Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.mft
File: Mgax0ge2XA69PyP6djABbYe0E0k.mft (raw, json)
Hash identifier: APRdYC/JYWLs3vTyabJUipvCs5VOilpbpCWmTMk25Vk=
Subject key identifier: D7:7C:56:31:90:2E:ED:4B:BD:EE:BF:C7:11:4D:BE:87:46:F1:1F:C4
Authority key identifier: 32:06:B1:D2:07:B6:5C:0E:BD:3F:23:FA:76:30:01:6D:87:B4:13:49
Certificate issuer: /CN=3206b1d207b65c0ebd3f23fa7630016d87b41349
Certificate serial: 019773E442ACA3823E10FF27AC9C99E43FCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mgax0ge2XA69PyP6djABbYe0E0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.mft
Manifest number: 05B1
Signing time: Sun 15 Jun 2025 14:00:28 +0000
Manifest this update: Sun 15 Jun 2025 14:00:28 +0000
Manifest next update: Mon 16 Jun 2025 14:00:28 +0000
Files and hashes: 1: M2KDR8dr7-7ZyhSIDyzwELKYUdM.roa (hash: p4F925/VSgNOhwfLh+ZxgpZFhtfFkVdXlw/7VfsIDVw=)
2: Mgax0ge2XA69PyP6djABbYe0E0k.crl (hash: h2FeAPJipwJCmaeXj6avg3uoi47W6jYves8eV/APMTc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mgax0ge2XA69PyP6djABbYe0E0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:73:e4:42:ac:a3:82:3e:10:ff:27:ac:9c:99:e4:3f:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3206b1d207b65c0ebd3f23fa7630016d87b41349
Validity
Not Before: Jun 15 14:00:28 2025 GMT
Not After : Jun 16 14:00:28 2025 GMT
Subject: CN=d77c5631902eed4bbdeebfc7114dbe8746f11fc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6e:8c:0a:63:29:96:b9:68:97:c8:8b:a3:f4:
d5:8a:71:ec:39:1a:46:a7:72:4d:fc:d3:8b:b2:5f:
e7:d0:09:9e:3d:59:2a:be:ac:4e:c6:39:d7:a9:dd:
c8:c5:d4:19:63:67:80:46:8b:28:f7:45:a3:96:e6:
13:3f:86:7a:b4:61:eb:7a:2d:6a:63:ca:81:9a:58:
86:64:28:22:0c:ab:30:20:d7:b6:57:2b:35:27:b7:
10:c3:38:64:8c:5b:36:6b:d7:3d:55:28:b1:16:50:
fd:38:b2:1f:5d:80:d6:76:de:6c:2c:34:a8:d3:bb:
b6:b6:f9:65:13:77:a9:b7:5e:f0:3f:6d:39:57:fd:
00:2a:5e:2d:3a:70:f4:7c:7b:df:9d:25:f2:01:7e:
ce:ac:ed:80:1d:d7:19:14:49:89:9f:09:81:5b:56:
5c:86:5a:73:96:ad:d9:dd:da:6f:be:aa:61:47:15:
f9:03:2f:1e:ee:21:79:2b:5a:35:d1:b4:95:0f:14:
4f:28:bf:95:19:ed:9a:27:5a:b0:27:6f:0d:ad:8e:
5b:02:80:1d:9f:95:94:e2:74:47:fb:10:34:03:70:
dc:03:90:fa:0d:81:d9:e5:51:1d:ed:ff:e1:b3:ad:
65:d8:d4:19:e2:92:2e:1e:44:6d:9a:6e:7e:6d:3e:
53:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:7C:56:31:90:2E:ED:4B:BD:EE:BF:C7:11:4D:BE:87:46:F1:1F:C4
X509v3 Authority Key Identifier:
keyid:32:06:B1:D2:07:B6:5C:0E:BD:3F:23:FA:76:30:01:6D:87:B4:13:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mgax0ge2XA69PyP6djABbYe0E0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:ad:22:d8:73:60:2c:16:7c:0f:8f:63:ec:d2:92:d7:8b:ac:
59:d8:5b:2c:3a:08:41:6f:91:77:a8:4d:ae:ea:16:c0:81:32:
01:d3:da:a5:36:1c:c9:d3:67:1d:fb:a5:72:72:f6:3f:46:4e:
fd:90:aa:6e:0e:14:49:6c:c9:86:e1:00:54:e0:a6:79:76:68:
27:22:e2:5c:8e:a6:1c:6a:79:c2:df:a7:3c:37:2a:76:79:7d:
41:52:4b:2d:f8:a5:f9:54:81:ce:fc:06:de:61:a2:a3:0b:ab:
87:e8:e7:86:38:05:b1:f5:1f:8e:35:4d:a2:bc:ac:7c:23:70:
3d:ed:6b:4b:5c:03:0e:bb:9f:93:88:cd:c8:e0:50:42:8d:cf:
32:a3:9e:a6:22:08:e8:9a:9d:23:56:d3:c9:02:c0:4d:e8:8c:
6e:8c:25:b4:01:e5:56:cd:20:7c:36:84:fd:81:84:46:e8:a0:
70:37:3b:c1:e3:70:7e:ca:3b:89:06:18:91:eb:b1:73:e4:5e:
da:7d:3f:bd:28:31:82:76:82:d8:da:cb:bc:12:f4:e7:98:0c:
95:6c:9f:df:50:04:d3:ca:a8:c7:8e:ab:42:ac:da:85:76:ff:
a8:c1:55:a7:8e:5f:c3:d3:b0:85:c6:8c:6c:75:10:13:fe:8f:
b9:45:6d:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 20:17:51 2025 by rpki-client