Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/3d838c-8622-4e58-870f-de9e02d41797/1/mgdjMrvSgPCFLbafYVsPFJkUgxs.mft
File: mgdjMrvSgPCFLbafYVsPFJkUgxs.mft (raw, json)
Hash identifier: kzIOOnBt/UItV58fQpX/BsDBNqahOVygZcStNfvzifQ=
Subject key identifier: CD:FC:7F:36:D2:9B:7D:DC:1B:F0:B3:74:F6:A2:FA:50:00:D8:20:1E
Authority key identifier: 9A:07:63:32:BB:D2:80:F0:85:2D:B6:9F:61:5B:0F:14:99:14:83:1B
Certificate issuer: /CN=9a076332bbd280f0852db69f615b0f149914831b
Certificate serial: 01965C8370F25D6D8D9F9710750F0444CAFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mgdjMrvSgPCFLbafYVsPFJkUgxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/3d838c-8622-4e58-870f-de9e02d41797/1/mgdjMrvSgPCFLbafYVsPFJkUgxs.mft
Manifest number: 028E
Signing time: Tue 22 Apr 2025 08:00:39 +0000
Manifest this update: Tue 22 Apr 2025 08:00:39 +0000
Manifest next update: Wed 23 Apr 2025 08:00:39 +0000
Files and hashes: 1: mgdjMrvSgPCFLbafYVsPFJkUgxs.crl (hash: BqwuQbQ9WmrmedDZJesiWiHE0NIMxOjB25p2cHNBoSM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/3d838c-8622-4e58-870f-de9e02d41797/1/mgdjMrvSgPCFLbafYVsPFJkUgxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/3d838c-8622-4e58-870f-de9e02d41797/1/mgdjMrvSgPCFLbafYVsPFJkUgxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/mgdjMrvSgPCFLbafYVsPFJkUgxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5c:83:70:f2:5d:6d:8d:9f:97:10:75:0f:04:44:ca:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a076332bbd280f0852db69f615b0f149914831b
Validity
Not Before: Apr 22 08:00:39 2025 GMT
Not After : Apr 23 08:00:39 2025 GMT
Subject: CN=cdfc7f36d29b7ddc1bf0b374f6a2fa5000d8201e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d1:b5:d3:5d:18:14:f5:8a:1b:92:06:fd:be:
5d:d6:73:88:91:3c:34:43:10:9f:82:59:8e:17:07:
26:7b:e6:93:bc:df:8d:bb:57:54:88:9d:f2:65:74:
ef:08:eb:64:7d:83:32:5f:44:6a:67:b6:00:0d:d9:
3e:11:18:36:35:fd:18:38:bf:30:b8:5a:c9:07:a4:
c9:73:f1:38:a6:41:06:4f:4d:fe:32:94:c5:73:4e:
f9:3f:f4:75:76:96:80:54:e9:e4:4b:3b:ba:c8:0a:
66:e0:33:b7:19:99:04:f9:5d:fe:48:90:74:c2:2b:
8f:6e:51:90:ec:51:7d:99:65:fd:b2:ae:ec:0f:13:
9f:23:1c:ce:54:28:dc:2d:3a:5e:c3:ec:b7:9e:53:
47:ad:8b:a7:ca:fd:32:c7:e6:b2:28:76:2a:f3:58:
e9:87:da:cd:67:75:f8:7f:99:da:85:84:11:5d:6d:
17:cf:36:cf:35:f2:ce:22:66:08:1b:91:13:03:d2:
db:ef:7f:99:8c:cb:b0:25:67:24:da:f1:b0:74:10:
e6:30:5c:c2:89:97:2c:6e:1d:cf:6a:ae:e2:4d:56:
35:be:f8:ed:b9:f4:ca:be:7d:f1:be:f1:cb:8e:61:
97:8e:45:c0:b4:70:de:3d:6f:7c:91:88:85:80:ba:
44:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:FC:7F:36:D2:9B:7D:DC:1B:F0:B3:74:F6:A2:FA:50:00:D8:20:1E
X509v3 Authority Key Identifier:
