Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.mft
File: Mgax0ge2XA69PyP6djABbYe0E0k.mft (raw, json)
Hash identifier: ydRYmnSWHolzqTtwrmtSt4awX3MIi8OKlpIEsG9IJGA=
Subject key identifier: B9:A6:19:CB:7F:C0:9F:D7:18:71:4F:38:8F:C8:82:3E:FA:25:32:E4
Authority key identifier: 32:06:B1:D2:07:B6:5C:0E:BD:3F:23:FA:76:30:01:6D:87:B4:13:49
Certificate issuer: /CN=3206b1d207b65c0ebd3f23fa7630016d87b41349
Certificate serial: 01988431B1D38F505D5279D9FEE4E986798F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mgax0ge2XA69PyP6djABbYe0E0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.mft
Manifest number: 063E
Signing time: Thu 07 Aug 2025 11:01:45 +0000
Manifest this update: Thu 07 Aug 2025 11:01:45 +0000
Manifest next update: Fri 08 Aug 2025 11:01:45 +0000
Files and hashes: 1: M2KDR8dr7-7ZyhSIDyzwELKYUdM.roa (hash: p4F925/VSgNOhwfLh+ZxgpZFhtfFkVdXlw/7VfsIDVw=)
2: Mgax0ge2XA69PyP6djABbYe0E0k.crl (hash: QRCDz93PoJmdkvhpWk7+ykf/6FYN23UzUUrDB0rxHyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mgax0ge2XA69PyP6djABbYe0E0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:84:31:b1:d3:8f:50:5d:52:79:d9:fe:e4:e9:86:79:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3206b1d207b65c0ebd3f23fa7630016d87b41349
Validity
Not Before: Aug 7 11:01:45 2025 GMT
Not After : Aug 8 11:01:45 2025 GMT
Subject: CN=b9a619cb7fc09fd718714f388fc8823efa2532e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:24:53:18:62:1b:33:23:17:d4:12:f1:8e:b7:
74:03:0f:55:1e:8c:88:60:02:2e:7b:a2:8a:8b:80:
84:bd:09:4e:bf:d3:fb:93:94:e7:64:f4:df:8c:24:
d6:91:e6:ed:ee:35:61:92:29:ec:b7:c0:9c:30:57:
97:37:70:45:fa:fa:ea:05:e3:5d:9c:b5:22:70:af:
74:bd:19:c1:b4:30:b2:a9:0e:d2:27:b4:f7:04:df:
ff:eb:c6:14:f3:59:c1:93:25:39:59:d5:bb:84:42:
0f:8f:ea:07:fc:a6:f8:7f:c5:d7:c7:fd:bd:0c:83:
fa:a6:77:04:5a:d0:94:d8:c3:b2:16:fb:dd:f2:a4:
5a:2b:e8:06:5c:28:b9:25:96:17:5c:e3:46:ce:8a:
9f:42:61:ca:44:a2:c5:c8:46:8b:8f:7e:77:47:a3:
bd:a7:d6:18:5d:17:ef:d6:06:3a:ea:11:0e:63:ff:
98:96:98:c9:e8:06:e6:0e:27:59:01:05:60:86:80:
65:3c:a1:ac:5d:46:4d:41:44:53:69:7b:67:a6:d3:
34:2e:8d:e0:fa:25:7d:f9:2f:28:6a:5c:66:55:6b:
f0:e2:22:0a:c2:31:b2:c1:a1:61:49:4d:92:c1:49:
31:df:71:ed:b2:7f:cc:f1:3f:0a:8e:8b:61:2b:54:
fa:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:A6:19:CB:7F:C0:9F:D7:18:71:4F:38:8F:C8:82:3E:FA:25:32:E4
X509v3 Authority Key Identifier:
keyid:32:06:B1:D2:07:B6:5C:0E:BD:3F:23:FA:76:30:01:6D:87:B4:13:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mgax0ge2XA69PyP6djABbYe0E0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:0f:10:08:bb:d4:16:63:4b:f2:9e:cf:83:dd:9d:3a:81:dd:
11:02:91:3e:3d:87:8c:2c:1c:40:78:8f:f9:fd:01:26:96:20:
5d:da:42:8a:17:15:11:2b:a7:ff:a0:d8:18:90:c0:41:56:bf:
bb:b9:01:98:b3:9c:db:32:f5:3b:eb:4e:f0:a0:35:33:4b:53:
0d:ec:f5:a5:9b:69:72:98:1f:6d:48:ce:45:96:0e:3a:7b:c0:
48:47:9e:f3:64:79:2d:7b:6e:f8:92:ea:31:7b:52:b8:d1:27:
26:be:4b:8c:13:a0:6e:db:29:39:d8:08:66:fd:3a:dc:6f:2e:
05:57:65:6b:f4:de:c2:32:d2:93:7a:57:a2:2d:fa:ab:0c:17:
55:ff:52:f7:5d:2e:86:69:79:cf:27:ab:a3:ab:34:c8:06:91:
fb:06:c5:67:27:6f:74:bb:26:a0:03:38:36:0f:2c:82:25:25:
c5:76:81:40:88:ef:5a:6f:f1:53:98:ef:f1:67:56:b0:69:33:
f3:31:4b:3e:22:fc:8e:bf:ee:c1:2a:61:8b:6c:3d:54:86:98:
94:48:b0:10:ec:54:d0:35:63:cf:cc:91:40:ea:9d:70:b4:d4:
0a:6f:56:dc:c7:e3:83:1f:b0:d9:35:cf:9f:8c:2f:ee:bc:04:
af:c4:a7:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 12:55:49 2025 by rpki-client