Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/40e57e-c627-4b9b-9577-596fa8c0a57a/1/MGKNkjjiPWv0xzWZXJ4t6gBQ8Aw.mft
File: MGKNkjjiPWv0xzWZXJ4t6gBQ8Aw.mft (raw, json)
Hash identifier: LoBp0XoJFftsKpISh9YtAUTZwVpuRRhLPOqMsNzGhnQ=
Subject key identifier: 59:9D:38:61:61:1A:7D:00:62:B6:F1:65:4B:3F:A3:99:B4:00:0D:54
Authority key identifier: 30:62:8D:92:38:E2:3D:6B:F4:C7:35:99:5C:9E:2D:EA:00:50:F0:0C
Certificate issuer: /CN=30628d9238e23d6bf4c735995c9e2dea0050f00c
Certificate serial: 0198D515C5BAD02141BA4C525EB052A79F66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MGKNkjjiPWv0xzWZXJ4t6gBQ8Aw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/40e57e-c627-4b9b-9577-596fa8c0a57a/1/MGKNkjjiPWv0xzWZXJ4t6gBQ8Aw.mft
Manifest number: 06AF
Signing time: Sat 23 Aug 2025 04:00:30 +0000
Manifest this update: Sat 23 Aug 2025 04:00:30 +0000
Manifest next update: Sun 24 Aug 2025 04:00:30 +0000
Files and hashes: 1: MGKNkjjiPWv0xzWZXJ4t6gBQ8Aw.crl (hash: L+kqQuWMKBmPRziZbjshm0eXWywyd4oRCKTd68gO7HE=)
2: gVZpy_aU2P0Pr-2EJHA1HwKJhRU.roa (hash: P5u1LpZGGtQaGv/FeFmSXhXnEGgm7B33JQ+aoyUNOOk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/40e57e-c627-4b9b-9577-596fa8c0a57a/1/MGKNkjjiPWv0xzWZXJ4t6gBQ8Aw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/40e57e-c627-4b9b-9577-596fa8c0a57a/1/MGKNkjjiPWv0xzWZXJ4t6gBQ8Aw.mft
rsync://rpki.ripe.net/repository/DEFAULT/MGKNkjjiPWv0xzWZXJ4t6gBQ8Aw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:c5:ba:d0:21:41:ba:4c:52:5e:b0:52:a7:9f:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30628d9238e23d6bf4c735995c9e2dea0050f00c
Validity
Not Before: Aug 23 04:00:30 2025 GMT
Not After : Aug 24 04:00:30 2025 GMT
Subject: CN=599d3861611a7d0062b6f1654b3fa399b4000d54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:bc:b5:f9:2b:3c:43:34:de:0e:88:8a:7b:67:
77:0d:0c:bd:57:13:b3:80:e8:ac:ac:60:71:97:47:
c8:f3:29:55:48:c8:79:db:28:7b:ed:1f:50:21:e3:
9f:c7:ac:93:28:10:0d:35:77:22:84:1c:ca:39:da:
a3:5d:a1:03:c8:e3:8f:97:5a:76:5a:a4:7f:e3:f5:
c0:75:57:d6:93:e9:d1:e3:bf:1d:c0:23:d2:2b:14:
f0:59:6e:76:64:69:ec:4b:88:a3:02:ae:be:a4:61:
2a:cc:b3:95:4e:17:f4:ce:fd:3a:9f:4a:41:ad:ff:
78:71:31:e5:10:09:6e:3b:e5:7f:2a:31:0f:5e:2b:
53:f9:3d:ad:48:0d:56:ba:9f:4e:a4:33:90:58:e9:
ee:e9:e6:b3:61:aa:c6:d3:f9:0f:3d:3c:10:07:7d:
d5:0c:6e:bb:15:fc:6c:e7:2b:bb:ec:a7:f6:02:a6:
80:2d:dc:b9:99:37:22:60:b9:8a:6d:c2:0e:c1:8e:
55:f9:29:86:77:71:3d:05:ac:09:bf:7e:16:90:d7:
4f:6d:e3:ee:b9:5a:4b:d5:3a:d2:d1:d5:37:66:30:
c4:03:6f:90:8c:b9:00:cc:f3:f0:44:6d:e0:f9:c6:
15:bb:99:2d:54:80:89:c2:ce:58:1c:98:8b:c2:45:
77:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:9D:38:61:61:1A:7D:00:62:B6:F1:65:4B:3F:A3:99:B4:00:0D:54
X509v3 Authority Key Identifier:
keyid:30:62:8D:92:38:E2:3D:6B:F4:C7:35:99:5C:9E:2D:EA:00:50:F0:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGKNkjjiPWv0xzWZXJ4t6gBQ8Aw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/40e57e-c627-4b9b-9577-596fa8c0a57a/1/MGKNkjjiPWv0xzWZXJ4t6gBQ8Aw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/40e57e-c627-4b9b-9577-596fa8c0a57a/1/MGKNkjjiPWv0xzWZXJ4t6gBQ8Aw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:77:6c:bb:c9:50:de:83:59:8f:44:ef:34:92:e2:f7:43:b0:
b6:19:48:23:13:f9:c5:8c:3f:67:e6:8a:d2:a7:f7:b0:c4:f3:
66:4f:d1:d7:7f:21:1b:57:cf:20:28:65:c6:1b:b4:79:5e:c4:
ae:c9:17:08:a0:a4:1e:da:5b:c8:28:5b:de:0e:a9:d7:9d:ee:
5b:dd:69:cb:8d:9c:22:1e:b2:ce:01:39:05:f5:aa:07:e2:60:
e0:99:18:20:ff:1d:fa:11:73:a4:d5:1c:31:fa:10:e1:9b:2e:
c3:16:9b:a4:cd:91:61:5a:0a:b6:2b:37:c6:72:f8:2a:1c:3e:
fd:e3:de:10:d3:86:c5:4b:16:df:55:9a:25:54:3c:f7:31:94:
48:87:1a:7c:07:6a:d5:7b:58:5e:82:ba:76:e7:b4:08:d8:c6:
76:ae:c4:75:1a:1a:21:ca:c5:ee:44:cb:ae:a9:71:46:a4:f6:
7b:fb:5b:ce:a2:5c:9b:26:0a:0f:ae:cc:85:81:be:22:cd:5d:
a7:93:80:6d:f7:d4:76:4c:f1:fe:2b:8f:1e:3d:27:e7:c8:34:
74:a0:be:30:f0:2d:6b:97:1b:ba:68:f9:ed:fa:fc:28:60:5b:
4a:f3:d0:0f:3c:ff:17:50:83:08:b7:47:80:7b:9e:09:a5:21:
60:2a:87:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:48:28 2025 by rpki-client