Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/30f34e-e2ad-4b8d-8ce0-011878255ba7/1/MGY7W3BEIyuYmBjRLMkEkCElJN8.mft
File: MGY7W3BEIyuYmBjRLMkEkCElJN8.mft (raw, json)
Hash identifier: bKVMvAlRcSTQtv0ZOKtnai6GEAUWpPmA4klvQ3wrJvY=
Subject key identifier: 0E:95:DA:66:39:21:8B:FE:68:25:2D:ED:7F:02:08:C2:4E:61:98:18
Authority key identifier: 30:66:3B:5B:70:44:23:2B:98:98:18:D1:2C:C9:04:90:21:25:24:DF
Certificate issuer: /CN=30663b5b7044232b989818d12cc90490212524df
Certificate serial: 0197B6A1AB7ADBFC5EE5F263A4CBFAE93A2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MGY7W3BEIyuYmBjRLMkEkCElJN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/30f34e-e2ad-4b8d-8ce0-011878255ba7/1/MGY7W3BEIyuYmBjRLMkEkCElJN8.mft
Manifest number: CA
Signing time: Sat 28 Jun 2025 13:02:17 +0000
Manifest this update: Sat 28 Jun 2025 13:02:17 +0000
Manifest next update: Sun 29 Jun 2025 13:02:17 +0000
Files and hashes: 1: MGY7W3BEIyuYmBjRLMkEkCElJN8.crl (hash: W66zbIH1GaOdSPk+NwHP+Idil1T/ZXmyGSJe6QvTaac=)
2: jl5BGicOacjnQYcT0f92Ohaidfk.roa (hash: 2+8T//3NgApFzgg77XKjZhpHy2WC3GoSuHjoqbCDjuc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/30f34e-e2ad-4b8d-8ce0-011878255ba7/1/MGY7W3BEIyuYmBjRLMkEkCElJN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/30f34e-e2ad-4b8d-8ce0-011878255ba7/1/MGY7W3BEIyuYmBjRLMkEkCElJN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/MGY7W3BEIyuYmBjRLMkEkCElJN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:ab:7a:db:fc:5e:e5:f2:63:a4:cb:fa:e9:3a:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30663b5b7044232b989818d12cc90490212524df
Validity
Not Before: Jun 28 13:02:17 2025 GMT
Not After : Jun 29 13:02:17 2025 GMT
Subject: CN=0e95da6639218bfe68252ded7f0208c24e619818
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:7d:d3:82:97:84:b6:59:10:fb:54:a4:a1:4e:
19:2d:ec:05:67:98:d6:fb:15:91:e5:21:75:fe:b8:
35:29:22:e4:19:75:44:4f:9a:a8:e4:2c:e4:8a:d3:
b3:a1:1d:f2:3c:84:9f:28:c5:06:c1:53:6f:20:d5:
a9:ad:9d:03:6d:ee:f4:48:cf:63:3a:73:e9:25:b1:
b9:cf:88:7b:57:ca:a2:10:a3:e4:c4:4f:e3:41:b5:
3e:be:8b:1c:cb:6a:e3:ed:09:42:02:46:ab:7a:69:
2c:bc:4c:51:13:9f:89:4d:9c:b4:6a:45:90:fd:9e:
a8:b7:ea:81:74:37:57:fe:56:2c:80:ca:94:54:9b:
55:02:6f:3e:10:25:9d:06:3d:eb:d2:8b:3a:27:0c:
3a:99:67:bb:98:54:d4:ff:75:14:8a:3a:fe:5d:56:
17:de:9b:1b:f6:f8:04:60:a6:fd:43:e8:97:e0:36:
34:11:55:62:7f:37:fb:5c:d3:0d:6e:99:3e:b4:32:
a4:1c:58:0c:8c:92:bc:3f:6c:c5:e2:e6:a7:9f:e0:
15:b5:fb:a4:79:c4:bc:7b:89:12:aa:13:e5:fe:88:
c4:f2:6a:7f:d7:4e:00:df:97:92:ae:0c:c5:a5:f3:
b7:05:99:96:96:f8:2d:04:37:f9:ee:a0:c9:ed:a6:
ea:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:95:DA:66:39:21:8B:FE:68:25:2D:ED:7F:02:08:C2:4E:61:98:18
X509v3 Authority Key Identifier:
keyid:30:66:3B:5B:70:44:23:2B:98:98:18:D1:2C:C9:04:90:21:25:24:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGY7W3BEIyuYmBjRLMkEkCElJN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/30f34e-e2ad-4b8d-8ce0-011878255ba7/1/MGY7W3BEIyuYmBjRLMkEkCElJN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/30f34e-e2ad-4b8d-8ce0-011878255ba7/1/MGY7W3BEIyuYmBjRLMkEkCElJN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:78:62:57:a4:ab:26:46:17:4c:85:5a:ec:1c:8e:20:bc:6f:
82:5e:20:e6:4f:5f:bd:84:77:42:c7:7e:a2:0d:a1:c6:57:58:
df:36:34:fa:b9:ea:58:96:c4:59:78:78:a9:7c:cc:0f:db:ff:
50:2d:8f:dc:d2:48:99:43:63:cf:51:61:e1:cd:ab:2c:40:30:
68:b7:ce:b5:c1:03:c0:10:78:05:b5:a1:db:c6:bb:2a:06:35:
53:ab:91:af:1e:f0:90:23:c0:86:fd:6a:8c:f1:09:bd:14:14:
16:51:8c:9e:c2:de:50:b3:e9:89:28:e6:9d:12:4e:de:35:a0:
a4:e0:20:35:1b:b1:f6:66:19:e5:42:e8:1d:c2:f0:89:a2:3d:
4e:d8:c5:f6:a4:ee:7e:7a:2e:1e:6c:32:c3:99:e5:a6:b0:4c:
06:d8:96:60:b0:d1:34:d3:64:df:c6:41:5f:6f:b0:9b:66:ea:
73:5e:29:be:6a:26:cc:d4:eb:92:73:c9:c6:36:46:66:26:a9:
4a:c2:17:ba:e0:a9:ef:b7:c8:f6:73:1a:a6:f5:8b:51:a5:b7:
23:43:e6:b6:7b:77:36:c7:a0:95:fa:ff:4e:53:e8:1f:3a:74:
8a:36:89:66:1a:1d:62:d9:0b:84:a4:3b:22:f3:78:7a:84:cc:
fb:7c:61:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:51:14 2025 by rpki-client