Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/a8941a-7250-48ec-aaf8-6d8ea9d1cd73/1/MGE0vPWfWB1rdmMM-oeGeHaikhU.mft
File: MGE0vPWfWB1rdmMM-oeGeHaikhU.mft (raw, json)
Hash identifier: iEKr+eCdu6oFQzyUaIBEXayHvvUMCwDkD6/bGq003cE=
Subject key identifier: 3F:5B:03:18:E7:A5:F5:D1:D1:EB:D4:FB:4E:B5:63:06:6C:91:F8:C4
Authority key identifier: 30:61:34:BC:F5:9F:58:1D:6B:76:63:0C:FA:87:86:78:76:A2:92:15
Certificate issuer: /CN=306134bcf59f581d6b76630cfa87867876a29215
Certificate serial: 0198D4738109774516DC362F1AAB82140CA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MGE0vPWfWB1rdmMM-oeGeHaikhU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/a8941a-7250-48ec-aaf8-6d8ea9d1cd73/1/MGE0vPWfWB1rdmMM-oeGeHaikhU.mft
Manifest number: 11E8
Signing time: Sat 23 Aug 2025 01:03:15 +0000
Manifest this update: Sat 23 Aug 2025 01:03:15 +0000
Manifest next update: Sun 24 Aug 2025 01:03:15 +0000
Files and hashes: 1: MGE0vPWfWB1rdmMM-oeGeHaikhU.crl (hash: 0ZYA/npn56jbboFAPKCPmSzi27+FKkuaggTl/E1+Qvk=)
2: iyT2rEaTLGTQJtoCzDixmDHk4q8.roa (hash: DJdcXuwOyrFSr66rkLo/Y+8lRD0xwqdql+52mCZmuDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/a8941a-7250-48ec-aaf8-6d8ea9d1cd73/1/MGE0vPWfWB1rdmMM-oeGeHaikhU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/a8941a-7250-48ec-aaf8-6d8ea9d1cd73/1/MGE0vPWfWB1rdmMM-oeGeHaikhU.mft
rsync://rpki.ripe.net/repository/DEFAULT/MGE0vPWfWB1rdmMM-oeGeHaikhU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:81:09:77:45:16:dc:36:2f:1a:ab:82:14:0c:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=306134bcf59f581d6b76630cfa87867876a29215
Validity
Not Before: Aug 23 01:03:15 2025 GMT
Not After : Aug 24 01:03:15 2025 GMT
Subject: CN=3f5b0318e7a5f5d1d1ebd4fb4eb563066c91f8c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:1a:3d:51:75:54:b7:4c:40:da:2e:1e:0f:9f:
64:81:69:4c:c2:fc:65:0a:64:36:ea:cc:15:be:51:
c5:bd:c9:5f:6d:31:33:78:c3:d7:c3:25:d0:30:f0:
c6:08:e5:c2:52:c4:38:b3:f2:63:67:37:d7:cb:af:
0a:6c:bc:4e:a5:70:c6:92:c9:23:37:0d:4d:c6:0b:
8c:1d:7f:4a:74:2a:16:e2:44:8a:17:5b:b6:c3:a9:
ed:2d:f2:89:b1:c3:23:bb:27:fa:58:8e:71:75:e4:
3f:53:b5:6f:0f:bf:f5:4b:7f:88:44:a6:28:7b:81:
c2:59:a5:de:09:00:e2:29:1f:d4:15:88:1f:32:00:
6b:3c:d3:13:80:a2:67:f2:fe:23:34:62:f6:03:bc:
cd:44:40:69:2d:9f:06:12:84:85:15:97:d2:5d:72:
45:c0:df:3c:72:89:bb:f7:34:cd:71:43:06:c3:ef:
19:9e:fa:a5:87:ce:aa:19:c2:69:24:62:12:fb:87:
92:1c:e7:4d:d8:8d:f0:3e:fb:f2:f4:b9:b9:e7:f0:
c5:16:2b:50:87:27:59:66:03:b8:29:50:07:5b:4b:
8c:33:de:5f:95:1f:fb:82:20:5b:fd:dd:0a:e4:ac:
9c:36:6c:30:12:ba:5a:cd:52:a5:b7:2e:ee:f2:be:
37:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:5B:03:18:E7:A5:F5:D1:D1:EB:D4:FB:4E:B5:63:06:6C:91:F8:C4
X509v3 Authority Key Identifier:
keyid:30:61:34:BC:F5:9F:58:1D:6B:76:63:0C:FA:87:86:78:76:A2:92:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGE0vPWfWB1rdmMM-oeGeHaikhU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a8941a-7250-48ec-aaf8-6d8ea9d1cd73/1/MGE0vPWfWB1rdmMM-oeGeHaikhU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a8941a-7250-48ec-aaf8-6d8ea9d1cd73/1/MGE0vPWfWB1rdmMM-oeGeHaikhU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:ca:c2:27:77:b1:e3:8c:60:0d:2f:7b:46:67:45:4e:4d:c1:
9c:53:ac:0a:16:56:07:68:06:a3:d7:c9:99:28:6e:c5:dc:e1:
18:a5:13:81:71:58:fd:00:5e:77:cd:ec:92:00:ec:d4:66:ab:
c0:21:f2:d1:c3:69:d5:83:93:7b:59:3d:a8:cb:b6:1b:54:c3:
7f:59:7f:6a:4d:91:5f:32:8a:47:d7:de:88:2e:4e:00:7c:03:
04:45:65:23:8a:0c:a5:e8:62:79:52:9e:06:aa:b6:c7:69:8b:
34:1f:2a:14:65:60:b9:cf:ef:5e:ba:63:66:a5:f8:af:fe:e8:
10:3a:9d:44:9c:15:d0:b7:0e:94:ab:72:76:d1:cc:58:64:c1:
b6:97:09:35:82:fe:9b:a7:ec:3b:7f:d4:4b:ab:f9:37:3c:b2:
3a:a1:50:c3:fa:32:f6:ee:c9:3f:67:f2:ac:71:39:29:29:ca:
51:dc:55:ae:f9:ac:4b:39:4e:bc:b5:e7:5f:72:30:ea:1d:5c:
cf:c2:ec:e5:a5:48:01:f2:9b:63:fe:06:1e:df:52:fb:34:92:
71:69:cc:fa:be:3c:52:1d:2d:45:71:33:a9:65:7b:b5:2e:02:
7f:8f:66:95:4b:ac:ac:3b:43:7e:2d:e1:9c:7e:ae:b1:f2:3b:
41:a6:e2:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:33:14 2025 by rpki-client