Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/624e63-b876-4ef4-bf19-e43620880cb6/1/MgJHUW6RAX4tvLVyyg8poSKBrPA.mft
File: MgJHUW6RAX4tvLVyyg8poSKBrPA.mft (raw, json)
Hash identifier: MFi4uLG+JMo8EANzJh2o1LNdSKaboChe/Alhx2FdrTc=
Subject key identifier: 8E:42:F5:B2:26:FC:4F:03:2C:5A:D6:1F:61:70:11:D6:88:B4:4B:92
Authority key identifier: 32:02:47:51:6E:91:01:7E:2D:BC:B5:72:CA:0F:29:A1:22:81:AC:F0
Certificate issuer: /CN=320247516e91017e2dbcb572ca0f29a12281acf0
Certificate serial: 019893DAB50D06E5299916359B15AF736C38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MgJHUW6RAX4tvLVyyg8poSKBrPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/624e63-b876-4ef4-bf19-e43620880cb6/1/MgJHUW6RAX4tvLVyyg8poSKBrPA.mft
Manifest number: 04CF
Signing time: Sun 10 Aug 2025 12:00:40 +0000
Manifest this update: Sun 10 Aug 2025 12:00:40 +0000
Manifest next update: Mon 11 Aug 2025 12:00:40 +0000
Files and hashes: 1: MgJHUW6RAX4tvLVyyg8poSKBrPA.crl (hash: X02ITqg2gUBYE6YLl1B5XdD3UfPWYiJlwK9CFmG1z4g=)
2: m7C6K0Dm5PPkueps5pZmHrJAHsQ.roa (hash: keru/3nPFQZwhtdrj8XoRvNJqtUTfDmo1KvvBMCi2Bg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/624e63-b876-4ef4-bf19-e43620880cb6/1/MgJHUW6RAX4tvLVyyg8poSKBrPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/624e63-b876-4ef4-bf19-e43620880cb6/1/MgJHUW6RAX4tvLVyyg8poSKBrPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/MgJHUW6RAX4tvLVyyg8poSKBrPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 12:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:da:b5:0d:06:e5:29:99:16:35:9b:15:af:73:6c:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=320247516e91017e2dbcb572ca0f29a12281acf0
Validity
Not Before: Aug 10 12:00:40 2025 GMT
Not After : Aug 11 12:00:40 2025 GMT
Subject: CN=8e42f5b226fc4f032c5ad61f617011d688b44b92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:70:7c:36:8c:12:0b:eb:79:c1:a5:b5:a5:d4:
98:a8:db:75:22:76:52:40:aa:dc:ad:84:8c:60:ef:
a0:75:25:df:27:4c:bb:ee:56:87:61:bf:bc:70:59:
ef:9f:9d:39:41:93:ab:26:18:66:9c:13:95:d8:7c:
80:25:8d:55:59:96:12:9b:d1:d9:d7:64:4b:59:c2:
46:c6:88:50:17:10:aa:92:1b:ca:df:55:48:fa:45:
b6:af:c1:82:f7:04:4e:00:e7:93:4f:2d:81:6b:ad:
b3:c6:51:74:39:2f:15:4a:95:7d:a5:9e:78:b7:0a:
ce:a6:ea:78:ab:f8:04:51:a4:54:32:d5:83:1d:9c:
68:3b:24:39:e6:6f:3d:77:12:a1:fd:41:6e:07:b4:
2b:91:1f:a9:64:9b:01:a3:66:34:41:30:65:bb:b9:
53:b1:b5:28:d2:5e:eb:57:79:4f:3f:06:a4:a1:38:
18:5a:6c:82:6f:24:a2:b8:5c:38:b0:64:bd:03:b6:
9c:bf:12:be:56:0a:44:1f:fb:c9:fb:b7:49:5f:e4:
d1:e3:6f:56:b5:04:61:1e:25:a8:36:73:ac:07:5a:
92:7e:98:4d:76:92:8b:9a:b6:01:f0:bc:ae:f0:0d:
aa:44:08:c8:80:e7:ee:c6:db:f8:43:d9:bb:f8:7b:
f3:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:42:F5:B2:26:FC:4F:03:2C:5A:D6:1F:61:70:11:D6:88:B4:4B:92
X509v3 Authority Key Identifier:
keyid:32:02:47:51:6E:91:01:7E:2D:BC:B5:72:CA:0F:29:A1:22:81:AC:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MgJHUW6RAX4tvLVyyg8poSKBrPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/624e63-b876-4ef4-bf19-e43620880cb6/1/MgJHUW6RAX4tvLVyyg8poSKBrPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/624e63-b876-4ef4-bf19-e43620880cb6/1/MgJHUW6RAX4tvLVyyg8poSKBrPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:03:a8:11:1b:5d:be:9c:40:bd:46:56:53:ee:bc:93:1c:91:
ad:71:6f:ed:43:e2:ca:c3:f0:5b:15:8e:17:e0:b3:f7:c0:52:
8d:f7:32:31:51:45:0b:ea:c5:0b:3f:33:a3:34:d6:fd:f1:79:
ed:d1:ac:31:2c:87:e4:7b:7e:92:af:8e:41:20:08:1b:15:b6:
62:0a:c9:77:05:a2:b4:97:22:3c:e5:65:69:4f:27:e4:53:6d:
8f:dc:6e:e6:f5:17:92:b1:b2:03:c9:58:25:d4:e0:96:9e:b2:
b3:89:c6:3e:7d:9b:b1:b1:b5:3e:00:3f:be:df:2f:13:de:3c:
80:fb:c2:a3:0a:df:2b:7d:bf:f0:9c:1f:da:9b:0d:d0:c9:f0:
96:44:01:f3:b6:00:b8:39:5e:dd:f6:78:a2:87:80:69:15:9a:
23:b2:a9:0b:84:b0:e1:4b:b8:f8:3c:7c:55:45:fe:5f:11:56:
50:f6:95:41:09:27:6f:58:33:4a:32:02:60:38:f8:79:e1:80:
0d:ac:5b:a3:15:b3:a7:3f:80:38:e0:4a:17:c9:c8:78:cc:5a:
57:43:8a:4b:17:ca:b5:68:a3:35:e6:f1:7f:95:46:92:bc:aa:
78:45:e1:74:fd:c2:c0:48:3d:ba:a6:9f:1a:2f:21:01:8d:62:
d1:f8:20:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 19:50:42 2025 by rpki-client