keyid:9A:07:63:32:BB:D2:80:F0:85:2D:B6:9F:61:5B:0F:14:99:14:83:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mgdjMrvSgPCFLbafYVsPFJkUgxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3d838c-8622-4e58-870f-de9e02d41797/1/mgdjMrvSgPCFLbafYVsPFJkUgxs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3d838c-8622-4e58-870f-de9e02d41797/1/mgdjMrvSgPCFLbafYVsPFJkUgxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:9d:30:24:f1:d9:38:e8:c7:83:5e:44:57:77:ee:a6:5f:04:
a0:79:c8:b6:ca:e3:de:b0:3a:43:d7:7f:aa:93:ea:ae:51:e3:
92:e6:82:36:2e:86:0c:69:bb:15:91:c1:3d:3c:5e:df:a4:d7:
83:5c:31:a9:73:eb:52:f5:ab:b5:23:20:0b:d6:ec:43:7b:88:
87:62:72:c5:61:ca:28:96:0f:88:d3:7b:77:b3:de:bd:87:5e:
2d:3c:c9:28:25:8e:a4:5f:9e:18:78:5b:e7:e3:8b:fa:0c:24:
35:cd:b8:a8:f2:be:ed:48:46:8e:92:07:68:99:9d:99:ad:3f:
53:64:fe:a4:60:37:5f:fc:24:2f:fa:52:9d:59:b5:f1:5d:91:
00:a4:0d:db:fa:ea:b3:2b:d3:17:14:ec:30:f2:e9:b4:e0:d9:
09:6e:50:a1:95:f0:a8:c6:a1:fd:ad:5b:2c:89:d8:39:ff:f3:
75:d6:7c:fd:f6:20:26:d2:bd:65:1e:e7:d3:90:86:b5:32:61:
ff:c0:cb:88:cb:5f:32:1f:f7:ab:6d:0e:8b:f0:e2:ff:29:e4:
16:1d:58:d7:b3:6f:28:f6:03:df:25:57:d6:8f:f8:a7:69:3e:
15:99:b7:a6:28:a2:b5:04:8d:6c:1e:95:ad:b6:cb:1f:c6:84:
81:30:9d:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZcg3DyXW2Nn5cQdQ8ERMr7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhMDc2MzMyYmJkMjgwZjA4NTJkYjY5ZjYxNWIwZjE0OTkx
NDgzMWIwHhcNMjUwNDIyMDgwMDM5WhcNMjUwNDIzMDgwMDM5WjAzMTEwLwYDVQQD
EyhjZGZjN2YzNmQyOWI3ZGRjMWJmMGIzNzRmNmEyZmE1MDAwZDgyMDFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlNG1010YFPWKG5IG/b5d1nOIkTw0
QxCfglmOFwcme+aTvN+Nu1dUiJ3yZXTvCOtkfYMyX0RqZ7YADdk+ERg2Nf0YOL8w
uFrJB6TJc/E4pkEGT03+MpTFc075P/R1dpaAVOnkSzu6yApm4DO3GZkE+V3+SJB0
wiuPblGQ7FF9mWX9sq7sDxOfIxzOVCjcLTpew+y3nlNHrYunyv0yx+ayKHYq81jp
h9rNZ3X4f5nahYQRXW0XzzbPNfLOImYIG5ETA9Lb73+ZjMuwJWck2vGwdBDmMFzC
iZcsbh3Paq7iTVY1vvjtufTKvn3xvvHLjmGXjkXAtHDePW98kYiFgLpETwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM38fzbSm33cG/CzdPai+lAA2CAeMB8GA1UdIwQY
MBaAFJoHYzK70oDwhS22n2FbDxSZFIMbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWdkak1ydlNnUENGTGJhZllWc1BGSmtVZ3hzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8zZDgzOGMtODYyMi00ZTU4LTg3MGYt
ZGU5ZTAyZDQxNzk3LzEvbWdkak1ydlNnUENGTGJhZllWc1BGSmtVZ3hzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy8zZDgzOGMtODYyMi00ZTU4LTg3MGYtZGU5ZTAyZDQxNzk3
LzEvbWdkak1ydlNnUENGTGJhZllWc1BGSmtVZ3hzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZp0wJPHZ
OOjHg15EV3fupl8EoHnItsrj3rA6Q9d/qpPqrlHjkuaCNi6GDGm7FZHBPTxe36TX
g1wxqXPrUvWrtSMgC9bsQ3uIh2JyxWHKKJYPiNN7d7PevYdeLTzJKCWOpF+eGHhb
5+OL+gwkNc24qPK+7UhGjpIHaJmdma0/U2T+pGA3X/wkL/pSnVm18V2RAKQN2/rq
syvTFxTsMPLptODZCW5QoZXwqMah/a1bLInYOf/zddZ8/fYgJtK9ZR7n05CGtTJh
/8DLiMtfMh/3q20Oi/Di/ynkFh1Y17NvKPYD3yVX1o/4p2k+FZm3piiitQSNbB6V
rbbLH8aEgTCdEg==
-----END CERTIFICATE-----
Generated at Tue Apr 22 10:26:57 2025 by rpki-client