Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/5a7e46-ce1b-4955-9f39-4b311326c230/1/mgNSX2jrayNfHeIrYLG67S_H_4M.mft
File: mgNSX2jrayNfHeIrYLG67S_H_4M.mft (raw, json)
Hash identifier: gcjvcDyKT2pD1EO3Eaij/z4YJZIPvbxA3UCnmj8u0QE=
Subject key identifier: 1E:6E:94:FB:00:41:85:AB:96:DC:80:28:7F:C3:46:7B:45:5C:70:7D
Authority key identifier: 9A:03:52:5F:68:EB:6B:23:5F:1D:E2:2B:60:B1:BA:ED:2F:C7:FF:83
Certificate issuer: /CN=9a03525f68eb6b235f1de22b60b1baed2fc7ff83
Certificate serial: 0197470C1FEE6D685AC75A2E08B4344D6FFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mgNSX2jrayNfHeIrYLG67S_H_4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/5a7e46-ce1b-4955-9f39-4b311326c230/1/mgNSX2jrayNfHeIrYLG67S_H_4M.mft
Manifest number: 1579
Signing time: Fri 06 Jun 2025 21:01:06 +0000
Manifest this update: Fri 06 Jun 2025 21:01:06 +0000
Manifest next update: Sat 07 Jun 2025 21:01:06 +0000
Files and hashes: 1: mgNSX2jrayNfHeIrYLG67S_H_4M.crl (hash: VjCLmKroPR4c2P6mbu52LE+IbE/2EQR141tLrICJY34=)
2: xV2TYyNPjWPupKmb43ad00Tt3n8.roa (hash: +ey9CZvGJrxa71wfksSgu55Jb8r1NMsse9tFxoel7Ig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/5a7e46-ce1b-4955-9f39-4b311326c230/1/mgNSX2jrayNfHeIrYLG67S_H_4M.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/5a7e46-ce1b-4955-9f39-4b311326c230/1/mgNSX2jrayNfHeIrYLG67S_H_4M.mft
rsync://rpki.ripe.net/repository/DEFAULT/mgNSX2jrayNfHeIrYLG67S_H_4M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 21:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:0c:1f:ee:6d:68:5a:c7:5a:2e:08:b4:34:4d:6f:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a03525f68eb6b235f1de22b60b1baed2fc7ff83
Validity
Not Before: Jun 6 21:01:06 2025 GMT
Not After : Jun 7 21:01:06 2025 GMT
Subject: CN=1e6e94fb004185ab96dc80287fc3467b455c707d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:13:72:6d:c0:94:9a:40:70:bd:2f:9f:f7:52:
dc:a9:b6:85:e9:4b:c0:62:4f:e4:27:e9:26:12:87:
da:c8:5d:da:d3:2e:02:50:f2:1b:6a:80:88:9d:99:
94:4c:1e:f5:e3:3a:a2:28:3e:75:a7:53:f2:5c:25:
82:d5:14:ec:22:58:18:a2:30:bf:e3:c6:2d:f3:dd:
ce:60:0b:27:37:0e:44:5a:d9:42:02:35:4e:9d:3a:
39:dc:ff:80:55:64:b9:05:ed:3f:e1:1e:42:9b:11:
66:01:c4:dd:ea:88:da:f3:26:98:b6:81:7f:08:48:
fa:93:d7:cf:04:c5:2d:9b:10:67:39:2f:2f:b6:c0:
54:ae:b4:fc:41:81:57:09:aa:9a:78:e9:5b:87:c0:
62:2e:3b:e0:ad:71:33:09:e0:c8:ff:d3:58:1e:9e:
f9:a9:c7:81:e6:e0:48:e9:81:27:39:f7:6f:d1:fa:
77:03:f6:ec:26:f5:c0:dd:92:3b:ed:80:7a:13:44:
16:4e:b5:c1:99:27:a4:39:4e:64:a9:ca:72:47:c7:
f4:e8:28:f5:2c:a5:4f:01:30:70:3e:f4:b5:53:47:
f0:a9:46:36:66:c6:10:51:ba:08:c0:76:ef:02:fb:
02:6d:43:49:c8:b8:9e:a9:f8:3d:b0:ec:82:c0:6f:
6f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:6E:94:FB:00:41:85:AB:96:DC:80:28:7F:C3:46:7B:45:5C:70:7D
X509v3 Authority Key Identifier:
keyid:9A:03:52:5F:68:EB:6B:23:5F:1D:E2:2B:60:B1:BA:ED:2F:C7:FF:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mgNSX2jrayNfHeIrYLG67S_H_4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/5a7e46-ce1b-4955-9f39-4b311326c230/1/mgNSX2jrayNfHeIrYLG67S_H_4M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/5a7e46-ce1b-4955-9f39-4b311326c230/1/mgNSX2jrayNfHeIrYLG67S_H_4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
db:86:43:c4:39:84:a1:05:a1:0a:4f:3f:e7:0e:59:04:48:cd:
ca:e1:43:43:bb:21:41:89:55:8a:c4:3b:6f:bb:68:0b:86:87:
2e:94:f6:2b:b0:73:9c:a4:58:33:ae:4f:2a:d0:11:03:13:80:
15:29:64:74:aa:01:e7:81:66:89:b7:2e:50:01:a1:09:ce:cd:
21:bd:19:f5:da:e0:64:ff:f1:72:d2:53:b5:ab:5e:d1:56:bd:
e6:6b:97:8b:8c:3e:e2:47:da:0b:13:46:80:8b:44:a5:ce:67:
0c:52:aa:da:8c:f8:79:36:4a:74:4c:ba:e0:32:08:5f:c0:ea:
d8:8a:a1:78:34:56:dc:45:15:6f:fd:9a:31:0e:10:69:16:95:
33:79:a3:7b:cd:b0:e5:0b:24:71:9d:b3:13:30:63:da:03:f4:
12:0b:7d:69:82:a8:2b:87:5c:33:73:30:7e:18:9e:0f:53:74:
32:b6:6f:d7:e9:6d:0e:33:46:bd:39:b5:ef:1b:b9:e2:ea:67:
2b:cf:16:e6:b6:79:07:2c:28:37:ae:75:cc:a7:4c:9d:03:81:
10:89:61:03:18:bc:5c:12:d1:48:22:72:07:d6:ac:fb:d7:7f:
f6:73:cb:a0:06:7f:52:98:1e:b9:fb:76:f8:93:1f:f2:bd:b6:
d9:53:82:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:23:50 2025 by rpki-client