Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/30f34e-e2ad-4b8d-8ce0-011878255ba7/1/MGY7W3BEIyuYmBjRLMkEkCElJN8.mft
File: MGY7W3BEIyuYmBjRLMkEkCElJN8.mft (raw, json)
Hash identifier: iBqJJ2QBgdJaD1CjSPKSds3A/qnMk0fUI4Q0tuqbm7c=
Subject key identifier: EC:6F:E8:C8:C4:D3:BF:EA:E5:5E:20:BB:D3:39:70:36:FF:79:8C:4A
Authority key identifier: 30:66:3B:5B:70:44:23:2B:98:98:18:D1:2C:C9:04:90:21:25:24:DF
Certificate issuer: /CN=30663b5b7044232b989818d12cc90490212524df
Certificate serial: 01976D3D7733915358B4EF329E86A6EBECAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MGY7W3BEIyuYmBjRLMkEkCElJN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/30f34e-e2ad-4b8d-8ce0-011878255ba7/1/MGY7W3BEIyuYmBjRLMkEkCElJN8.mft
Manifest number: A4
Signing time: Sat 14 Jun 2025 07:00:34 +0000
Manifest this update: Sat 14 Jun 2025 07:00:34 +0000
Manifest next update: Sun 15 Jun 2025 07:00:34 +0000
Files and hashes: 1: MGY7W3BEIyuYmBjRLMkEkCElJN8.crl (hash: lPdVla0421mVqyzovWOO5lc3LmrWAlYcgDntK+4iGeE=)
2: jl5BGicOacjnQYcT0f92Ohaidfk.roa (hash: 2+8T//3NgApFzgg77XKjZhpHy2WC3GoSuHjoqbCDjuc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/30f34e-e2ad-4b8d-8ce0-011878255ba7/1/MGY7W3BEIyuYmBjRLMkEkCElJN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/30f34e-e2ad-4b8d-8ce0-011878255ba7/1/MGY7W3BEIyuYmBjRLMkEkCElJN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/MGY7W3BEIyuYmBjRLMkEkCElJN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3d:77:33:91:53:58:b4:ef:32:9e:86:a6:eb:ec:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30663b5b7044232b989818d12cc90490212524df
Validity
Not Before: Jun 14 07:00:34 2025 GMT
Not After : Jun 15 07:00:34 2025 GMT
Subject: CN=ec6fe8c8c4d3bfeae55e20bbd3397036ff798c4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ed:35:c5:93:7c:e6:3c:27:00:4e:35:f1:19:
cd:36:e9:f1:50:95:2a:8c:43:42:68:de:cd:3e:9a:
2f:64:93:93:49:b4:c8:e0:02:13:1d:2e:6f:45:83:
25:07:a9:1a:de:ee:6c:a2:31:75:12:5f:cd:f3:17:
46:19:cc:7a:8e:75:b4:48:b0:2d:88:40:4a:56:68:
2d:1e:94:01:03:2b:85:3c:88:c3:59:04:2c:20:7c:
9c:74:21:6f:00:b5:ee:8c:6c:11:64:13:7a:5e:4b:
86:3e:32:8a:4b:f7:c2:40:69:b2:88:bd:93:d8:8f:
7e:1c:a0:c8:6e:fa:e9:ec:fc:d3:c6:2e:c0:aa:15:
4a:41:6e:94:89:24:6e:bb:dc:b2:08:c9:d8:67:94:
b6:b4:8b:c3:6c:70:a5:ad:90:19:b8:23:73:c9:b3:
15:bd:9a:ad:39:d5:88:2d:d4:98:2c:75:80:ef:5a:
73:e4:b1:f3:6c:90:a9:51:c9:ac:0b:96:10:83:e6:
6d:28:3e:92:cc:57:79:f1:e7:97:64:94:ca:72:f7:
7d:6a:b2:3e:9d:49:cf:93:10:60:1c:30:95:b5:7b:
ee:4c:be:e2:fc:9f:d2:f3:b3:4f:0a:af:35:29:bc:
07:a3:93:d4:0b:bd:20:f4:e5:39:f7:89:c0:98:39:
0e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:6F:E8:C8:C4:D3:BF:EA:E5:5E:20:BB:D3:39:70:36:FF:79:8C:4A
X509v3 Authority Key Identifier:
keyid:30:66:3B:5B:70:44:23:2B:98:98:18:D1:2C:C9:04:90:21:25:24:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGY7W3BEIyuYmBjRLMkEkCElJN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/30f34e-e2ad-4b8d-8ce0-011878255ba7/1/MGY7W3BEIyuYmBjRLMkEkCElJN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/30f34e-e2ad-4b8d-8ce0-011878255ba7/1/MGY7W3BEIyuYmBjRLMkEkCElJN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:ec:0e:40:80:13:da:ad:f1:20:94:c9:7c:9f:3b:32:c7:01:
b0:3f:87:06:f7:8a:f9:13:11:49:e4:e2:34:f9:d1:b0:80:a1:
ab:fe:e9:f7:4a:0c:23:f6:00:f8:b1:4e:36:98:4c:d9:61:a2:
bf:5d:87:e4:a8:89:92:ba:a3:42:33:81:27:61:bf:f0:06:93:
5e:6a:46:ad:fe:1a:13:cc:80:67:e7:17:7d:1c:f3:21:8d:78:
a8:8e:91:e3:46:7e:bb:2a:5d:a1:e7:54:e3:ed:bd:95:ce:e2:
11:ba:3e:de:1f:1a:fd:3a:7a:b6:f6:79:88:5e:88:18:4e:4a:
00:6d:b6:ec:67:83:30:a9:5a:08:b7:8a:47:08:1b:72:d0:44:
68:d2:4b:d0:7c:3f:c6:a6:a2:a9:e8:6a:96:ba:40:11:64:38:
21:f2:29:46:c9:1a:d6:3b:9c:e0:53:93:20:4c:e8:e4:c3:6a:
74:33:e9:b8:d6:a9:4c:0f:b2:a5:93:56:d9:a3:67:36:b5:d4:
f4:25:d4:19:8d:d1:75:34:14:e6:7e:e0:00:27:ef:b0:aa:6b:
9e:0f:fa:72:5f:34:91:16:43:e6:6a:78:48:e2:d4:50:7a:8c:
3c:4c:17:b6:ef:2d:bc:cc:57:f7:93:58:4b:69:57:98:65:6c:
08:00:8d:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:15:22 2025 by rpki-client