Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c26199-3303-4223-9f0f-5dafc634ccd6/1/MgrQyxyPq9KnFycj8utT6gLoSmk.mft
File: MgrQyxyPq9KnFycj8utT6gLoSmk.mft (raw, json)
Hash identifier: 3GtcAJ3cZRAd93RFOm4Huxq+uP5ypSUd6PZ5lEwVStY=
Subject key identifier: 4E:8D:E1:5A:A5:30:BE:98:90:A9:BD:95:98:0A:C9:D4:5B:25:27:7E
Authority key identifier: 32:0A:D0:CB:1C:8F:AB:D2:A7:17:27:23:F2:EB:53:EA:02:E8:4A:69
Certificate issuer: /CN=320ad0cb1c8fabd2a7172723f2eb53ea02e84a69
Certificate serial: 0197643ABA927F9C35DA3268CF67E55AB07B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MgrQyxyPq9KnFycj8utT6gLoSmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c26199-3303-4223-9f0f-5dafc634ccd6/1/MgrQyxyPq9KnFycj8utT6gLoSmk.mft
Manifest number: 01F7
Signing time: Thu 12 Jun 2025 13:00:59 +0000
Manifest this update: Thu 12 Jun 2025 13:00:59 +0000
Manifest next update: Fri 13 Jun 2025 13:00:59 +0000
Files and hashes: 1: JyQJbELaexgQ6fqiGT_WU8kf0iA.roa (hash: k3GN2/34cdpJMDa/U2bzg9E3dU3QeePwWvyheMjQ+5o=)
2: MgrQyxyPq9KnFycj8utT6gLoSmk.crl (hash: 554ng/FTHzhwTIZOR7ihI7eWHRn5rfBi0qp0yemV5Ww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/c26199-3303-4223-9f0f-5dafc634ccd6/1/MgrQyxyPq9KnFycj8utT6gLoSmk.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/c26199-3303-4223-9f0f-5dafc634ccd6/1/MgrQyxyPq9KnFycj8utT6gLoSmk.mft
rsync://rpki.ripe.net/repository/DEFAULT/MgrQyxyPq9KnFycj8utT6gLoSmk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 13:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:64:3a:ba:92:7f:9c:35:da:32:68:cf:67:e5:5a:b0:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=320ad0cb1c8fabd2a7172723f2eb53ea02e84a69
Validity
Not Before: Jun 12 13:00:59 2025 GMT
Not After : Jun 13 13:00:59 2025 GMT
Subject: CN=4e8de15aa530be9890a9bd95980ac9d45b25277e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:2b:de:91:c1:25:78:d6:12:d8:c6:51:f1:85:
bc:4e:71:d9:e9:03:6f:96:d9:10:04:92:14:7c:3c:
1a:44:c2:ac:11:aa:21:0d:63:32:f8:b1:66:18:5f:
0b:8c:7d:24:0c:78:de:0b:ac:1b:79:d3:16:05:0a:
d0:74:e5:d5:a8:45:5d:b5:5a:b6:fd:d9:b6:c9:d5:
57:40:7c:72:3d:af:d1:b7:8c:48:17:96:de:52:08:
0d:cc:85:d5:3e:da:12:80:ba:f7:0e:2e:19:a5:df:
f0:4b:18:e9:60:53:69:1d:67:d6:cf:f5:b8:1c:34:
23:fe:68:be:d9:be:6f:9f:8a:dd:37:77:1a:2e:fd:
08:af:e2:c2:67:19:84:41:02:06:39:f8:57:e6:88:
7f:d5:cf:92:4e:e6:2a:65:df:2c:1d:6d:e2:00:ac:
a8:82:c6:9f:83:47:8e:c7:98:23:d2:bc:41:f1:13:
60:e8:fb:90:85:ea:8b:32:c1:b9:2c:05:70:2e:6d:
73:ba:0f:dc:a7:d3:0d:b9:73:a3:5a:be:0c:01:05:
37:af:ad:c9:51:3d:a2:41:7b:3e:7c:06:48:37:90:
5c:37:a6:dd:c7:d9:34:24:c0:32:a8:9e:6d:24:f4:
21:22:34:4e:44:1f:19:e2:2f:43:72:d7:7c:9c:9d:
cd:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:8D:E1:5A:A5:30:BE:98:90:A9:BD:95:98:0A:C9:D4:5B:25:27:7E
X509v3 Authority Key Identifier:
keyid:32:0A:D0:CB:1C:8F:AB:D2:A7:17:27:23:F2:EB:53:EA:02:E8:4A:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MgrQyxyPq9KnFycj8utT6gLoSmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c26199-3303-4223-9f0f-5dafc634ccd6/1/MgrQyxyPq9KnFycj8utT6gLoSmk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c26199-3303-4223-9f0f-5dafc634ccd6/1/MgrQyxyPq9KnFycj8utT6gLoSmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:3f:a3:d5:6a:92:1c:2d:d6:0e:e1:a9:ca:7f:d8:86:6f:e9:
7f:db:44:fe:02:6a:54:bc:72:d5:f5:75:8d:4b:5a:65:8d:52:
0b:c9:b4:3d:30:ec:38:11:97:76:71:ed:38:c8:dd:8f:2e:f9:
07:f4:43:7b:46:6d:03:09:28:45:1b:be:cb:b9:1b:dc:40:82:
2c:a0:77:ed:cc:26:f1:e6:34:97:99:a1:5b:96:e0:93:db:c3:
d7:09:ea:ed:2f:a0:12:01:a1:d0:bb:79:8c:f2:43:53:5e:73:
45:7e:81:2d:4c:75:b7:f0:2f:37:0a:ea:c5:e9:d3:7e:f9:2c:
c6:a4:e9:14:e4:d3:23:e8:6b:97:f2:d1:19:c4:4e:fc:1b:d0:
57:c1:04:57:e6:34:c1:61:d1:8c:12:a0:af:a9:a6:c3:93:9f:
ad:c5:cf:ab:af:c9:db:91:8f:e3:a2:fd:46:0b:cc:c5:9e:3f:
de:d6:4f:05:10:de:2d:44:8d:d5:86:7d:79:4d:f1:cf:42:a3:
44:2e:95:e2:cd:c3:53:5c:51:fb:b4:31:89:b7:43:52:e9:d4:
c7:4d:74:b7:53:98:72:41:bf:4a:e0:c8:a5:8b:b1:db:84:8e:
13:73:68:60:94:c7:d3:2b:cd:c3:c3:3b:fe:9f:40:79:db:b8:
fe:09:25:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 18:04:14 2025 by rpki-client