Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/3d838c-8622-4e58-870f-de9e02d41797/1/mgdjMrvSgPCFLbafYVsPFJkUgxs.mft
File: mgdjMrvSgPCFLbafYVsPFJkUgxs.mft (raw, json)
Hash identifier: O4MUc4V+rhe5Rtl1+ddvNH+c1JN/ujDW7i+FbgcLUa8=
Subject key identifier: 75:BA:C9:CD:76:7F:BD:A3:FC:89:D2:0F:7C:F5:0C:6C:27:77:F4:89
Authority key identifier: 9A:07:63:32:BB:D2:80:F0:85:2D:B6:9F:61:5B:0F:14:99:14:83:1B
Certificate issuer: /CN=9a076332bbd280f0852db69f615b0f149914831b
Certificate serial: 0197BA0F39F87ABB374144CC1A995EC88EA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mgdjMrvSgPCFLbafYVsPFJkUgxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/3d838c-8622-4e58-870f-de9e02d41797/1/mgdjMrvSgPCFLbafYVsPFJkUgxs.mft
Manifest number: 0343
Signing time: Sun 29 Jun 2025 05:00:49 +0000
Manifest this update: Sun 29 Jun 2025 05:00:49 +0000
Manifest next update: Mon 30 Jun 2025 05:00:49 +0000
Files and hashes: 1: mgdjMrvSgPCFLbafYVsPFJkUgxs.crl (hash: GzIJPGis7+gp8P/nyq/sGtBcQudFkgj9Ow5sGIkfqt4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/3d838c-8622-4e58-870f-de9e02d41797/1/mgdjMrvSgPCFLbafYVsPFJkUgxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/3d838c-8622-4e58-870f-de9e02d41797/1/mgdjMrvSgPCFLbafYVsPFJkUgxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/mgdjMrvSgPCFLbafYVsPFJkUgxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:0f:39:f8:7a:bb:37:41:44:cc:1a:99:5e:c8:8e:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a076332bbd280f0852db69f615b0f149914831b
Validity
Not Before: Jun 29 05:00:49 2025 GMT
Not After : Jun 30 05:00:49 2025 GMT
Subject: CN=75bac9cd767fbda3fc89d20f7cf50c6c2777f489
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b8:1a:f2:58:18:b6:8c:1a:af:54:63:08:98:
cc:a8:08:c4:2d:0c:27:1a:43:f8:40:45:a2:29:17:
90:2f:46:4c:c3:db:f4:f0:98:99:0e:60:59:a5:78:
e9:6d:7f:a1:76:fd:1c:7e:a5:ce:2b:cc:cf:f0:de:
cf:45:d3:86:31:e5:cd:c8:89:3b:1b:46:71:0e:88:
25:9a:77:98:fc:96:9c:21:5b:0f:ae:db:ea:8c:5d:
9c:ec:7f:9a:f7:23:74:4d:9b:95:f5:4e:6f:55:30:
d5:40:9b:f6:2a:9d:96:c8:5d:47:e1:83:68:4e:0f:
c5:b7:55:68:d5:22:eb:1f:a2:c3:d0:6d:57:19:ef:
84:bf:1b:d3:39:29:ac:a9:81:31:8d:3d:46:a5:dd:
59:13:c6:00:f7:41:f3:77:2e:73:e0:66:fc:83:4b:
e8:06:17:a3:3f:61:ab:9b:88:dd:8b:76:9b:62:55:
ca:50:c2:78:0f:a5:13:9b:cd:ab:c9:05:55:f6:f2:
22:e5:b0:ce:97:dd:09:79:01:94:f6:23:2a:72:89:
de:3b:4a:f3:44:df:b7:9a:04:ef:77:95:f3:8b:ef:
3f:ef:d1:94:d0:75:dc:2a:96:4e:c7:25:3e:00:80:
54:a0:91:14:8a:27:90:ac:6b:a3:1f:c5:17:5a:81:
a7:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:BA:C9:CD:76:7F:BD:A3:FC:89:D2:0F:7C:F5:0C:6C:27:77:F4:89
X509v3 Authority Key Identifier:
keyid:9A:07:63:32:BB:D2:80:F0:85:2D:B6:9F:61:5B:0F:14:99:14:83:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mgdjMrvSgPCFLbafYVsPFJkUgxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3d838c-8622-4e58-870f-de9e02d41797/1/mgdjMrvSgPCFLbafYVsPFJkUgxs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3d838c-8622-4e58-870f-de9e02d41797/1/mgdjMrvSgPCFLbafYVsPFJkUgxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:83:70:5f:81:22:67:c0:47:ae:6b:cc:ae:ab:ef:40:6a:3c:
f4:9e:8c:f2:b0:88:55:f2:06:91:77:75:fc:28:45:d7:dd:9d:
e2:18:39:0d:35:97:ae:91:74:f4:21:dc:4d:3a:ff:80:10:51:
09:ee:33:2b:dd:75:2a:45:65:b4:7a:e0:66:ad:4c:e5:c6:4a:
00:b3:f5:ee:1e:67:ea:ba:2f:a3:70:ca:66:de:4f:7c:df:30:
84:eb:3f:2b:da:95:b8:66:4e:3e:6d:0a:44:9c:4e:81:f8:db:
cb:45:ff:d6:90:d5:7b:dc:bf:34:bd:d9:39:ec:be:ae:24:39:
f8:9e:db:91:58:70:62:20:d6:e4:2e:2a:12:d1:c5:7e:7d:a1:
af:1d:52:f8:51:54:70:bc:78:29:40:70:7f:c3:09:99:ee:a3:
f0:38:bf:71:14:5e:9d:18:67:b2:97:70:41:4e:ba:91:a6:fc:
03:1a:d5:92:38:f8:83:c6:74:71:bf:30:d4:da:a1:5d:96:75:
98:2a:a4:39:14:33:b6:a3:de:34:74:1c:7d:e5:7b:d2:da:78:
39:56:6f:e3:48:a3:74:ec:11:28:22:e6:0e:b1:d5:b2:8f:dc:
03:65:01:f9:85:52:08:01:6f:bc:4a:37:dc:a0:9a:e2:2a:a8:
89:f1:e6:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:19:57 2025 by rpki-client