Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/986634-c573-4fc4-ada4-7fdeb8f50503/1/aMGCS-Cxb0bS_wEsWCWmcLuTKhc.mft
File: aMGCS-Cxb0bS_wEsWCWmcLuTKhc.mft (raw, json)
Hash identifier: alpXQGa7RDCzdUX84qvszkZfU6gIWwcZctug54xzFIA=
Subject key identifier: F8:D7:6F:D7:04:C2:81:D9:2B:FF:F4:6F:A0:F5:A3:A2:3E:4F:F3:3E
Authority key identifier: 68:C1:82:4B:E0:B1:6F:46:D2:FF:01:2C:58:25:A6:70:BB:93:2A:17
Certificate issuer: /CN=68c1824be0b16f46d2ff012c5825a670bb932a17
Certificate serial: 0197B88EDA248D01EEA49721EF6F7B890978
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMGCS-Cxb0bS_wEsWCWmcLuTKhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/986634-c573-4fc4-ada4-7fdeb8f50503/1/aMGCS-Cxb0bS_wEsWCWmcLuTKhc.mft
Manifest number: 02C7
Signing time: Sat 28 Jun 2025 22:00:59 +0000
Manifest this update: Sat 28 Jun 2025 22:00:59 +0000
Manifest next update: Sun 29 Jun 2025 22:00:59 +0000
Files and hashes: 1: aMGCS-Cxb0bS_wEsWCWmcLuTKhc.crl (hash: 9GvZIfch5Mxt0QZxktnmwAAIE1aoiuSR1TQ2/jkTS+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/986634-c573-4fc4-ada4-7fdeb8f50503/1/aMGCS-Cxb0bS_wEsWCWmcLuTKhc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/986634-c573-4fc4-ada4-7fdeb8f50503/1/aMGCS-Cxb0bS_wEsWCWmcLuTKhc.mft
rsync://rpki.ripe.net/repository/DEFAULT/aMGCS-Cxb0bS_wEsWCWmcLuTKhc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8e:da:24:8d:01:ee:a4:97:21:ef:6f:7b:89:09:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68c1824be0b16f46d2ff012c5825a670bb932a17
Validity
Not Before: Jun 28 22:00:59 2025 GMT
Not After : Jun 29 22:00:59 2025 GMT
Subject: CN=f8d76fd704c281d92bfff46fa0f5a3a23e4ff33e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ab:c8:30:d3:be:bc:8d:15:d9:7e:55:db:66:
59:b4:ce:04:a9:3c:c8:16:90:7b:ce:aa:1b:db:44:
82:10:3e:a8:7f:b9:b2:59:e7:36:8a:7c:8a:e7:41:
56:e0:dc:68:7b:3a:b0:35:31:a6:95:b1:31:6f:eb:
3f:05:9d:7a:55:f4:7e:e3:1f:19:de:ff:ee:e1:11:
f1:35:3d:4a:dc:d5:1a:ad:13:05:36:db:72:a0:b2:
78:f8:17:9e:6a:14:27:74:03:e0:98:92:46:53:94:
46:8f:6a:41:a2:68:1a:e0:30:5d:cc:76:8c:eb:5d:
bf:fb:02:ba:d5:34:ff:2e:c2:4e:47:14:c6:ff:04:
dc:6e:39:ab:e1:27:2b:0d:2e:7a:29:e1:1d:12:40:
3e:85:f3:b1:8a:e4:c8:8a:0b:13:89:2b:84:23:94:
e5:be:f9:4d:d2:68:4f:b5:8e:63:d0:dd:d9:58:b0:
9b:49:b7:89:1a:bc:ee:7d:7c:a5:68:d5:a3:6e:c3:
25:6f:02:21:be:e7:af:fa:73:51:1d:de:2b:fa:cf:
f8:8c:20:be:5c:2a:47:24:61:e5:25:4f:c5:44:6d:
b4:b5:66:b5:96:b5:3d:dd:8e:ca:1c:85:27:7c:46:
a4:33:bb:d4:fb:36:cf:a2:11:e8:d0:d2:97:7e:5c:
4e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:D7:6F:D7:04:C2:81:D9:2B:FF:F4:6F:A0:F5:A3:A2:3E:4F:F3:3E
X509v3 Authority Key Identifier:
keyid:68:C1:82:4B:E0:B1:6F:46:D2:FF:01:2C:58:25:A6:70:BB:93:2A:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMGCS-Cxb0bS_wEsWCWmcLuTKhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/986634-c573-4fc4-ada4-7fdeb8f50503/1/aMGCS-Cxb0bS_wEsWCWmcLuTKhc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/986634-c573-4fc4-ada4-7fdeb8f50503/1/aMGCS-Cxb0bS_wEsWCWmcLuTKhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:8d:b0:7d:f9:7f:35:a7:8f:ed:0d:eb:0a:e2:38:9a:ff:ab:
bc:85:0b:66:b3:1b:d9:99:fe:59:1c:e0:f6:c8:4e:70:32:31:
63:a5:d7:94:ad:37:2a:c5:ff:88:c2:93:fb:5f:7e:06:ba:a1:
58:96:7c:e9:31:fe:e3:0f:c7:f6:38:61:e9:f1:54:bd:69:e8:
9a:b6:5d:34:1b:77:4b:e5:e5:e1:49:12:63:f7:e9:3b:c0:0d:
b3:ea:ae:7a:4a:0c:d9:d1:23:57:68:9c:6c:26:76:e6:89:a1:
be:4b:4c:89:b0:16:a7:ad:36:ff:1c:65:ba:b1:8d:b6:f8:11:
6a:26:1f:6f:a5:7f:b4:bd:a5:50:a1:5a:c2:f5:ba:94:38:3a:
0f:62:de:2d:92:53:79:44:59:ad:ad:02:6e:04:7b:55:9d:82:
c9:10:99:bb:65:d0:91:3f:b7:05:8c:e1:b6:cb:67:dc:99:4a:
9a:b3:6b:a8:42:7d:c0:c2:25:77:60:20:d2:08:bc:cf:ec:93:
94:60:e8:e0:fb:61:00:22:15:04:01:22:d3:a7:5b:00:99:8c:
8d:ef:52:cc:9c:22:33:68:64:f6:01:4d:56:e5:68:b3:bc:a1:
99:ab:14:22:b4:dd:b6:12:35:6a:f2:fc:81:bd:9d:e9:78:ee:
40:fa:6e:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:23:15 2025 by rpki-client