
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/d0beb2-c576-4e8d-b148-d79508e16869/1/MgOPanu3dwpyrnANMbagCoHujbs.mft
File: MgOPanu3dwpyrnANMbagCoHujbs.mft (raw, json)
Hash identifier: B7wGMh/wP+5aU3kvMHP8/tm4mzvNMKMTrcLKvrXhZfE=
Subject key identifier: 9C:0D:7F:37:0A:9E:D2:1D:DB:2E:33:1A:35:FA:80:F8:67:D3:4E:23
Authority key identifier: 32:03:8F:6A:7B:B7:77:0A:72:AE:70:0D:31:B6:A0:0A:81:EE:8D:BB
Certificate issuer: /CN=32038f6a7bb7770a72ae700d31b6a00a81ee8dbb
Certificate serial: 01987D8A77D3DB63BD4BF39FE49A4166EFBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MgOPanu3dwpyrnANMbagCoHujbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/d0beb2-c576-4e8d-b148-d79508e16869/1/MgOPanu3dwpyrnANMbagCoHujbs.mft
Manifest number: 0C05
Signing time: Wed 06 Aug 2025 04:01:23 +0000
Manifest this update: Wed 06 Aug 2025 04:01:23 +0000
Manifest next update: Thu 07 Aug 2025 04:01:23 +0000
Files and hashes: 1: MgOPanu3dwpyrnANMbagCoHujbs.crl (hash: AejCOg+sux7FQ9+TZsSc92ZpsnAtRyCsFxyQFYn6aLw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/d0beb2-c576-4e8d-b148-d79508e16869/1/MgOPanu3dwpyrnANMbagCoHujbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/d0beb2-c576-4e8d-b148-d79508e16869/1/MgOPanu3dwpyrnANMbagCoHujbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/MgOPanu3dwpyrnANMbagCoHujbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 04:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:8a:77:d3:db:63:bd:4b:f3:9f:e4:9a:41:66:ef:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32038f6a7bb7770a72ae700d31b6a00a81ee8dbb
Validity
Not Before: Aug 6 04:01:23 2025 GMT
Not After : Aug 7 04:01:23 2025 GMT
Subject: CN=9c0d7f370a9ed21ddb2e331a35fa80f867d34e23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ce:15:85:48:a4:81:cf:e0:21:e6:3e:2d:93:
96:88:f6:6d:1a:2f:fb:23:8d:5f:1e:78:2c:c3:b0:
7e:6f:60:b6:8b:ee:9e:a7:c2:65:aa:d0:c7:61:39:
1d:95:66:75:56:31:a3:09:1b:49:e0:4d:aa:41:f8:
93:b7:58:d5:1f:c9:f4:4e:91:68:1d:fc:a7:4d:e7:
ed:c8:32:fb:61:9d:79:73:28:f1:85:0c:30:f2:8d:
64:8b:75:6d:d7:65:5e:38:c7:17:41:f1:e5:29:1f:
13:0e:bb:2e:32:1c:51:5a:2d:dd:c0:a4:8d:de:01:
ef:ef:45:33:93:e9:b9:dc:2d:19:5e:19:c8:0e:e6:
f6:fe:f6:43:87:8e:ea:4c:8b:92:39:c2:2c:b2:aa:
71:74:62:51:ac:00:da:59:a8:52:ba:da:86:d5:2b:
0a:92:85:1e:4f:42:be:7d:05:88:6c:25:84:e4:02:
a9:11:e5:d7:b9:49:b1:fd:70:5f:df:47:4c:af:6f:
ab:83:2e:db:60:e0:8e:a5:75:e2:80:25:d3:57:e5:
2e:60:77:bd:3f:bc:bb:be:2d:1d:14:91:31:13:5e:
87:9d:f4:aa:73:56:71:38:7e:b5:d6:b6:4c:8d:94:
1b:83:12:ab:00:bc:c6:39:84:97:dc:32:85:b1:00:
87:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:0D:7F:37:0A:9E:D2:1D:DB:2E:33:1A:35:FA:80:F8:67:D3:4E:23
X509v3 Authority Key Identifier:
keyid:32:03:8F:6A:7B:B7:77:0A:72:AE:70:0D:31:B6:A0:0A:81:EE:8D:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MgOPanu3dwpyrnANMbagCoHujbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d0beb2-c576-4e8d-b148-d79508e16869/1/MgOPanu3dwpyrnANMbagCoHujbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d0beb2-c576-4e8d-b148-d79508e16869/1/MgOPanu3dwpyrnANMbagCoHujbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:c0:bb:a8:17:90:fd:73:19:85:ad:ed:f3:41:4e:56:a4:07:
99:88:43:2b:5e:68:5e:31:31:6a:57:b8:1c:38:f5:56:b4:15:
90:b4:03:a0:59:33:8a:68:3b:49:90:c1:d6:76:d4:d3:4f:24:
5f:13:b3:fd:88:5d:a9:c5:ee:f9:49:16:02:22:25:fd:bc:c6:
3b:0a:06:86:21:c4:4f:6a:1e:ac:22:8a:45:7c:43:44:7f:81:
78:77:3c:73:1e:07:9a:07:60:04:50:07:a2:bb:15:25:48:96:
ae:89:2c:a2:61:a0:80:80:d2:7a:1e:cd:a8:8b:19:d6:41:a3:
7b:7d:2d:16:65:ec:c6:31:fb:87:9e:26:70:47:3c:ad:3c:c2:
b3:54:2b:14:11:79:d1:ce:e5:37:b3:d1:7f:bd:4d:cf:a0:ba:
89:c2:86:50:0f:3c:b4:a1:96:18:5a:0f:f2:75:28:84:1f:c2:
5e:b1:25:21:70:04:c8:55:c7:fd:9f:8d:16:55:c2:9e:71:e1:
61:51:93:4d:1e:a5:c0:7e:24:78:f2:45:db:2e:ba:93:de:40:
91:5f:01:db:39:a7:8b:4b:7b:44:37:1d:ca:7f:ef:de:02:ae:
7c:51:f8:d6:53:57:1d:d6:f3:df:59:83:ff:a8:e8:13:c4:5f:
4c:a7:08:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:03:18 2025 by rpki-client