Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/10fce0-ee47-4ed4-a03d-0d4542920bcb/1/mgheBvLiouMEJW-IE1_xPectBzY.mft
File: mgheBvLiouMEJW-IE1_xPectBzY.mft (raw, json)
Hash identifier: ohHsJuGqU9avAQBGLNZvHAqTJBduPDeZ2H+kknLpxOU=
Subject key identifier: E2:3E:A9:62:77:8D:C3:3E:EE:45:37:BE:A5:9E:89:7C:8B:82:9F:A1
Authority key identifier: 9A:08:5E:06:F2:E2:A2:E3:04:25:6F:88:13:5F:F1:3D:E7:2D:07:36
Certificate issuer: /CN=9a085e06f2e2a2e304256f88135ff13de72d0736
Certificate serial: 0198D4A801B4AC32038EF3D709E651F2D26A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mgheBvLiouMEJW-IE1_xPectBzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/10fce0-ee47-4ed4-a03d-0d4542920bcb/1/mgheBvLiouMEJW-IE1_xPectBzY.mft
Manifest number: 0D27
Signing time: Sat 23 Aug 2025 02:00:36 +0000
Manifest this update: Sat 23 Aug 2025 02:00:36 +0000
Manifest next update: Sun 24 Aug 2025 02:00:36 +0000
Files and hashes: 1: 9Dg6tOo6O44yr7jeWe1ba9VjCFs.roa (hash: 26YW4jX+yyct0IS6KpfO0MNuSdKZWiF48vsQnmBErMk=)
2: mgheBvLiouMEJW-IE1_xPectBzY.crl (hash: ZeyqYBwJ1wwVK7RFzeZZfreYdwNLuilmgcm/VgId3VA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/10fce0-ee47-4ed4-a03d-0d4542920bcb/1/mgheBvLiouMEJW-IE1_xPectBzY.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/10fce0-ee47-4ed4-a03d-0d4542920bcb/1/mgheBvLiouMEJW-IE1_xPectBzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/mgheBvLiouMEJW-IE1_xPectBzY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:01:b4:ac:32:03:8e:f3:d7:09:e6:51:f2:d2:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a085e06f2e2a2e304256f88135ff13de72d0736
Validity
Not Before: Aug 23 02:00:36 2025 GMT
Not After : Aug 24 02:00:36 2025 GMT
Subject: CN=e23ea962778dc33eee4537bea59e897c8b829fa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:29:40:2a:b4:f9:27:fe:39:96:f3:51:f0:52:
34:2a:97:e1:a0:22:3d:b6:ae:a6:25:d4:9d:e7:3f:
88:2a:8a:da:3e:53:25:9a:4a:93:82:3c:50:1a:cb:
17:26:26:7f:97:b8:5f:88:a6:b7:d7:c5:f8:b4:be:
ee:58:e6:ad:d6:71:54:3e:88:e9:55:60:0c:91:cb:
3c:04:c7:e0:37:e9:d6:b1:e0:8b:92:f9:5e:49:92:
e1:d8:95:03:29:c6:04:a6:10:cd:d0:92:ae:03:82:
44:ca:53:75:59:de:aa:22:6b:2b:a7:ea:43:62:6a:
4a:f8:d0:ef:33:98:71:46:ed:9f:fc:89:eb:61:fa:
be:4f:87:38:3a:e8:f7:e3:a0:d4:7b:0b:1f:c2:ea:
74:d6:68:05:cf:3b:02:e8:b7:d4:f9:81:3a:7a:64:
f1:c7:b8:6b:51:44:47:b4:95:10:2e:bf:f6:ec:b5:
df:23:cf:8c:67:14:88:df:64:a4:6a:2a:da:c3:55:
de:67:c4:aa:b9:b8:76:aa:38:4f:a7:92:3b:34:38:
3e:28:82:1e:fe:1a:f9:ce:e6:52:50:38:24:37:66:
ab:2a:26:2d:aa:da:d6:4f:77:2b:2b:c9:a6:41:14:
98:84:25:7d:40:0e:c6:d0:ce:ce:36:e1:30:b4:ba:
41:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:3E:A9:62:77:8D:C3:3E:EE:45:37:BE:A5:9E:89:7C:8B:82:9F:A1
X509v3 Authority Key Identifier:
keyid:9A:08:5E:06:F2:E2:A2:E3:04:25:6F:88:13:5F:F1:3D:E7:2D:07:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mgheBvLiouMEJW-IE1_xPectBzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/10fce0-ee47-4ed4-a03d-0d4542920bcb/1/mgheBvLiouMEJW-IE1_xPectBzY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/10fce0-ee47-4ed4-a03d-0d4542920bcb/1/mgheBvLiouMEJW-IE1_xPectBzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:cd:bf:6b:09:88:43:ff:2f:2a:4d:3f:c5:86:58:54:81:b9:
21:84:86:11:63:39:5b:ab:fe:c8:6b:b1:a2:90:c6:38:75:00:
f4:35:08:91:49:93:3a:ba:4c:38:ff:97:1d:f4:28:59:87:82:
02:f2:0e:c5:60:41:da:13:44:44:fa:1f:50:67:c7:aa:cb:e0:
c3:99:ef:38:ab:63:fd:30:1c:8b:65:98:5f:d9:76:44:fb:98:
a1:fd:06:aa:06:2c:72:4a:0f:39:56:36:1a:7d:ca:e6:9b:bf:
52:ea:07:8b:c6:0d:9a:e2:f7:2d:b4:55:43:9a:42:73:40:9d:
13:3f:63:76:24:41:47:2b:17:5c:27:9c:66:c9:ba:1d:ba:30:
b2:22:ec:42:8d:f4:a3:b1:64:f7:e1:0f:38:23:b6:f9:41:24:
2f:c2:37:76:c7:42:ee:a5:f7:bf:32:d1:bd:04:87:14:39:34:
7b:16:57:fc:c7:9f:84:19:00:f4:76:57:cd:9f:cc:cd:14:5b:
eb:e3:4f:57:28:2a:c1:09:1f:12:36:f5:a9:e5:f9:a7:a9:57:
4c:36:a5:50:d7:30:73:79:36:e4:76:06:63:33:a4:96:c8:a8:
19:9a:3e:82:ae:7b:e5:bd:6c:5a:77:89:12:68:07:c3:33:dc:
13:85:46:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:30:59 2025 by rpki-client