Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/232cfd-76dc-49e9-a94d-5188ea17d9a9/1/MGavc-_zrCH_F6CVL_Nw5gykS10.mft
File: MGavc-_zrCH_F6CVL_Nw5gykS10.mft (raw, json)
Hash identifier: KjYmP6MGu00aq7TJAWl1e4HsAfwt4UOvmzKe7YQ6Wn0=
Subject key identifier: 06:F0:09:99:5F:A9:ED:E7:51:F7:7D:AB:3F:13:2B:85:20:63:DB:4F
Authority key identifier: 30:66:AF:73:EF:F3:AC:21:FF:17:A0:95:2F:F3:70:E6:0C:A4:4B:5D
Certificate issuer: /CN=3066af73eff3ac21ff17a0952ff370e60ca44b5d
Certificate serial: 0198D65F669F8C4579B498AF74F4B809CEFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MGavc-_zrCH_F6CVL_Nw5gykS10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/232cfd-76dc-49e9-a94d-5188ea17d9a9/1/MGavc-_zrCH_F6CVL_Nw5gykS10.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 10:00:33 +0000
Manifest this update: Sat 23 Aug 2025 10:00:33 +0000
Manifest next update: Sun 24 Aug 2025 10:00:33 +0000
Files and hashes: 1: MGavc-_zrCH_F6CVL_Nw5gykS10.crl (hash: Y/9pXGtwJxzxEp2QfzRVM4a99MeHRJtsqaZxdyliHmM=)
2: iic_3MWvnXwRjdS-4rnJnbVlZdw.roa (hash: ft3o3Jhs8krX+yoAKh9srXW+5Ly/fpaA/Ux+H2kgUMA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/232cfd-76dc-49e9-a94d-5188ea17d9a9/1/MGavc-_zrCH_F6CVL_Nw5gykS10.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/232cfd-76dc-49e9-a94d-5188ea17d9a9/1/MGavc-_zrCH_F6CVL_Nw5gykS10.mft
rsync://rpki.ripe.net/repository/DEFAULT/MGavc-_zrCH_F6CVL_Nw5gykS10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:66:9f:8c:45:79:b4:98:af:74:f4:b8:09:ce:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3066af73eff3ac21ff17a0952ff370e60ca44b5d
Validity
Not Before: Aug 23 10:00:33 2025 GMT
Not After : Aug 24 10:00:33 2025 GMT
Subject: CN=06f009995fa9ede751f77dab3f132b852063db4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c0:49:d2:5f:f1:0e:ca:36:3e:29:4b:42:3a:
f9:89:87:66:d5:d7:b8:ac:ae:a0:0a:62:78:ee:f4:
ad:68:72:eb:5f:46:78:d0:a2:ba:53:45:96:e4:c4:
4f:b3:4c:fe:2c:9f:ab:40:85:5e:c1:d4:f1:8b:43:
7a:4d:45:16:7c:8b:a7:99:79:d9:12:d3:58:dd:60:
cf:7f:f7:2d:92:cd:82:f1:55:24:a1:e5:47:3a:86:
13:45:44:3e:6f:b3:8c:d1:1f:4f:21:ac:f2:19:f8:
46:44:ab:ed:9e:ab:ca:e1:f8:9e:0b:76:5c:d3:32:
ec:56:64:d2:a6:3b:66:c8:fb:0f:30:d3:a3:ec:94:
b5:8d:0b:7c:04:03:4e:b1:fc:fd:5c:2e:a9:05:c6:
56:c2:72:eb:76:12:cd:22:d1:49:e3:74:9b:c4:7c:
ad:c5:8d:f6:9d:36:a0:34:8a:ee:7f:ac:f1:04:91:
66:59:eb:38:45:4c:62:c3:94:a7:bb:7f:65:69:02:
5a:c1:02:66:b7:70:2d:a0:8b:aa:9f:ae:e3:b3:05:
6d:82:8e:4c:6e:d9:3c:46:44:bd:92:23:57:db:59:
a6:ec:87:e9:e7:d8:e5:9a:f7:fc:76:5f:56:76:68:
f0:a3:33:ad:e6:63:ba:31:cc:d1:e1:d3:99:12:70:
e4:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:F0:09:99:5F:A9:ED:E7:51:F7:7D:AB:3F:13:2B:85:20:63:DB:4F
X509v3 Authority Key Identifier:
keyid:30:66:AF:73:EF:F3:AC:21:FF:17:A0:95:2F:F3:70:E6:0C:A4:4B:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGavc-_zrCH_F6CVL_Nw5gykS10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/232cfd-76dc-49e9-a94d-5188ea17d9a9/1/MGavc-_zrCH_F6CVL_Nw5gykS10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/232cfd-76dc-49e9-a94d-5188ea17d9a9/1/MGavc-_zrCH_F6CVL_Nw5gykS10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:7b:98:6c:ff:77:24:32:52:4d:0c:0a:f5:14:cd:d3:30:05:
2c:2a:b4:48:7e:f0:2f:c0:b8:7b:b9:fd:53:4d:a8:fa:78:5b:
c6:0a:23:59:e4:6b:ff:9d:2f:5b:cc:81:a5:0b:6d:ab:18:dc:
2f:b5:ee:82:93:bf:29:42:0e:86:04:d6:ec:e8:41:fd:68:69:
f7:ad:c4:6c:63:86:dd:26:ee:3d:16:5f:11:92:3e:8f:e5:0c:
92:cb:24:2f:58:45:76:a4:4f:e5:f3:e9:28:ea:0d:52:ee:dd:
e5:af:7c:ef:65:f9:8d:a6:b4:c9:a0:59:a1:dc:64:d6:09:7f:
b6:ff:4c:23:24:b1:96:e0:a5:aa:8d:60:45:ce:4a:b9:8e:12:
74:99:9e:e5:f6:65:c3:03:85:83:c6:9d:aa:81:71:58:1c:91:
ec:d5:0a:d3:92:8f:fc:33:45:a1:25:46:b6:21:ee:9c:9d:7e:
1d:96:ab:e4:49:6f:68:ee:47:88:e9:f9:41:c8:d8:25:f1:c3:
75:6b:f9:ec:28:85:ed:49:b5:45:11:82:3a:5e:70:8b:29:07:
fa:0d:0c:d9:14:72:ec:ae:47:0f:40:91:74:45:e1:67:3c:8a:
89:fd:98:3a:44:ec:28:0b:e6:b8:6b:09:a2:da:77:80:13:d9:
09:c1:0f:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:59:41 2025 by rpki-client