Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/9b34b0-301a-41a2-b4c5-a8866aa95c71/1/MGatYcFi3wZQ7gq2DGgHWymiEcg.mft
File: MGatYcFi3wZQ7gq2DGgHWymiEcg.mft (raw, json)
Hash identifier: IiYLr5l3cLpePnJuw8hSpbKiWiEj1cb6hSKB/jeMWp0=
Subject key identifier: 88:88:A5:95:75:C7:D5:BC:44:3A:95:D4:24:4F:4F:56:02:79:95:00
Authority key identifier: 30:66:AD:61:C1:62:DF:06:50:EE:0A:B6:0C:68:07:5B:29:A2:11:C8
Certificate issuer: /CN=3066ad61c162df0650ee0ab60c68075b29a211c8
Certificate serial: 01976C2B645D3636C28DBD9D56FEDDE52A8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MGatYcFi3wZQ7gq2DGgHWymiEcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/9b34b0-301a-41a2-b4c5-a8866aa95c71/1/MGatYcFi3wZQ7gq2DGgHWymiEcg.mft
Manifest number: 1590
Signing time: Sat 14 Jun 2025 02:01:12 +0000
Manifest this update: Sat 14 Jun 2025 02:01:12 +0000
Manifest next update: Sun 15 Jun 2025 02:01:12 +0000
Files and hashes: 1: MGatYcFi3wZQ7gq2DGgHWymiEcg.crl (hash: irjvApYcSpVFXMkyoy8PSbEXhOZW3rE7BbxzhbQEtOM=)
2: akH_-GUofRi3IR9WY9DWc-MBUHc.roa (hash: GH7ew6e0VLPyvTO+mxXZge5TTd6Djbt+GfnJ/q6zgIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/9b34b0-301a-41a2-b4c5-a8866aa95c71/1/MGatYcFi3wZQ7gq2DGgHWymiEcg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/9b34b0-301a-41a2-b4c5-a8866aa95c71/1/MGatYcFi3wZQ7gq2DGgHWymiEcg.mft
rsync://rpki.ripe.net/repository/DEFAULT/MGatYcFi3wZQ7gq2DGgHWymiEcg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:2b:64:5d:36:36:c2:8d:bd:9d:56:fe:dd:e5:2a:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3066ad61c162df0650ee0ab60c68075b29a211c8
Validity
Not Before: Jun 14 02:01:12 2025 GMT
Not After : Jun 15 02:01:12 2025 GMT
Subject: CN=8888a59575c7d5bc443a95d4244f4f5602799500
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e2:db:de:1a:4d:43:94:c3:3b:e1:e1:bd:b2:
77:99:f6:a2:42:37:96:ea:ea:35:2d:a3:18:3d:75:
1d:c0:77:1a:b6:94:a6:ae:99:5e:1a:e8:81:bc:ea:
9a:8c:98:a0:09:27:c9:65:bd:53:bb:a3:e6:32:1b:
fd:d9:a9:3b:b6:e9:ec:00:76:9d:20:1f:1a:35:95:
f2:99:5a:e2:37:01:50:d6:97:62:73:27:57:3b:e5:
93:f8:be:19:ed:02:cf:64:63:26:55:bb:78:2e:6a:
79:fb:1a:4b:84:67:91:14:bd:63:97:c0:e1:83:ec:
29:ce:16:d4:f3:b2:b0:b2:0d:df:c6:36:38:01:4f:
4c:4e:49:6d:11:83:6c:ab:1d:d1:d1:71:48:ac:b1:
44:24:39:00:61:e5:0e:1a:36:13:92:92:2d:ec:6b:
d1:bb:7d:c7:fc:a6:47:eb:ca:5f:aa:64:92:94:9d:
d3:a5:b2:f0:ad:db:53:49:b8:a5:43:73:f0:d5:48:
58:83:3b:c0:5e:8b:be:e1:de:97:49:bb:35:4a:00:
6e:33:91:03:8a:c0:6b:9c:e1:99:26:44:60:6d:af:
22:79:b7:dd:a9:27:9c:94:76:86:4f:0b:b7:1c:08:
c5:c1:5f:a2:d7:34:90:8c:92:93:ff:d5:fa:da:fe:
c1:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:88:A5:95:75:C7:D5:BC:44:3A:95:D4:24:4F:4F:56:02:79:95:00
X509v3 Authority Key Identifier:
keyid:30:66:AD:61:C1:62:DF:06:50:EE:0A:B6:0C:68:07:5B:29:A2:11:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGatYcFi3wZQ7gq2DGgHWymiEcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9b34b0-301a-41a2-b4c5-a8866aa95c71/1/MGatYcFi3wZQ7gq2DGgHWymiEcg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9b34b0-301a-41a2-b4c5-a8866aa95c71/1/MGatYcFi3wZQ7gq2DGgHWymiEcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:6e:18:1f:ac:5d:18:9b:cd:89:5a:8f:45:ea:69:10:bf:25:
71:47:42:1f:42:76:eb:d2:61:ee:0e:c0:6e:35:ae:a7:a4:9b:
62:b3:9e:f1:da:7d:43:28:8a:33:27:b7:72:24:77:2c:7c:c4:
2f:2d:1a:2f:b1:1a:73:9e:b5:84:ce:ed:2e:34:9e:8d:83:85:
9b:54:11:27:49:be:58:c2:79:c2:fd:6d:ab:27:e6:47:30:f4:
2b:c7:03:49:64:28:47:d4:7c:36:f6:e1:a0:86:c8:3f:68:42:
d6:11:ac:81:65:cd:7c:36:0a:97:61:38:3b:08:3e:0d:fe:2a:
18:24:c8:8e:7c:c8:35:47:79:1b:90:dd:b4:e8:b7:d5:c7:b9:
cc:ca:c9:e5:35:2c:dd:80:4a:24:20:2c:70:22:e9:fc:7b:d9:
b7:e8:00:01:2c:9b:a7:a3:fa:9e:1c:16:f8:44:34:11:bd:89:
41:22:bd:8d:ef:da:ab:c3:f8:7d:7f:1b:04:6b:40:fe:b3:98:
d7:11:a4:a3:19:a4:2b:a8:37:89:42:f7:13:c8:28:5d:94:e7:
44:d0:57:d3:f0:a1:66:a9:7a:f8:50:44:08:2f:e9:9f:07:c3:
87:63:5f:56:98:c6:2c:a4:56:e7:84:1e:c8:65:a8:01:68:02:
cd:a2:2c:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:35:24 2025 by rpki-client