Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.mft
File: MG1hg1W9iTf3W7RlC7XBr3D5oS4.mft (raw, json)
Hash identifier: ZzYHSqINZwYnmC3E8bVR1xFHQmXU8oOkwy7WA+B+Xzs=
Subject key identifier: 7E:04:AF:26:71:52:57:3A:65:D1:2A:21:9A:E6:0A:15:E3:F6:01:C7
Authority key identifier: 30:6D:61:83:55:BD:89:37:F7:5B:B4:65:0B:B5:C1:AF:70:F9:A1:2E
Certificate issuer: /CN=306d618355bd8937f75bb4650bb5c1af70f9a12e
Certificate serial: 0197B6A1EDB97101FD7DD5CE2F3841B438BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MG1hg1W9iTf3W7RlC7XBr3D5oS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.mft
Manifest number: 1153
Signing time: Sat 28 Jun 2025 13:02:34 +0000
Manifest this update: Sat 28 Jun 2025 13:02:34 +0000
Manifest next update: Sun 29 Jun 2025 13:02:34 +0000
Files and hashes: 1: 3jZVmIYXRpFGaUpKFxmxg6yk0v4.roa (hash: DxwsnC6ETAvm52TcakM8AMF0oIdLtUXLvOU8uNsDQAw=)
2: MG1hg1W9iTf3W7RlC7XBr3D5oS4.crl (hash: q87LfzC+MZ3JOuwTfjwUKMIO0MdPXlHv16pjaT/eybQ=)
3: OhFs8ELf0BkBqUqSta-UtJTxxOY.roa (hash: eORqJrZ4eHwt+ZtqWQMblZ7ybIDSjazTPoe3DTl1tC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/MG1hg1W9iTf3W7RlC7XBr3D5oS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:ed:b9:71:01:fd:7d:d5:ce:2f:38:41:b4:38:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=306d618355bd8937f75bb4650bb5c1af70f9a12e
Validity
Not Before: Jun 28 13:02:34 2025 GMT
Not After : Jun 29 13:02:34 2025 GMT
Subject: CN=7e04af267152573a65d12a219ae60a15e3f601c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:2f:8e:32:ed:0e:8e:4f:c0:fb:ec:23:2b:d4:
df:cc:30:ad:10:40:1c:94:33:9b:e4:37:69:79:80:
7f:92:53:76:a2:d4:12:00:bc:27:39:d0:c0:a0:2d:
72:b9:8c:cb:75:1d:b7:bf:1b:23:c8:83:5e:0d:5d:
3d:52:2b:17:0f:09:6f:ae:f2:e5:28:5a:5d:ef:e3:
be:36:93:1f:9e:6c:1d:c3:aa:e0:0e:e3:8c:ae:b3:
c3:1b:fd:59:87:70:d3:62:e9:87:fd:32:e5:f0:26:
f0:7a:e8:09:5d:8d:9e:a0:c0:20:b0:20:e2:0e:df:
57:c5:23:4d:bc:3a:f4:0d:f1:67:f2:bf:ea:ad:71:
fa:c3:46:07:b6:2d:0f:cc:16:80:6e:72:5f:44:75:
f2:88:f3:5a:7d:4d:dd:c3:23:1c:29:0a:b6:a7:7a:
b8:70:4e:30:fe:f0:56:74:c3:96:77:e1:7a:b1:f0:
c6:d0:50:42:c3:db:69:81:40:fb:ea:1c:66:71:cb:
c0:91:c9:17:ad:1d:0a:b7:de:00:78:0a:28:df:f4:
ce:07:33:ad:3e:3b:37:52:a2:89:52:ad:66:ec:3c:
83:34:05:9a:f8:f0:e2:2d:ec:ac:8b:26:f6:e0:c5:
6f:c9:48:a9:16:24:75:88:86:3a:d7:e2:e7:40:fd:
0f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:04:AF:26:71:52:57:3A:65:D1:2A:21:9A:E6:0A:15:E3:F6:01:C7
X509v3 Authority Key Identifier:
keyid:30:6D:61:83:55:BD:89:37:F7:5B:B4:65:0B:B5:C1:AF:70:F9:A1:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MG1hg1W9iTf3W7RlC7XBr3D5oS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:6b:fd:4b:bc:16:d0:4f:24:36:dc:a1:1b:75:a5:4b:ae:5f:
61:93:98:5d:5d:33:ad:4f:93:b8:19:51:c0:c2:b6:c0:0e:27:
4e:48:7d:eb:3e:ed:8a:cd:15:12:aa:15:89:cd:e0:6d:5e:39:
aa:0e:d8:7d:2d:43:dc:75:f7:74:80:5a:9c:98:04:76:b6:8b:
0a:1b:34:14:d7:bc:66:ba:40:f9:c2:10:cd:ad:45:93:9c:a7:
0e:39:27:64:8a:2d:9a:b6:f7:78:d3:a5:ee:1e:4e:03:7d:84:
75:1b:59:9d:bb:ef:b5:15:e0:f6:e9:18:56:d3:51:0d:4f:43:
92:0a:5b:3f:53:f3:50:02:65:55:6a:35:58:a4:a6:ce:cd:72:
84:a0:35:1b:d1:7a:7e:fd:09:2d:8d:a1:0e:29:46:77:1d:f6:
40:42:a2:e0:ee:ba:e4:55:d7:79:45:8a:04:fd:44:d3:32:d8:
38:24:a4:d7:69:6f:23:2a:7b:cb:1a:f4:b1:8b:56:a4:1a:7f:
fe:ec:7d:01:04:35:76:74:b0:54:9b:7a:73:fe:a8:39:b4:74:
37:24:0b:40:1b:96:be:d4:71:58:59:40:cf:93:75:2a:49:3b:
78:c3:93:f2:2b:9e:34:29:a0:e8:4d:74:82:89:8c:15:ab:5e:
78:55:32:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:30:07 2025 by rpki-client