Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c26199-3303-4223-9f0f-5dafc634ccd6/1/MgrQyxyPq9KnFycj8utT6gLoSmk.mft
File: MgrQyxyPq9KnFycj8utT6gLoSmk.mft (raw, json)
Hash identifier: c1ixnCju8Bqz/HjzsCe8++XgC4AI01cIupbsEKDXhK0=
Subject key identifier: 3D:B0:70:82:35:22:C2:47:70:D5:29:67:A2:02:D7:8E:3B:AF:E8:9F
Authority key identifier: 32:0A:D0:CB:1C:8F:AB:D2:A7:17:27:23:F2:EB:53:EA:02:E8:4A:69
Certificate issuer: /CN=320ad0cb1c8fabd2a7172723f2eb53ea02e84a69
Certificate serial: 019754C7215B0F12B31D07AED147DFAE008E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MgrQyxyPq9KnFycj8utT6gLoSmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c26199-3303-4223-9f0f-5dafc634ccd6/1/MgrQyxyPq9KnFycj8utT6gLoSmk.mft
Manifest number: 01EF
Signing time: Mon 09 Jun 2025 13:00:25 +0000
Manifest this update: Mon 09 Jun 2025 13:00:25 +0000
Manifest next update: Tue 10 Jun 2025 13:00:25 +0000
Files and hashes: 1: JyQJbELaexgQ6fqiGT_WU8kf0iA.roa (hash: k3GN2/34cdpJMDa/U2bzg9E3dU3QeePwWvyheMjQ+5o=)
2: MgrQyxyPq9KnFycj8utT6gLoSmk.crl (hash: CXLc5DLUUIdecf1pLLu1Vrwg8HjMEK6mtIXoSbIAtcU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/c26199-3303-4223-9f0f-5dafc634ccd6/1/MgrQyxyPq9KnFycj8utT6gLoSmk.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/c26199-3303-4223-9f0f-5dafc634ccd6/1/MgrQyxyPq9KnFycj8utT6gLoSmk.mft
rsync://rpki.ripe.net/repository/DEFAULT/MgrQyxyPq9KnFycj8utT6gLoSmk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:54:c7:21:5b:0f:12:b3:1d:07:ae:d1:47:df:ae:00:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=320ad0cb1c8fabd2a7172723f2eb53ea02e84a69
Validity
Not Before: Jun 9 13:00:25 2025 GMT
Not After : Jun 10 13:00:25 2025 GMT
Subject: CN=3db070823522c24770d52967a202d78e3bafe89f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:15:bf:50:32:b3:b8:0b:ed:7c:be:d2:41:43:
7c:a4:04:50:31:2d:b4:62:94:1b:31:12:0b:66:66:
84:60:67:ca:8f:60:5d:49:3b:ea:2a:7b:ca:8d:28:
64:1b:f4:4d:52:01:bc:cd:f2:c8:e0:54:cf:b0:49:
b2:f1:72:50:6f:fa:46:3b:c2:3f:e4:b1:08:7a:7f:
9a:a9:05:e4:93:45:c7:2b:a7:4c:47:8a:85:8e:99:
da:75:31:06:62:cc:6d:fc:c6:ec:1e:67:16:15:e8:
07:74:c4:4c:40:7c:f3:ab:9d:d5:4f:a3:48:31:74:
4f:4b:25:e4:b7:3e:81:10:98:33:cc:3d:f5:cb:ab:
a1:48:f5:40:2c:0f:72:be:9b:31:3a:47:e5:52:70:
73:9a:b6:8b:b6:29:b8:28:5e:dd:e2:ff:fc:76:57:
5b:85:af:92:4a:77:f8:ee:50:0e:6e:e9:4e:3b:bd:
b8:86:7d:23:47:05:f6:00:e2:2b:92:e9:c1:28:21:
c8:d3:c3:1a:9e:5c:c2:40:6f:5f:cc:ff:9f:b3:11:
1b:e0:1e:79:5d:22:74:ac:c5:ce:c7:ef:61:b1:da:
9d:a8:80:42:4e:26:7e:88:de:b2:79:db:86:44:53:
23:14:34:7f:22:0f:c7:53:82:d0:d7:6e:c0:cb:c0:
c7:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:B0:70:82:35:22:C2:47:70:D5:29:67:A2:02:D7:8E:3B:AF:E8:9F
X509v3 Authority Key Identifier:
keyid:32:0A:D0:CB:1C:8F:AB:D2:A7:17:27:23:F2:EB:53:EA:02:E8:4A:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MgrQyxyPq9KnFycj8utT6gLoSmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c26199-3303-4223-9f0f-5dafc634ccd6/1/MgrQyxyPq9KnFycj8utT6gLoSmk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c26199-3303-4223-9f0f-5dafc634ccd6/1/MgrQyxyPq9KnFycj8utT6gLoSmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:63:70:06:bf:e4:52:cb:1d:61:5f:f1:af:8a:99:06:e9:f2:
70:f7:48:bb:27:db:83:e8:6b:14:23:15:ee:63:a9:26:13:e3:
ee:c6:fd:1f:ba:63:bf:2e:5a:d7:a7:57:49:4f:0d:82:1a:be:
e7:16:98:5b:99:9b:76:f0:87:a2:bf:4b:d6:3b:a0:ee:5a:f3:
fe:f8:fd:c3:69:a2:16:d3:e5:2d:e5:f2:90:ce:ef:77:69:d2:
12:7b:60:24:23:43:18:5b:ed:68:5e:3d:31:89:e6:d2:1f:f5:
98:73:1b:fe:4f:3b:1f:1a:2b:9b:f7:86:0c:c6:8c:24:bb:74:
c9:36:f1:dd:46:ba:bf:01:00:ae:88:5e:c5:10:5f:a5:52:a9:
48:6b:cd:9d:70:2e:f2:69:b5:5d:2c:77:28:68:b5:c4:4b:57:
6e:0a:e5:30:aa:05:e8:ad:c7:d2:7f:98:56:4d:31:71:e1:00:
62:cf:94:c0:fd:5a:58:14:f2:25:46:b8:b8:9a:90:d5:65:ca:
cd:37:ab:0f:3f:19:e4:d8:52:1e:ba:3c:bf:29:a0:33:eb:41:
74:72:00:21:00:b1:92:81:c6:a5:d7:bd:7a:77:ab:5f:29:f9:
c5:aa:df:07:5e:19:2f:eb:18:70:3c:6f:ea:59:89:8f:7c:d9:
0d:e1:f5:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 23:07:14 2025 by rpki-client