Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/3d838c-8622-4e58-870f-de9e02d41797/1/mgdjMrvSgPCFLbafYVsPFJkUgxs.mft
File: mgdjMrvSgPCFLbafYVsPFJkUgxs.mft (raw, json)
Hash identifier: m1M2hJKFs0VEZTiKC+vc/rCOLwUcsnukwIILG/wKvqE=
Subject key identifier: A3:6B:69:20:B4:43:F4:40:D3:2A:A9:76:02:05:80:AC:17:2D:90:B9
Authority key identifier: 9A:07:63:32:BB:D2:80:F0:85:2D:B6:9F:61:5B:0F:14:99:14:83:1B
Certificate issuer: /CN=9a076332bbd280f0852db69f615b0f149914831b
Certificate serial: 0194BB60108910D3D1AA97BA5753CA7B40DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mgdjMrvSgPCFLbafYVsPFJkUgxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/3d838c-8622-4e58-870f-de9e02d41797/1/mgdjMrvSgPCFLbafYVsPFJkUgxs.mft
Manifest number: 01B6
Signing time: Fri 31 Jan 2025 08:00:22 +0000
Manifest this update: Fri 31 Jan 2025 08:00:22 +0000
Manifest next update: Sat 01 Feb 2025 08:00:22 +0000
Files and hashes: 1: mgdjMrvSgPCFLbafYVsPFJkUgxs.crl (hash: lERgxSA2DALFBRal+ielFn5HPxYvcQGhSveb+MAEZdc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/3d838c-8622-4e58-870f-de9e02d41797/1/mgdjMrvSgPCFLbafYVsPFJkUgxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/3d838c-8622-4e58-870f-de9e02d41797/1/mgdjMrvSgPCFLbafYVsPFJkUgxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/mgdjMrvSgPCFLbafYVsPFJkUgxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:60:10:89:10:d3:d1:aa:97:ba:57:53:ca:7b:40:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a076332bbd280f0852db69f615b0f149914831b
Validity
Not Before: Jan 31 08:00:22 2025 GMT
Not After : Feb 1 08:00:22 2025 GMT
Subject: CN=a36b6920b443f440d32aa976020580ac172d90b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4c:78:f3:9e:87:48:9a:c0:d2:be:de:fe:6e:
93:f3:95:49:41:c7:3d:48:12:82:37:ff:84:c1:0d:
58:bd:9c:d1:2d:3d:49:81:bf:03:88:48:17:74:f5:
01:06:0e:c4:50:73:eb:56:aa:0c:de:13:0c:e5:0b:
c4:62:4d:f8:2d:73:46:18:a1:ae:a9:e3:47:46:46:
4a:21:93:17:99:7a:90:80:5b:bc:2d:cb:88:99:48:
4e:a0:7c:64:4e:e3:53:70:9a:2b:63:10:41:40:ea:
32:1c:79:12:43:58:7a:a3:42:eb:2a:11:08:29:15:
20:f4:d8:2d:a0:27:b0:fd:88:a7:56:43:a2:9d:ec:
c4:a1:b4:85:1b:96:b0:ed:8d:90:9d:77:bf:6e:35:
6f:f0:5d:2e:be:97:93:69:db:26:3d:d5:87:2e:2d:
fa:09:d4:a1:9a:4f:1d:1a:23:59:c9:4c:e7:43:77:
de:c0:b5:d0:e9:a9:b8:ae:b4:28:fe:12:1c:c4:0b:
99:85:14:3b:3c:bc:96:82:80:af:3e:f4:09:03:05:
5a:a6:4b:17:e2:40:13:2f:ba:0b:73:5b:db:a9:cb:
30:e9:b4:a9:6e:7c:03:90:5a:23:f6:2b:c5:26:d5:
68:bc:20:3a:cd:a0:73:33:c8:6b:0c:a3:de:82:47:
6b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:6B:69:20:B4:43:F4:40:D3:2A:A9:76:02:05:80:AC:17:2D:90:B9
X509v3 Authority Key Identifier:
