Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/863c04-b07e-4c3a-9f45-fe2474d2f07c/1/mgGl7N4ueVkyWREG0II9DRVPcAI.mft
File: mgGl7N4ueVkyWREG0II9DRVPcAI.mft (raw, json)
Hash identifier: kgeLmUVDzfdVmrR4Obbtb+E73EseGCUsflFNplkVvLw=
Subject key identifier: CD:AE:87:1C:FE:73:58:90:50:AF:97:7B:69:BB:F2:F3:5C:9A:C7:B4
Authority key identifier: 9A:01:A5:EC:DE:2E:79:59:32:59:11:06:D0:82:3D:0D:15:4F:70:02
Certificate issuer: /CN=9a01a5ecde2e795932591106d0823d0d154f7002
Certificate serial: 0198D660FC852DBC0E53D1267A7401E07208
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mgGl7N4ueVkyWREG0II9DRVPcAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/863c04-b07e-4c3a-9f45-fe2474d2f07c/1/mgGl7N4ueVkyWREG0II9DRVPcAI.mft
Manifest number: 0776
Signing time: Sat 23 Aug 2025 10:02:16 +0000
Manifest this update: Sat 23 Aug 2025 10:02:16 +0000
Manifest next update: Sun 24 Aug 2025 10:02:16 +0000
Files and hashes: 1: mgGl7N4ueVkyWREG0II9DRVPcAI.crl (hash: 3Ony4FxJdLJDmttya+E4stgTkzaSH5B57ZNnAKLgUQw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/863c04-b07e-4c3a-9f45-fe2474d2f07c/1/mgGl7N4ueVkyWREG0II9DRVPcAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/863c04-b07e-4c3a-9f45-fe2474d2f07c/1/mgGl7N4ueVkyWREG0II9DRVPcAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/mgGl7N4ueVkyWREG0II9DRVPcAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:02:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:fc:85:2d:bc:0e:53:d1:26:7a:74:01:e0:72:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a01a5ecde2e795932591106d0823d0d154f7002
Validity
Not Before: Aug 23 10:02:16 2025 GMT
Not After : Aug 24 10:02:16 2025 GMT
Subject: CN=cdae871cfe73589050af977b69bbf2f35c9ac7b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:13:d8:0e:1c:18:e7:d1:0a:f3:c7:72:4a:3f:
e6:00:50:1b:6d:28:08:06:cb:30:cd:42:f3:9c:34:
4c:a8:04:71:be:53:79:06:8c:27:01:ca:6a:fc:a5:
b2:f2:db:59:4e:f4:dc:9f:c2:45:b5:13:83:5d:f2:
b4:71:52:51:fd:34:f6:b9:16:75:6f:10:30:69:e6:
db:c0:50:c1:9e:51:3d:26:d0:b9:87:9f:bb:f5:09:
a2:a6:40:20:fe:4a:a0:55:2f:c8:21:7d:0d:bc:f5:
1b:e1:4a:bb:97:14:a0:73:2b:9e:2a:78:7e:0e:41:
ad:78:95:6f:7a:13:1d:63:f0:b8:2f:6a:5c:61:55:
c1:8f:26:a4:c4:ac:7c:b0:eb:15:d5:72:03:0a:6d:
3e:51:f8:8e:4b:a7:bd:62:35:68:86:be:0b:96:5b:
ec:47:3d:fd:de:75:5d:e7:04:80:2f:70:9a:0b:91:
44:aa:bf:eb:f1:14:72:c5:34:2b:fd:60:bb:2a:08:
37:19:71:79:2b:43:49:53:bc:67:22:63:cb:3f:d4:
4d:9a:5b:ea:e1:e9:37:29:68:f0:5a:17:d6:39:eb:
86:d2:cb:a0:2d:2d:13:69:97:49:7c:a6:1b:f0:d4:
92:1b:1d:a7:89:7f:bd:54:19:b3:4b:ec:fc:5e:33:
b4:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:AE:87:1C:FE:73:58:90:50:AF:97:7B:69:BB:F2:F3:5C:9A:C7:B4
X509v3 Authority Key Identifier:
keyid:9A:01:A5:EC:DE:2E:79:59:32:59:11:06:D0:82:3D:0D:15:4F:70:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mgGl7N4ueVkyWREG0II9DRVPcAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/863c04-b07e-4c3a-9f45-fe2474d2f07c/1/mgGl7N4ueVkyWREG0II9DRVPcAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/863c04-b07e-4c3a-9f45-fe2474d2f07c/1/mgGl7N4ueVkyWREG0II9DRVPcAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:32:2f:ff:95:da:c6:4b:55:9a:cb:02:01:d7:33:a0:0b:26:
6c:86:51:8e:50:ee:7a:2f:cf:4d:0e:a5:fe:a9:e9:8e:ca:cf:
23:59:c5:3b:d8:e6:b6:7c:a2:94:21:6b:0d:99:13:1c:7a:86:
5e:a6:f4:0f:ae:a2:ce:eb:19:c7:c1:ee:67:c9:d8:2d:15:b2:
60:e9:20:37:7d:29:fe:f0:fa:f4:76:4c:dc:e8:a6:02:be:76:
a5:62:18:5a:3d:2f:97:db:e7:31:e3:18:e1:6d:93:22:68:9f:
2c:35:85:28:70:74:88:0e:dd:f8:4f:0d:95:a3:40:11:f5:22:
f6:7e:ac:ab:3b:bc:96:ca:4b:dc:7f:67:73:6d:e7:5e:9f:4a:
d6:98:b3:92:fe:fe:54:d6:2c:9c:45:13:50:7a:22:a1:e9:88:
72:b4:9c:b1:2c:10:48:e2:a7:e4:81:3d:5b:77:a2:6f:93:a9:
cf:4d:fc:e9:78:0d:b8:79:db:b8:e5:8b:34:89:f5:66:47:e3:
30:92:e4:24:4c:e4:9e:66:1e:61:6b:36:be:77:32:10:0e:13:
4d:e2:62:30:2a:5c:ed:b3:e0:e1:25:07:4f:18:a4:9a:a8:3b:
36:d2:ec:06:8d:04:07:eb:0b:d9:97:8e:19:11:c8:f8:c1:71:
90:cc:db:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:30:54 2025 by rpki-client