Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/7e4ea8-8950-4183-abc0-3382794049c2/1/MGtGjMMe86PQgayPArJx4xR1Wb8.mft
File: MGtGjMMe86PQgayPArJx4xR1Wb8.mft (raw, json)
Hash identifier: 7f8ZICPJXcvQVwSHx99ZprjZRzYhHYBoNzOpbCKnDH0=
Subject key identifier: 7A:B6:8C:9C:F5:7C:2B:1C:D8:DF:0F:E8:D2:CE:D6:20:99:8A:5B:22
Authority key identifier: 30:6B:46:8C:C3:1E:F3:A3:D0:81:AC:8F:02:B2:71:E3:14:75:59:BF
Certificate issuer: /CN=306b468cc31ef3a3d081ac8f02b271e3147559bf
Certificate serial: 0196D1754F301D931D1A302E1E2EE4A97AE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MGtGjMMe86PQgayPArJx4xR1Wb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/7e4ea8-8950-4183-abc0-3382794049c2/1/MGtGjMMe86PQgayPArJx4xR1Wb8.mft
Manifest number: 09FA
Signing time: Thu 15 May 2025 01:00:48 +0000
Manifest this update: Thu 15 May 2025 01:00:48 +0000
Manifest next update: Fri 16 May 2025 01:00:48 +0000
Files and hashes: 1: MGtGjMMe86PQgayPArJx4xR1Wb8.crl (hash: bhPnYrujNV6dgY9IWVfPUPjn2QmMY1fk12G/70RbiJo=)
2: zCf3OK6AbL-GLEVW2m2fiyVZR2o.roa (hash: T9wprypvgjd5UjKaL97Qh7s/fP7I922vE5XInqdd1G4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/7e4ea8-8950-4183-abc0-3382794049c2/1/MGtGjMMe86PQgayPArJx4xR1Wb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/7e4ea8-8950-4183-abc0-3382794049c2/1/MGtGjMMe86PQgayPArJx4xR1Wb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/MGtGjMMe86PQgayPArJx4xR1Wb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d1:75:4f:30:1d:93:1d:1a:30:2e:1e:2e:e4:a9:7a:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=306b468cc31ef3a3d081ac8f02b271e3147559bf
Validity
Not Before: May 15 01:00:48 2025 GMT
Not After : May 16 01:00:48 2025 GMT
Subject: CN=7ab68c9cf57c2b1cd8df0fe8d2ced620998a5b22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:46:b1:c8:e8:0b:99:b2:8f:ec:32:05:b2:56:
35:ec:d2:a5:f6:91:3d:3c:39:20:5a:96:07:45:0d:
22:2b:2c:3e:17:0a:c3:d0:81:c2:6c:1e:94:7f:72:
62:db:d7:0b:fb:35:7b:1c:2f:fd:e3:ad:34:68:83:
c3:14:7c:04:81:94:cf:34:fe:19:fb:77:ee:21:dc:
59:ef:b2:be:8e:42:52:e4:e7:67:92:20:44:2b:fe:
73:08:ab:33:ee:13:ce:02:2f:a5:ec:8e:45:d4:5d:
84:8b:d1:21:91:e7:bd:e9:cc:8f:ca:cf:37:cb:d2:
c6:03:62:29:87:29:de:6a:6f:de:cc:2d:77:d7:00:
f5:7b:3b:91:c1:41:fd:22:d8:8e:7a:7a:a5:67:c8:
78:30:87:b3:21:93:2b:0e:2b:9d:d9:bb:8c:19:be:
47:d5:4f:3b:ab:da:ab:0d:07:41:34:b9:9e:97:a9:
f3:c0:27:ba:60:6e:4c:62:e1:ad:24:77:9b:b4:5e:
b4:8a:c4:f1:8a:d2:36:6d:85:dc:f4:ca:49:26:e4:
89:bc:28:d0:cd:51:29:0e:32:e6:bb:3c:0c:39:92:
15:6e:e7:89:1e:7d:64:3e:89:e9:3d:a9:c7:e7:21:
03:e1:a4:eb:16:6f:00:a4:85:06:78:8b:df:84:37:
19:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:B6:8C:9C:F5:7C:2B:1C:D8:DF:0F:E8:D2:CE:D6:20:99:8A:5B:22
X509v3 Authority Key Identifier:
keyid:30:6B:46:8C:C3:1E:F3:A3:D0:81:AC:8F:02:B2:71:E3:14:75:59:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGtGjMMe86PQgayPArJx4xR1Wb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7e4ea8-8950-4183-abc0-3382794049c2/1/MGtGjMMe86PQgayPArJx4xR1Wb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7e4ea8-8950-4183-abc0-3382794049c2/1/MGtGjMMe86PQgayPArJx4xR1Wb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:cf:bc:41:28:f8:d8:a3:72:4f:e9:dd:c0:f2:1c:5b:0a:f1:
d2:5a:1d:6e:ba:cf:99:fa:4c:83:83:0a:14:c9:9c:fe:df:cf:
57:ce:1f:5b:48:2b:4f:70:0c:36:4f:a2:62:33:c7:61:9a:b3:
a3:67:e1:6c:4d:7f:69:86:6b:eb:5d:07:e9:4b:ce:07:4f:84:
8e:de:ac:ba:7f:bf:0b:79:69:80:39:06:11:b1:62:55:ff:7c:
d8:1f:6e:57:ee:95:b8:58:58:fc:37:d6:a6:08:e4:99:7f:3f:
9e:ad:df:ca:ea:67:84:85:e4:b0:f3:90:ab:e8:3f:9b:96:06:
87:fb:73:55:79:97:63:dd:d2:6d:15:ce:3d:f4:d1:83:d3:d3:
e1:7b:dc:14:30:89:bd:d5:05:d1:6d:25:ad:6a:1b:a2:27:51:
b6:55:19:d8:46:4f:6c:a7:2a:26:75:cd:67:c8:23:51:64:81:
0b:64:54:e2:c2:29:e4:eb:28:26:eb:62:ae:a2:2f:38:49:86:
4c:c3:69:33:c5:65:5c:42:b4:b1:95:f7:c2:02:ef:a3:0c:fc:
4a:97:46:b1:b3:36:ae:6d:b8:34:24:f0:d7:0a:85:f1:7c:80:
65:89:b9:08:6f:6d:1d:98:c7:9e:a9:e6:1d:96:18:3a:b2:1d:
98:2b:6b:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 06:32:49 2025 by rpki-client