Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/4cba2f-4a5b-4435-8aec-923cb50abe2e/1/MGm6frw7Zy3QnsA0Th-AqhEx79A.mft
File: MGm6frw7Zy3QnsA0Th-AqhEx79A.mft (raw, json)
Hash identifier: KnJGpAU4n/33Gk9RunpKn9lBI3wUKJflqvUt/P3G5Mc=
Subject key identifier: 9B:C6:71:24:0B:D6:94:E9:A8:79:E1:B0:AC:6D:13:03:8F:02:67:75
Authority key identifier: 30:69:BA:7E:BC:3B:67:2D:D0:9E:C0:34:4E:1F:80:AA:11:31:EF:D0
Certificate issuer: /CN=3069ba7ebc3b672dd09ec0344e1f80aa1131efd0
Certificate serial: 0198D5F1A60069A1A4C21B00AD17B0618DE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MGm6frw7Zy3QnsA0Th-AqhEx79A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/4cba2f-4a5b-4435-8aec-923cb50abe2e/1/MGm6frw7Zy3QnsA0Th-AqhEx79A.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 08:00:40 +0000
Manifest this update: Sat 23 Aug 2025 08:00:40 +0000
Manifest next update: Sun 24 Aug 2025 08:00:40 +0000
Files and hashes: 1: MGm6frw7Zy3QnsA0Th-AqhEx79A.crl (hash: zmUy2Ligx5L2Z1C2Uts1UQvBtFXtH186enaPlo0hybI=)
2: eqJAEOy6NaY4mZwa5RQJfzteBn0.roa (hash: 4ycDfdQF4RJy7Cm3II/1bQM7j6qQFueYRHKWr/2hsvQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/4cba2f-4a5b-4435-8aec-923cb50abe2e/1/MGm6frw7Zy3QnsA0Th-AqhEx79A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/4cba2f-4a5b-4435-8aec-923cb50abe2e/1/MGm6frw7Zy3QnsA0Th-AqhEx79A.mft
rsync://rpki.ripe.net/repository/DEFAULT/MGm6frw7Zy3QnsA0Th-AqhEx79A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:a6:00:69:a1:a4:c2:1b:00:ad:17:b0:61:8d:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3069ba7ebc3b672dd09ec0344e1f80aa1131efd0
Validity
Not Before: Aug 23 08:00:40 2025 GMT
Not After : Aug 24 08:00:40 2025 GMT
Subject: CN=9bc671240bd694e9a879e1b0ac6d13038f026775
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6b:86:0d:7f:44:04:9f:89:e5:d6:4d:74:73:
a3:41:20:8e:30:dc:fd:bc:c2:3e:01:e7:4a:20:cd:
be:dc:75:0d:4d:0d:de:5c:a7:c9:93:c8:07:6d:06:
4b:3b:5f:95:ba:b1:33:c8:26:65:1e:26:77:d3:d7:
4c:1f:97:e6:8d:f3:6c:1c:71:fa:5c:8e:7c:e3:58:
26:b4:13:12:67:a1:8e:77:c6:e9:8e:e0:31:9f:19:
a0:28:ab:ee:f7:59:59:c7:97:42:c5:f3:cb:ee:86:
9f:59:38:b2:9e:29:e3:e5:6e:75:88:19:9b:4b:ff:
b1:1e:45:c9:df:7f:40:65:17:4e:ff:a7:7b:9b:d2:
a9:d7:05:59:f3:b0:58:e0:ca:48:1d:f5:e7:93:9a:
e2:22:6a:e3:5b:c6:10:50:0d:ac:0e:a9:55:dc:91:
70:c0:dd:94:f4:c4:ed:1b:3a:49:90:13:32:5a:86:
f1:d0:20:c3:59:9d:5c:cd:93:c3:e3:ed:44:b6:4f:
ca:05:6d:c6:d3:59:a0:f9:78:b7:5a:17:f7:d0:0a:
1d:ec:88:5c:fb:cf:f6:4c:89:95:63:cf:a5:ec:00:
3f:1e:f6:e8:3f:df:e2:de:9b:9a:e8:3e:b7:ca:4b:
10:3d:c5:8a:35:d9:69:93:e5:c9:0e:5c:d1:18:fa:
9d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:C6:71:24:0B:D6:94:E9:A8:79:E1:B0:AC:6D:13:03:8F:02:67:75
X509v3 Authority Key Identifier:
keyid:30:69:BA:7E:BC:3B:67:2D:D0:9E:C0:34:4E:1F:80:AA:11:31:EF:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGm6frw7Zy3QnsA0Th-AqhEx79A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4cba2f-4a5b-4435-8aec-923cb50abe2e/1/MGm6frw7Zy3QnsA0Th-AqhEx79A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4cba2f-4a5b-4435-8aec-923cb50abe2e/1/MGm6frw7Zy3QnsA0Th-AqhEx79A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:f2:c2:b1:9d:88:90:0a:3e:d8:e1:97:5f:42:6f:f6:ce:81:
15:d9:9f:1e:90:21:58:fe:f8:32:8b:54:d3:06:c5:5b:15:06:
dd:c8:f8:00:99:17:32:78:5c:10:08:ea:3d:f4:43:1a:28:64:
10:2e:de:54:96:3b:e2:1c:fb:17:97:8f:c0:12:51:83:2b:9c:
99:fc:1d:79:40:a1:47:c3:59:41:d4:9f:be:cd:d4:99:61:0f:
86:50:bc:67:3b:dd:7d:a5:c1:8f:b8:bf:ed:80:50:b6:8f:d2:
d5:fb:e7:91:60:a3:bf:92:21:05:66:9a:15:62:75:92:fd:54:
04:d1:e5:df:02:6a:2e:e7:ca:b3:a1:57:a9:f5:83:2b:a4:ed:
ca:5c:b1:8c:86:2b:e0:a5:ec:a6:d9:0e:fe:a4:22:29:72:79:
b1:83:9f:70:8e:6e:1c:c2:57:63:02:cb:42:4b:15:60:b1:25:
e7:af:eb:40:5b:da:69:3c:86:49:8c:4d:5a:61:68:d7:3a:35:
99:6d:b5:c7:aa:b8:ca:41:8e:49:a7:2c:b9:66:b1:ea:74:f9:
82:8b:e3:d9:a2:92:63:cf:95:d4:86:76:dd:71:5b:d5:04:c9:
5a:e8:bf:2d:92:f3:af:78:d9:3a:23:eb:bf:39:0a:1c:29:88:
d9:f6:e3:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:40:29 2025 by rpki-client