Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/232cfd-76dc-49e9-a94d-5188ea17d9a9/1/MGavc-_zrCH_F6CVL_Nw5gykS10.mft
File: MGavc-_zrCH_F6CVL_Nw5gykS10.mft (raw, json)
Hash identifier: xD6kqTOMTmlipADcGIvbGSglpUufHVoi1aYo8WpXtfE=
Subject key identifier: 4D:30:C6:95:0F:53:91:2B:96:93:59:28:CB:33:55:5A:63:44:FB:84
Authority key identifier: 30:66:AF:73:EF:F3:AC:21:FF:17:A0:95:2F:F3:70:E6:0C:A4:4B:5D
Certificate issuer: /CN=3066af73eff3ac21ff17a0952ff370e60ca44b5d
Certificate serial: 0196C6F1194311FB01DA8BAEF1EF01CE647A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MGavc-_zrCH_F6CVL_Nw5gykS10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/232cfd-76dc-49e9-a94d-5188ea17d9a9/1/MGavc-_zrCH_F6CVL_Nw5gykS10.mft
Manifest number: 1538
Signing time: Tue 13 May 2025 00:00:11 +0000
Manifest this update: Tue 13 May 2025 00:00:11 +0000
Manifest next update: Wed 14 May 2025 00:00:11 +0000
Files and hashes: 1: MGavc-_zrCH_F6CVL_Nw5gykS10.crl (hash: sVdJabGQu5/2gam98CPvQdlkVKf1dscXGJA5Xjwh08Q=)
2: iic_3MWvnXwRjdS-4rnJnbVlZdw.roa (hash: ft3o3Jhs8krX+yoAKh9srXW+5Ly/fpaA/Ux+H2kgUMA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/232cfd-76dc-49e9-a94d-5188ea17d9a9/1/MGavc-_zrCH_F6CVL_Nw5gykS10.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/232cfd-76dc-49e9-a94d-5188ea17d9a9/1/MGavc-_zrCH_F6CVL_Nw5gykS10.mft
rsync://rpki.ripe.net/repository/DEFAULT/MGavc-_zrCH_F6CVL_Nw5gykS10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c6:f1:19:43:11:fb:01:da:8b:ae:f1:ef:01:ce:64:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3066af73eff3ac21ff17a0952ff370e60ca44b5d
Validity
Not Before: May 13 00:00:11 2025 GMT
Not After : May 14 00:00:11 2025 GMT
Subject: CN=4d30c6950f53912b96935928cb33555a6344fb84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:32:9a:da:82:ab:0e:99:34:ff:e7:b5:bc:9b:
62:22:c8:04:45:b9:ac:28:96:b7:b7:4d:1b:c1:4a:
18:02:4a:16:07:3a:70:68:2e:ce:56:73:c1:21:f9:
e6:e5:e7:74:97:f9:46:d0:7d:f1:d1:97:bb:ed:b1:
cb:a3:40:d3:de:84:12:ef:36:3f:dd:1f:9d:4a:a8:
c6:19:f9:1d:56:f2:d6:6b:3f:b7:0d:f9:e9:7e:16:
7f:3f:c2:ad:bc:11:2e:46:2b:b7:a0:03:2f:6b:52:
b6:1e:14:ef:40:d2:28:0b:f5:66:17:13:2d:6a:21:
29:6c:57:1b:c1:d2:a9:f5:a7:4f:fd:0a:5b:1e:84:
2e:ba:df:bb:43:5a:1c:36:39:77:3b:11:fd:75:9b:
4f:67:74:36:5d:b9:88:c2:89:26:f8:67:bd:91:f6:
a0:d2:02:95:64:14:d8:0b:20:fa:6e:d7:a3:c5:e6:
83:9e:b6:01:af:aa:73:cb:f1:5b:25:a5:cf:56:57:
10:d5:10:df:16:31:eb:98:25:3b:e1:15:64:ca:5c:
0d:b2:6e:1a:01:1a:08:4a:19:0b:a9:00:44:b4:9b:
45:65:7d:30:05:08:b7:12:5b:ef:cf:76:4b:f2:a1:
bf:a3:4d:71:96:60:d9:89:da:ba:09:74:8d:88:68:
98:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:30:C6:95:0F:53:91:2B:96:93:59:28:CB:33:55:5A:63:44:FB:84
X509v3 Authority Key Identifier:
keyid:30:66:AF:73:EF:F3:AC:21:FF:17:A0:95:2F:F3:70:E6:0C:A4:4B:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGavc-_zrCH_F6CVL_Nw5gykS10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/232cfd-76dc-49e9-a94d-5188ea17d9a9/1/MGavc-_zrCH_F6CVL_Nw5gykS10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/232cfd-76dc-49e9-a94d-5188ea17d9a9/1/MGavc-_zrCH_F6CVL_Nw5gykS10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:71:1e:25:f2:5f:91:ee:66:ff:8f:1d:ca:90:e1:41:bb:cd:
01:7d:8b:76:8a:cb:6c:4f:38:3c:35:a0:a0:3f:48:05:95:22:
22:b2:9c:72:fc:70:16:5b:81:4e:11:39:61:15:6a:c4:f4:08:
41:da:cf:4f:71:97:c9:ee:45:da:2b:45:94:9d:dd:0c:e8:61:
b1:b9:ae:d7:61:5c:26:0c:0a:6a:56:87:a5:16:79:bd:74:f0:
43:1f:ce:d7:3c:fc:85:85:12:47:27:41:90:ab:f2:8a:e2:31:
9b:b6:95:fc:c2:20:2c:69:5b:ec:de:ac:30:93:a0:29:e2:ad:
e5:0b:78:08:a6:cd:e2:50:0f:42:2b:e8:9d:5a:dc:5a:3b:be:
8a:87:8d:5a:19:c7:bb:5d:52:6e:3b:77:74:24:0c:b3:e3:e1:
d8:0f:e8:e6:08:ed:6f:ba:2b:1b:33:41:cb:01:49:52:93:de:
1b:f3:56:22:72:d8:3d:60:e3:6b:94:45:5f:a2:70:f6:d4:84:
e3:16:5d:4c:a7:8c:75:96:3b:46:a2:5d:f3:33:ff:05:06:29:
e9:cf:0a:f5:11:14:b1:56:46:dd:60:75:3f:e3:17:4d:f0:b5:
a5:3c:5d:8f:f7:3d:50:1a:87:71:70:c6:2a:2f:68:23:00:ef:
59:77:8b:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 09:42:42 2025 by rpki-client