Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/4cba2f-4a5b-4435-8aec-923cb50abe2e/1/MGm6frw7Zy3QnsA0Th-AqhEx79A.mft
File: MGm6frw7Zy3QnsA0Th-AqhEx79A.mft (raw, json)
Hash identifier: Xr+INWT2yfxvMVVGStfMEcVYB14MxYRY/ZCoT1WzuOM=
Subject key identifier: 0E:BC:3A:74:18:CE:DD:E6:22:9D:27:65:41:47:91:C9:AE:60:93:DA
Authority key identifier: 30:69:BA:7E:BC:3B:67:2D:D0:9E:C0:34:4E:1F:80:AA:11:31:EF:D0
Certificate issuer: /CN=3069ba7ebc3b672dd09ec0344e1f80aa1131efd0
Certificate serial: 0197597FF0FC366F117633C104CB2CF68219
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MGm6frw7Zy3QnsA0Th-AqhEx79A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/4cba2f-4a5b-4435-8aec-923cb50abe2e/1/MGm6frw7Zy3QnsA0Th-AqhEx79A.mft
Manifest number: 1585
Signing time: Tue 10 Jun 2025 11:00:46 +0000
Manifest this update: Tue 10 Jun 2025 11:00:46 +0000
Manifest next update: Wed 11 Jun 2025 11:00:46 +0000
Files and hashes: 1: MGm6frw7Zy3QnsA0Th-AqhEx79A.crl (hash: 407DhBLh1iypUM2XRC6EouCL5hGhT20+PHTEfN5/G84=)
2: eqJAEOy6NaY4mZwa5RQJfzteBn0.roa (hash: 4ycDfdQF4RJy7Cm3II/1bQM7j6qQFueYRHKWr/2hsvQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/4cba2f-4a5b-4435-8aec-923cb50abe2e/1/MGm6frw7Zy3QnsA0Th-AqhEx79A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/4cba2f-4a5b-4435-8aec-923cb50abe2e/1/MGm6frw7Zy3QnsA0Th-AqhEx79A.mft
rsync://rpki.ripe.net/repository/DEFAULT/MGm6frw7Zy3QnsA0Th-AqhEx79A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 11:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:59:7f:f0:fc:36:6f:11:76:33:c1:04:cb:2c:f6:82:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3069ba7ebc3b672dd09ec0344e1f80aa1131efd0
Validity
Not Before: Jun 10 11:00:46 2025 GMT
Not After : Jun 11 11:00:46 2025 GMT
Subject: CN=0ebc3a7418cedde6229d2765414791c9ae6093da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:94:53:fb:b6:53:49:f4:db:73:a4:aa:b7:f5:
bf:d3:19:d0:3e:e2:61:b5:77:0f:03:fa:c6:4e:87:
89:e6:60:b1:17:bf:c1:29:3e:c0:58:7c:4f:e0:8d:
f7:4a:ad:25:bd:d7:97:db:df:46:20:be:be:fd:c7:
61:81:36:b8:fc:8b:1a:34:a9:36:06:d2:0b:f3:2f:
95:fc:09:0e:40:31:a1:d8:68:92:cb:71:5a:b2:34:
6d:01:9c:86:fa:cd:57:9a:af:6c:b6:36:9d:49:2f:
58:fb:60:67:74:ee:0a:d6:45:d1:43:8d:3c:7c:6a:
8c:91:58:f5:a9:d9:ec:31:32:b7:15:64:46:5c:ab:
62:37:23:24:ec:44:85:07:d1:2c:b6:39:e3:e9:7f:
82:13:d7:3c:b4:dd:e9:7e:eb:69:6d:ba:9d:d9:3c:
a2:7e:3d:6a:3e:03:a5:b2:15:f4:2e:99:9c:3d:6d:
1a:00:9e:73:58:d3:ff:21:f1:97:fc:37:bd:c1:c5:
6d:d1:3a:60:a4:41:fc:99:74:c7:bd:18:09:9f:9a:
d0:6d:1e:0e:f6:7a:b8:65:23:fb:b8:56:4c:59:87:
5d:7a:0b:a6:d9:fd:9e:e0:39:e3:0c:7e:15:73:06:
2b:a5:2e:f1:71:c9:08:a4:88:1a:61:b6:59:d1:7d:
c0:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:BC:3A:74:18:CE:DD:E6:22:9D:27:65:41:47:91:C9:AE:60:93:DA
X509v3 Authority Key Identifier:
keyid:30:69:BA:7E:BC:3B:67:2D:D0:9E:C0:34:4E:1F:80:AA:11:31:EF:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGm6frw7Zy3QnsA0Th-AqhEx79A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4cba2f-4a5b-4435-8aec-923cb50abe2e/1/MGm6frw7Zy3QnsA0Th-AqhEx79A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4cba2f-4a5b-4435-8aec-923cb50abe2e/1/MGm6frw7Zy3QnsA0Th-AqhEx79A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:bb:79:6b:05:da:d7:4e:bf:9c:85:c9:88:c5:17:9a:86:b0:
35:a1:32:88:c4:b3:f7:0b:24:fe:cf:ca:8d:2d:81:23:90:57:
c1:e0:50:80:3d:f2:47:70:d2:c8:ca:d5:45:dc:d2:03:b9:51:
38:5a:51:27:a7:b1:25:b6:4d:c6:d6:ff:fd:7d:ce:f4:18:96:
7c:be:e8:b7:03:25:81:42:dc:f4:e1:09:e7:d9:9b:9d:9d:ae:
9b:ac:52:b0:03:e2:85:91:78:c6:85:85:2e:3a:f9:91:80:5f:
48:5e:71:ee:14:fb:f1:be:49:cf:bb:a0:f8:91:89:0b:d1:01:
5d:f9:7c:33:48:0b:38:93:0b:5f:e6:df:b0:0f:3e:fe:37:64:
1f:e1:56:4f:f2:3e:cd:ab:b8:89:eb:31:2b:bc:6b:ca:8e:04:
66:e2:c4:34:8f:9c:0a:3d:c6:2b:51:2a:12:fa:6a:ef:eb:f2:
02:6d:6b:5c:70:34:0c:b6:02:f7:c8:cf:3c:6a:1a:11:b2:9b:
98:a1:87:3c:9e:02:d8:cb:fd:d8:03:93:1f:8d:0f:44:44:48:
9f:62:17:e0:ee:06:d1:83:62:7b:d3:55:74:99:80:79:f3:34:
ed:eb:aa:30:95:22:cc:65:a6:4d:c4:5b:cf:5d:4a:34:c6:09:
de:b1:c3:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 16:52:53 2025 by rpki-client