Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/863c04-b07e-4c3a-9f45-fe2474d2f07c/1/mgGl7N4ueVkyWREG0II9DRVPcAI.mft
File: mgGl7N4ueVkyWREG0II9DRVPcAI.mft (raw, json)
Hash identifier: tDL0wEy73dwntGFzChM1e5tLrB9p/Q1r5Bh79crYzzI=
Subject key identifier: 42:34:B4:EE:F5:C3:B8:97:11:D5:C6:FB:C2:A2:59:FB:F4:CA:09:A9
Authority key identifier: 9A:01:A5:EC:DE:2E:79:59:32:59:11:06:D0:82:3D:0D:15:4F:70:02
Certificate issuer: /CN=9a01a5ecde2e795932591106d0823d0d154f7002
Certificate serial: 0196A276C9ECF6073945C6EB4BAE7055B473
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mgGl7N4ueVkyWREG0II9DRVPcAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/863c04-b07e-4c3a-9f45-fe2474d2f07c/1/mgGl7N4ueVkyWREG0II9DRVPcAI.mft
Manifest number: 0652
Signing time: Mon 05 May 2025 22:00:15 +0000
Manifest this update: Mon 05 May 2025 22:00:15 +0000
Manifest next update: Tue 06 May 2025 22:00:15 +0000
Files and hashes: 1: mgGl7N4ueVkyWREG0II9DRVPcAI.crl (hash: a35uLx88tnt0xmY7dVvjUYtmHEsuglZ603tSLfLnq5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/863c04-b07e-4c3a-9f45-fe2474d2f07c/1/mgGl7N4ueVkyWREG0II9DRVPcAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/863c04-b07e-4c3a-9f45-fe2474d2f07c/1/mgGl7N4ueVkyWREG0II9DRVPcAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/mgGl7N4ueVkyWREG0II9DRVPcAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 18:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a2:76:c9:ec:f6:07:39:45:c6:eb:4b:ae:70:55:b4:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a01a5ecde2e795932591106d0823d0d154f7002
Validity
Not Before: May 5 22:00:15 2025 GMT
Not After : May 6 22:00:15 2025 GMT
Subject: CN=4234b4eef5c3b89711d5c6fbc2a259fbf4ca09a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:3a:96:c8:2b:1a:df:6b:b9:a6:69:7d:d4:8e:
fe:cd:85:d1:e3:1f:32:f3:3d:d1:e5:bd:0c:d5:da:
7c:bf:7f:91:01:da:5b:86:d7:12:28:f3:81:5b:93:
ec:a3:19:d9:08:64:86:48:ca:be:b4:d0:cd:22:26:
d5:c4:6c:66:1a:0d:21:53:06:74:46:af:81:68:b4:
5c:4c:38:b3:d4:7b:49:62:bb:6e:b4:cb:0e:eb:b4:
0d:72:f9:5c:ae:86:21:4e:9a:e8:24:6a:7f:e4:57:
4a:14:81:5f:59:b5:c2:7d:d2:70:a4:50:ba:ff:6f:
2b:c7:eb:37:c3:cf:1a:ee:ba:dd:ca:d9:b3:34:47:
8a:31:fe:dc:3c:23:3e:44:c5:14:1e:88:ee:d5:d2:
c8:19:93:ea:bd:30:bc:10:9e:1e:65:f6:82:b6:53:
82:b4:e5:cc:18:35:4b:77:97:7f:b5:87:b8:5c:16:
fe:b7:ad:54:20:d7:fb:24:ed:50:ae:19:07:d1:79:
87:eb:06:98:e2:79:d3:64:c9:0d:3a:df:65:f2:e5:
a3:36:f2:f9:f1:61:17:e1:c9:21:a7:ab:d0:b3:ea:
4f:80:aa:af:4b:92:47:82:a1:87:e5:80:f5:48:fe:
63:53:e7:89:18:b8:52:3c:85:cd:87:3a:97:44:39:
89:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:34:B4:EE:F5:C3:B8:97:11:D5:C6:FB:C2:A2:59:FB:F4:CA:09:A9
X509v3 Authority Key Identifier:
keyid:9A:01:A5:EC:DE:2E:79:59:32:59:11:06:D0:82:3D:0D:15:4F:70:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mgGl7N4ueVkyWREG0II9DRVPcAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/863c04-b07e-4c3a-9f45-fe2474d2f07c/1/mgGl7N4ueVkyWREG0II9DRVPcAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/863c04-b07e-4c3a-9f45-fe2474d2f07c/1/mgGl7N4ueVkyWREG0II9DRVPcAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:53:e5:8e:bd:73:42:e2:5d:81:91:ff:5d:dd:60:07:2c:c4:
44:ca:c1:90:91:b0:7b:eb:38:46:ed:a5:dd:52:65:9d:4b:09:
1f:78:b6:e3:91:bf:4f:87:ae:a7:07:2d:ca:6c:f4:58:3f:d9:
f3:01:f5:f4:ce:42:26:86:b1:bb:2c:4a:f7:7c:15:9d:5a:eb:
f0:44:cd:34:92:ac:1e:d9:55:5c:d3:e4:ca:44:3c:99:86:cd:
99:ce:5c:95:2b:b1:f5:47:07:d3:a6:30:e3:58:63:b4:b9:26:
e4:30:b5:b7:58:cd:96:c9:79:8d:bb:b0:a3:92:b5:0b:95:92:
ac:37:bd:94:c0:39:d1:80:e5:d5:bf:be:e3:56:5e:a1:37:7e:
89:0a:92:b9:5e:be:f8:81:30:ef:2b:a9:85:f3:a6:a2:c5:f3:
b1:5e:7f:92:c1:72:1e:78:53:ce:25:57:0f:e6:19:06:2c:93:
89:c5:e2:3a:54:56:59:dd:c2:ee:00:fe:7b:63:68:3d:75:49:
cd:99:0e:7a:61:cd:fb:82:de:26:90:23:0e:24:45:fc:ad:5a:
32:ed:ea:97:b1:aa:73:d3:66:f2:1c:22:0f:84:21:14:d7:09:
2e:21:17:4d:6e:31:5d:9e:15:2e:55:07:68:5c:85:9c:06:16:
5d:40:fe:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 00:09:59 2025 by rpki-client