Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.mft
File: MG1hg1W9iTf3W7RlC7XBr3D5oS4.mft (raw, json)
Hash identifier: YN9go/ZT2fe6mGBmomt3msqbntRVIrAaZGupBQnQrWA=
Subject key identifier: 3E:F1:C3:2D:D7:4F:67:AD:58:8F:35:CC:3E:69:19:69:13:BF:2E:84
Authority key identifier: 30:6D:61:83:55:BD:89:37:F7:5B:B4:65:0B:B5:C1:AF:70:F9:A1:2E
Certificate issuer: /CN=306d618355bd8937f75bb4650bb5c1af70f9a12e
Certificate serial: 01950ED8713CC5DF4B9F6F846423F80F2808
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MG1hg1W9iTf3W7RlC7XBr3D5oS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.mft
Manifest number: 0FF3
Signing time: Sun 16 Feb 2025 13:00:20 +0000
Manifest this update: Sun 16 Feb 2025 13:00:20 +0000
Manifest next update: Mon 17 Feb 2025 13:00:20 +0000
Files and hashes: 1: 3jZVmIYXRpFGaUpKFxmxg6yk0v4.roa (hash: DxwsnC6ETAvm52TcakM8AMF0oIdLtUXLvOU8uNsDQAw=)
2: MG1hg1W9iTf3W7RlC7XBr3D5oS4.crl (hash: Co6duCEHPDqnBFLYIGmQaS7DyvhrdHxwPKDEph4U6HI=)
3: OhFs8ELf0BkBqUqSta-UtJTxxOY.roa (hash: eORqJrZ4eHwt+ZtqWQMblZ7ybIDSjazTPoe3DTl1tC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/MG1hg1W9iTf3W7RlC7XBr3D5oS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 13:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:0e:d8:71:3c:c5:df:4b:9f:6f:84:64:23:f8:0f:28:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=306d618355bd8937f75bb4650bb5c1af70f9a12e
Validity
Not Before: Feb 16 13:00:20 2025 GMT
Not After : Feb 17 13:00:20 2025 GMT
Subject: CN=3ef1c32dd74f67ad588f35cc3e69196913bf2e84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f9:fb:c0:d3:f7:12:a6:29:27:fe:b8:20:e2:
0c:84:cb:80:62:94:40:8a:5f:9d:6d:6e:b3:91:de:
a5:ec:d5:ec:eb:e0:fb:ed:4d:14:74:8b:22:a6:69:
f4:da:cb:7a:a6:1c:5a:48:a3:d2:6f:61:a1:73:a3:
47:c3:a7:ca:76:ff:65:12:3c:cb:da:cb:6e:63:98:
a6:8a:33:f8:38:e3:55:25:81:73:1e:c0:d8:f5:17:
f0:95:29:76:ae:cb:c1:61:d7:59:63:0e:6a:e6:97:
14:60:39:41:02:72:87:fd:a3:44:fa:f8:99:9b:48:
a3:b9:c3:f5:9e:f0:35:c2:0f:f1:8e:86:6b:63:ee:
6a:3b:b5:c6:43:6d:71:cf:06:49:d9:17:25:aa:fa:
b8:43:7e:57:99:64:a5:e5:61:0b:1d:0b:16:fb:87:
30:6f:e5:18:ed:c7:ec:69:86:94:bb:d1:d9:1f:c4:
8e:72:a9:22:f3:7f:4d:c1:33:e4:86:7c:9f:98:6a:
95:dc:8e:98:94:ee:02:c2:6c:b4:d5:53:db:32:ed:
aa:f1:61:4b:2b:b0:95:d8:74:c6:6c:9d:24:dd:b8:
53:9f:05:a9:14:ea:b3:ce:2c:d2:d9:6f:6a:b1:3a:
45:ab:9c:d5:b3:6b:d7:7f:20:e4:ef:b8:ae:00:30:
6f:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:F1:C3:2D:D7:4F:67:AD:58:8F:35:CC:3E:69:19:69:13:BF:2E:84
X509v3 Authority Key Identifier:
