Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c26199-3303-4223-9f0f-5dafc634ccd6/1/MgrQyxyPq9KnFycj8utT6gLoSmk.mft
File: MgrQyxyPq9KnFycj8utT6gLoSmk.mft (raw, json)
Hash identifier: o8LhofNnqnyyS/xcCD9EgaAHrc9uIVqKWmA+cpMwiS0=
Subject key identifier: 95:A7:C0:41:85:EB:89:56:04:DB:FE:A6:CD:D1:0A:83:C4:18:06:89
Authority key identifier: 32:0A:D0:CB:1C:8F:AB:D2:A7:17:27:23:F2:EB:53:EA:02:E8:4A:69
Certificate issuer: /CN=320ad0cb1c8fabd2a7172723f2eb53ea02e84a69
Certificate serial: 0197DDE5546A4321F69E4912BFF577581127
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MgrQyxyPq9KnFycj8utT6gLoSmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c26199-3303-4223-9f0f-5dafc634ccd6/1/MgrQyxyPq9KnFycj8utT6gLoSmk.mft
Manifest number: 0236
Signing time: Sun 06 Jul 2025 04:01:23 +0000
Manifest this update: Sun 06 Jul 2025 04:01:23 +0000
Manifest next update: Mon 07 Jul 2025 04:01:23 +0000
Files and hashes: 1: JyQJbELaexgQ6fqiGT_WU8kf0iA.roa (hash: k3GN2/34cdpJMDa/U2bzg9E3dU3QeePwWvyheMjQ+5o=)
2: MgrQyxyPq9KnFycj8utT6gLoSmk.crl (hash: A20X28mldYnoIPSqzrN5gKPEiFHIHOdlw3CZpB0Z7vE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/c26199-3303-4223-9f0f-5dafc634ccd6/1/MgrQyxyPq9KnFycj8utT6gLoSmk.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/c26199-3303-4223-9f0f-5dafc634ccd6/1/MgrQyxyPq9KnFycj8utT6gLoSmk.mft
rsync://rpki.ripe.net/repository/DEFAULT/MgrQyxyPq9KnFycj8utT6gLoSmk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Jul 2025 04:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:dd:e5:54:6a:43:21:f6:9e:49:12:bf:f5:77:58:11:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=320ad0cb1c8fabd2a7172723f2eb53ea02e84a69
Validity
Not Before: Jul 6 04:01:23 2025 GMT
Not After : Jul 7 04:01:23 2025 GMT
Subject: CN=95a7c04185eb895604dbfea6cdd10a83c4180689
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:30:b4:44:44:e8:22:4c:46:99:56:b5:dc:ae:
40:a5:00:dd:d7:8b:58:e6:8d:33:19:9b:3d:ed:f0:
33:d1:38:bf:0f:f0:be:e1:10:36:9e:3c:6b:dd:80:
56:8a:74:4e:72:47:c3:df:37:b5:31:70:b3:c7:1b:
25:d9:7c:1b:ec:c5:c1:82:30:0d:3d:ac:83:d4:e2:
a8:26:d5:ef:fa:a5:23:70:fa:58:27:ff:34:44:f4:
ab:66:8b:c6:ea:8a:3d:ec:f9:6b:f0:a2:da:59:e0:
f6:95:20:52:f2:3c:e7:e6:13:70:24:6b:91:c0:17:
1a:f5:d9:93:75:e5:91:c0:12:7a:ce:99:e8:84:bf:
f3:5b:70:43:d4:a7:d2:ce:6f:6d:22:a2:e4:5c:7c:
26:78:26:81:75:4a:12:6f:4b:e8:40:23:c5:e2:4c:
0a:95:e5:ba:d5:41:e8:1d:b1:80:9a:1d:b2:d2:53:
32:50:0e:9c:a6:7c:b0:5b:3c:78:c3:cc:c1:ee:e5:
f8:2e:3d:2b:97:3f:f5:28:52:14:7c:78:e0:26:ed:
d7:53:ce:e2:3f:e3:e8:a4:d9:0b:b1:0a:0a:3f:6d:
bd:75:43:e2:e4:b8:70:e7:6b:71:b5:3e:28:41:d4:
b4:e3:27:d6:7d:b6:d6:64:50:8f:2b:02:31:53:bb:
0b:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:A7:C0:41:85:EB:89:56:04:DB:FE:A6:CD:D1:0A:83:C4:18:06:89
X509v3 Authority Key Identifier:
keyid:32:0A:D0:CB:1C:8F:AB:D2:A7:17:27:23:F2:EB:53:EA:02:E8:4A:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MgrQyxyPq9KnFycj8utT6gLoSmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c26199-3303-4223-9f0f-5dafc634ccd6/1/MgrQyxyPq9KnFycj8utT6gLoSmk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c26199-3303-4223-9f0f-5dafc634ccd6/1/MgrQyxyPq9KnFycj8utT6gLoSmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:1c:fa:93:2b:14:f7:ff:a7:b2:bb:ef:87:29:26:84:b9:0c:
43:5e:45:4f:f6:93:26:71:28:4a:2a:43:38:54:9b:e6:b8:d4:
b3:31:b4:18:69:ea:7b:4e:f5:aa:7b:45:0a:8a:96:20:e8:73:
5c:c3:d8:e0:0f:8b:02:a6:57:3a:7b:3e:2d:64:97:72:5f:f3:
18:23:72:a8:9a:7d:81:f1:7d:45:0b:39:4c:15:09:d8:eb:19:
4c:0c:a7:97:3c:8e:0d:79:af:a3:91:15:c7:ff:84:3f:f4:03:
08:5e:fc:2a:4a:d2:9f:93:3e:3c:69:f4:86:58:e8:5c:82:d6:
ba:20:35:7a:db:6c:e9:6c:37:4d:0d:3e:03:77:9d:da:3b:8a:
61:db:42:9c:a5:49:10:b6:67:d8:e9:8d:94:1e:48:34:77:49:
f6:7b:f7:be:a8:d6:a8:aa:c4:9b:43:83:54:9c:50:7b:75:44:
cf:42:80:55:31:f4:4f:af:97:ed:2d:6c:d9:a3:59:80:e5:78:
27:c5:67:7c:70:d5:0c:9e:1d:72:3d:68:1b:6b:ea:c0:f4:12:
0b:7c:2e:a6:8d:c4:f3:57:6a:64:73:f4:cc:de:f4:67:ac:fb:
e4:c5:cc:93:b8:8b:0b:9f:96:67:0c:88:b1:62:24:16:31:12:
f1:47:2b:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 6 09:41:59 2025 by rpki-client