Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/5a7e46-ce1b-4955-9f39-4b311326c230/1/mgNSX2jrayNfHeIrYLG67S_H_4M.mft
File: mgNSX2jrayNfHeIrYLG67S_H_4M.mft (raw, json)
Hash identifier: GugwMjZtZbgOmWTuyytNfkAE5m/rk8vA6YoNfGTyTZ8=
Subject key identifier: 4E:44:59:76:20:73:1E:92:2D:55:63:06:8F:66:81:9B:59:C7:F2:51
Authority key identifier: 9A:03:52:5F:68:EB:6B:23:5F:1D:E2:2B:60:B1:BA:ED:2F:C7:FF:83
Certificate issuer: /CN=9a03525f68eb6b235f1de22b60b1baed2fc7ff83
Certificate serial: 0197B70EDB67DC4FD05B5398DABF0D4B451C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mgNSX2jrayNfHeIrYLG67S_H_4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/5a7e46-ce1b-4955-9f39-4b311326c230/1/mgNSX2jrayNfHeIrYLG67S_H_4M.mft
Manifest number: 15B3
Signing time: Sat 28 Jun 2025 15:01:33 +0000
Manifest this update: Sat 28 Jun 2025 15:01:33 +0000
Manifest next update: Sun 29 Jun 2025 15:01:33 +0000
Files and hashes: 1: mgNSX2jrayNfHeIrYLG67S_H_4M.crl (hash: FQYOY55k5XX8b4U2yEsi4Y1NXSQDTsBkIaZymJRfsHg=)
2: xV2TYyNPjWPupKmb43ad00Tt3n8.roa (hash: +ey9CZvGJrxa71wfksSgu55Jb8r1NMsse9tFxoel7Ig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/5a7e46-ce1b-4955-9f39-4b311326c230/1/mgNSX2jrayNfHeIrYLG67S_H_4M.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/5a7e46-ce1b-4955-9f39-4b311326c230/1/mgNSX2jrayNfHeIrYLG67S_H_4M.mft
rsync://rpki.ripe.net/repository/DEFAULT/mgNSX2jrayNfHeIrYLG67S_H_4M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:db:67:dc:4f:d0:5b:53:98:da:bf:0d:4b:45:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a03525f68eb6b235f1de22b60b1baed2fc7ff83
Validity
Not Before: Jun 28 15:01:33 2025 GMT
Not After : Jun 29 15:01:33 2025 GMT
Subject: CN=4e44597620731e922d5563068f66819b59c7f251
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1d:d2:e7:c7:39:a4:0a:a2:60:d0:4c:1b:71:
11:86:e2:23:b1:1c:02:cd:0b:74:c4:54:fd:2f:66:
7e:6a:80:fc:1c:ed:73:97:66:f2:cf:9a:b7:cc:03:
21:cf:1d:bc:d4:09:b8:b3:32:c2:68:4e:55:53:b8:
5e:f3:bb:d4:de:21:55:e3:a4:6d:24:10:6f:c7:bb:
d4:17:45:87:38:d4:af:8a:88:cb:25:d6:1a:61:c0:
35:4d:bc:23:1c:a4:10:b2:04:ba:89:5c:4e:39:3e:
c1:12:7a:ec:dd:96:bc:10:92:89:3a:54:d9:43:1d:
82:d1:80:be:02:cb:ed:56:8e:40:63:27:a4:44:a5:
c7:d5:0a:9c:a7:23:d9:c3:3f:f7:ce:e1:d0:23:9a:
77:79:7a:53:2f:92:c6:df:eb:4a:c0:b7:ef:df:f9:
1d:e0:32:51:fe:3f:a1:0e:a5:d4:9c:0d:6b:ed:70:
b8:e5:a6:f4:36:34:c9:73:38:f5:a4:0c:1b:5c:93:
ce:cd:d2:8b:0b:29:c7:ab:b6:f1:9c:c3:e5:55:72:
10:73:97:7e:bf:66:2b:84:3e:f8:16:ac:4f:da:fe:
27:9c:49:99:c8:d5:6f:f4:d2:16:93:3a:9a:9b:42:
00:dc:66:94:ec:23:96:0a:e6:9b:f3:ea:79:6c:c0:
8a:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:44:59:76:20:73:1E:92:2D:55:63:06:8F:66:81:9B:59:C7:F2:51
X509v3 Authority Key Identifier:
