Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/d0beb2-c576-4e8d-b148-d79508e16869/1/MgOPanu3dwpyrnANMbagCoHujbs.mft
File: MgOPanu3dwpyrnANMbagCoHujbs.mft (raw, json)
Hash identifier: hmjcvUkphJt2UiDSnZBMBCaJpxia+WE3OK+ZtPrpAec=
Subject key identifier: 10:47:D8:41:E9:5E:E1:A1:A2:D5:E1:C4:F6:0C:02:DA:1E:16:EB:EC
Authority key identifier: 32:03:8F:6A:7B:B7:77:0A:72:AE:70:0D:31:B6:A0:0A:81:EE:8D:BB
Certificate issuer: /CN=32038f6a7bb7770a72ae700d31b6a00a81ee8dbb
Certificate serial: 0198D65F08A4B7ACF57EBBE8CFE1F9D0765B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MgOPanu3dwpyrnANMbagCoHujbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/d0beb2-c576-4e8d-b148-d79508e16869/1/MgOPanu3dwpyrnANMbagCoHujbs.mft
Manifest number: 0C33
Signing time: Sat 23 Aug 2025 10:00:08 +0000
Manifest this update: Sat 23 Aug 2025 10:00:08 +0000
Manifest next update: Sun 24 Aug 2025 10:00:08 +0000
Files and hashes: 1: MgOPanu3dwpyrnANMbagCoHujbs.crl (hash: Up5wuAUUaObLzKSxfUZz1f6wY1ja3hCHOMJXjSHFtiY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/d0beb2-c576-4e8d-b148-d79508e16869/1/MgOPanu3dwpyrnANMbagCoHujbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/d0beb2-c576-4e8d-b148-d79508e16869/1/MgOPanu3dwpyrnANMbagCoHujbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/MgOPanu3dwpyrnANMbagCoHujbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:08:a4:b7:ac:f5:7e:bb:e8:cf:e1:f9:d0:76:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32038f6a7bb7770a72ae700d31b6a00a81ee8dbb
Validity
Not Before: Aug 23 10:00:08 2025 GMT
Not After : Aug 24 10:00:08 2025 GMT
Subject: CN=1047d841e95ee1a1a2d5e1c4f60c02da1e16ebec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ad:5f:a7:8b:ad:84:f9:51:14:41:f4:5f:a6:
89:bd:8c:d9:55:d2:c0:b6:e8:49:35:e1:41:66:d7:
82:98:c2:c5:48:c9:bf:bb:48:72:4a:84:55:6f:62:
ce:1a:d2:b4:8b:dc:65:af:bc:6d:ff:55:ce:61:3c:
ce:3b:5a:4f:a5:c8:1e:ff:d5:63:fb:7d:83:4b:26:
f8:82:ba:3c:46:a6:ed:9e:39:01:6a:66:cb:eb:d4:
27:42:01:39:89:60:3d:61:a9:46:ef:f9:c8:27:ea:
2d:0f:73:e1:9a:0c:03:e3:72:ab:7f:c2:e7:0f:4f:
5a:81:ee:58:66:04:e6:d6:d9:de:dd:76:b3:97:2a:
82:17:a4:b5:1f:99:91:d2:d6:55:15:72:b2:07:0e:
11:da:e0:4e:06:ac:9e:74:b8:6f:0c:82:b2:08:bb:
f5:1a:6e:e1:60:0a:21:9d:a2:76:a7:c2:64:8e:93:
e1:e0:c0:d5:91:cf:79:ef:86:d9:d5:f3:7a:6b:72:
f3:d1:2e:c6:ba:03:b1:dd:39:9b:c3:9c:ca:af:8b:
5f:42:c6:59:ba:57:67:2b:65:33:d4:2c:8b:f3:f4:
e0:d4:21:01:78:84:48:10:e0:7f:4d:99:37:d4:a0:
49:e2:8b:82:69:02:91:2c:ce:45:95:63:41:2f:92:
85:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:47:D8:41:E9:5E:E1:A1:A2:D5:E1:C4:F6:0C:02:DA:1E:16:EB:EC
X509v3 Authority Key Identifier:
keyid:32:03:8F:6A:7B:B7:77:0A:72:AE:70:0D:31:B6:A0:0A:81:EE:8D:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MgOPanu3dwpyrnANMbagCoHujbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d0beb2-c576-4e8d-b148-d79508e16869/1/MgOPanu3dwpyrnANMbagCoHujbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d0beb2-c576-4e8d-b148-d79508e16869/1/MgOPanu3dwpyrnANMbagCoHujbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:51:43:b4:7a:df:97:c5:a4:aa:dc:48:28:82:cc:40:b7:e3:
a9:d2:75:e6:76:92:67:b1:74:4e:17:42:b8:f9:67:14:de:38:
2e:8a:14:e0:16:be:6a:89:66:4f:fc:36:c6:b4:29:93:78:96:
19:e0:52:ee:cf:b5:c9:1b:12:7a:8c:dd:e5:94:58:f1:d3:6e:
0f:f2:97:55:ff:f5:1c:cd:fb:b2:bb:37:2d:86:b2:12:25:47:
fa:0e:a2:72:58:51:d9:0e:89:2e:72:c4:a7:b6:fd:e0:58:91:
a2:87:a0:c5:63:96:5c:5c:fc:d7:23:94:4e:ca:3d:61:d3:2e:
84:1b:35:d3:f4:74:60:00:1a:ef:66:c0:7e:12:e4:cd:98:fa:
4e:9c:51:7d:2d:b6:8a:8b:14:8f:a5:e4:f7:16:73:cb:e2:75:
27:19:80:5e:2d:4e:3d:ed:f3:45:78:29:5c:52:aa:2e:0a:ec:
76:b6:41:7f:41:f3:cd:18:25:11:62:95:82:ef:db:22:1c:ef:
42:32:7d:1f:f9:fb:84:a0:40:0f:f6:b8:fa:17:d4:7b:d7:c9:
2c:a8:d1:25:fe:a7:65:af:b1:8e:d0:e8:18:a4:20:83:35:d9:
d1:b5:b4:7f:de:99:49:63:6d:9b:43:ce:b3:36:f6:17:d6:c1:
ac:0d:6d:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:28:03 2025 by rpki-client