Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/5bf797-bc55-48c1-9e92-992825cd3214/1/MgTAPDbIBtaH6D6o0nIM7ru9w0M.mft
File: MgTAPDbIBtaH6D6o0nIM7ru9w0M.mft (raw, json)
Hash identifier: SAt3+hcjy8dktYpAuY0jqH4MkQOoJaOclcWzQFbSwjo=
Subject key identifier: 46:BB:39:D9:AA:10:DC:2C:03:D6:BF:AD:26:5B:4F:A9:C3:2E:7E:14
Authority key identifier: 32:04:C0:3C:36:C8:06:D6:87:E8:3E:A8:D2:72:0C:EE:BB:BD:C3:43
Certificate issuer: /CN=3204c03c36c806d687e83ea8d2720ceebbbdc343
Certificate serial: 0197B6A0782D86C13B11362074790F2221A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MgTAPDbIBtaH6D6o0nIM7ru9w0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/5bf797-bc55-48c1-9e92-992825cd3214/1/MgTAPDbIBtaH6D6o0nIM7ru9w0M.mft
Manifest number: 0598
Signing time: Sat 28 Jun 2025 13:00:59 +0000
Manifest this update: Sat 28 Jun 2025 13:00:59 +0000
Manifest next update: Sun 29 Jun 2025 13:00:59 +0000
Files and hashes: 1: 4iEprq9S0niaPUM7nGF34QiTqwo.roa (hash: f7Epr5pWf6vu+WKqHqf6izv8485TY6ZobKvsLuSbPr4=)
2: MgTAPDbIBtaH6D6o0nIM7ru9w0M.crl (hash: 5sUN4WnFuF+A/2E/XCjkVXwsUDwcFH8IiLOo+ZS2zUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/5bf797-bc55-48c1-9e92-992825cd3214/1/MgTAPDbIBtaH6D6o0nIM7ru9w0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/5bf797-bc55-48c1-9e92-992825cd3214/1/MgTAPDbIBtaH6D6o0nIM7ru9w0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/MgTAPDbIBtaH6D6o0nIM7ru9w0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:78:2d:86:c1:3b:11:36:20:74:79:0f:22:21:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3204c03c36c806d687e83ea8d2720ceebbbdc343
Validity
Not Before: Jun 28 13:00:59 2025 GMT
Not After : Jun 29 13:00:59 2025 GMT
Subject: CN=46bb39d9aa10dc2c03d6bfad265b4fa9c32e7e14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a7:5d:0b:08:d6:ad:91:b2:b3:1c:b2:cd:1e:
82:71:0c:92:6d:18:4f:08:b1:4b:1e:f1:56:5b:db:
eb:47:9b:1c:87:93:9f:83:13:98:2e:e4:72:4e:37:
9b:77:19:fa:31:71:a9:2b:74:c9:b6:bc:65:48:5f:
51:64:1c:a8:e8:27:d0:c2:bc:66:0c:62:97:f4:9a:
b6:20:9d:9a:b2:84:2d:4b:ae:62:c0:3d:e1:59:2f:
06:0b:93:c8:10:24:9d:89:9c:d0:8f:2c:e9:69:d3:
00:a2:d8:64:75:1d:aa:2f:43:59:9c:b9:a7:44:51:
88:72:2f:51:8c:e7:ef:50:fa:b5:69:8c:11:36:75:
ce:e5:c6:bc:9f:ba:9c:1a:9e:45:70:3c:6e:97:60:
55:0f:72:60:8e:6b:6e:2e:de:6d:30:3f:73:79:d1:
56:2f:ee:25:b6:02:d9:5b:ff:93:5b:2a:34:3c:1e:
7e:a9:3a:47:ec:01:3a:d2:36:04:0c:65:27:bb:9f:
72:18:62:fb:8c:5b:b3:c4:4e:b9:2e:97:85:21:d1:
54:dc:a0:2a:7d:99:60:17:f9:15:1c:d9:1a:fa:e7:
c2:57:8e:53:8c:f8:8c:85:50:35:72:17:7d:77:de:
61:cc:03:f0:39:9c:16:d7:71:ba:95:4d:68:24:05:
a0:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:BB:39:D9:AA:10:DC:2C:03:D6:BF:AD:26:5B:4F:A9:C3:2E:7E:14
X509v3 Authority Key Identifier:
keyid:32:04:C0:3C:36:C8:06:D6:87:E8:3E:A8:D2:72:0C:EE:BB:BD:C3:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MgTAPDbIBtaH6D6o0nIM7ru9w0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/5bf797-bc55-48c1-9e92-992825cd3214/1/MgTAPDbIBtaH6D6o0nIM7ru9w0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/5bf797-bc55-48c1-9e92-992825cd3214/1/MgTAPDbIBtaH6D6o0nIM7ru9w0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:5b:66:8f:b7:5e:24:96:14:71:35:28:99:b9:c9:4c:0f:62:
9f:9a:78:8a:7e:74:ad:51:85:e4:6b:dc:c6:09:2c:72:8d:a8:
ba:44:a7:1d:28:0c:f9:9f:a7:e3:86:ef:08:61:a5:29:c8:a5:
1e:79:e6:66:13:43:a2:39:bc:cc:75:d8:7a:d9:23:d5:d7:0d:
cf:d2:60:fe:b4:4a:6b:ca:bc:95:56:ca:fb:af:cd:01:1c:b6:
be:f1:da:5f:f8:35:37:c4:65:c3:c4:8e:8c:46:f8:c7:86:6d:
4f:4a:f5:e0:d1:25:9d:87:dd:ec:52:8d:f7:c8:94:c9:db:01:
1d:c4:9d:4e:29:3e:a4:64:fb:3a:7d:14:60:5a:0c:0f:55:e9:
eb:40:e5:14:e9:e7:ee:8a:7f:fa:30:24:46:10:8b:83:c9:38:
8e:61:39:eb:47:61:20:98:af:3d:05:71:52:66:b2:3f:b9:b6:
f0:d4:cb:0e:0d:1d:85:35:6d:c0:e4:72:6e:64:45:01:92:8e:
99:da:7e:a5:4b:12:a2:ba:79:1d:96:d4:cb:bf:ea:ac:1c:32:
5f:e7:29:b4:6f:bf:9c:85:4b:d8:32:1d:83:b1:17:2f:d9:bf:
1f:62:67:75:0e:e7:30:92:c5:1d:8a:6e:a2:96:08:1d:26:fb:
50:47:b4:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:49:18 2025 by rpki-client