Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.mft
File: Mgax0ge2XA69PyP6djABbYe0E0k.mft (raw, json)
Hash identifier: Bfab4Wb3O85UMeWeM8yNoK2dMVA4dsh6lS+ij5N1rC4=
Subject key identifier: 8F:A2:27:82:B2:2C:D6:77:F0:8C:8C:C6:31:A3:F4:23:0C:1A:34:9B
Authority key identifier: 32:06:B1:D2:07:B6:5C:0E:BD:3F:23:FA:76:30:01:6D:87:B4:13:49
Certificate issuer: /CN=3206b1d207b65c0ebd3f23fa7630016d87b41349
Certificate serial: 0196B89160352C08057283B2D224BD810D84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mgax0ge2XA69PyP6djABbYe0E0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.mft
Manifest number: 0550
Signing time: Sat 10 May 2025 05:00:57 +0000
Manifest this update: Sat 10 May 2025 05:00:57 +0000
Manifest next update: Sun 11 May 2025 05:00:57 +0000
Files and hashes: 1: M2KDR8dr7-7ZyhSIDyzwELKYUdM.roa (hash: p4F925/VSgNOhwfLh+ZxgpZFhtfFkVdXlw/7VfsIDVw=)
2: Mgax0ge2XA69PyP6djABbYe0E0k.crl (hash: 10LmbMkcRwqowJVeBSf63wooAAHevWIRTpCqo4M7zSc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mgax0ge2XA69PyP6djABbYe0E0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:91:60:35:2c:08:05:72:83:b2:d2:24:bd:81:0d:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3206b1d207b65c0ebd3f23fa7630016d87b41349
Validity
Not Before: May 10 05:00:57 2025 GMT
Not After : May 11 05:00:57 2025 GMT
Subject: CN=8fa22782b22cd677f08c8cc631a3f4230c1a349b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:34:52:94:20:8b:76:42:f8:6d:74:36:4c:4c:
31:7a:06:78:db:58:d6:8f:9b:30:86:29:e6:d9:9e:
94:21:ce:40:67:8c:1f:42:aa:55:7e:f5:2f:38:e0:
68:fb:b0:d6:f2:34:3a:17:ab:6e:52:7e:3d:a3:f4:
0a:c8:81:cb:45:62:e2:d1:82:8b:c1:df:f9:aa:d4:
58:f6:97:53:19:3a:4e:dd:42:f0:d5:fb:a0:55:d7:
cd:9e:6a:e4:6e:aa:9e:34:e7:c4:75:39:0e:4b:06:
86:66:19:f3:7a:ce:2a:93:9b:1f:30:8c:a7:b0:16:
e5:39:3b:30:4c:6d:c5:b3:f5:1f:79:48:15:9e:55:
da:2b:62:b1:f7:fc:7c:96:ef:15:f3:45:e8:4f:10:
bb:25:04:92:c7:2d:00:01:5d:0b:f8:20:9b:68:42:
fe:66:72:6d:1e:5b:b3:1c:07:19:a7:a5:a1:5d:38:
51:49:74:3c:7b:9e:85:4d:53:58:76:8e:1a:af:a1:
10:18:fd:eb:3d:47:81:3a:c5:d2:0c:45:ab:9b:6a:
62:f4:8a:11:fa:d0:2e:6f:40:fd:f1:b2:93:d2:24:
8d:36:78:f3:d4:fd:9a:6e:13:65:ed:e8:a8:5e:89:
36:54:05:28:84:03:2f:9e:c2:77:45:a5:d1:ff:4a:
62:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:A2:27:82:B2:2C:D6:77:F0:8C:8C:C6:31:A3:F4:23:0C:1A:34:9B
X509v3 Authority Key Identifier:
keyid:32:06:B1:D2:07:B6:5C:0E:BD:3F:23:FA:76:30:01:6D:87:B4:13:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mgax0ge2XA69PyP6djABbYe0E0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:ae:b8:c0:35:19:ea:1b:0d:86:8b:b6:e6:5d:cf:12:a5:77:
fb:57:c1:05:f4:b7:32:60:6b:56:da:ff:0b:cb:67:b7:52:03:
f7:1c:45:da:e8:90:01:5f:f8:9f:cc:89:9c:8d:13:b0:1a:4c:
46:14:06:2a:66:f3:ef:63:b0:0e:79:0b:91:df:28:43:6e:ac:
e6:09:a6:e2:59:35:66:92:a1:df:e0:38:b6:a1:94:e6:29:db:
4c:47:dc:23:b4:6f:08:05:34:c4:fb:0a:2d:5d:4d:0f:92:bf:
0f:1a:bd:6d:79:d2:9f:58:44:c8:fb:a2:f7:79:48:6d:15:45:
3c:61:2a:c9:40:5f:45:98:e0:6c:36:4d:2c:f6:57:77:79:a9:
95:76:53:db:74:12:b5:e6:53:3f:c1:bf:f5:c8:9f:0a:5c:e7:
6e:a5:cd:57:51:27:6e:2b:0c:95:7f:52:a1:85:fd:3d:7b:ad:
ca:11:c6:14:82:5a:53:d2:7c:0f:ce:e0:e5:70:bc:98:81:24:
ff:70:2d:f8:58:85:48:dd:d4:a0:4a:e6:3c:ad:a3:3f:39:02:
ab:80:60:77:fb:ef:8d:2c:9a:cc:0d:6d:de:33:86:0c:12:03:
d5:df:bc:df:cb:e9:ee:1e:b2:54:a1:52:8a:78:2a:69:a2:49:
20:42:4a:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 07:26:25 2025 by rpki-client