Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.mft
File: Mgax0ge2XA69PyP6djABbYe0E0k.mft (raw, json)
Hash identifier: 7vNA6aFDSH9s0MsyzqXqxDEUxeTq7f2B7IG5RejIzyQ=
Subject key identifier: E8:A0:FE:33:31:B8:56:46:AD:28:7F:E8:53:F5:1B:1F:0B:BD:9A:7A
Authority key identifier: 32:06:B1:D2:07:B6:5C:0E:BD:3F:23:FA:76:30:01:6D:87:B4:13:49
Certificate issuer: /CN=3206b1d207b65c0ebd3f23fa7630016d87b41349
Certificate serial: 0198D54DC31EDDDE04D4DF2C538E63F03E13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mgax0ge2XA69PyP6djABbYe0E0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.mft
Manifest number: 0668
Signing time: Sat 23 Aug 2025 05:01:39 +0000
Manifest this update: Sat 23 Aug 2025 05:01:39 +0000
Manifest next update: Sun 24 Aug 2025 05:01:39 +0000
Files and hashes: 1: M2KDR8dr7-7ZyhSIDyzwELKYUdM.roa (hash: p4F925/VSgNOhwfLh+ZxgpZFhtfFkVdXlw/7VfsIDVw=)
2: Mgax0ge2XA69PyP6djABbYe0E0k.crl (hash: xQltyBoVZIRBpStNCYQhC87ZxpcEtIeHFw5+CzK2cAg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mgax0ge2XA69PyP6djABbYe0E0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:c3:1e:dd:de:04:d4:df:2c:53:8e:63:f0:3e:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3206b1d207b65c0ebd3f23fa7630016d87b41349
Validity
Not Before: Aug 23 05:01:39 2025 GMT
Not After : Aug 24 05:01:39 2025 GMT
Subject: CN=e8a0fe3331b85646ad287fe853f51b1f0bbd9a7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:05:4c:5c:70:b4:f9:54:c5:af:0c:13:d9:c2:
b2:bc:b6:1c:dd:5d:7a:ff:15:99:a1:dc:49:80:68:
69:c6:ad:0d:5a:4f:4d:cb:80:b4:3b:17:99:17:7a:
7f:33:d1:54:30:17:05:13:38:44:4c:c7:89:1e:70:
c7:41:59:25:3e:aa:39:92:9a:1f:b1:75:d0:85:d9:
54:c7:5c:42:5a:92:d0:17:5d:13:8a:5f:90:28:8c:
47:aa:17:ef:ce:89:81:8c:ae:ff:c1:33:08:33:db:
e7:3d:b2:8b:07:cb:d8:5c:6f:7d:12:b6:70:c6:b9:
97:49:3c:24:c7:f5:f3:97:a7:e5:2f:0f:55:7b:20:
27:00:2e:30:19:ff:70:a3:c6:26:fa:8c:eb:15:3e:
dc:df:7c:3a:11:15:c0:5b:61:a8:75:8d:a5:e3:4e:
b8:9d:bc:d0:4f:6f:86:22:65:df:54:b0:f4:75:84:
3a:79:7c:3a:5e:05:49:ca:9f:74:0b:70:16:bc:3c:
19:85:1e:43:ce:7f:7b:15:bd:ab:9f:80:33:09:00:
0f:63:59:a1:1f:f4:72:84:47:5c:01:af:0d:4c:02:
9c:4d:e5:21:18:ab:7a:ef:a2:93:fc:e8:0f:4e:a6:
59:40:e4:3b:b3:1f:28:9b:07:35:58:3a:7c:5e:5d:
28:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:A0:FE:33:31:B8:56:46:AD:28:7F:E8:53:F5:1B:1F:0B:BD:9A:7A
X509v3 Authority Key Identifier:
keyid:32:06:B1:D2:07:B6:5C:0E:BD:3F:23:FA:76:30:01:6D:87:B4:13:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mgax0ge2XA69PyP6djABbYe0E0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:f6:04:b5:fd:5b:42:2c:31:e6:13:b4:f1:ac:bf:1f:b4:ea:
b8:92:de:ff:12:53:f3:ae:82:89:26:36:82:c8:f8:2d:34:0b:
9e:b9:27:56:5f:e4:cd:ba:2a:af:eb:a4:29:36:da:02:56:5f:
10:31:02:e1:a3:cc:d6:6c:db:48:de:fc:8e:96:b5:ca:06:9e:
92:98:73:b0:ee:e1:14:b7:02:b0:ba:5d:2f:8d:b6:90:ae:1a:
04:6a:d7:e8:f1:91:89:2f:e7:98:c3:10:ff:d6:91:b4:59:69:
3d:61:af:68:35:57:79:49:b1:55:a3:ac:05:dc:71:bb:e5:be:
d4:f6:d8:a4:bd:12:2a:84:5b:f4:56:fa:df:09:9d:85:94:d8:
46:e1:79:ba:5f:78:d7:ac:20:bd:f2:de:23:ac:bd:91:8e:a5:
f2:dc:55:13:cd:4f:4f:61:4f:d7:8a:9f:2c:91:06:6d:95:dc:
2d:74:5c:98:49:e9:67:bb:c3:f5:6d:09:55:0c:77:46:8e:87:
df:a0:49:d8:bb:0b:92:8c:21:b5:8f:37:a9:8e:79:e7:d0:11:
84:83:69:fa:2c:b9:38:e8:70:95:8d:a0:75:b4:04:65:6e:de:
17:ac:8b:34:df:6b:d6:50:c6:b6:9c:e1:dd:3b:9a:a4:05:5f:
e8:5d:79:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:05:16 2025 by rpki-client