Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/a8941a-7250-48ec-aaf8-6d8ea9d1cd73/1/MGE0vPWfWB1rdmMM-oeGeHaikhU.mft
File: MGE0vPWfWB1rdmMM-oeGeHaikhU.mft (raw, json)
Hash identifier: Zxm254/nHtdBFUP4xjLxIIKDnC09ESZiZ4CS+sBrR9U=
Subject key identifier: 3C:99:24:00:5A:33:8E:8C:CD:6B:3B:20:B1:B5:41:C5:98:1C:E3:FB
Authority key identifier: 30:61:34:BC:F5:9F:58:1D:6B:76:63:0C:FA:87:86:78:76:A2:92:15
Certificate issuer: /CN=306134bcf59f581d6b76630cfa87867876a29215
Certificate serial: 0197469EA0286BA8F0A9938A2C7A4D5E5175
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MGE0vPWfWB1rdmMM-oeGeHaikhU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/a8941a-7250-48ec-aaf8-6d8ea9d1cd73/1/MGE0vPWfWB1rdmMM-oeGeHaikhU.mft
Manifest number: 111A
Signing time: Fri 06 Jun 2025 19:01:30 +0000
Manifest this update: Fri 06 Jun 2025 19:01:30 +0000
Manifest next update: Sat 07 Jun 2025 19:01:30 +0000
Files and hashes: 1: MGE0vPWfWB1rdmMM-oeGeHaikhU.crl (hash: f9QrvWZA1zYZjSwXFgID8XznPOVxpFfNTo9q2+2eBd4=)
2: iyT2rEaTLGTQJtoCzDixmDHk4q8.roa (hash: DJdcXuwOyrFSr66rkLo/Y+8lRD0xwqdql+52mCZmuDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/a8941a-7250-48ec-aaf8-6d8ea9d1cd73/1/MGE0vPWfWB1rdmMM-oeGeHaikhU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/a8941a-7250-48ec-aaf8-6d8ea9d1cd73/1/MGE0vPWfWB1rdmMM-oeGeHaikhU.mft
rsync://rpki.ripe.net/repository/DEFAULT/MGE0vPWfWB1rdmMM-oeGeHaikhU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:9e:a0:28:6b:a8:f0:a9:93:8a:2c:7a:4d:5e:51:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=306134bcf59f581d6b76630cfa87867876a29215
Validity
Not Before: Jun 6 19:01:30 2025 GMT
Not After : Jun 7 19:01:30 2025 GMT
Subject: CN=3c9924005a338e8ccd6b3b20b1b541c5981ce3fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f7:d5:1d:9c:95:28:58:cf:12:a4:43:47:6f:
97:fe:b5:f2:e7:36:f4:ac:7b:84:ec:c5:3c:5b:85:
1b:91:fc:ad:28:95:1f:6d:36:f8:b3:e7:62:19:59:
29:e2:0b:5f:b2:57:89:24:07:d7:c7:ce:04:1a:68:
28:bb:f4:56:1a:fb:ad:5b:98:67:f2:b6:72:a1:2e:
6c:19:d3:d2:93:1e:18:f5:e1:16:1c:6b:db:a6:a9:
68:8b:95:75:57:e9:dc:3d:60:6f:1a:cd:79:51:42:
ab:2f:a0:e9:b0:cf:cd:c8:f1:0a:7f:3f:3f:a5:db:
9b:9a:fe:69:68:e1:67:1e:6e:44:bd:33:6d:ab:3d:
fa:a1:f7:5c:cd:76:e6:2f:9f:b7:85:21:e2:bc:9f:
3b:f3:a5:f6:74:c7:9d:30:c2:0f:b9:30:8b:56:2b:
f5:c0:54:79:45:d2:28:cd:85:52:d2:b6:15:ad:d9:
fb:d1:ef:d6:15:46:3d:f3:1a:b5:e4:dc:4b:ba:cb:
ba:f4:ea:04:c0:35:f4:af:41:3d:b0:31:84:ef:69:
bc:6a:c6:57:f5:c4:b2:71:bb:ac:16:46:9a:82:cc:
6d:cf:ad:bc:a4:97:15:0c:ab:9d:a1:ef:ee:4a:28:
88:47:3e:c1:cf:0b:91:2a:30:e0:90:dd:78:df:38:
30:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:99:24:00:5A:33:8E:8C:CD:6B:3B:20:B1:B5:41:C5:98:1C:E3:FB
X509v3 Authority Key Identifier:
keyid:30:61:34:BC:F5:9F:58:1D:6B:76:63:0C:FA:87:86:78:76:A2:92:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGE0vPWfWB1rdmMM-oeGeHaikhU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a8941a-7250-48ec-aaf8-6d8ea9d1cd73/1/MGE0vPWfWB1rdmMM-oeGeHaikhU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a8941a-7250-48ec-aaf8-6d8ea9d1cd73/1/MGE0vPWfWB1rdmMM-oeGeHaikhU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:c7:cb:14:ca:af:a9:fb:80:e6:33:7c:35:eb:c8:f5:23:8d:
77:35:01:97:ef:84:b1:bc:78:d8:db:b7:f7:88:31:da:d3:81:
85:55:d6:d9:91:41:11:7c:ac:4c:04:98:fd:79:10:9b:aa:8b:
f9:c3:e8:44:79:d0:15:1a:26:c1:c4:bb:46:bb:04:31:9a:44:
35:e0:30:83:d3:bc:e5:e4:a1:e8:86:66:ba:8d:c0:31:1c:48:
64:58:f9:c2:82:4d:b1:a2:e6:88:4b:e4:c4:03:53:67:7b:c1:
8f:77:64:f7:41:cc:90:1f:c7:1f:58:3f:fb:31:80:04:0a:00:
1b:56:e3:46:84:36:29:7e:dd:de:d3:4c:d7:b0:35:2e:50:66:
d1:bb:12:ff:f9:f4:c7:96:a6:5a:57:b8:f3:7a:ea:55:6a:ea:
a2:40:00:c7:18:4d:3b:6e:e7:80:a2:2c:ca:1c:3a:9a:d6:dc:
f6:26:5d:c7:9d:7b:35:cc:75:31:0a:a4:73:7e:79:e7:56:ac:
81:76:56:2a:7a:f7:ca:83:f7:92:0a:ba:4b:fb:13:e9:a8:91:
95:ef:71:4e:9a:1e:95:5a:16:85:65:da:9c:31:20:c8:04:e4:
d2:b3:0e:21:5f:c5:7d:dc:88:7f:42:98:79:b6:e8:43:74:43:
09:04:b9:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:16:30 2025 by rpki-client