Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/863c04-b07e-4c3a-9f45-fe2474d2f07c/1/mgGl7N4ueVkyWREG0II9DRVPcAI.mft
File: mgGl7N4ueVkyWREG0II9DRVPcAI.mft (raw, json)
Hash identifier: HULhZzunYKdFHaA612/dbAvR6VNUO/kN5nGkH63nRFU=
Subject key identifier: 36:E8:7C:39:C9:06:1F:15:8C:46:A0:BE:AF:1D:15:89:A3:6F:B8:82
Authority key identifier: 9A:01:A5:EC:DE:2E:79:59:32:59:11:06:D0:82:3D:0D:15:4F:70:02
Certificate issuer: /CN=9a01a5ecde2e795932591106d0823d0d154f7002
Certificate serial: 0197B6A0487B80384F47F307B270D47073E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mgGl7N4ueVkyWREG0II9DRVPcAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/863c04-b07e-4c3a-9f45-fe2474d2f07c/1/mgGl7N4ueVkyWREG0II9DRVPcAI.mft
Manifest number: 06E1
Signing time: Sat 28 Jun 2025 13:00:46 +0000
Manifest this update: Sat 28 Jun 2025 13:00:46 +0000
Manifest next update: Sun 29 Jun 2025 13:00:46 +0000
Files and hashes: 1: mgGl7N4ueVkyWREG0II9DRVPcAI.crl (hash: Vi6b2G9X6wBPxPvuoRR1x7qCzOezO5RR3/s4mUwaE1M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/863c04-b07e-4c3a-9f45-fe2474d2f07c/1/mgGl7N4ueVkyWREG0II9DRVPcAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/863c04-b07e-4c3a-9f45-fe2474d2f07c/1/mgGl7N4ueVkyWREG0II9DRVPcAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/mgGl7N4ueVkyWREG0II9DRVPcAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:48:7b:80:38:4f:47:f3:07:b2:70:d4:70:73:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a01a5ecde2e795932591106d0823d0d154f7002
Validity
Not Before: Jun 28 13:00:46 2025 GMT
Not After : Jun 29 13:00:46 2025 GMT
Subject: CN=36e87c39c9061f158c46a0beaf1d1589a36fb882
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e5:6f:eb:15:ad:be:25:66:d1:46:a0:59:af:
39:e2:0f:7c:86:b8:d6:3a:ef:6c:2b:bd:5f:7d:29:
43:d4:0f:36:0f:a3:0a:14:f6:39:4e:82:1b:8e:ad:
50:6c:57:0d:f6:43:72:aa:46:c6:03:c4:94:47:c1:
90:d9:7f:da:a2:c5:28:91:ed:60:4f:ca:18:f1:49:
a2:9e:64:c2:48:07:5a:d6:36:a1:31:a0:5d:31:8d:
3f:90:4c:f0:3a:39:04:7f:ba:29:c4:89:bf:24:38:
fe:7b:d9:f8:52:f1:5e:9e:e5:4b:d2:98:27:e6:da:
09:e3:33:3a:29:b6:32:81:e0:c3:a0:74:fe:62:ec:
a7:76:19:35:b7:ff:e8:6f:19:3b:59:db:4a:e0:79:
40:c1:1c:81:38:db:13:4c:2e:61:39:da:a7:f8:06:
88:04:40:6c:ba:47:72:9e:69:24:8f:3c:c3:0e:b4:
d1:3e:6f:b9:4c:ce:24:7d:bf:04:f8:42:4a:83:4e:
dc:21:ee:e9:39:4e:0a:0f:ae:90:78:b2:d8:66:19:
2d:43:45:2a:68:43:c8:d3:d2:8c:21:04:4f:19:11:
90:57:e9:1c:ff:da:2f:91:1f:21:fe:08:55:0b:1c:
56:84:18:57:d0:c2:47:e3:bc:7d:05:7d:10:21:b9:
2c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:E8:7C:39:C9:06:1F:15:8C:46:A0:BE:AF:1D:15:89:A3:6F:B8:82
X509v3 Authority Key Identifier:
keyid:9A:01:A5:EC:DE:2E:79:59:32:59:11:06:D0:82:3D:0D:15:4F:70:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mgGl7N4ueVkyWREG0II9DRVPcAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/863c04-b07e-4c3a-9f45-fe2474d2f07c/1/mgGl7N4ueVkyWREG0II9DRVPcAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/863c04-b07e-4c3a-9f45-fe2474d2f07c/1/mgGl7N4ueVkyWREG0II9DRVPcAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:9e:d8:85:e8:6e:e1:ad:44:90:cc:d3:62:78:c5:1e:01:a5:
14:fb:5e:8c:bb:29:8a:66:0d:ee:8d:e0:1d:fa:b2:89:86:b9:
a2:ed:79:83:ee:4e:3a:7a:be:37:3b:cf:f6:9d:c3:b1:44:80:
b1:c3:b2:cb:94:04:e4:5d:85:a1:84:4f:54:a7:24:e8:7e:46:
b8:21:d8:76:7c:9e:60:f2:fd:05:8f:7c:39:55:f7:0f:a9:df:
46:74:a5:09:d1:45:e3:d6:09:03:ec:d9:76:59:62:31:ea:11:
f0:b3:bd:47:02:1d:2e:25:b1:28:05:47:45:a8:99:bf:b4:47:
24:c4:a1:6a:72:b2:1f:f9:a6:97:ab:3b:90:fb:8c:03:43:18:
90:02:2f:e2:c9:e0:ac:e2:47:e9:35:f7:13:94:a4:e7:e9:78:
ce:d9:c6:dd:2f:d9:54:d7:ba:22:82:bd:be:b7:4c:a6:73:05:
67:f3:57:b4:86:ac:f2:27:3f:5a:0a:d0:44:7f:d0:b5:d9:5d:
6b:24:a3:93:3e:af:6d:3e:0c:6b:23:8b:36:b8:d6:4f:0b:b1:
ef:9c:4f:27:ae:0d:52:e6:dc:32:87:4d:81:72:bc:0d:13:1b:
c7:a5:47:ec:ab:55:80:b8:2e:ef:43:79:25:cb:dd:4d:41:b3:
16:79:42:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:38:03 2025 by rpki-client