Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/7e4ea8-8950-4183-abc0-3382794049c2/1/MGtGjMMe86PQgayPArJx4xR1Wb8.mft
File: MGtGjMMe86PQgayPArJx4xR1Wb8.mft (raw, json)
Hash identifier: MlssNuaZ7D5BAV/qCjxYnQ2zXNr0OYfqNAcyLuHGAJI=
Subject key identifier: 19:E2:64:BD:80:3B:3D:21:07:AC:62:B1:8E:16:F4:16:A2:66:C6:22
Authority key identifier: 30:6B:46:8C:C3:1E:F3:A3:D0:81:AC:8F:02:B2:71:E3:14:75:59:BF
Certificate issuer: /CN=306b468cc31ef3a3d081ac8f02b271e3147559bf
Certificate serial: 0197CC83B1582E15E09F3FBEC864863B7926
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MGtGjMMe86PQgayPArJx4xR1Wb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/7e4ea8-8950-4183-abc0-3382794049c2/1/MGtGjMMe86PQgayPArJx4xR1Wb8.mft
Manifest number: 0A7C
Signing time: Wed 02 Jul 2025 19:01:12 +0000
Manifest this update: Wed 02 Jul 2025 19:01:12 +0000
Manifest next update: Thu 03 Jul 2025 19:01:12 +0000
Files and hashes: 1: MGtGjMMe86PQgayPArJx4xR1Wb8.crl (hash: j2Wce65xGfw6Yi08XgX9QhO142uPT5ajH+JX/Y3uSgw=)
2: zCf3OK6AbL-GLEVW2m2fiyVZR2o.roa (hash: T9wprypvgjd5UjKaL97Qh7s/fP7I922vE5XInqdd1G4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/7e4ea8-8950-4183-abc0-3382794049c2/1/MGtGjMMe86PQgayPArJx4xR1Wb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/7e4ea8-8950-4183-abc0-3382794049c2/1/MGtGjMMe86PQgayPArJx4xR1Wb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/MGtGjMMe86PQgayPArJx4xR1Wb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 19:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cc:83:b1:58:2e:15:e0:9f:3f:be:c8:64:86:3b:79:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=306b468cc31ef3a3d081ac8f02b271e3147559bf
Validity
Not Before: Jul 2 19:01:12 2025 GMT
Not After : Jul 3 19:01:12 2025 GMT
Subject: CN=19e264bd803b3d2107ac62b18e16f416a266c622
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e0:69:37:78:af:90:c7:73:f9:4d:c9:f0:ea:
b6:97:00:6b:68:a2:fa:47:c4:3c:ac:1b:12:10:da:
e2:27:bd:94:22:43:df:03:08:b7:d0:66:22:0a:64:
d6:ec:1e:7d:b8:69:a9:c0:67:bb:f2:05:97:79:62:
59:36:e5:d6:82:41:49:79:f0:1a:2a:df:56:61:c6:
f9:37:3a:9e:95:6f:69:8f:8b:e0:ab:fb:4b:db:c8:
8a:05:c4:4b:28:38:ed:98:ee:8e:01:f3:85:71:95:
3d:3f:22:d2:72:7e:16:47:ae:46:2e:78:43:7b:03:
97:61:9a:ea:ed:42:f9:b6:5d:98:29:5c:d1:cc:98:
90:df:7b:41:1a:b9:4d:c7:c4:3c:66:ef:da:06:12:
a8:28:a1:ad:1a:20:f7:9c:4a:cf:40:5b:38:f5:a0:
0f:2b:ae:9e:5c:dd:aa:22:f6:46:db:05:4f:b6:b5:
d5:8b:83:a6:ec:86:5f:f4:dc:e1:4b:bb:b4:75:8d:
0e:93:5b:ad:0e:da:66:d5:95:15:8c:26:59:24:b4:
23:6a:dc:4b:fa:39:14:01:fd:bf:eb:42:51:0b:64:
0f:81:92:e9:06:f5:b9:a0:23:5b:a6:59:66:1f:24:
d6:97:1b:3a:e8:cc:65:66:ae:6b:56:3e:18:b0:c7:
00:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:E2:64:BD:80:3B:3D:21:07:AC:62:B1:8E:16:F4:16:A2:66:C6:22
X509v3 Authority Key Identifier:
keyid:30:6B:46:8C:C3:1E:F3:A3:D0:81:AC:8F:02:B2:71:E3:14:75:59:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGtGjMMe86PQgayPArJx4xR1Wb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7e4ea8-8950-4183-abc0-3382794049c2/1/MGtGjMMe86PQgayPArJx4xR1Wb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7e4ea8-8950-4183-abc0-3382794049c2/1/MGtGjMMe86PQgayPArJx4xR1Wb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:85:4f:1c:d1:44:55:9e:99:0b:5c:7d:5a:fb:51:99:df:64:
bb:c2:da:97:d0:47:7a:b9:d0:b2:c7:b7:0e:30:22:8d:5a:94:
7c:19:7e:3c:09:61:55:2a:62:5e:80:da:88:c7:9e:3f:39:65:
d8:6b:75:ae:9a:90:3a:65:eb:64:01:6c:c6:70:1d:1a:18:66:
63:4a:d6:20:41:88:1e:38:ea:aa:da:fb:56:78:2e:36:ce:07:
83:e7:b9:55:58:cd:e4:8f:71:c2:06:43:a6:e1:9f:16:97:e9:
a1:28:f7:e7:2c:e0:14:a3:43:ab:de:83:04:7e:9d:ef:15:61:
04:36:bd:7b:ad:ce:4c:ac:65:c6:70:99:89:c9:04:14:3b:17:
f6:75:d1:ee:dc:c2:01:95:cf:bd:ab:67:69:f7:78:f6:7e:16:
c7:04:07:92:18:fd:bd:ac:14:16:fa:de:41:cf:19:0c:a3:45:
cc:f0:64:d9:cc:e0:52:95:7f:b7:b6:31:be:a0:8c:29:9f:ee:
35:9c:a1:00:f7:54:82:12:a8:b2:3c:df:44:46:80:41:7c:8b:
37:f0:15:ee:20:ac:b5:c7:05:64:95:8d:da:5e:13:f1:0f:69:
a3:98:e6:4b:2d:34:f0:78:3c:bd:d0:71:cb:9f:fa:a5:36:0d:
c7:c9:ee:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 00:27:03 2025 by rpki-client