keyid:30:6D:61:83:55:BD:89:37:F7:5B:B4:65:0B:B5:C1:AF:70:F9:A1:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MG1hg1W9iTf3W7RlC7XBr3D5oS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:03:46:49:8a:10:14:b5:42:9e:75:60:29:ab:33:34:3b:91:
d7:d8:3f:26:57:40:ef:64:d4:12:e4:fc:6a:ad:73:35:c3:ae:
27:b1:12:db:0c:cc:15:06:cc:39:20:39:8e:35:79:0e:b9:5d:
8c:2a:5b:4d:59:59:f0:ab:6b:33:c4:e9:6f:37:05:49:6e:84:
ca:03:d0:d4:96:d3:1b:41:c4:c5:53:db:d3:94:38:b1:4a:95:
a0:33:93:bc:e0:45:a0:51:2f:da:bd:26:ce:1b:d8:55:32:ea:
b7:53:b3:58:52:84:fb:b3:ad:48:53:7f:69:23:11:63:00:67:
de:e9:b3:8e:69:27:c4:60:98:a7:97:e6:0a:45:b8:f6:34:9c:
0f:27:bf:ee:b7:8f:30:46:e8:e8:a0:e6:8f:e7:72:82:1d:64:
e7:ba:66:b6:a5:84:e5:46:ca:15:65:af:d1:62:50:f8:59:ae:
00:eb:37:89:f2:c9:a7:48:f1:f5:84:59:de:93:9c:0c:5c:f1:
7d:ca:7c:52:ce:71:e2:4c:ac:41:de:12:72:4f:0c:2d:5f:72:
e1:1c:83:27:f3:3e:30:12:8a:ed:52:c6:9d:d0:a7:53:a6:67:
81:ee:2c:91:a3:74:d4:ae:a2:af:4e:55:8f:04:23:fe:e2:fe:
74:cb:7b:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUO2HE8xd9Ln2+EZCP4DygIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwNmQ2MTgzNTViZDg5MzdmNzViYjQ2NTBiYjVjMWFmNzBm
OWExMmUwHhcNMjUwMjE2MTMwMDIwWhcNMjUwMjE3MTMwMDIwWjAzMTEwLwYDVQQD
EygzZWYxYzMyZGQ3NGY2N2FkNTg4ZjM1Y2MzZTY5MTk2OTEzYmYyZTg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfn7wNP3EqYpJ/64IOIMhMuAYpRA
il+dbW6zkd6l7NXs6+D77U0UdIsipmn02st6phxaSKPSb2Ghc6NHw6fKdv9lEjzL
2stuY5imijP4OONVJYFzHsDY9RfwlSl2rsvBYddZYw5q5pcUYDlBAnKH/aNE+viZ
m0ijucP1nvA1wg/xjoZrY+5qO7XGQ21xzwZJ2Rclqvq4Q35XmWSl5WELHQsW+4cw
b+UY7cfsaYaUu9HZH8SOcqki839NwTPkhnyfmGqV3I6YlO4Cwmy01VPbMu2q8WFL
K7CV2HTGbJ0k3bhTnwWpFOqzzizS2W9qsTpFq5zVs2vXfyDk77iuADBv4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD7xwy3XT2etWI81zD5pGWkTvy6EMB8GA1UdIwQY
MBaAFDBtYYNVvYk391u0ZQu1wa9w+aEuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUcxaGcxVzlpVGYzVzdSbEM3WEJyM0Q1b1M0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi8zY2RlOWItMzcwNS00ZGMzLThkN2Ut
NTE2ZmZkODczNzZjLzEvTUcxaGcxVzlpVGYzVzdSbEM3WEJyM0Q1b1M0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi8zY2RlOWItMzcwNS00ZGMzLThkN2UtNTE2ZmZkODczNzZj
LzEvTUcxaGcxVzlpVGYzVzdSbEM3WEJyM0Q1b1M0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMgNGSYoQ
FLVCnnVgKaszNDuR19g/JldA72TUEuT8aq1zNcOuJ7ES2wzMFQbMOSA5jjV5Drld
jCpbTVlZ8KtrM8TpbzcFSW6EygPQ1JbTG0HExVPb05Q4sUqVoDOTvOBFoFEv2r0m
zhvYVTLqt1OzWFKE+7OtSFN/aSMRYwBn3umzjmknxGCYp5fmCkW49jScDye/7reP
MEbo6KDmj+dygh1k57pmtqWE5UbKFWWv0WJQ+FmuAOs3ifLJp0jx9YRZ3pOcDFzx
fcp8Us5x4kysQd4Sck8MLV9y4RyDJ/M+MBKK7VLGndCnU6Znge4skaN01K6ir05V
jwQj/uL+dMt7YA==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:13:58 2025 by rpki-client