Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/3d838c-8622-4e58-870f-de9e02d41797/1/mgdjMrvSgPCFLbafYVsPFJkUgxs.mft
File: mgdjMrvSgPCFLbafYVsPFJkUgxs.mft (raw, json)
Hash identifier: xrDf3/0BWQpS9zED31XdlTuMXlJ0An2XaN4hbFB26Xs=
Subject key identifier: 40:26:DA:A5:89:0F:8E:18:3F:8F:BC:D6:F9:24:DA:C4:E4:9C:12:55
Authority key identifier: 9A:07:63:32:BB:D2:80:F0:85:2D:B6:9F:61:5B:0F:14:99:14:83:1B
Certificate issuer: /CN=9a076332bbd280f0852db69f615b0f149914831b
Certificate serial: 0196759E53CF1FDB241EF119D3DDC4E9BDFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mgdjMrvSgPCFLbafYVsPFJkUgxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/3d838c-8622-4e58-870f-de9e02d41797/1/mgdjMrvSgPCFLbafYVsPFJkUgxs.mft
Manifest number: 029B
Signing time: Sun 27 Apr 2025 05:00:32 +0000
Manifest this update: Sun 27 Apr 2025 05:00:32 +0000
Manifest next update: Mon 28 Apr 2025 05:00:32 +0000
Files and hashes: 1: mgdjMrvSgPCFLbafYVsPFJkUgxs.crl (hash: +FndhrYTJ680crX2XuifjbyJZl/0+4CxKkxN0MXBzJw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/3d838c-8622-4e58-870f-de9e02d41797/1/mgdjMrvSgPCFLbafYVsPFJkUgxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/3d838c-8622-4e58-870f-de9e02d41797/1/mgdjMrvSgPCFLbafYVsPFJkUgxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/mgdjMrvSgPCFLbafYVsPFJkUgxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:9e:53:cf:1f:db:24:1e:f1:19:d3:dd:c4:e9:bd:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a076332bbd280f0852db69f615b0f149914831b
Validity
Not Before: Apr 27 05:00:32 2025 GMT
Not After : Apr 28 05:00:32 2025 GMT
Subject: CN=4026daa5890f8e183f8fbcd6f924dac4e49c1255
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c5:9a:cd:c6:81:8b:e2:63:2c:a8:00:b7:fa:
0c:7b:06:3c:ec:7c:ff:56:e3:9f:49:cc:3f:ad:92:
ea:de:33:00:37:04:bf:17:5c:c0:e5:7e:e0:1a:72:
fc:35:23:a6:a3:b6:de:20:83:f9:c3:c1:ac:1a:8d:
c3:48:23:37:54:4a:46:c4:ea:c1:41:20:b7:f8:60:
d3:9e:5c:dc:ff:e6:6d:97:5e:1f:6b:db:fc:0e:3f:
a8:3c:a4:0d:ad:eb:f3:bf:91:39:de:b0:e8:eb:23:
b6:3c:3a:48:2b:9b:49:37:33:20:84:98:5b:90:c6:
21:df:5e:b0:14:7f:f0:ee:18:a4:82:52:34:8b:37:
79:71:43:0b:48:5c:ad:14:ac:c9:54:f0:e9:52:e9:
99:a8:9e:d5:76:88:b1:4f:89:85:e4:87:99:43:1a:
0c:73:be:46:e7:51:91:b4:23:77:a1:2f:ed:89:40:
ab:e7:63:7d:d4:24:13:a9:f5:35:d8:50:1e:09:b9:
f2:81:5f:1a:c1:c8:77:37:a2:60:4a:3c:2c:2b:c4:
7b:ee:2d:46:71:f6:93:5b:71:c2:35:61:18:63:37:
1a:7e:d8:52:01:ef:83:53:7c:4e:62:f0:11:2b:c1:
d3:3a:c0:df:08:79:81:7d:59:ab:53:2f:ef:1e:8d:
2e:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:26:DA:A5:89:0F:8E:18:3F:8F:BC:D6:F9:24:DA:C4:E4:9C:12:55
X509v3 Authority Key Identifier:
