Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/01f6ed-7b86-4f76-828f-4e19239f0c35/1/MGg8_6Bh8oqeETXJ_DA3amR0y_Q.mft
File: MGg8_6Bh8oqeETXJ_DA3amR0y_Q.mft (raw, json)
Hash identifier: PAHnZuMImfZuqTwnHN3xy2cNLJhFC6RbMJglNtRnS8g=
Subject key identifier: 59:29:DC:31:F1:A6:7D:C8:83:34:2C:45:29:36:22:A0:46:5E:A6:BE
Authority key identifier: 30:68:3C:FF:A0:61:F2:8A:9E:11:35:C9:FC:30:37:6A:64:74:CB:F4
Certificate issuer: /CN=30683cffa061f28a9e1135c9fc30376a6474cbf4
Certificate serial: 0197B8212CD7D4DC68C2C7E242442A8871DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MGg8_6Bh8oqeETXJ_DA3amR0y_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/01f6ed-7b86-4f76-828f-4e19239f0c35/1/MGg8_6Bh8oqeETXJ_DA3amR0y_Q.mft
Manifest number: 142A
Signing time: Sat 28 Jun 2025 20:01:11 +0000
Manifest this update: Sat 28 Jun 2025 20:01:11 +0000
Manifest next update: Sun 29 Jun 2025 20:01:11 +0000
Files and hashes: 1: 2B-FwUEQx6Nr4Ray6DAMUlw7Mv8.roa (hash: BBGC/ULum47ycUnwMz9z0fK4GgKW3TWVfbzBiHksvmc=)
2: GtTmoRT7XNVXBnXOsHZVf63eiDE.roa (hash: D+k5RJe28ejPSPya6Jjm6aV5eby1Bwyad8Nl2+QCWeE=)
3: MGg8_6Bh8oqeETXJ_DA3amR0y_Q.crl (hash: kOXiUbdhVv4HFPZJQ8n7ptBftvJsxvisqXYkey11DVY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/01f6ed-7b86-4f76-828f-4e19239f0c35/1/MGg8_6Bh8oqeETXJ_DA3amR0y_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/01f6ed-7b86-4f76-828f-4e19239f0c35/1/MGg8_6Bh8oqeETXJ_DA3amR0y_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/MGg8_6Bh8oqeETXJ_DA3amR0y_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:2c:d7:d4:dc:68:c2:c7:e2:42:44:2a:88:71:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30683cffa061f28a9e1135c9fc30376a6474cbf4
Validity
Not Before: Jun 28 20:01:11 2025 GMT
Not After : Jun 29 20:01:11 2025 GMT
Subject: CN=5929dc31f1a67dc883342c45293622a0465ea6be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:86:9f:0b:26:b3:64:09:e1:09:59:b4:1f:30:
5c:07:28:db:18:eb:3a:97:bf:d4:36:49:56:a5:d1:
e8:5c:54:12:6e:2d:c2:1d:ff:4f:6d:9a:3d:d8:c7:
79:9d:7a:f3:55:ce:b4:ba:17:58:0b:97:30:d1:f5:
66:44:07:81:20:6a:65:55:20:e9:4e:97:45:87:4e:
99:02:eb:db:6d:a6:fe:f9:12:29:a3:95:be:3a:a4:
0a:7e:ce:f1:f5:4e:2f:78:55:3e:4b:05:97:db:b1:
5f:18:06:54:cd:85:6d:7d:09:36:2e:57:e2:81:c4:
06:5c:ba:3b:f5:91:8d:ef:42:b2:e6:e9:58:fa:34:
fc:9a:9d:ee:57:ab:41:f7:de:4e:b0:25:71:c0:4d:
be:fc:fe:42:3a:e1:be:0d:d8:7b:f0:d7:c9:ef:f6:
d1:62:ff:0c:ca:81:8f:6f:b6:39:a3:73:44:eb:e1:
a9:c1:8e:28:03:ea:31:ce:ee:6e:2f:b9:d7:c0:f4:
09:e9:a5:9a:f2:04:21:66:57:00:08:b0:e3:f1:d5:
96:2f:62:42:33:af:fb:ea:60:83:d8:39:98:33:10:
80:fa:66:8a:e4:5b:20:53:00:93:d6:c2:99:4e:64:
81:4c:ec:6b:d8:c6:0a:a5:61:97:86:9a:98:0c:02:
de:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:29:DC:31:F1:A6:7D:C8:83:34:2C:45:29:36:22:A0:46:5E:A6:BE
X509v3 Authority Key Identifier:
keyid:30:68:3C:FF:A0:61:F2:8A:9E:11:35:C9:FC:30:37:6A:64:74:CB:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGg8_6Bh8oqeETXJ_DA3amR0y_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/01f6ed-7b86-4f76-828f-4e19239f0c35/1/MGg8_6Bh8oqeETXJ_DA3amR0y_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/01f6ed-7b86-4f76-828f-4e19239f0c35/1/MGg8_6Bh8oqeETXJ_DA3amR0y_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:85:28:3e:4b:de:91:c9:a1:6a:33:60:f5:0a:a4:94:59:b5:
06:69:91:1d:dc:cf:b6:80:8e:0e:74:bb:8a:b0:03:6d:19:bd:
a9:be:c5:53:45:39:bf:9b:7b:37:79:20:e2:73:71:80:41:4d:
4c:32:f0:cc:1f:97:d0:59:e3:ff:82:9e:89:bb:0d:38:50:79:
ac:0e:4d:4d:e5:e2:0e:51:ea:d0:85:83:07:d4:28:c2:7d:20:
5a:30:3f:73:bc:16:2e:2e:5a:fe:d0:65:d6:6e:43:a0:2d:97:
20:c3:f0:88:41:84:97:d1:a5:f9:f6:24:94:79:27:38:57:5b:
db:f6:36:4b:c2:29:8a:de:f5:97:eb:2d:76:f4:dd:0b:79:70:
9f:23:9b:8e:d5:8e:4e:74:26:17:f3:d4:fa:fd:c1:a1:42:a1:
1c:5b:fa:02:9f:27:0f:04:d3:d8:7b:68:69:23:e1:2f:94:1a:
aa:3c:a3:d8:af:29:d4:ad:d6:a3:ee:b0:6a:e2:02:29:43:2f:
c1:cc:ed:a9:34:1c:3e:e0:87:a9:44:6f:0e:17:cd:db:b6:81:
bd:a5:7c:e4:c1:5b:39:27:f5:b2:fc:af:6a:76:6a:71:c2:10:
02:65:28:0c:f3:2c:54:9c:19:a1:4e:4a:17:74:31:21:30:65:
6c:d8:02:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:43:33 2025 by rpki-client