki-client