Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/863c04-b07e-4c3a-9f45-fe2474d2f07c/1/mgGl7N4ueVkyWREG0II9DRVPcAI.mft
File: mgGl7N4ueVkyWREG0II9DRVPcAI.mft (raw, json)
Hash identifier: IDllHC+CaeWYCCjaTusTPKhd3eBmU/g6HJsn4Gh4YKM=
Subject key identifier: 62:9A:2E:2B:42:35:EA:9C:DD:EF:02:A2:3A:8C:D5:78:87:99:66:04
Authority key identifier: 9A:01:A5:EC:DE:2E:79:59:32:59:11:06:D0:82:3D:0D:15:4F:70:02
Certificate issuer: /CN=9a01a5ecde2e795932591106d0823d0d154f7002
Certificate serial: 01974C69EB2B1057D0F13F4E3F7A37AEDE63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mgGl7N4ueVkyWREG0II9DRVPcAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/863c04-b07e-4c3a-9f45-fe2474d2f07c/1/mgGl7N4ueVkyWREG0II9DRVPcAI.mft
Manifest number: 06AA
Signing time: Sat 07 Jun 2025 22:01:39 +0000
Manifest this update: Sat 07 Jun 2025 22:01:39 +0000
Manifest next update: Sun 08 Jun 2025 22:01:39 +0000
Files and hashes: 1: mgGl7N4ueVkyWREG0II9DRVPcAI.crl (hash: AEQOcdXWzOd/KSbpXEl4Ylyicyigy+8DkOvF2Y20qpU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/863c04-b07e-4c3a-9f45-fe2474d2f07c/1/mgGl7N4ueVkyWREG0II9DRVPcAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/863c04-b07e-4c3a-9f45-fe2474d2f07c/1/mgGl7N4ueVkyWREG0II9DRVPcAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/mgGl7N4ueVkyWREG0II9DRVPcAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:69:eb:2b:10:57:d0:f1:3f:4e:3f:7a:37:ae:de:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a01a5ecde2e795932591106d0823d0d154f7002
Validity
Not Before: Jun 7 22:01:39 2025 GMT
Not After : Jun 8 22:01:39 2025 GMT
Subject: CN=629a2e2b4235ea9cddef02a23a8cd57887996604
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:57:ef:65:a9:af:d8:3f:64:47:c7:6d:c8:a0:
c5:4d:86:2f:63:c9:a7:92:9e:89:6a:1c:43:a0:86:
ac:3c:be:84:e0:c3:69:72:e2:bc:cc:b6:18:c1:dc:
56:02:8d:16:cc:99:6c:8f:dd:ab:2f:09:1b:78:e1:
81:d1:6e:8f:da:42:df:0d:19:94:da:bf:43:4c:da:
9d:36:46:2b:f7:9f:18:35:47:9e:89:76:d2:4b:4a:
12:a1:b1:6c:63:d0:49:ad:47:99:c8:4e:e6:1d:08:
51:5a:46:68:53:3d:20:a5:70:d7:5d:2a:76:34:4d:
f8:5a:31:ca:d6:c3:0b:43:8c:75:fd:f4:8e:b7:33:
ec:d0:c6:21:e7:45:da:d7:39:7d:65:7b:63:25:7a:
54:2a:3d:e7:05:75:10:ec:d3:0e:d4:bc:5f:f2:c7:
91:0b:df:b1:1a:22:83:92:61:d5:af:78:f1:fe:fe:
f6:48:15:05:a8:06:4d:b7:f9:74:04:a1:70:21:4c:
d9:6f:20:1c:9b:f8:e8:0a:18:d2:4d:87:34:46:07:
75:9e:a9:e3:6b:d1:14:c7:7d:e0:a7:81:00:63:90:
55:e9:c5:74:52:2f:37:68:c2:c3:a7:7d:6b:9e:14:
43:09:a8:bd:e9:00:af:99:d0:20:a7:7a:0f:5c:e4:
36:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:9A:2E:2B:42:35:EA:9C:DD:EF:02:A2:3A:8C:D5:78:87:99:66:04
X509v3 Authority Key Identifier:
keyid:9A:01:A5:EC:DE:2E:79:59:32:59:11:06:D0:82:3D:0D:15:4F:70:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mgGl7N4ueVkyWREG0II9DRVPcAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/863c04-b07e-4c3a-9f45-fe2474d2f07c/1/mgGl7N4ueVkyWREG0II9DRVPcAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/863c04-b07e-4c3a-9f45-fe2474d2f07c/1/mgGl7N4ueVkyWREG0II9DRVPcAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:c5:f0:d9:a7:b4:36:15:62:ab:ef:25:b0:77:79:64:9d:df:
ed:7e:e0:d0:0b:9a:66:78:b1:13:85:14:2a:fe:41:9f:28:37:
4d:d4:3d:54:b4:ef:c9:d8:4c:1a:46:00:2c:50:04:9b:a5:16:
bb:60:4a:cb:6b:4c:c0:66:91:bc:fb:14:31:25:9b:f1:27:62:
56:8c:42:fd:fa:aa:39:ad:b1:4d:d8:ea:c3:f8:c1:d9:d9:89:
e5:2c:f3:87:b3:62:53:1b:e4:b1:b9:72:35:bf:6a:0d:c8:6c:
38:4f:10:ee:39:09:7c:79:9b:a7:ed:e0:ba:11:73:8d:5f:5a:
8b:54:57:74:60:99:2d:08:a5:94:38:60:82:1b:08:e3:53:2d:
97:cb:49:3c:e7:f3:3f:0e:04:fc:ce:e5:b6:ed:a7:c2:24:77:
11:80:ce:fc:ef:72:64:d3:6c:02:2d:46:2f:6b:89:11:12:5d:
00:f9:92:c3:42:c6:b6:17:e7:33:3d:ad:80:8b:c2:c2:16:96:
1d:3c:f0:33:4b:b2:1f:bb:f9:6b:4b:51:46:b2:bd:f0:ef:48:
31:72:f2:8b:a6:72:f9:25:ad:f8:5a:3f:15:10:26:71:dc:56:
64:af:d3:82:33:ad:01:83:28:82:47:99:e3:63:75:7a:7f:a8:
87:3b:42:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 03:25:33 2025 by rpki-client