keyid:9A:07:63:32:BB:D2:80:F0:85:2D:B6:9F:61:5B:0F:14:99:14:83:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mgdjMrvSgPCFLbafYVsPFJkUgxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3d838c-8622-4e58-870f-de9e02d41797/1/mgdjMrvSgPCFLbafYVsPFJkUgxs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3d838c-8622-4e58-870f-de9e02d41797/1/mgdjMrvSgPCFLbafYVsPFJkUgxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:4d:eb:2d:f6:78:2f:74:3f:6f:e0:9d:db:b9:65:60:60:46:
3d:2a:5e:21:88:50:b0:35:66:3c:93:29:00:ff:8f:96:e2:68:
77:b9:84:ce:ba:4c:46:15:5c:08:8d:d6:ca:5b:7b:aa:a0:9f:
e4:85:f5:90:ca:24:20:ae:24:b3:d4:9f:35:e8:1e:71:22:92:
6c:0c:d4:08:c2:4d:72:ad:fb:8b:23:64:fc:93:28:71:f2:59:
8d:48:b9:2b:34:75:af:f6:5e:8d:7b:c6:cb:0c:c6:1e:71:e2:
24:ed:6e:9b:76:c4:db:cf:4d:e0:dd:91:d7:3f:d0:9c:a9:68:
2c:e8:a8:5e:6b:53:1f:f6:e0:b6:df:f3:61:b1:7d:2d:28:c9:
58:62:97:df:15:35:52:01:9d:86:4d:49:a9:b7:7f:8b:32:7c:
5d:a2:12:a6:e3:f6:8e:92:1a:87:d6:b0:32:d1:74:ad:ba:10:
9b:b4:38:b2:33:71:5a:bf:16:88:3f:6f:62:b5:19:0f:93:a8:
4f:8f:64:6e:f4:9a:4a:66:5c:e7:a9:93:fd:97:6d:31:06:5f:
be:78:b5:73:33:96:fe:9d:e9:e5:0c:9f:41:c7:76:a2:ac:2d:
a1:f9:c6:30:6e:aa:d7:f7:7d:7e:f9:b6:51:4c:0d:30:82:67:
0f:eb:b7:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ1nlPPH9skHvEZ093E6b3/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhMDc2MzMyYmJkMjgwZjA4NTJkYjY5ZjYxNWIwZjE0OTkx
NDgzMWIwHhcNMjUwNDI3MDUwMDMyWhcNMjUwNDI4MDUwMDMyWjAzMTEwLwYDVQQD
Eyg0MDI2ZGFhNTg5MGY4ZTE4M2Y4ZmJjZDZmOTI0ZGFjNGU0OWMxMjU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMWazcaBi+JjLKgAt/oMewY87Hz/
VuOfScw/rZLq3jMANwS/F1zA5X7gGnL8NSOmo7beIIP5w8GsGo3DSCM3VEpGxOrB
QSC3+GDTnlzc/+Ztl14fa9v8Dj+oPKQNrevzv5E53rDo6yO2PDpIK5tJNzMghJhb
kMYh316wFH/w7hikglI0izd5cUMLSFytFKzJVPDpUumZqJ7VdoixT4mF5IeZQxoM
c75G51GRtCN3oS/tiUCr52N91CQTqfU12FAeCbnygV8awch3N6JgSjwsK8R77i1G
cfaTW3HCNWEYYzcafthSAe+DU3xOYvARK8HTOsDfCHmBfVmrUy/vHo0uDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEAm2qWJD44YP4+81vkk2sTknBJVMB8GA1UdIwQY
MBaAFJoHYzK70oDwhS22n2FbDxSZFIMbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWdkak1ydlNnUENGTGJhZllWc1BGSmtVZ3hzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8zZDgzOGMtODYyMi00ZTU4LTg3MGYt
ZGU5ZTAyZDQxNzk3LzEvbWdkak1ydlNnUENGTGJhZllWc1BGSmtVZ3hzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy8zZDgzOGMtODYyMi00ZTU4LTg3MGYtZGU5ZTAyZDQxNzk3
LzEvbWdkak1ydlNnUENGTGJhZllWc1BGSmtVZ3hzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM03rLfZ4
L3Q/b+Cd27llYGBGPSpeIYhQsDVmPJMpAP+PluJod7mEzrpMRhVcCI3Wylt7qqCf
5IX1kMokIK4ks9SfNegecSKSbAzUCMJNcq37iyNk/JMocfJZjUi5KzR1r/ZejXvG
ywzGHnHiJO1um3bE289N4N2R1z/QnKloLOioXmtTH/bgtt/zYbF9LSjJWGKX3xU1
UgGdhk1Jqbd/izJ8XaISpuP2jpIah9awMtF0rboQm7Q4sjNxWr8WiD9vYrUZD5Oo
T49kbvSaSmZc56mT/ZdtMQZfvni1czOW/p3p5QyfQcd2oqwtofnGMG6q1/d9fvm2
UUwNMIJnD+u38Q==
-----END CERTIFICATE-----
Generated at Sun Apr 27 13:02:51 2025 by rpki-client