Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c26199-3303-4223-9f0f-5dafc634ccd6/1/MgrQyxyPq9KnFycj8utT6gLoSmk.mft
File: MgrQyxyPq9KnFycj8utT6gLoSmk.mft (raw, json)
Hash identifier: xvQwMXAheRaGJqYp3Rfq/XiJa6ceLNkMljkfQ0dJgJg=
Subject key identifier: 0E:65:51:B9:1F:14:9C:30:BB:F3:48:4D:E0:AB:F0:8C:41:6A:3F:32
Authority key identifier: 32:0A:D0:CB:1C:8F:AB:D2:A7:17:27:23:F2:EB:53:EA:02:E8:4A:69
Certificate issuer: /CN=320ad0cb1c8fabd2a7172723f2eb53ea02e84a69
Certificate serial: 0196C3F07F9776692600997C898E15646FA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MgrQyxyPq9KnFycj8utT6gLoSmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c26199-3303-4223-9f0f-5dafc634ccd6/1/MgrQyxyPq9KnFycj8utT6gLoSmk.mft
Manifest number: 01A4
Signing time: Mon 12 May 2025 10:00:40 +0000
Manifest this update: Mon 12 May 2025 10:00:40 +0000
Manifest next update: Tue 13 May 2025 10:00:40 +0000
Files and hashes: 1: JyQJbELaexgQ6fqiGT_WU8kf0iA.roa (hash: k3GN2/34cdpJMDa/U2bzg9E3dU3QeePwWvyheMjQ+5o=)
2: MgrQyxyPq9KnFycj8utT6gLoSmk.crl (hash: 6wLPTlw7Ike30gl/hPWnx6nOSFMDtMSTiqlyAtiz/ps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/c26199-3303-4223-9f0f-5dafc634ccd6/1/MgrQyxyPq9KnFycj8utT6gLoSmk.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/c26199-3303-4223-9f0f-5dafc634ccd6/1/MgrQyxyPq9KnFycj8utT6gLoSmk.mft
rsync://rpki.ripe.net/repository/DEFAULT/MgrQyxyPq9KnFycj8utT6gLoSmk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 10:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:f0:7f:97:76:69:26:00:99:7c:89:8e:15:64:6f:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=320ad0cb1c8fabd2a7172723f2eb53ea02e84a69
Validity
Not Before: May 12 10:00:40 2025 GMT
Not After : May 13 10:00:40 2025 GMT
Subject: CN=0e6551b91f149c30bbf3484de0abf08c416a3f32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:61:c8:b0:27:5d:2a:d3:f1:0a:c1:57:7a:63:
54:69:fb:5d:24:bf:d6:62:af:fa:dd:51:51:b9:f9:
22:2c:17:0e:ef:22:57:1a:77:ba:bf:9e:1f:1a:09:
a2:d0:f0:35:a9:ae:6c:44:ee:35:99:d7:c8:38:f4:
d7:15:8d:22:28:ee:44:5b:b6:c6:91:17:54:50:6d:
3a:ea:59:f5:09:ae:11:b5:f1:70:4e:8c:8c:a7:02:
91:2c:c8:58:c3:4e:14:b8:20:9a:04:9b:e7:ae:26:
a1:fc:dd:82:f2:34:80:c8:6f:2a:3b:61:e9:e2:e2:
d8:a8:c6:12:ae:f6:5f:8b:99:f3:8c:12:a0:a1:ef:
62:77:e7:9b:b8:6e:1f:e0:42:4f:03:93:85:df:4f:
35:1e:36:ee:2a:c4:5e:d0:5b:8f:b6:89:09:d2:d2:
ea:c0:fe:33:35:42:b8:48:4d:f1:be:7e:50:91:71:
92:5a:a5:8a:7d:86:3c:0b:89:1c:45:95:37:0d:4b:
ac:e1:57:98:55:7b:e4:64:e7:6d:00:90:f5:5a:02:
b4:a7:ac:6d:3f:7c:0b:bb:6a:56:a1:45:23:b1:58:
e2:f3:f0:69:26:cb:bf:53:b0:ea:17:08:71:f2:bc:
ee:44:cf:a8:67:5e:09:2b:d2:1a:c8:e7:17:af:e4:
c8:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:65:51:B9:1F:14:9C:30:BB:F3:48:4D:E0:AB:F0:8C:41:6A:3F:32
X509v3 Authority Key Identifier:
keyid:32:0A:D0:CB:1C:8F:AB:D2:A7:17:27:23:F2:EB:53:EA:02:E8:4A:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MgrQyxyPq9KnFycj8utT6gLoSmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c26199-3303-4223-9f0f-5dafc634ccd6/1/MgrQyxyPq9KnFycj8utT6gLoSmk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c26199-3303-4223-9f0f-5dafc634ccd6/1/MgrQyxyPq9KnFycj8utT6gLoSmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:f7:88:0f:7e:1b:e9:7d:12:87:9d:1b:13:51:7e:12:70:1d:
16:da:24:59:7a:c8:61:d4:9c:30:bc:1c:9d:35:6c:ce:12:81:
8f:a5:79:73:5b:6e:a7:3d:96:ac:86:9a:2b:fa:64:ec:ab:56:
68:85:aa:92:0f:d4:c3:82:c9:73:f7:8d:46:b0:68:66:3c:c0:
c0:24:c1:39:6e:f8:3d:66:3e:62:3d:dc:83:f8:a1:1e:18:72:
75:97:cf:a0:fd:a6:41:f3:fe:3f:92:fc:25:ab:88:8e:af:58:
2a:70:d5:13:92:44:89:05:a7:d2:52:73:6a:7a:a0:12:4b:d8:
23:f0:54:a9:31:e6:f9:5b:85:37:ae:2a:d1:a8:44:64:4c:18:
cb:7e:7e:b3:d0:90:ee:76:95:fd:8a:c3:b7:b9:2d:e1:f1:ed:
1b:19:c7:dd:47:e8:b2:be:9f:34:1f:df:a2:f8:d6:0a:1c:63:
8e:d2:a1:6d:29:97:8e:42:08:a3:19:81:43:d4:a5:91:3a:14:
92:88:cb:ed:15:34:60:c1:5b:ce:d7:46:ec:44:ed:db:79:9e:
ba:b3:4a:b2:02:f1:7d:ac:ee:1b:e5:b8:dc:63:32:03:24:0d:
09:8d:5c:e2:39:a6:5c:07:fa:e5:73:cf:42:6a:21:7e:f6:78:
31:c9:af:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 19:28:34 2025 by rpki-client