Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/232cfd-76dc-49e9-a94d-5188ea17d9a9/1/MGavc-_zrCH_F6CVL_Nw5gykS10.mft
File: MGavc-_zrCH_F6CVL_Nw5gykS10.mft (raw, json)
Hash identifier: 1XJlEP2MDrjk66P8OYw/T2jyJm0h37QAtHaFMf5vzJA=
Subject key identifier: AA:53:68:F8:C6:12:7E:46:9A:A4:21:4F:A4:9C:66:67:C7:FC:34:FC
Authority key identifier: 30:66:AF:73:EF:F3:AC:21:FF:17:A0:95:2F:F3:70:E6:0C:A4:4B:5D
Certificate issuer: /CN=3066af73eff3ac21ff17a0952ff370e60ca44b5d
Certificate serial: 0197B6A1CB7CE0C2AF1CD46BD5B0206BEB96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MGavc-_zrCH_F6CVL_Nw5gykS10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/232cfd-76dc-49e9-a94d-5188ea17d9a9/1/MGavc-_zrCH_F6CVL_Nw5gykS10.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 13:02:26 +0000
Manifest this update: Sat 28 Jun 2025 13:02:26 +0000
Manifest next update: Sun 29 Jun 2025 13:02:26 +0000
Files and hashes: 1: MGavc-_zrCH_F6CVL_Nw5gykS10.crl (hash: vh1xlSK8qY2i9ekNsWOT3Ip0II69UiII29FRxIxYjkE=)
2: iic_3MWvnXwRjdS-4rnJnbVlZdw.roa (hash: ft3o3Jhs8krX+yoAKh9srXW+5Ly/fpaA/Ux+H2kgUMA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/232cfd-76dc-49e9-a94d-5188ea17d9a9/1/MGavc-_zrCH_F6CVL_Nw5gykS10.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/232cfd-76dc-49e9-a94d-5188ea17d9a9/1/MGavc-_zrCH_F6CVL_Nw5gykS10.mft
rsync://rpki.ripe.net/repository/DEFAULT/MGavc-_zrCH_F6CVL_Nw5gykS10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:cb:7c:e0:c2:af:1c:d4:6b:d5:b0:20:6b:eb:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3066af73eff3ac21ff17a0952ff370e60ca44b5d
Validity
Not Before: Jun 28 13:02:26 2025 GMT
Not After : Jun 29 13:02:26 2025 GMT
Subject: CN=aa5368f8c6127e469aa4214fa49c6667c7fc34fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:11:b6:c0:85:d7:cb:e6:ad:7e:91:91:ab:8f:
46:5c:2d:e1:13:52:b2:d3:c8:e5:7f:fc:d6:15:c1:
64:50:f2:7d:74:0e:94:24:71:d2:ff:a9:15:ce:71:
69:09:77:9d:07:6d:17:1a:33:69:4e:25:9c:5f:3c:
3e:98:57:2a:68:70:51:87:5f:eb:51:d3:18:cf:3f:
83:a9:e8:c1:49:23:fe:c7:88:88:9b:57:4a:48:3e:
c9:21:31:0f:fa:5e:3f:ce:53:9c:84:1a:82:cb:f2:
26:02:5c:cf:61:d1:d5:46:6d:26:81:3b:f8:ce:e2:
b4:1a:f9:9d:98:35:58:e9:db:46:fb:f8:f2:e8:a3:
71:8e:d0:e0:03:22:35:de:e6:4a:2e:92:e0:b7:c5:
83:02:44:c3:97:1e:2e:8a:a1:55:5e:f6:09:b8:53:
f7:41:59:35:74:c3:16:af:5d:e7:20:9a:7b:2c:ff:
04:b9:93:62:30:be:a0:ca:ba:6e:2e:5d:61:aa:4e:
98:19:1f:ee:60:65:e8:57:79:c1:90:73:4b:db:f8:
a1:d8:3d:39:c0:c3:ed:96:50:04:ef:e9:ff:a3:56:
68:2f:79:f5:2e:63:fc:1b:ad:4b:0a:f8:cc:fd:24:
2f:59:c4:0a:97:ec:95:06:61:48:2e:6b:e1:eb:80:
1a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:53:68:F8:C6:12:7E:46:9A:A4:21:4F:A4:9C:66:67:C7:FC:34:FC
X509v3 Authority Key Identifier:
