Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/863c04-b07e-4c3a-9f45-fe2474d2f07c/1/mgGl7N4ueVkyWREG0II9DRVPcAI.mft
File: mgGl7N4ueVkyWREG0II9DRVPcAI.mft (raw, json)
Hash identifier: 7t63NvE7a+xAAUiJc5hERvWjcSxbLwuGseb5VihoEWs=
Subject key identifier: 93:8E:B1:23:F1:3C:57:E5:87:1F:59:60:0E:53:D6:3D:46:E9:3C:11
Authority key identifier: 9A:01:A5:EC:DE:2E:79:59:32:59:11:06:D0:82:3D:0D:15:4F:70:02
Certificate issuer: /CN=9a01a5ecde2e795932591106d0823d0d154f7002
Certificate serial: 01964D7EAC98A1E5010A0B38B7FCA52ECA92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mgGl7N4ueVkyWREG0II9DRVPcAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/863c04-b07e-4c3a-9f45-fe2474d2f07c/1/mgGl7N4ueVkyWREG0II9DRVPcAI.mft
Manifest number: 0626
Signing time: Sat 19 Apr 2025 10:01:09 +0000
Manifest this update: Sat 19 Apr 2025 10:01:09 +0000
Manifest next update: Sun 20 Apr 2025 10:01:09 +0000
Files and hashes: 1: mgGl7N4ueVkyWREG0II9DRVPcAI.crl (hash: xakx+8jW++l7H/E+a43ykiWpBjQBsIktTq69E6NlzAE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/863c04-b07e-4c3a-9f45-fe2474d2f07c/1/mgGl7N4ueVkyWREG0II9DRVPcAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/863c04-b07e-4c3a-9f45-fe2474d2f07c/1/mgGl7N4ueVkyWREG0II9DRVPcAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/mgGl7N4ueVkyWREG0II9DRVPcAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:7e:ac:98:a1:e5:01:0a:0b:38:b7:fc:a5:2e:ca:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a01a5ecde2e795932591106d0823d0d154f7002
Validity
Not Before: Apr 19 10:01:09 2025 GMT
Not After : Apr 20 10:01:09 2025 GMT
Subject: CN=938eb123f13c57e5871f59600e53d63d46e93c11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:1c:6b:36:cc:e2:35:67:0d:92:5c:fe:59:06:
bb:eb:7d:6b:64:c5:59:99:85:6c:1e:b9:fa:7e:76:
1b:99:bb:d4:62:da:18:2e:14:90:75:43:b5:f8:e5:
01:6d:32:dd:43:c6:42:30:fe:42:ca:ef:7f:2b:57:
7c:17:f9:ec:79:a8:f8:0a:30:c4:7e:1b:38:68:bc:
cf:d5:ae:8d:e7:3b:b1:bd:4a:f7:7f:3a:d1:4d:3d:
ad:cf:fb:4c:2f:78:26:d1:eb:e3:e9:5a:4f:c4:48:
e3:95:3b:7b:4c:7a:04:91:b5:9e:9a:52:08:ee:cb:
e8:1f:73:09:b0:e2:80:31:f9:11:92:19:60:ad:2a:
b3:ed:40:12:3b:bf:77:57:9e:97:7c:f3:18:e9:22:
a0:a7:60:c3:1d:91:c7:d8:c0:2c:d8:6d:7a:63:87:
93:3b:db:d0:57:72:33:d5:b4:63:68:c2:52:9e:bd:
bc:b6:da:55:b5:3c:cb:03:05:47:4b:7e:b9:c2:86:
7e:57:43:b4:f2:77:c7:3a:d4:8f:bb:25:cd:5a:9f:
7f:91:78:b6:99:31:66:6c:50:5b:15:ab:eb:71:4c:
11:9c:04:9c:a8:74:4d:78:66:f0:24:18:6e:0b:eb:
c6:e4:c3:70:f4:20:5a:30:94:d9:13:b6:33:91:35:
d6:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:8E:B1:23:F1:3C:57:E5:87:1F:59:60:0E:53:D6:3D:46:E9:3C:11
X509v3 Authority Key Identifier:
keyid:9A:01:A5:EC:DE:2E:79:59:32:59:11:06:D0:82:3D:0D:15:4F:70:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mgGl7N4ueVkyWREG0II9DRVPcAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/863c04-b07e-4c3a-9f45-fe2474d2f07c/1/mgGl7N4ueVkyWREG0II9DRVPcAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/863c04-b07e-4c3a-9f45-fe2474d2f07c/1/mgGl7N4ueVkyWREG0II9DRVPcAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:89:2c:2c:7e:c0:a4:6a:d0:37:3b:ca:e6:26:5f:33:99:46:
58:90:fc:6e:b7:2c:07:f9:db:59:57:2c:6f:2f:66:45:26:d9:
88:f1:70:06:cf:65:b3:98:fa:71:05:f7:85:f9:67:7f:09:68:
68:a2:00:b5:c5:9c:a7:68:8f:0b:d4:fd:46:91:66:bc:3a:31:
ca:80:ee:c9:e3:b2:d1:d0:27:a8:7b:d5:b9:af:2c:7d:02:b0:
17:00:a7:b3:80:95:06:f3:1c:66:d6:6d:09:a6:16:d8:5b:4f:
be:55:c0:1f:8e:9e:2f:f4:0c:87:fd:1b:72:dd:d9:09:9b:79:
e7:70:be:c4:cf:9c:cb:c2:98:18:a4:3d:7b:9c:75:b1:07:ef:
24:61:45:0c:32:d4:5d:e7:a0:0a:af:38:86:98:74:1a:d6:77:
60:20:38:36:a6:89:94:49:ae:29:b6:73:7d:62:2f:71:52:23:
d5:63:a6:71:c0:15:58:84:61:7c:65:82:b9:97:86:3e:3e:0f:
7b:63:c7:a2:86:5c:56:66:cf:f7:7e:42:c0:f0:52:b1:06:db:
68:54:06:b1:ee:9e:24:e6:89:51:ee:dc:5b:1e:8b:a7:c2:38:
cc:d8:07:b5:92:f5:1e:26:db:7b:6d:e6:8c:4b:83:29:c6:07:
b8:90:b6:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 17:16:46 2025 by rpki-client