Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/9b34b0-301a-41a2-b4c5-a8866aa95c71/1/MGatYcFi3wZQ7gq2DGgHWymiEcg.mft
File: MGatYcFi3wZQ7gq2DGgHWymiEcg.mft (raw, json)
Hash identifier: 7fKWjwJEgBlXkpqoYMhj80GuSGfREitBfeszWcGcQ+0=
Subject key identifier: B4:41:98:1A:22:1B:D1:45:AF:B9:8E:E8:A0:08:B1:87:2D:4F:48:BE
Authority key identifier: 30:66:AD:61:C1:62:DF:06:50:EE:0A:B6:0C:68:07:5B:29:A2:11:C8
Certificate issuer: /CN=3066ad61c162df0650ee0ab60c68075b29a211c8
Certificate serial: 019640D5C558129D21E093B4641548BBC296
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MGatYcFi3wZQ7gq2DGgHWymiEcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/9b34b0-301a-41a2-b4c5-a8866aa95c71/1/MGatYcFi3wZQ7gq2DGgHWymiEcg.mft
Manifest number: 14F5
Signing time: Wed 16 Apr 2025 23:01:13 +0000
Manifest this update: Wed 16 Apr 2025 23:01:13 +0000
Manifest next update: Thu 17 Apr 2025 23:01:13 +0000
Files and hashes: 1: MGatYcFi3wZQ7gq2DGgHWymiEcg.crl (hash: YimWbcuXS31lzlcbsn2kvnUyfqjUCQQy8SVElERH22Q=)
2: akH_-GUofRi3IR9WY9DWc-MBUHc.roa (hash: GH7ew6e0VLPyvTO+mxXZge5TTd6Djbt+GfnJ/q6zgIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/9b34b0-301a-41a2-b4c5-a8866aa95c71/1/MGatYcFi3wZQ7gq2DGgHWymiEcg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/9b34b0-301a-41a2-b4c5-a8866aa95c71/1/MGatYcFi3wZQ7gq2DGgHWymiEcg.mft
rsync://rpki.ripe.net/repository/DEFAULT/MGatYcFi3wZQ7gq2DGgHWymiEcg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 21:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:40:d5:c5:58:12:9d:21:e0:93:b4:64:15:48:bb:c2:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3066ad61c162df0650ee0ab60c68075b29a211c8
Validity
Not Before: Apr 16 23:01:13 2025 GMT
Not After : Apr 17 23:01:13 2025 GMT
Subject: CN=b441981a221bd145afb98ee8a008b1872d4f48be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:47:fb:b0:e3:71:5d:09:03:19:a7:11:f1:cc:
42:b7:48:55:0b:70:8c:51:85:99:2a:71:41:fa:c1:
74:24:92:2e:33:34:b5:4f:22:6b:14:e3:39:e7:b7:
d0:94:0a:9b:cc:e5:51:8e:79:25:25:23:f5:3f:37:
64:a0:6a:7b:74:e0:14:bc:f3:c1:7d:e9:e0:f3:76:
e1:73:dd:a7:76:d0:39:e7:91:8a:3c:e6:b9:9d:30:
c7:dd:b2:60:82:a5:8a:b2:6d:88:0a:79:a4:58:9f:
e6:91:a7:5a:66:30:86:59:ba:91:43:6f:94:41:e1:
81:30:51:a8:3e:67:2d:c5:c4:65:22:4d:49:dc:0b:
e1:aa:e6:23:e6:90:d6:51:68:7a:a9:91:b9:b3:e6:
f5:09:d7:6f:a8:6d:f3:ce:c8:48:bc:46:a3:c1:44:
9a:2f:0f:19:72:af:cf:0a:15:0f:8c:d5:a4:1d:13:
30:98:45:5e:9a:62:e3:b9:ca:1b:ae:3e:90:92:82:
4f:73:8c:af:35:38:fe:f6:f8:22:cc:d5:58:25:bb:
6c:7e:d7:67:35:d4:f0:74:2d:6f:29:01:76:ef:0b:
7a:97:8d:0d:d7:ed:5f:94:46:4c:13:45:ac:ec:73:
fa:5f:83:17:b6:c5:f4:49:39:47:f2:9b:cf:04:31:
8a:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:41:98:1A:22:1B:D1:45:AF:B9:8E:E8:A0:08:B1:87:2D:4F:48:BE
X509v3 Authority Key Identifier:
keyid:30:66:AD:61:C1:62:DF:06:50:EE:0A:B6:0C:68:07:5B:29:A2:11:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGatYcFi3wZQ7gq2DGgHWymiEcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9b34b0-301a-41a2-b4c5-a8866aa95c71/1/MGatYcFi3wZQ7gq2DGgHWymiEcg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9b34b0-301a-41a2-b4c5-a8866aa95c71/1/MGatYcFi3wZQ7gq2DGgHWymiEcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:a5:ba:b0:84:3e:1a:db:00:53:82:3d:2b:f1:3f:1d:87:30:
2a:b6:76:97:b8:e4:69:65:01:1c:dc:8f:08:f4:ad:47:45:9b:
6a:3d:25:64:d3:df:2a:84:e5:72:96:1e:b8:d3:df:87:be:a1:
4e:fd:36:a8:57:97:ec:b2:d9:c5:06:62:16:51:4b:e6:57:de:
af:df:bb:e4:ba:68:42:b5:52:a8:e0:b4:d2:52:83:f6:37:58:
95:dc:02:cf:a4:22:8f:7b:ac:c1:97:f5:48:0b:37:4e:9c:c1:
76:60:bd:bb:3a:df:41:ed:de:03:84:c5:86:59:eb:f7:40:aa:
46:b2:c4:3e:22:4b:bb:a9:d3:9c:52:96:f1:8e:57:cd:38:9d:
af:98:1c:9b:f1:89:d5:4e:50:f9:fe:cc:d7:2b:c6:c3:49:6d:
75:1b:95:6d:5c:9b:2c:3a:72:4e:9d:47:d6:16:09:1b:d2:5b:
2f:87:b3:53:30:df:74:27:b8:96:41:c2:fe:0a:1c:d4:1a:a0:
f1:64:00:7e:b7:88:e7:3f:68:d4:76:e8:65:57:86:15:ad:f9:
87:d7:1f:48:20:b9:23:49:cc:f3:56:6d:5d:ae:2f:bb:cf:93:
37:fd:6d:86:a2:76:c8:d7:27:1d:dc:6c:a6:17:6c:81:0e:b2:
42:2a:6f:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:13:36 2025 by rpki-client