Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/3d2031-f4a1-437a-9a7e-97c4bbaf4676/1/MJAbMGF-hmq8nOULrb6IRl048Dc.mft
File: MJAbMGF-hmq8nOULrb6IRl048Dc.mft (raw, json)
Hash identifier: pBcLRdS2kEcwmQMC9c46YQPeR2zLRaXYFwdBIRltlw0=
Subject key identifier: 4A:E5:C0:8C:6D:11:A6:F0:78:52:E7:77:2C:72:05:B7:46:81:16:F5
Authority key identifier: 30:90:1B:30:61:7E:86:6A:BC:9C:E5:0B:AD:BE:88:46:5D:38:F0:37
Certificate issuer: /CN=30901b30617e866abc9ce50badbe88465d38f037
Certificate serial: 0197B6A04B868F574C8B135BCB9769DF1596
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MJAbMGF-hmq8nOULrb6IRl048Dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/3d2031-f4a1-437a-9a7e-97c4bbaf4676/1/MJAbMGF-hmq8nOULrb6IRl048Dc.mft
Manifest number: 0454
Signing time: Sat 28 Jun 2025 13:00:47 +0000
Manifest this update: Sat 28 Jun 2025 13:00:47 +0000
Manifest next update: Sun 29 Jun 2025 13:00:47 +0000
Files and hashes: 1: 2qX7OdgapT1BAlqvcn-h20H3SjY.roa (hash: mYdYSfl5U26j0DpruXdVtTOn2QH2B7ImuHJ/Oabup60=)
2: MJAbMGF-hmq8nOULrb6IRl048Dc.crl (hash: By7/UPIr4esiJzx0iaUTXFq/LgcKjROK2rXs8eM0Jyo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/3d2031-f4a1-437a-9a7e-97c4bbaf4676/1/MJAbMGF-hmq8nOULrb6IRl048Dc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/3d2031-f4a1-437a-9a7e-97c4bbaf4676/1/MJAbMGF-hmq8nOULrb6IRl048Dc.mft
rsync://rpki.ripe.net/repository/DEFAULT/MJAbMGF-hmq8nOULrb6IRl048Dc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:4b:86:8f:57:4c:8b:13:5b:cb:97:69:df:15:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30901b30617e866abc9ce50badbe88465d38f037
Validity
Not Before: Jun 28 13:00:47 2025 GMT
Not After : Jun 29 13:00:47 2025 GMT
Subject: CN=4ae5c08c6d11a6f07852e7772c7205b7468116f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:68:52:0d:14:ff:3b:7a:53:09:b1:0e:fb:78:
ca:14:88:25:4a:95:23:95:cc:7e:ee:28:ad:d9:d6:
7e:1d:06:b3:20:eb:92:71:15:6d:94:82:20:9c:70:
cc:39:82:72:29:ca:66:c6:6f:bc:a9:c6:01:ab:07:
d6:da:e9:15:8e:d2:6e:e5:9f:e9:61:52:4f:f1:d8:
54:99:47:db:be:15:fb:b4:7d:7a:ff:4d:3b:7d:04:
1e:08:8e:fa:e7:7d:94:c5:20:5a:52:2c:de:7d:0f:
bb:d8:1c:ac:17:1e:be:4e:49:a2:eb:c3:60:91:80:
2a:a7:21:c8:fb:60:20:b4:a8:da:0e:4c:34:e3:59:
40:a0:00:c7:69:be:ca:1a:78:71:56:8c:15:84:31:
27:88:63:58:47:43:54:7d:c2:70:62:25:5a:82:0f:
f2:a3:60:3a:ec:d5:70:0d:2b:6b:c9:ae:e2:e8:4f:
fb:e0:78:f2:25:02:21:a4:3a:89:ec:c1:3e:f0:6b:
c8:26:6b:47:b7:05:3c:80:7d:e4:d2:5b:6f:60:8c:
cf:35:f1:55:e9:eb:05:ed:ea:6c:08:14:03:83:9c:
48:8e:fd:64:d2:55:4f:fb:9a:1e:4f:56:e8:fe:c8:
09:65:a1:c8:0e:7c:d3:dd:68:fd:f0:f0:ef:7a:ef:
1b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:E5:C0:8C:6D:11:A6:F0:78:52:E7:77:2C:72:05:B7:46:81:16:F5
X509v3 Authority Key Identifier:
keyid:30:90:1B:30:61:7E:86:6A:BC:9C:E5:0B:AD:BE:88:46:5D:38:F0:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MJAbMGF-hmq8nOULrb6IRl048Dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/3d2031-f4a1-437a-9a7e-97c4bbaf4676/1/MJAbMGF-hmq8nOULrb6IRl048Dc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/3d2031-f4a1-437a-9a7e-97c4bbaf4676/1/MJAbMGF-hmq8nOULrb6IRl048Dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:da:2f:bb:9f:c6:4b:db:67:80:86:7a:3c:97:53:96:ee:0b:
6f:6f:15:57:1a:a4:c1:2d:d0:72:60:26:f5:e9:96:53:38:0e:
ab:bb:6f:dd:e6:99:b9:45:78:65:0a:5c:56:92:58:14:a9:b0:
bf:cb:02:3f:d9:73:83:c1:71:e9:70:85:95:fa:28:ec:1d:ff:
03:da:0b:eb:8e:26:a1:82:b0:12:10:cf:b8:b0:f2:97:41:f3:
97:67:f6:71:6d:36:1b:5a:05:1d:4e:25:7c:0b:ec:a5:41:75:
5e:bf:5a:84:38:67:e1:79:b6:ca:d0:5b:a0:8a:56:57:c9:2e:
ac:e6:ca:95:4c:e9:a1:c8:71:33:3a:e1:07:a5:0a:67:bd:d0:
fa:a5:57:ef:61:e9:65:f9:22:5c:98:ab:bd:d5:f0:c5:84:e2:
bd:00:39:06:b3:b0:00:d4:ac:3e:83:f4:b8:0a:89:20:44:9c:
45:ce:b0:9a:1d:c8:8b:ad:3d:dd:45:dc:78:de:81:93:05:96:
78:e5:df:a9:7c:2e:81:0e:7b:94:5a:ac:79:01:ce:48:e2:c4:
3b:97:af:22:cb:d0:1b:c8:b6:f3:ac:f4:67:08:96:12:b7:23:
3a:58:a1:36:55:94:b5:60:8f:1d:ea:4e:79:0d:c9:60:56:94:
59:a5:1c:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:49:50 2025 by rpki-client