Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/40e57e-c627-4b9b-9577-596fa8c0a57a/1/MGKNkjjiPWv0xzWZXJ4t6gBQ8Aw.mft
File: MGKNkjjiPWv0xzWZXJ4t6gBQ8Aw.mft (raw, json)
Hash identifier: CN48D48Pdz7j8SKM+RvhFUaI8QBdkysIbOhf+sx8RPk=
Subject key identifier: FB:7D:DF:FF:14:2C:F4:D4:79:42:8B:D9:12:23:B0:28:2C:E5:FD:97
Authority key identifier: 30:62:8D:92:38:E2:3D:6B:F4:C7:35:99:5C:9E:2D:EA:00:50:F0:0C
Certificate issuer: /CN=30628d9238e23d6bf4c735995c9e2dea0050f00c
Certificate serial: 01987C406837B8A043886DA0820BF02E9F9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MGKNkjjiPWv0xzWZXJ4t6gBQ8Aw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/40e57e-c627-4b9b-9577-596fa8c0a57a/1/MGKNkjjiPWv0xzWZXJ4t6gBQ8Aw.mft
Manifest number: 0681
Signing time: Tue 05 Aug 2025 22:00:52 +0000
Manifest this update: Tue 05 Aug 2025 22:00:52 +0000
Manifest next update: Wed 06 Aug 2025 22:00:52 +0000
Files and hashes: 1: MGKNkjjiPWv0xzWZXJ4t6gBQ8Aw.crl (hash: SWL1tZqMPm5tb4QozMuE5uvaz22OB4gsvnxS2zN65Jw=)
2: gVZpy_aU2P0Pr-2EJHA1HwKJhRU.roa (hash: P5u1LpZGGtQaGv/FeFmSXhXnEGgm7B33JQ+aoyUNOOk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/40e57e-c627-4b9b-9577-596fa8c0a57a/1/MGKNkjjiPWv0xzWZXJ4t6gBQ8Aw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/40e57e-c627-4b9b-9577-596fa8c0a57a/1/MGKNkjjiPWv0xzWZXJ4t6gBQ8Aw.mft
rsync://rpki.ripe.net/repository/DEFAULT/MGKNkjjiPWv0xzWZXJ4t6gBQ8Aw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 17:44:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:40:68:37:b8:a0:43:88:6d:a0:82:0b:f0:2e:9f:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30628d9238e23d6bf4c735995c9e2dea0050f00c
Validity
Not Before: Aug 5 22:00:52 2025 GMT
Not After : Aug 6 22:00:52 2025 GMT
Subject: CN=fb7ddfff142cf4d479428bd91223b0282ce5fd97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:56:0c:4e:b0:81:2a:22:c5:13:59:79:9a:dc:
e4:f6:39:98:41:1f:7f:6a:bb:ca:4e:5a:f4:cc:fb:
6c:7b:bc:4a:76:03:63:43:44:b9:37:2e:62:1e:6e:
fa:56:b1:69:7d:2f:cf:c0:2c:73:21:03:fd:5d:66:
42:fd:28:a2:f7:0a:28:e1:9f:f0:91:39:f7:79:ae:
95:26:d0:0c:98:11:8a:e7:5d:60:33:53:73:56:88:
90:e2:ce:2e:20:ac:07:58:53:3d:a8:f2:3d:f6:62:
50:41:b1:0c:ab:5b:56:80:35:2d:ea:ee:e7:8c:01:
3e:08:7e:52:6a:0c:56:1d:9d:b7:54:62:a9:87:0a:
6d:5a:66:12:03:fa:a0:ff:ed:1c:64:73:0e:68:5e:
34:cd:0b:fa:f6:a3:da:c2:ed:cd:d9:6b:92:1a:ef:
a9:98:58:b9:ee:a2:08:0f:c1:8e:d7:25:ae:cc:43:
a0:e2:ff:8e:44:87:4c:a0:34:2a:98:3d:f5:09:b9:
c2:4f:cc:9a:c6:49:04:b0:96:20:33:52:59:6b:a8:
27:e1:68:f7:ae:8b:e0:63:e3:c5:48:5e:f9:9d:fa:
13:e6:f9:4d:b7:aa:f8:bb:b4:61:55:5b:dd:1f:af:
52:22:13:4f:a4:74:02:d8:e9:f5:bd:d5:c7:c7:e9:
16:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:7D:DF:FF:14:2C:F4:D4:79:42:8B:D9:12:23:B0:28:2C:E5:FD:97
X509v3 Authority Key Identifier:
keyid:30:62:8D:92:38:E2:3D:6B:F4:C7:35:99:5C:9E:2D:EA:00:50:F0:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGKNkjjiPWv0xzWZXJ4t6gBQ8Aw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/40e57e-c627-4b9b-9577-596fa8c0a57a/1/MGKNkjjiPWv0xzWZXJ4t6gBQ8Aw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/40e57e-c627-4b9b-9577-596fa8c0a57a/1/MGKNkjjiPWv0xzWZXJ4t6gBQ8Aw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:53:d7:df:ad:5a:b4:76:2d:a2:06:a2:6b:e7:56:ab:01:37:
cd:ba:c8:42:ab:6a:ff:44:54:66:b5:d0:3f:f8:8b:8f:30:7f:
d6:1a:bb:46:4e:b4:4f:d0:b1:09:dd:f7:c8:a6:03:07:bf:ba:
2d:dc:1d:6c:bc:db:3a:9c:37:65:86:16:a3:c3:b3:d1:4f:98:
2a:98:df:34:4e:75:e8:09:34:74:0a:cf:47:30:6d:8a:0b:f7:
05:1c:8b:f8:3e:ec:21:ab:a7:4a:f1:5e:76:4e:af:cf:d7:4c:
74:97:62:59:6d:1f:47:e6:ef:99:f3:07:17:d4:c2:f0:ce:65:
df:40:5c:d7:36:ca:c7:c8:d6:ef:14:a1:91:2c:fe:81:75:f0:
c9:b6:b0:bd:f5:2e:d9:70:9b:66:e1:27:2d:1d:44:a0:e1:79:
26:c7:6a:0e:34:6e:ca:66:47:99:71:ea:20:80:7c:ce:b1:e8:
ab:6c:79:07:a1:91:8b:3d:8d:a8:d4:7e:4d:60:76:c0:5e:a4:
dc:49:d6:d8:98:7b:b3:f8:5e:0d:a7:0a:9d:d7:91:18:5f:7b:
aa:51:93:71:f0:29:4f:86:c2:ad:9b:83:4e:5c:6b:d6:83:b8:
eb:42:9d:b3:5f:e6:b3:47:71:ce:36:cc:48:3a:39:e7:fd:a7:
b9:2c:d5:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 03:58:41 2025 by rpki-client