keyid:9A:07:63:32:BB:D2:80:F0:85:2D:B6:9F:61:5B:0F:14:99:14:83:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mgdjMrvSgPCFLbafYVsPFJkUgxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3d838c-8622-4e58-870f-de9e02d41797/1/mgdjMrvSgPCFLbafYVsPFJkUgxs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3d838c-8622-4e58-870f-de9e02d41797/1/mgdjMrvSgPCFLbafYVsPFJkUgxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:63:9c:e2:49:4c:3f:7a:ab:6d:fb:17:31:40:78:bf:7e:aa:
a5:95:78:78:1b:4e:05:ea:a1:cd:a2:e3:14:f5:f7:b0:0e:a3:
ff:4a:fe:29:48:d6:e7:42:f6:04:56:cb:a3:a1:f0:50:8b:96:
ea:ca:34:53:6a:6e:5f:c4:78:df:fb:1f:75:b8:8d:34:ee:b9:
5b:c9:9c:3b:5a:2f:8a:de:bd:7b:7c:82:b4:3a:f9:94:3c:8a:
06:c6:ae:19:f5:96:75:ba:5f:e3:5d:05:31:48:26:54:d6:9f:
3b:4a:12:99:38:44:5d:ae:97:ab:ba:f0:76:f2:0f:ef:57:f7:
7e:d3:57:f2:10:f1:e0:86:28:55:2e:9f:f3:f8:32:ef:5b:8f:
bb:4b:de:92:b1:24:85:94:ad:bd:3c:e5:d5:59:2c:ae:55:30:
5e:ce:f8:29:ba:ae:47:64:a1:fb:67:22:db:64:5c:6e:cf:c9:
15:ad:b1:d5:27:c8:81:cd:13:6d:4e:52:d5:71:e2:1f:27:c4:
08:fa:1f:01:b6:6f:94:f6:5a:fc:02:78:c8:2f:0c:0a:cd:d1:
ce:3e:57:79:1b:1c:a1:ec:d5:59:58:2c:f8:69:a4:73:86:f5:
e4:be:12:a2:34:67:98:41:93:d4:95:0c:07:7a:ef:cd:9c:3e:
79:bd:68:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7YBCJENPRqpe6V1PKe0DaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhMDc2MzMyYmJkMjgwZjA4NTJkYjY5ZjYxNWIwZjE0OTkx
NDgzMWIwHhcNMjUwMTMxMDgwMDIyWhcNMjUwMjAxMDgwMDIyWjAzMTEwLwYDVQQD
EyhhMzZiNjkyMGI0NDNmNDQwZDMyYWE5NzYwMjA1ODBhYzE3MmQ5MGI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0x4856HSJrA0r7e/m6T85VJQcc9
SBKCN/+EwQ1YvZzRLT1Jgb8DiEgXdPUBBg7EUHPrVqoM3hMM5QvEYk34LXNGGKGu
qeNHRkZKIZMXmXqQgFu8LcuImUhOoHxkTuNTcJorYxBBQOoyHHkSQ1h6o0LrKhEI
KRUg9NgtoCew/YinVkOinezEobSFG5aw7Y2QnXe/bjVv8F0uvpeTadsmPdWHLi36
CdShmk8dGiNZyUznQ3fewLXQ6am4rrQo/hIcxAuZhRQ7PLyWgoCvPvQJAwVapksX
4kATL7oLc1vbqcsw6bSpbnwDkFoj9ivFJtVovCA6zaBzM8hrDKPegkdrCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKNraSC0Q/RA0yqpdgIFgKwXLZC5MB8GA1UdIwQY
MBaAFJoHYzK70oDwhS22n2FbDxSZFIMbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWdkak1ydlNnUENGTGJhZllWc1BGSmtVZ3hzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8zZDgzOGMtODYyMi00ZTU4LTg3MGYt
ZGU5ZTAyZDQxNzk3LzEvbWdkak1ydlNnUENGTGJhZllWc1BGSmtVZ3hzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy8zZDgzOGMtODYyMi00ZTU4LTg3MGYtZGU5ZTAyZDQxNzk3
LzEvbWdkak1ydlNnUENGTGJhZllWc1BGSmtVZ3hzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlWOc4klM
P3qrbfsXMUB4v36qpZV4eBtOBeqhzaLjFPX3sA6j/0r+KUjW50L2BFbLo6HwUIuW
6so0U2puX8R43/sfdbiNNO65W8mcO1ovit69e3yCtDr5lDyKBsauGfWWdbpf410F
MUgmVNafO0oSmThEXa6Xq7rwdvIP71f3ftNX8hDx4IYoVS6f8/gy71uPu0vekrEk
hZStvTzl1VksrlUwXs74KbquR2Sh+2ci22Rcbs/JFa2x1SfIgc0TbU5S1XHiHyfE
CPofAbZvlPZa/AJ4yC8MCs3Rzj5XeRscoezVWVgs+Gmkc4b15L4SojRnmEGT1JUM
B3rvzZw+eb1oyA==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:44:25 2025 by rpki-client on console-fra.rpki-client.org