Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/3d838c-8622-4e58-870f-de9e02d41797/1/mgdjMrvSgPCFLbafYVsPFJkUgxs.mft
File: mgdjMrvSgPCFLbafYVsPFJkUgxs.mft (raw, json)
Hash identifier: nOxpVrDzrTZ0K1fPf3S4KAi7bKRkyVIKHGPIEbK4AvA=
Subject key identifier: A0:8C:08:2B:C3:16:84:65:F3:55:A8:8B:F6:3C:9A:2E:A8:81:48:76
Authority key identifier: 9A:07:63:32:BB:D2:80:F0:85:2D:B6:9F:61:5B:0F:14:99:14:83:1B
Certificate issuer: /CN=9a076332bbd280f0852db69f615b0f149914831b
Certificate serial: 01987B2D6CD41F9215C3E5126156CE4D46DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mgdjMrvSgPCFLbafYVsPFJkUgxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/3d838c-8622-4e58-870f-de9e02d41797/1/mgdjMrvSgPCFLbafYVsPFJkUgxs.mft
Manifest number: 03A7
Signing time: Tue 05 Aug 2025 17:00:31 +0000
Manifest this update: Tue 05 Aug 2025 17:00:31 +0000
Manifest next update: Wed 06 Aug 2025 17:00:31 +0000
Files and hashes: 1: mgdjMrvSgPCFLbafYVsPFJkUgxs.crl (hash: lI3dIpiH+WO3HEob0yipKfPG0NHBgnJ/6aN0wZAOlVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/3d838c-8622-4e58-870f-de9e02d41797/1/mgdjMrvSgPCFLbafYVsPFJkUgxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/3d838c-8622-4e58-870f-de9e02d41797/1/mgdjMrvSgPCFLbafYVsPFJkUgxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/mgdjMrvSgPCFLbafYVsPFJkUgxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 17:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:2d:6c:d4:1f:92:15:c3:e5:12:61:56:ce:4d:46:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a076332bbd280f0852db69f615b0f149914831b
Validity
Not Before: Aug 5 17:00:31 2025 GMT
Not After : Aug 6 17:00:31 2025 GMT
Subject: CN=a08c082bc3168465f355a88bf63c9a2ea8814876
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6c:e2:5d:8c:58:70:51:d1:a3:3e:ea:ef:30:
0f:76:19:7c:32:6e:a5:aa:6b:b1:7c:8c:f6:06:11:
c9:01:f0:20:2b:cb:0f:06:14:fa:12:ff:43:c1:db:
86:c6:05:27:21:59:f2:6d:d0:7b:0f:4a:2e:b9:6c:
c6:3c:e0:39:16:66:70:59:21:b1:5d:af:5c:bf:61:
6c:92:10:4a:00:15:92:b3:2a:7e:6e:cc:a4:0b:b3:
56:e3:e1:d5:91:c6:f2:14:5d:a6:ae:70:d7:71:77:
c4:4e:9c:b6:26:76:6e:e0:fb:70:ae:8a:2d:c1:f0:
50:ca:f4:6a:49:ce:d5:e1:ea:ce:80:00:3c:ee:0f:
f3:32:0b:13:a1:9f:3c:95:b1:3f:4f:95:2b:8c:15:
dd:36:d8:ec:8f:1a:20:cb:58:38:88:ff:b6:a9:e5:
af:5b:97:24:62:30:65:15:ae:c6:75:4f:6f:2a:f8:
ed:70:37:18:2a:13:37:5c:73:a9:7b:43:92:98:2f:
74:18:52:dd:24:89:7e:e5:17:f7:0c:b3:3a:20:ed:
70:8a:5a:38:31:08:1e:64:09:49:2d:39:52:ac:54:
bd:5d:5c:56:fc:ef:8e:e8:50:82:c4:9a:be:a5:68:
44:2c:68:bc:28:b8:b6:16:20:98:ac:d0:d0:b7:01:
c6:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:8C:08:2B:C3:16:84:65:F3:55:A8:8B:F6:3C:9A:2E:A8:81:48:76
X509v3 Authority Key Identifier:
keyid:9A:07:63:32:BB:D2:80:F0:85:2D:B6:9F:61:5B:0F:14:99:14:83:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mgdjMrvSgPCFLbafYVsPFJkUgxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3d838c-8622-4e58-870f-de9e02d41797/1/mgdjMrvSgPCFLbafYVsPFJkUgxs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3d838c-8622-4e58-870f-de9e02d41797/1/mgdjMrvSgPCFLbafYVsPFJkUgxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:51:1b:45:af:30:cd:a2:10:7d:77:e0:77:53:25:0b:ce:01:
df:f1:2a:5f:31:7d:e6:82:d3:94:88:63:4f:78:52:fb:af:7f:
60:cf:54:29:7c:95:11:c7:8f:09:b0:ff:fd:76:18:02:ee:e8:
dc:71:9b:5c:c6:d7:34:11:5a:db:56:e9:e2:8c:e1:b1:77:55:
bc:16:99:9a:cf:d0:70:cd:8f:2e:09:dc:18:27:e6:1a:73:09:
63:e4:13:c1:fe:93:01:db:19:77:c2:ed:de:ce:b4:1f:2f:b3:
de:c7:e1:ef:be:32:cd:6c:ae:19:0b:0d:93:5a:c5:48:00:26:
9c:e4:81:71:71:bb:6e:9e:ad:69:14:6b:b3:1d:ee:31:b4:86:
78:3b:2a:74:ea:0a:24:74:b3:c8:1a:12:e5:76:0c:c7:0c:65:
87:9a:7c:e7:34:6e:cb:42:67:c8:65:0e:a4:77:67:dd:21:11:
f0:aa:4a:ef:57:1f:30:5d:e8:5a:a6:a3:9b:1f:00:71:78:89:
c5:1f:ea:95:18:a6:7a:01:88:b2:49:f8:b8:38:77:f8:c9:6f:
f1:d2:34:74:a8:29:e8:d4:06:27:f5:f5:13:e1:fa:ed:4a:df:
1d:0d:0a:16:59:c4:a6:67:26:8b:c0:54:a4:7c:0e:89:53:9c:
da:4d:15:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:40:41 2025 by rpki-client