Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/9c27e4-d7b1-43c1-a38f-94914f5ddb3c/1/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.mft
File: Mgskp0Dy5hYyBQrcFGwe5qPmhsU.mft (raw, json)
Hash identifier: +SvRu5Rtnfl55+sW4MqxUd7gSTgPLAQsLjxJIXlyDHA=
Subject key identifier: A0:21:A2:B4:59:FD:EB:D5:D1:96:F9:AD:05:62:20:45:A5:D9:EA:4D
Authority key identifier: 32:0B:24:A7:40:F2:E6:16:32:05:0A:DC:14:6C:1E:E6:A3:E6:86:C5
Certificate issuer: /CN=320b24a740f2e61632050adc146c1ee6a3e686c5
Certificate serial: 01964BC6AD087633406CC90EB82624D36DCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/9c27e4-d7b1-43c1-a38f-94914f5ddb3c/1/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.mft
Manifest number: 14FB
Signing time: Sat 19 Apr 2025 02:00:33 +0000
Manifest this update: Sat 19 Apr 2025 02:00:33 +0000
Manifest next update: Sun 20 Apr 2025 02:00:33 +0000
Files and hashes: 1: L6UZeUjVK5OZ7-mZGSjtJGUXkeo.roa (hash: zQv0Jn9i8JzxV9AzBkluRvg9IIcuWJrvzIFoMGo/YiA=)
2: Mgskp0Dy5hYyBQrcFGwe5qPmhsU.crl (hash: QY5DyiDZXEUotrFtdsjlq6RN1uGo73DZuiHBB1N2a5Q=)
3: cE9MAqwQ5qMGLkrFZGC06olWNS8.roa (hash: qikuqaUY8ZBatuemuXHDbHFmATqYtKgaMBnCotzhBRQ=)
4: eNulQrWkb7XXGYDw1_7yfQtfyjU.roa (hash: wqv9AveypucRXaFrqiWm0EqnYUR4U6N703H9MjT8w5I=)
5: ebOku8xEI298KvY-nyvK9tWb6FA.roa (hash: a5+jxAr4ask6hZY3MKueRH2rWcR2j9Q7nIukLKzVuw0=)
6: nOavIXppWmDFhXdDEZ0V1cMIqeg.roa (hash: uLvOIw0+fU0FW9oyjgIp/2zVisu3plAWDz1d4aRwn60=)
7: s9a3pEKBSyjyYAsrYAxiAEP4mCU.roa (hash: 0FpwdS9NLp08wzi3cGdRZXNNnpCGm190316Q+yHGVNo=)
8: v2JqIJBq3wJphTAbwK0-g33RShA.roa (hash: i1c3+hUzjW7SLy+JaUh7BqmO9B9VdI9iEDnKvNZU/ks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/9c27e4-d7b1-43c1-a38f-94914f5ddb3c/1/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/9c27e4-d7b1-43c1-a38f-94914f5ddb3c/1/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 02:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4b:c6:ad:08:76:33:40:6c:c9:0e:b8:26:24:d3:6d:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=320b24a740f2e61632050adc146c1ee6a3e686c5
Validity
Not Before: Apr 19 02:00:33 2025 GMT
Not After : Apr 20 02:00:33 2025 GMT
Subject: CN=a021a2b459fdebd5d196f9ad05622045a5d9ea4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f6:79:b0:92:ed:66:7c:93:b1:25:fa:6a:b4:
f8:57:74:3e:d7:d5:87:83:f9:54:ad:b4:0b:d6:94:
62:15:67:33:e1:3f:87:4f:03:24:7b:93:1f:24:96:
a4:cd:85:99:05:cf:97:63:9b:f9:9a:6b:40:61:9a:
87:f8:2e:26:fb:d1:f7:4e:70:21:2a:ca:e6:51:cd:
70:d4:27:e9:8d:a2:d6:25:87:0a:49:fd:0b:89:67:
db:8f:fe:78:bf:19:30:52:68:14:da:36:06:6f:97:
ec:e9:f9:d8:32:00:77:06:4e:82:2a:59:05:66:84:
8f:ef:d8:bb:11:21:77:cf:48:51:d9:3b:1c:97:23:
0b:3b:13:fd:29:1a:bd:b1:89:c2:55:97:c8:dd:d9:
46:2b:92:28:93:f7:43:59:9e:ff:01:64:3d:c9:a6:
62:02:96:5f:2e:cb:f0:eb:16:2f:44:0d:b8:06:28:
3e:6a:87:41:c5:37:46:c3:cd:a4:5d:a3:82:d5:59:
01:d6:4e:70:53:90:8f:65:cf:09:cb:fc:43:82:db:
e8:3c:9e:df:3d:5c:04:80:75:40:c2:18:34:5c:e0:
df:73:67:8c:cb:73:cf:7e:fc:e4:fd:1e:ce:91:34:
86:79:93:1c:38:75:a6:01:0e:cd:2d:cc:04:e8:78:
1a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:21:A2:B4:59:FD:EB:D5:D1:96:F9:AD:05:62:20:45:A5:D9:EA:4D
X509v3 Authority Key Identifier:
keyid:32:0B:24:A7:40:F2:E6:16:32:05:0A:DC:14:6C:1E:E6:A3:E6:86:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/9c27e4-d7b1-43c1-a38f-94914f5ddb3c/1/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/9c27e4-d7b1-43c1-a38f-94914f5ddb3c/1/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:e8:3b:bf:8a:ce:1f:56:b0:11:97:29:d9:82:0f:f1:4d:41:
67:a7:8a:e8:bd:4e:46:f4:14:f1:5e:6b:f4:f5:51:61:f7:89:
6b:30:1c:01:a2:76:b9:7a:9a:fd:11:a8:b8:53:bb:aa:a5:2b:
3b:1d:ee:a1:74:3f:8b:3d:fc:81:db:ba:db:a0:d6:3a:31:55:
4d:53:c3:4b:15:a4:41:a4:76:ed:84:c9:8f:b7:5b:09:d6:79:
b2:a5:b3:c9:61:45:93:79:2b:27:6f:02:0c:90:57:a1:30:38:
fb:25:75:e2:bc:a8:2f:b0:10:a8:a3:9f:8e:8f:5a:b5:2c:df:
04:7e:8f:5a:cf:b5:ff:13:ba:e9:e3:df:c1:eb:82:e9:76:9d:
8d:f7:99:1f:fc:be:45:ea:b8:65:17:a3:e7:e8:32:b8:cd:2d:
2b:5f:a1:80:1f:8c:1e:96:a3:84:33:34:24:99:a1:b2:9d:6a:
2e:9f:15:11:5e:24:8b:9d:67:3c:e4:dd:ab:f3:50:d6:be:0b:
af:bc:aa:f9:6b:3c:62:80:0b:e1:a0:0f:37:3d:72:eb:c4:51:
a9:7b:74:a0:38:0f:9a:1c:da:6a:45:5a:0c:12:d9:cf:89:e0:
f4:40:45:8d:96:25:09:df:72:fd:98:e3:d6:75:9a:86:62:bc:
4b:53:4a:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:10:10 2025 by rpki-client