Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/7e4ea8-8950-4183-abc0-3382794049c2/1/MGtGjMMe86PQgayPArJx4xR1Wb8.mft
File: MGtGjMMe86PQgayPArJx4xR1Wb8.mft (raw, json)
Hash identifier: TT6VTOS7uPc/2FOkeFuRhIqZpp5/N3fylk0q2vz/cY4=
Subject key identifier: 1E:95:E2:B1:FD:57:2D:49:08:B1:DD:23:2D:B0:7C:70:99:CB:BD:87
Authority key identifier: 30:6B:46:8C:C3:1E:F3:A3:D0:81:AC:8F:02:B2:71:E3:14:75:59:BF
Certificate issuer: /CN=306b468cc31ef3a3d081ac8f02b271e3147559bf
Certificate serial: 01968FCC3F966FDC629F556DDD27D16273D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MGtGjMMe86PQgayPArJx4xR1Wb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/7e4ea8-8950-4183-abc0-3382794049c2/1/MGtGjMMe86PQgayPArJx4xR1Wb8.mft
Manifest number: 09D8
Signing time: Fri 02 May 2025 07:00:49 +0000
Manifest this update: Fri 02 May 2025 07:00:49 +0000
Manifest next update: Sat 03 May 2025 07:00:49 +0000
Files and hashes: 1: MGtGjMMe86PQgayPArJx4xR1Wb8.crl (hash: FNt80P3vJTqQmiB73vEk1yIUgfVDrr6w3IBpKFjuf00=)
2: zCf3OK6AbL-GLEVW2m2fiyVZR2o.roa (hash: T9wprypvgjd5UjKaL97Qh7s/fP7I922vE5XInqdd1G4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/7e4ea8-8950-4183-abc0-3382794049c2/1/MGtGjMMe86PQgayPArJx4xR1Wb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/7e4ea8-8950-4183-abc0-3382794049c2/1/MGtGjMMe86PQgayPArJx4xR1Wb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/MGtGjMMe86PQgayPArJx4xR1Wb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8f:cc:3f:96:6f:dc:62:9f:55:6d:dd:27:d1:62:73:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=306b468cc31ef3a3d081ac8f02b271e3147559bf
Validity
Not Before: May 2 07:00:49 2025 GMT
Not After : May 3 07:00:49 2025 GMT
Subject: CN=1e95e2b1fd572d4908b1dd232db07c7099cbbd87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:5d:0f:92:f7:cd:ab:43:74:ec:33:cc:a5:e8:
e5:85:a5:45:8c:07:e2:37:0a:92:b0:d3:2c:32:47:
f1:98:e3:e5:c9:1a:34:e9:fd:71:5e:c6:68:20:57:
0a:35:30:63:f5:f2:af:6d:f7:29:88:81:ca:c8:18:
a0:3d:86:fd:fc:1e:a6:45:83:03:7b:91:1d:8a:a4:
bc:48:36:b8:aa:0b:d5:47:bb:f1:f5:9a:cf:6c:c2:
a6:5a:1d:4a:89:d6:f9:a0:4c:26:6f:d9:75:dc:f1:
dd:fd:fe:30:f9:08:4f:dc:47:a9:dc:3a:0b:be:db:
0f:82:7a:6e:fc:19:b0:bc:ac:f6:87:b5:16:8e:cf:
c3:45:e3:96:7f:5d:ca:a2:ce:19:d5:d3:a9:27:5e:
94:df:7b:4b:b3:39:e1:9c:9d:47:f8:e5:e8:a2:ff:
0b:86:81:ed:75:32:6e:81:e4:89:64:f6:a0:ef:4c:
00:07:37:9a:cc:11:44:e2:98:d3:aa:26:09:c9:9c:
64:25:44:26:15:3d:2d:eb:4a:9b:98:9e:3b:51:00:
91:35:40:3f:f1:21:d3:fd:6e:93:a3:2c:ea:6e:a5:
01:6c:c1:74:81:8b:25:8c:dc:1f:56:aa:bb:5f:cd:
7c:b9:bc:b1:ef:b9:19:26:cc:98:5a:7c:db:99:45:
49:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:95:E2:B1:FD:57:2D:49:08:B1:DD:23:2D:B0:7C:70:99:CB:BD:87
X509v3 Authority Key Identifier:
keyid:30:6B:46:8C:C3:1E:F3:A3:D0:81:AC:8F:02:B2:71:E3:14:75:59:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGtGjMMe86PQgayPArJx4xR1Wb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7e4ea8-8950-4183-abc0-3382794049c2/1/MGtGjMMe86PQgayPArJx4xR1Wb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7e4ea8-8950-4183-abc0-3382794049c2/1/MGtGjMMe86PQgayPArJx4xR1Wb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:2f:ef:8e:cc:cf:85:d9:f5:8f:58:0a:c8:05:03:ed:f9:d3:
bb:b9:22:ed:5c:1a:34:a8:c3:dc:34:39:17:21:a9:b7:22:01:
10:18:bb:eb:ed:56:de:37:8f:3f:90:bf:09:d8:e2:74:e9:4b:
47:49:fd:43:1a:5b:8d:29:4a:89:84:f6:c5:ca:7e:61:76:83:
6b:cd:36:a6:5e:a5:90:b8:7c:a7:77:b6:7c:86:79:0c:c8:87:
8c:32:f8:c4:86:c0:03:a6:24:0d:b2:12:5e:bc:1d:11:ba:2f:
c8:b0:49:f1:58:0b:27:a5:48:c8:28:3e:e7:c4:31:d8:82:f2:
1a:04:7b:ad:13:4f:c4:bf:d4:98:7a:6c:60:59:0b:02:af:7c:
75:5c:3d:09:ae:e5:af:0e:9c:3c:66:09:6f:1d:6a:76:e7:4e:
04:e2:8d:cf:35:58:07:fa:20:43:eb:93:5c:21:d6:22:44:d2:
6f:27:4d:9d:c4:1c:2b:90:89:1a:22:39:44:7f:94:16:4a:80:
ed:7c:da:e8:99:b5:4b:0d:60:9b:aa:d0:10:58:73:ad:42:90:
ae:1d:8d:81:ba:5b:00:dc:44:8c:bc:4e:e9:ba:03:7e:4d:d9:
f6:41:d5:4e:43:9c:7c:44:23:75:97:28:3f:fa:0b:db:43:76:
6e:30:0f:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 17:18:20 2025 by rpki-client