Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.mft
File: MG1hg1W9iTf3W7RlC7XBr3D5oS4.mft (raw, json)
Hash identifier: zlrUmihvQiw2UcIlHfgacNYR3eS9/pbn5FS+oZb4zA8=
Subject key identifier: 7E:2C:BB:39:20:D3:2A:FF:FF:AE:2F:F6:23:CC:90:04:2B:0C:67:23
Authority key identifier: 30:6D:61:83:55:BD:89:37:F7:5B:B4:65:0B:B5:C1:AF:70:F9:A1:2E
Certificate issuer: /CN=306d618355bd8937f75bb4650bb5c1af70f9a12e
Certificate serial: 019873E352B5564E2B43C3B839AFC0971814
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MG1hg1W9iTf3W7RlC7XBr3D5oS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.mft
Manifest number: 11B5
Signing time: Mon 04 Aug 2025 07:02:14 +0000
Manifest this update: Mon 04 Aug 2025 07:02:14 +0000
Manifest next update: Tue 05 Aug 2025 07:02:14 +0000
Files and hashes: 1: 3jZVmIYXRpFGaUpKFxmxg6yk0v4.roa (hash: DxwsnC6ETAvm52TcakM8AMF0oIdLtUXLvOU8uNsDQAw=)
2: MG1hg1W9iTf3W7RlC7XBr3D5oS4.crl (hash: tSoHTxk7nJLDDrjdOm5UP+EppgKOmrbnwwWhMkdg9LM=)
3: OhFs8ELf0BkBqUqSta-UtJTxxOY.roa (hash: eORqJrZ4eHwt+ZtqWQMblZ7ybIDSjazTPoe3DTl1tC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/MG1hg1W9iTf3W7RlC7XBr3D5oS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:52:b5:56:4e:2b:43:c3:b8:39:af:c0:97:18:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=306d618355bd8937f75bb4650bb5c1af70f9a12e
Validity
Not Before: Aug 4 07:02:14 2025 GMT
Not After : Aug 5 07:02:14 2025 GMT
Subject: CN=7e2cbb3920d32affffae2ff623cc90042b0c6723
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:a5:13:54:44:57:b2:83:b5:f0:6e:22:d5:07:
4c:ce:a1:6b:a0:cd:d6:51:d2:85:7c:39:91:78:fc:
bf:2c:96:c2:db:d1:f2:23:25:4e:63:e8:56:d6:78:
69:3e:06:97:79:7a:7a:3f:ef:8e:fb:42:c4:a5:b8:
2c:1f:1e:35:fa:41:49:a4:08:41:ba:bc:7c:4b:37:
0f:e9:67:1a:4f:e5:e2:bc:0e:ca:10:3c:a5:cc:d9:
99:7c:66:11:70:26:78:6a:a9:54:87:86:13:67:4e:
47:22:e8:55:a4:57:fe:d2:30:25:f0:f9:09:69:4a:
39:c4:bd:65:c5:de:86:be:b9:95:dc:1b:ae:6f:2a:
93:53:ee:9c:c0:35:e0:7b:08:03:41:75:6d:db:e4:
e1:a4:1e:ed:6d:9e:84:75:00:9d:05:0d:40:e7:09:
f2:39:96:84:ce:bf:43:7e:da:fc:cd:a4:04:29:2c:
74:f6:d1:7b:eb:9b:db:84:4f:f0:d6:98:79:9f:1f:
16:d2:55:08:0c:b4:f4:b9:ac:28:76:b6:f7:77:d3:
7c:00:60:ef:9c:cb:19:90:e0:37:f4:95:fc:39:69:
e3:b9:46:0e:f6:db:0b:21:fb:be:c6:cb:ba:22:43:
35:06:95:25:4f:de:37:44:c1:93:2c:ba:86:b7:7a:
8a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:2C:BB:39:20:D3:2A:FF:FF:AE:2F:F6:23:CC:90:04:2B:0C:67:23
X509v3 Authority Key Identifier:
keyid:30:6D:61:83:55:BD:89:37:F7:5B:B4:65:0B:B5:C1:AF:70:F9:A1:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MG1hg1W9iTf3W7RlC7XBr3D5oS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:55:70:52:ab:99:35:7a:38:4c:27:08:bf:cf:b1:b9:59:c6:
93:f9:4d:2e:e8:cf:18:bc:0d:93:8a:59:be:96:48:78:72:8e:
f6:38:51:d2:bd:68:95:d3:9e:a1:9f:99:2e:21:5a:71:ac:45:
47:45:20:6c:e3:be:c3:6c:e1:6f:b1:3e:71:60:e0:ce:ef:b2:
d8:1b:f2:70:47:3f:6a:64:00:d9:c0:1e:84:57:0b:9d:02:30:
c6:5b:d0:62:12:9a:fa:41:41:ab:b8:eb:5b:94:c2:b4:40:15:
55:84:90:bb:a3:fd:7d:de:15:ae:2e:3b:75:bb:cf:e9:ed:b6:
19:d5:bb:44:01:6d:aa:cb:9a:78:30:9a:63:f7:4b:d5:fa:0b:
49:7d:01:27:25:f5:cf:49:da:8a:dc:25:25:81:f5:a3:cd:ea:
4f:5c:9c:b8:84:ac:5b:d7:d4:71:1c:9c:58:5d:b6:c4:ce:f2:
2a:e2:95:61:b8:ef:76:11:55:a8:89:01:dc:f1:ce:78:c9:14:
a2:e8:6c:21:b4:67:8c:b6:5b:91:e1:61:83:24:0b:45:fd:7c:
32:55:5a:30:03:b3:d2:53:96:55:4e:6d:4e:75:a0:48:5b:db:
2e:d0:3e:7d:14:d0:2f:c3:3d:e0:dc:9f:05:6b:59:f3:ac:9f:
d9:4a:bd:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:11:01 2025 by rpki-client