Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/624e63-b876-4ef4-bf19-e43620880cb6/1/MgJHUW6RAX4tvLVyyg8poSKBrPA.mft
File: MgJHUW6RAX4tvLVyyg8poSKBrPA.mft (raw, json)
Hash identifier: bQwOUbIyLfwn+Zwc+W3GoK5tJ3FSvAjPHTHdnTjbG10=
Subject key identifier: 02:C8:03:CA:42:7C:F4:93:0B:0A:B1:82:55:E6:5D:49:97:F5:17:E5
Authority key identifier: 32:02:47:51:6E:91:01:7E:2D:BC:B5:72:CA:0F:29:A1:22:81:AC:F0
Certificate issuer: /CN=320247516e91017e2dbcb572ca0f29a12281acf0
Certificate serial: 0198D773C6BA385FE490F63A1BEB04ED101D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MgJHUW6RAX4tvLVyyg8poSKBrPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/624e63-b876-4ef4-bf19-e43620880cb6/1/MgJHUW6RAX4tvLVyyg8poSKBrPA.mft
Manifest number: 04F2
Signing time: Sat 23 Aug 2025 15:02:25 +0000
Manifest this update: Sat 23 Aug 2025 15:02:25 +0000
Manifest next update: Sun 24 Aug 2025 15:02:25 +0000
Files and hashes: 1: MgJHUW6RAX4tvLVyyg8poSKBrPA.crl (hash: FwXZhd22zEQjNnD6w9edklUN7i+oCmNaK8+4Y4a+wyw=)
2: m7C6K0Dm5PPkueps5pZmHrJAHsQ.roa (hash: keru/3nPFQZwhtdrj8XoRvNJqtUTfDmo1KvvBMCi2Bg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/624e63-b876-4ef4-bf19-e43620880cb6/1/MgJHUW6RAX4tvLVyyg8poSKBrPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/624e63-b876-4ef4-bf19-e43620880cb6/1/MgJHUW6RAX4tvLVyyg8poSKBrPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/MgJHUW6RAX4tvLVyyg8poSKBrPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:73:c6:ba:38:5f:e4:90:f6:3a:1b:eb:04:ed:10:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=320247516e91017e2dbcb572ca0f29a12281acf0
Validity
Not Before: Aug 23 15:02:25 2025 GMT
Not After : Aug 24 15:02:25 2025 GMT
Subject: CN=02c803ca427cf4930b0ab18255e65d4997f517e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:27:90:14:29:04:4d:eb:3a:34:ae:e0:f6:38:
12:79:bf:b5:01:67:23:1a:f8:85:f9:8d:9c:ab:3a:
01:9c:6a:f3:c1:ec:f2:47:f4:00:ca:5c:42:fa:a3:
a1:8b:13:07:53:5f:e0:91:15:38:80:64:79:67:70:
37:96:0b:c0:91:47:f8:63:39:bb:b9:4a:d4:0b:56:
69:ac:44:5a:dc:07:e0:0c:f4:31:0c:5b:ac:5e:35:
f7:5c:53:e9:d3:3f:89:d3:ab:b9:02:c1:c5:54:88:
27:0a:98:c4:1a:9b:e7:ce:75:65:bf:46:f2:f9:0f:
3a:d2:61:1c:69:e0:aa:1c:26:28:58:04:7c:b2:44:
86:8a:95:04:3a:e5:ba:33:d8:3b:88:49:ce:d6:48:
1e:bd:e1:64:0b:39:fe:6f:89:79:1f:48:cb:45:8b:
3a:6b:58:21:8b:39:29:ad:5f:bc:6c:e2:5d:ec:58:
49:ea:47:6b:c6:d1:6a:99:24:c8:aa:b2:bd:1e:43:
33:0d:83:38:bc:f6:b6:e5:1b:36:01:8c:29:8b:e2:
de:89:a0:68:04:c5:9b:01:e1:99:b6:63:35:51:0d:
f5:b1:82:15:8a:40:7b:c5:fb:39:38:e2:c4:80:ce:
25:fa:44:50:6c:91:5c:f9:af:f8:fc:bc:60:dc:cd:
d8:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:C8:03:CA:42:7C:F4:93:0B:0A:B1:82:55:E6:5D:49:97:F5:17:E5
X509v3 Authority Key Identifier:
keyid:32:02:47:51:6E:91:01:7E:2D:BC:B5:72:CA:0F:29:A1:22:81:AC:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MgJHUW6RAX4tvLVyyg8poSKBrPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/624e63-b876-4ef4-bf19-e43620880cb6/1/MgJHUW6RAX4tvLVyyg8poSKBrPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/624e63-b876-4ef4-bf19-e43620880cb6/1/MgJHUW6RAX4tvLVyyg8poSKBrPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:ec:a7:04:cf:60:9c:24:14:00:67:da:e4:57:9b:f1:64:be:
e9:8d:5b:66:9d:1b:46:8e:dc:d4:5e:c9:3d:82:55:21:5d:22:
d5:14:b2:92:4b:b3:8d:7b:92:92:fb:31:a8:46:01:b1:24:f2:
3c:94:3b:3f:91:a3:95:50:19:4d:c8:3b:0c:ce:d9:1f:7c:4b:
f6:96:bf:5a:59:54:75:a1:2f:e0:2d:26:e6:a8:0a:bc:0a:cc:
24:25:6a:ef:8d:6c:42:5c:0d:97:2b:08:67:68:c9:77:1d:84:
dc:62:2f:b0:ae:88:c0:47:7e:d4:d0:86:d3:21:2b:84:b4:69:
3d:32:f2:23:a2:6d:a6:73:5c:25:7f:a3:2d:76:4b:a9:43:a9:
fe:67:41:f6:32:0e:ab:c8:6f:35:3f:b3:2f:9c:00:48:b7:54:
50:55:88:a4:1a:3c:d8:5c:b6:95:8f:72:c5:c6:2f:29:3c:bd:
cf:f3:25:f1:b8:89:19:54:54:96:64:18:95:1b:d0:cd:7d:0f:
64:35:59:0c:17:fe:d5:87:6a:f4:a1:d5:8f:49:ea:fc:91:b6:
c8:60:60:14:9f:a9:86:72:01:64:69:f4:72:d2:4f:70:21:e4:
63:cb:a3:b0:4c:d1:39:75:dc:ef:7e:5e:89:6c:17:e2:22:07:
21:eb:8d:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:09:51 2025 by rpki-client