keyid:9A:03:52:5F:68:EB:6B:23:5F:1D:E2:2B:60:B1:BA:ED:2F:C7:FF:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mgNSX2jrayNfHeIrYLG67S_H_4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/5a7e46-ce1b-4955-9f39-4b311326c230/1/mgNSX2jrayNfHeIrYLG67S_H_4M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/5a7e46-ce1b-4955-9f39-4b311326c230/1/mgNSX2jrayNfHeIrYLG67S_H_4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:72:3a:ea:5b:8f:33:a4:57:1d:fa:bc:37:26:d3:aa:4d:28:
c2:71:23:00:37:4c:f3:9e:58:9b:d9:dc:56:15:84:ba:b9:d0:
24:0a:d0:ef:73:4a:cf:0d:b5:01:6a:32:48:f8:dd:b7:9c:72:
c6:cd:be:b9:8d:41:3f:78:85:5b:d1:af:8a:cb:2d:d7:40:54:
d8:e6:00:80:ce:c4:f4:64:f2:61:ca:0b:dc:23:f5:3c:6e:6d:
d6:9c:77:28:1d:53:a0:0e:f2:bd:e0:65:f6:cd:d3:83:6b:4e:
00:1a:9d:db:37:40:63:6d:81:e3:4b:76:8a:e9:a0:34:28:a5:
20:6a:0f:7a:64:8c:b2:4b:c8:13:0a:6b:c9:ae:5a:2e:72:ed:
91:2a:43:fc:d8:55:75:fc:ab:0a:b1:69:d9:3c:c7:24:69:49:
ee:fb:ce:26:e1:34:a0:e1:e3:c3:a6:f5:59:be:23:de:f9:19:
a2:4e:5c:50:e9:78:e2:59:c5:b6:ee:61:26:c1:0c:40:26:8c:
06:41:a2:8d:e8:f6:51:dc:58:f6:ce:40:30:cd:33:59:62:f7:
b3:6a:df:b1:60:de:41:90:cc:ba:c4:22:2a:5c:81:d8:d3:b6:
c8:44:2d:fa:d9:44:4d:dd:04:0b:ad:b4:93:53:32:36:07:e0:
e1:43:23:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3Dttn3E/QW1OY2r8NS0UcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhMDM1MjVmNjhlYjZiMjM1ZjFkZTIyYjYwYjFiYWVkMmZj
N2ZmODMwHhcNMjUwNjI4MTUwMTMzWhcNMjUwNjI5MTUwMTMzWjAzMTEwLwYDVQQD
Eyg0ZTQ0NTk3NjIwNzMxZTkyMmQ1NTYzMDY4ZjY2ODE5YjU5YzdmMjUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAux3S58c5pAqiYNBMG3ERhuIjsRwC
zQt0xFT9L2Z+aoD8HO1zl2byz5q3zAMhzx281Am4szLCaE5VU7he87vU3iFV46Rt
JBBvx7vUF0WHONSviojLJdYaYcA1TbwjHKQQsgS6iVxOOT7BEnrs3Za8EJKJOlTZ
Qx2C0YC+AsvtVo5AYyekRKXH1QqcpyPZwz/3zuHQI5p3eXpTL5LG3+tKwLfv3/kd
4DJR/j+hDqXUnA1r7XC45ab0NjTJczj1pAwbXJPOzdKLCynHq7bxnMPlVXIQc5d+
v2YrhD74FqxP2v4nnEmZyNVv9NIWkzqam0IA3GaU7COWCuab8+p5bMCKywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE5EWXYgcx6SLVVjBo9mgZtZx/JRMB8GA1UdIwQY
MBaAFJoDUl9o62sjXx3iK2Cxuu0vx/+DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWdOU1gyanJheU5mSGVJcllMRzY3U19IXzRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy81YTdlNDYtY2UxYi00OTU1LTlmMzkt
NGIzMTEzMjZjMjMwLzEvbWdOU1gyanJheU5mSGVJcllMRzY3U19IXzRNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy81YTdlNDYtY2UxYi00OTU1LTlmMzktNGIzMTEzMjZjMjMw
LzEvbWdOU1gyanJheU5mSGVJcllMRzY3U19IXzRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAunI66luP
M6RXHfq8NybTqk0ownEjADdM855Ym9ncVhWEurnQJArQ73NKzw21AWoySPjdt5xy
xs2+uY1BP3iFW9Gvisst10BU2OYAgM7E9GTyYcoL3CP1PG5t1px3KB1ToA7yveBl
9s3Tg2tOABqd2zdAY22B40t2iumgNCilIGoPemSMskvIEwprya5aLnLtkSpD/NhV
dfyrCrFp2TzHJGlJ7vvOJuE0oOHjw6b1Wb4j3vkZok5cUOl44lnFtu5hJsEMQCaM
BkGijej2UdxY9s5AMM0zWWL3s2rfsWDeQZDMusQiKlyB2NO2yEQt+tlETd0EC620
k1MyNgfg4UMjkg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:57:51 2025 by rpki-client