Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/4cba2f-4a5b-4435-8aec-923cb50abe2e/1/MGm6frw7Zy3QnsA0Th-AqhEx79A.mft
File: MGm6frw7Zy3QnsA0Th-AqhEx79A.mft (raw, json)
Hash identifier: s3CQL0SAXFsY61KU91g4bF9NJ2eDfYEUvGf7R0QW5YI=
Subject key identifier: 09:99:F8:18:DB:E0:9F:0E:3D:B0:6B:B8:9B:2E:E6:30:C4:C4:C8:45
Authority key identifier: 30:69:BA:7E:BC:3B:67:2D:D0:9E:C0:34:4E:1F:80:AA:11:31:EF:D0
Certificate issuer: /CN=3069ba7ebc3b672dd09ec0344e1f80aa1131efd0
Certificate serial: 019783FC22B8BF0200689F5702AABF99C0A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MGm6frw7Zy3QnsA0Th-AqhEx79A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/4cba2f-4a5b-4435-8aec-923cb50abe2e/1/MGm6frw7Zy3QnsA0Th-AqhEx79A.mft
Manifest number: 159B
Signing time: Wed 18 Jun 2025 17:00:28 +0000
Manifest this update: Wed 18 Jun 2025 17:00:28 +0000
Manifest next update: Thu 19 Jun 2025 17:00:28 +0000
Files and hashes: 1: MGm6frw7Zy3QnsA0Th-AqhEx79A.crl (hash: gwKZpi0LbMsco965Mr1MfuRyUPkPB4VZusTLvHtZVlw=)
2: eqJAEOy6NaY4mZwa5RQJfzteBn0.roa (hash: 4ycDfdQF4RJy7Cm3II/1bQM7j6qQFueYRHKWr/2hsvQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/4cba2f-4a5b-4435-8aec-923cb50abe2e/1/MGm6frw7Zy3QnsA0Th-AqhEx79A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/4cba2f-4a5b-4435-8aec-923cb50abe2e/1/MGm6frw7Zy3QnsA0Th-AqhEx79A.mft
rsync://rpki.ripe.net/repository/DEFAULT/MGm6frw7Zy3QnsA0Th-AqhEx79A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:83:fc:22:b8:bf:02:00:68:9f:57:02:aa:bf:99:c0:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3069ba7ebc3b672dd09ec0344e1f80aa1131efd0
Validity
Not Before: Jun 18 17:00:28 2025 GMT
Not After : Jun 19 17:00:28 2025 GMT
Subject: CN=0999f818dbe09f0e3db06bb89b2ee630c4c4c845
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:fe:da:b6:6c:1d:67:23:e2:49:9c:09:73:e5:
f8:60:1e:f5:a6:c7:32:b7:fd:2c:33:56:91:66:89:
de:b7:df:60:43:33:3d:ec:61:1a:94:9f:8d:a1:42:
3d:16:44:eb:c7:80:45:a2:4c:9c:2d:b1:86:7a:b2:
9c:11:4f:fb:15:4b:7a:82:fb:b1:03:94:d2:97:fc:
86:2d:53:c5:3f:fe:ac:0f:af:e0:57:2e:8b:5b:ec:
64:80:ab:42:0a:96:b3:95:b9:8e:d4:dc:f2:42:8b:
f1:a1:69:be:b3:ee:82:c9:3e:98:ea:bd:87:b2:ea:
47:73:e4:5d:3c:0b:8c:57:d6:53:1e:bb:5d:4c:c5:
20:23:41:58:71:c0:22:c0:2f:df:0a:35:9e:3a:38:
bf:14:dc:c8:b7:ea:d1:fc:8e:02:7f:18:1e:a1:e0:
fb:85:ea:5f:02:e9:68:8a:15:a7:95:86:d1:ba:69:
d6:2a:13:64:1a:2c:60:5a:f5:9a:e0:63:21:0e:cf:
43:f8:76:89:c2:89:00:ed:20:5e:73:d4:7b:b6:11:
32:62:bc:b2:f9:1d:f8:8e:b1:71:07:90:6a:f9:2b:
d7:c2:d1:c5:34:54:14:fe:15:ff:b8:f9:12:a9:59:
ca:71:6f:32:1e:64:94:15:61:88:1c:38:91:06:b6:
f5:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:99:F8:18:DB:E0:9F:0E:3D:B0:6B:B8:9B:2E:E6:30:C4:C4:C8:45
X509v3 Authority Key Identifier:
keyid:30:69:BA:7E:BC:3B:67:2D:D0:9E:C0:34:4E:1F:80:AA:11:31:EF:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGm6frw7Zy3QnsA0Th-AqhEx79A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4cba2f-4a5b-4435-8aec-923cb50abe2e/1/MGm6frw7Zy3QnsA0Th-AqhEx79A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4cba2f-4a5b-4435-8aec-923cb50abe2e/1/MGm6frw7Zy3QnsA0Th-AqhEx79A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:e9:53:e2:33:5d:d1:80:62:ea:ff:f7:08:51:c1:87:28:ba:
73:f9:87:dc:ae:88:c7:1b:6b:1e:30:17:84:11:00:66:0d:b5:
95:08:7c:a3:b0:af:24:56:83:1e:5e:11:4f:78:1d:cc:b8:0b:
5a:16:82:e4:28:34:b6:83:e8:a0:1d:cc:f6:90:85:74:a8:5f:
58:ad:27:45:92:00:c9:19:73:b7:7e:c8:b6:1a:77:07:aa:e3:
2e:5e:df:43:4a:b5:fa:e9:b5:d4:b9:3c:7f:90:7c:15:72:17:
5f:d7:72:98:99:14:59:6a:29:1a:07:42:e9:8b:a1:64:b7:17:
90:87:6f:7c:a4:c3:50:e4:71:d5:29:52:e8:7d:7a:0c:1e:b9:
24:ec:4b:9d:87:c6:71:a5:2e:63:b0:83:6c:59:4f:18:06:b7:
aa:a6:73:a9:2e:a2:db:0a:b8:ec:2b:e1:fb:10:cd:f8:ff:fd:
eb:5e:ae:4e:ae:bc:e8:10:cf:28:f9:47:60:c5:36:8a:a3:9a:
95:a6:c7:85:41:4b:6b:2d:27:b4:bf:53:80:aa:cc:c8:41:39:
bf:77:9a:ba:3e:69:3a:1e:a1:ac:d8:dd:33:11:c4:ed:42:02:
86:20:73:79:d4:4f:39:67:da:81:a2:75:70:ac:5c:5a:f9:02:
b4:35:e2:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 23:44:01 2025 by rpki-client