Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.mft
File: Mgax0ge2XA69PyP6djABbYe0E0k.mft (raw, json)
Hash identifier: skn0HX0YOQgAIoA66+ZVrSIwmDaHjcZGwLg7IG9X9GU=
Subject key identifier: 54:B1:AD:CF:C2:AA:CA:8C:B1:34:C6:34:E7:93:1D:46:A7:FE:8D:0D
Authority key identifier: 32:06:B1:D2:07:B6:5C:0E:BD:3F:23:FA:76:30:01:6D:87:B4:13:49
Certificate issuer: /CN=3206b1d207b65c0ebd3f23fa7630016d87b41349
Certificate serial: 019678D62A2F1F61CD4461497FF2CEF2BCD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mgax0ge2XA69PyP6djABbYe0E0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.mft
Manifest number: 052F
Signing time: Sun 27 Apr 2025 20:00:23 +0000
Manifest this update: Sun 27 Apr 2025 20:00:23 +0000
Manifest next update: Mon 28 Apr 2025 20:00:23 +0000
Files and hashes: 1: M2KDR8dr7-7ZyhSIDyzwELKYUdM.roa (hash: p4F925/VSgNOhwfLh+ZxgpZFhtfFkVdXlw/7VfsIDVw=)
2: Mgax0ge2XA69PyP6djABbYe0E0k.crl (hash: Hzp4didMwgDQqFIGd7DtgFrYplRIa2BohXcXip89Dlk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mgax0ge2XA69PyP6djABbYe0E0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:d6:2a:2f:1f:61:cd:44:61:49:7f:f2:ce:f2:bc:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3206b1d207b65c0ebd3f23fa7630016d87b41349
Validity
Not Before: Apr 27 20:00:23 2025 GMT
Not After : Apr 28 20:00:23 2025 GMT
Subject: CN=54b1adcfc2aaca8cb134c634e7931d46a7fe8d0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c7:b5:46:a3:06:3a:15:d8:76:3c:7f:f5:62:
a5:79:ba:87:d0:61:bc:e6:78:d4:74:4b:e6:2d:e8:
cc:8e:6b:10:f1:8e:1f:57:21:0b:54:ae:a0:76:89:
30:9a:bb:d1:5a:9a:84:59:d6:b9:f8:c0:cb:90:aa:
43:aa:2c:c8:63:f3:46:a0:a0:f5:7b:ec:35:96:4a:
5a:e6:b5:4d:d6:72:d5:10:0a:e4:8a:34:0e:ba:16:
60:5f:c9:6e:e0:bd:ec:a4:93:07:bf:9c:01:f3:ae:
25:2f:cf:7f:a8:5c:f3:64:93:ce:d5:17:19:e2:da:
fb:bd:3b:d9:b7:b5:ed:04:0a:ae:be:7b:1e:3c:2f:
c2:36:d7:b1:d8:b1:38:b9:bd:20:af:69:59:28:e6:
f5:5f:2f:ef:f7:6d:1b:7f:dd:f1:24:5e:06:a3:ed:
c9:c6:9c:a8:9b:30:9d:81:ba:5f:7d:27:18:12:b2:
bd:77:86:4f:b0:1a:85:95:f7:38:4a:60:e3:51:21:
17:ef:0a:82:1c:ee:98:cb:b8:10:d2:5b:b9:b0:16:
e4:9d:1d:64:d1:95:54:ed:75:b8:47:d2:34:f5:df:
95:a3:e7:66:0a:c7:46:3a:cf:35:a2:c9:3d:bd:44:
4d:14:6b:8d:57:26:0b:0e:b1:42:7e:71:8a:74:fa:
ec:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:B1:AD:CF:C2:AA:CA:8C:B1:34:C6:34:E7:93:1D:46:A7:FE:8D:0D
X509v3 Authority Key Identifier:
keyid:32:06:B1:D2:07:B6:5C:0E:BD:3F:23:FA:76:30:01:6D:87:B4:13:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mgax0ge2XA69PyP6djABbYe0E0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:6d:7e:a1:1c:74:fb:4e:60:df:62:4d:f3:1e:85:03:97:a7:
8a:2f:4e:5c:e5:39:e1:d7:b4:9e:71:bc:2e:ba:a8:63:fc:0f:
3b:00:d4:11:e7:97:ed:2d:45:d1:59:12:98:c6:23:5c:fe:96:
d1:76:43:a1:a2:fe:1f:bd:61:0f:8d:f6:f0:1f:41:7a:23:74:
43:5b:b0:87:24:e4:62:c9:29:34:e6:b6:10:bf:ad:38:1d:02:
34:d8:5e:9c:26:81:45:dd:11:8c:c2:7d:d0:3a:42:71:5e:81:
79:8f:06:1a:75:eb:00:94:cb:fa:28:a3:c8:7f:77:ee:32:ee:
ef:f5:42:35:dc:8e:a0:f5:74:f4:b4:31:fb:23:48:14:c5:9c:
dc:c4:11:34:df:77:a3:44:29:33:e7:ab:50:9a:5d:1f:c0:9a:
d3:92:a8:20:51:b0:e4:44:ac:8b:84:c7:28:9b:af:9f:64:1f:
56:e4:c7:23:5c:e9:2d:bd:5f:38:b7:bb:55:f1:f9:8a:2c:33:
45:1a:a9:bf:68:1f:76:20:b8:89:e1:a6:2a:60:75:b3:19:c0:
6a:42:ef:de:a6:ed:04:2a:8b:a7:21:54:05:f3:47:1a:df:e6:
57:a1:5b:61:e6:cc:67:4d:43:de:7a:21:5a:f0:51:82:f2:f9:
f9:96:eb:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 22:11:09 2025 by rpki-client