keyid:30:66:AF:73:EF:F3:AC:21:FF:17:A0:95:2F:F3:70:E6:0C:A4:4B:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGavc-_zrCH_F6CVL_Nw5gykS10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/232cfd-76dc-49e9-a94d-5188ea17d9a9/1/MGavc-_zrCH_F6CVL_Nw5gykS10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/232cfd-76dc-49e9-a94d-5188ea17d9a9/1/MGavc-_zrCH_F6CVL_Nw5gykS10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:23:32:c2:15:12:49:7b:5a:98:16:70:35:6c:d6:f6:2e:17:
12:cc:e2:69:1b:c0:06:87:1b:d4:59:8e:a3:d4:86:9e:24:1b:
db:2e:7b:5a:3a:c2:b9:6a:cc:f8:b2:dc:12:ab:e2:c6:92:99:
0e:cd:85:e4:0e:39:55:12:b4:71:d4:63:1b:ec:ac:33:23:da:
1a:de:22:f5:a5:c4:bd:f3:8a:dc:93:96:87:42:69:1a:fe:8f:
9e:e5:b2:f6:a8:29:6a:6c:40:2e:96:e7:9d:2f:5d:c5:ae:64:
b2:7e:1b:61:38:1e:32:21:8a:3d:8b:97:b8:3e:8a:06:c0:e1:
65:68:5c:54:f1:64:5a:0a:77:ee:be:87:f0:58:22:90:42:28:
52:be:53:e2:23:8e:e7:6e:4f:3f:31:e7:df:a8:8c:ce:51:86:
bb:fd:cf:4f:50:b8:d2:af:06:c7:4e:61:63:e5:c0:79:71:46:
c6:af:0d:a1:bf:1e:06:88:66:40:52:bd:4e:dd:62:18:ff:0d:
8a:29:cb:ff:1c:32:8d:6a:13:d6:07:05:5d:fe:58:13:55:83:
d1:3b:cf:ac:44:0b:31:6b:a1:63:32:61:b1:52:d6:bd:f6:29:
0b:aa:1e:67:b0:db:8c:2a:b3:07:ec:f5:9b:b6:58:31:3e:60:
b8:6e:e0:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oct84MKvHNRr1bAga+uWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwNjZhZjczZWZmM2FjMjFmZjE3YTA5NTJmZjM3MGU2MGNh
NDRiNWQwHhcNMjUwNjI4MTMwMjI2WhcNMjUwNjI5MTMwMjI2WjAzMTEwLwYDVQQD
EyhhYTUzNjhmOGM2MTI3ZTQ2OWFhNDIxNGZhNDljNjY2N2M3ZmMzNGZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArhG2wIXXy+atfpGRq49GXC3hE1Ky
08jlf/zWFcFkUPJ9dA6UJHHS/6kVznFpCXedB20XGjNpTiWcXzw+mFcqaHBRh1/r
UdMYzz+DqejBSSP+x4iIm1dKSD7JITEP+l4/zlOchBqCy/ImAlzPYdHVRm0mgTv4
zuK0GvmdmDVY6dtG+/jy6KNxjtDgAyI13uZKLpLgt8WDAkTDlx4uiqFVXvYJuFP3
QVk1dMMWr13nIJp7LP8EuZNiML6gyrpuLl1hqk6YGR/uYGXoV3nBkHNL2/ih2D05
wMPtllAE7+n/o1ZoL3n1LmP8G61LCvjM/SQvWcQKl+yVBmFILmvh64AaRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKpTaPjGEn5GmqQhT6ScZmfH/DT8MB8GA1UdIwQY
MBaAFDBmr3Pv86wh/xeglS/zcOYMpEtdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUdhdmMtX3pyQ0hfRjZDVkxfTnc1Z3lrUzEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8yMzJjZmQtNzZkYy00OWU5LWE5NGQt
NTE4OGVhMTdkOWE5LzEvTUdhdmMtX3pyQ0hfRjZDVkxfTnc1Z3lrUzEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC8yMzJjZmQtNzZkYy00OWU5LWE5NGQtNTE4OGVhMTdkOWE5
LzEvTUdhdmMtX3pyQ0hfRjZDVkxfTnc1Z3lrUzEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQSMywhUS
SXtamBZwNWzW9i4XEsziaRvABocb1FmOo9SGniQb2y57WjrCuWrM+LLcEqvixpKZ
Ds2F5A45VRK0cdRjG+ysMyPaGt4i9aXEvfOK3JOWh0JpGv6PnuWy9qgpamxALpbn
nS9dxa5ksn4bYTgeMiGKPYuXuD6KBsDhZWhcVPFkWgp37r6H8FgikEIoUr5T4iOO
525PPzHn36iMzlGGu/3PT1C40q8Gx05hY+XAeXFGxq8Nob8eBohmQFK9Tt1iGP8N
iinL/xwyjWoT1gcFXf5YE1WD0TvPrEQLMWuhYzJhsVLWvfYpC6oeZ7DbjCqzB+z1
m7ZYMT5guG7gCg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:39:45 2025 by rpki-client