Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/64b8dd-9bcb-475e-bf8f-d87fb767d8bd/1/2MGLWtOiXxGKg7sv-755XWZDZjw.mft
File: 2MGLWtOiXxGKg7sv-755XWZDZjw.mft (raw, json)
Hash identifier: /Mu8OzZq0VTio6A7naHI1CbDrJUbfzcZkivjxzTuUlk=
Subject key identifier: 5F:BE:A5:03:DA:AB:17:C1:8D:7D:AB:CE:E1:A2:F8:DD:EB:18:AE:58
Authority key identifier: D8:C1:8B:5A:D3:A2:5F:11:8A:83:BB:2F:FB:BE:79:5D:66:43:66:3C
Certificate issuer: /CN=d8c18b5ad3a25f118a83bb2ffbbe795d6643663c
Certificate serial: 019873E32E9104F1DB35445791C2CB62C8FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2MGLWtOiXxGKg7sv-755XWZDZjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/64b8dd-9bcb-475e-bf8f-d87fb767d8bd/1/2MGLWtOiXxGKg7sv-755XWZDZjw.mft
Manifest number: 0E37
Signing time: Mon 04 Aug 2025 07:02:05 +0000
Manifest this update: Mon 04 Aug 2025 07:02:05 +0000
Manifest next update: Tue 05 Aug 2025 07:02:05 +0000
Files and hashes: 1: 2MGLWtOiXxGKg7sv-755XWZDZjw.crl (hash: ZIC8xHw8gpF5+F45Q7PhSaRBKLJ9aKLBSnI8CdyFfgo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/64b8dd-9bcb-475e-bf8f-d87fb767d8bd/1/2MGLWtOiXxGKg7sv-755XWZDZjw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/64b8dd-9bcb-475e-bf8f-d87fb767d8bd/1/2MGLWtOiXxGKg7sv-755XWZDZjw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2MGLWtOiXxGKg7sv-755XWZDZjw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:2e:91:04:f1:db:35:44:57:91:c2:cb:62:c8:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8c18b5ad3a25f118a83bb2ffbbe795d6643663c
Validity
Not Before: Aug 4 07:02:05 2025 GMT
Not After : Aug 5 07:02:05 2025 GMT
Subject: CN=5fbea503daab17c18d7dabcee1a2f8ddeb18ae58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:03:dc:f8:5a:02:d7:da:f1:e8:0e:e6:e1:46:
3e:b4:8c:be:ef:9e:e3:a6:2a:bf:8a:79:12:26:10:
1a:18:51:5f:f5:51:fe:d1:2d:2b:30:35:97:5f:95:
e6:a6:b6:1c:df:f2:2f:7f:fd:f6:90:5c:de:48:12:
af:e1:25:a6:86:08:8b:22:a3:69:c1:b9:87:ac:72:
33:d1:03:a3:bc:18:67:ac:c4:e4:d4:a1:7a:2c:cd:
f8:d2:ff:a3:2e:22:2d:5e:2f:3c:43:55:ce:66:9d:
43:b8:a5:c5:9e:35:d8:bf:f6:c7:f8:b8:3f:3b:29:
05:e7:3c:dd:71:2a:c0:3a:88:89:a3:ea:c1:bc:1c:
f6:5c:14:28:d1:e9:dc:bd:da:5a:fe:7c:e1:bc:c4:
52:02:1c:ad:05:79:01:9c:1d:8b:1b:b5:3e:c7:85:
14:72:45:91:ad:e5:74:67:40:fe:e3:9a:48:fb:37:
f4:f3:6e:fa:a7:fd:87:66:6a:dc:01:b6:46:20:7b:
c0:d6:24:3b:ec:0d:ce:1f:12:86:c2:24:ef:54:b1:
8c:07:d0:8e:c9:f8:3e:ad:b7:1c:ab:03:72:d9:66:
1d:2e:44:19:85:5b:8a:cc:c7:24:c8:ff:6b:70:2a:
25:7b:a2:58:88:50:cb:b7:89:b2:d7:e8:61:09:c8:
a1:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:BE:A5:03:DA:AB:17:C1:8D:7D:AB:CE:E1:A2:F8:DD:EB:18:AE:58
X509v3 Authority Key Identifier:
keyid:D8:C1:8B:5A:D3:A2:5F:11:8A:83:BB:2F:FB:BE:79:5D:66:43:66:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2MGLWtOiXxGKg7sv-755XWZDZjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/64b8dd-9bcb-475e-bf8f-d87fb767d8bd/1/2MGLWtOiXxGKg7sv-755XWZDZjw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/64b8dd-9bcb-475e-bf8f-d87fb767d8bd/1/2MGLWtOiXxGKg7sv-755XWZDZjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:0b:97:59:07:a5:32:17:0d:d3:96:05:a2:4d:f7:3d:2b:58:
c3:3f:65:3e:66:27:07:ac:f0:da:63:00:03:e6:ed:c8:22:d2:
17:3b:d4:cb:67:f1:8e:c8:43:86:ec:db:4e:1e:d4:0c:08:6c:
dc:14:52:4d:b0:8d:d6:21:1b:9a:be:21:17:82:8c:d2:e7:da:
a2:fc:f7:32:00:49:d9:de:a6:c4:e8:ef:6b:7e:e1:ec:65:63:
d2:38:84:15:0c:5d:a6:ac:d0:59:37:1f:69:e3:e5:be:93:76:
80:ec:06:10:9e:18:f5:8c:5e:8e:79:d1:b3:a2:c5:04:3a:38:
67:f5:f9:19:54:30:51:ed:26:fd:8b:12:04:63:11:f0:9c:0f:
f8:bd:bb:14:f5:b0:f3:4a:60:4a:ce:51:ee:9d:1a:e9:85:7d:
33:93:db:8a:e9:9f:56:0e:47:b7:20:ec:34:56:04:68:89:83:
2b:fb:80:da:9b:c2:ee:5b:54:3c:da:92:12:fe:cd:a4:7b:b9:
70:cb:63:45:dd:b0:78:52:ec:47:da:3b:5e:6d:10:94:02:ae:
67:56:75:e8:3b:9f:90:99:cb:44:03:25:d0:22:80:bd:63:d8:
b7:a6:98:82:d7:e4:1e:12:cb:86:00:61:26:79:cb:a2:5f:82:
0d:87:61:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:21:24 2025 by rpki-client