
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/3d2031-f4a1-437a-9a7e-97c4bbaf4676/1/MJAbMGF-hmq8nOULrb6IRl048Dc.mft
File: MJAbMGF-hmq8nOULrb6IRl048Dc.mft (raw, json)
Hash identifier: pbyHAcV1Gfz0mwvwd0e9CzsnIkpFwyKJRow9jULCdoQ=
Subject key identifier: AB:C1:EB:F7:34:9F:52:AE:CC:EC:8A:6A:C8:6B:D6:E9:60:9A:6D:C1
Authority key identifier: 30:90:1B:30:61:7E:86:6A:BC:9C:E5:0B:AD:BE:88:46:5D:38:F0:37
Certificate issuer: /CN=30901b30617e866abc9ce50badbe88465d38f037
Certificate serial: 01976929D100BF067FB22EF7E2534BF628C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MJAbMGF-hmq8nOULrb6IRl048Dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/3d2031-f4a1-437a-9a7e-97c4bbaf4676/1/MJAbMGF-hmq8nOULrb6IRl048Dc.mft
Manifest number: 042C
Signing time: Fri 13 Jun 2025 12:00:37 +0000
Manifest this update: Fri 13 Jun 2025 12:00:37 +0000
Manifest next update: Sat 14 Jun 2025 12:00:37 +0000
Files and hashes: 1: 2qX7OdgapT1BAlqvcn-h20H3SjY.roa (hash: mYdYSfl5U26j0DpruXdVtTOn2QH2B7ImuHJ/Oabup60=)
2: MJAbMGF-hmq8nOULrb6IRl048Dc.crl (hash: 7cfiG1HEMuEdTNDBmzx4qohuUujt94Cq4vhPBETSCoE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/3d2031-f4a1-437a-9a7e-97c4bbaf4676/1/MJAbMGF-hmq8nOULrb6IRl048Dc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/3d2031-f4a1-437a-9a7e-97c4bbaf4676/1/MJAbMGF-hmq8nOULrb6IRl048Dc.mft
rsync://rpki.ripe.net/repository/DEFAULT/MJAbMGF-hmq8nOULrb6IRl048Dc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 12:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:29:d1:00:bf:06:7f:b2:2e:f7:e2:53:4b:f6:28:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30901b30617e866abc9ce50badbe88465d38f037
Validity
Not Before: Jun 13 12:00:37 2025 GMT
Not After : Jun 14 12:00:37 2025 GMT
Subject: CN=abc1ebf7349f52aeccec8a6ac86bd6e9609a6dc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:5e:0e:86:c8:b1:79:e0:d8:be:18:fb:28:65:
c5:f7:9f:6d:8d:7f:6c:ad:1b:fe:4e:7a:a9:ee:55:
2b:49:d8:64:74:f5:af:21:d1:12:dd:1d:63:c7:24:
7c:66:0c:17:9c:94:d3:36:a4:4a:51:83:7d:3a:06:
40:0e:9b:5d:66:4b:fe:4b:72:f3:f3:d5:52:c9:09:
69:1f:60:96:4e:83:87:83:1f:d4:22:f6:08:d2:8a:
31:1f:c4:6a:59:9a:40:cc:9d:84:c3:b9:5f:eb:05:
c4:b6:d2:01:0a:9e:ec:27:c3:96:81:fd:60:ae:a2:
e5:a9:6d:fa:6c:b4:2e:81:3b:1f:27:36:67:3f:14:
ae:b0:53:7b:7e:c3:96:28:46:57:49:07:1c:fa:26:
51:05:90:43:93:b5:0b:0a:fa:4e:ae:4d:ea:46:b9:
94:c8:fa:a2:cd:2b:40:23:f8:a8:ec:f5:4c:ee:db:
2c:99:5d:b3:fe:cb:60:52:7f:7f:77:20:71:0c:a9:
25:47:17:6e:44:88:c7:fc:94:f2:b5:1f:6c:32:32:
0b:74:37:4d:bf:c7:fd:58:8c:01:8f:22:35:04:f2:
21:ad:59:43:74:e0:81:5d:5b:67:da:9d:f7:c4:6f:
90:1a:0b:fb:2b:71:2e:1b:9c:8c:83:41:49:0c:82:
3a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:C1:EB:F7:34:9F:52:AE:CC:EC:8A:6A:C8:6B:D6:E9:60:9A:6D:C1
X509v3 Authority Key Identifier:
keyid:30:90:1B:30:61:7E:86:6A:BC:9C:E5:0B:AD:BE:88:46:5D:38:F0:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MJAbMGF-hmq8nOULrb6IRl048Dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/3d2031-f4a1-437a-9a7e-97c4bbaf4676/1/MJAbMGF-hmq8nOULrb6IRl048Dc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/3d2031-f4a1-437a-9a7e-97c4bbaf4676/1/MJAbMGF-hmq8nOULrb6IRl048Dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:e1:eb:65:3a:f3:ac:82:78:13:af:84:0a:06:8c:7a:98:79:
45:a3:dd:69:e6:fc:27:ef:bb:47:e4:a0:2a:9d:aa:a0:8a:06:
2a:91:3e:6e:81:d3:39:6c:f6:cb:62:81:1f:55:20:cd:a3:53:
2d:53:8d:08:65:23:a8:e6:75:9a:d2:42:bc:1f:d4:a0:13:7b:
52:8b:c6:1c:9b:90:0a:42:cf:e9:27:cc:0f:27:a2:4c:79:49:
5d:37:11:ec:aa:e9:21:05:10:29:53:93:51:52:24:46:d3:3d:
e2:46:a3:54:63:7c:2f:d6:14:e9:b6:6c:2f:26:91:90:1e:1b:
6a:fd:36:f9:24:f3:8f:7d:8f:57:a2:6f:41:1c:f8:ea:14:3a:
05:3b:7a:1d:27:8f:f4:cc:b4:0d:26:87:9f:84:2f:ab:a4:86:
e8:15:93:1f:3a:3b:66:f1:c7:60:01:cd:70:0c:a7:1f:77:5c:
1d:52:19:c5:90:fd:97:42:14:3e:85:59:d7:44:df:72:bd:e0:
13:a6:9c:84:d5:56:e0:b2:d5:20:68:60:23:8e:49:ff:a0:82:
5d:33:41:a6:1d:b0:60:78:ef:f4:f5:28:a4:0d:07:ae:21:cd:
1f:0c:8b:48:e3:77:63:ee:be:27:e2:7b:d4:1b:e8:e5:13:70:
10:a8:7a:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:14:51 2025 by rpki-client