Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/01f6ed-7b86-4f76-828f-4e19239f0c35/1/MGg8_6Bh8oqeETXJ_DA3amR0y_Q.mft
File: MGg8_6Bh8oqeETXJ_DA3amR0y_Q.mft (raw, json)
Hash identifier: Nn7PDuaSARKLBcgOHTFD5OLygpDboI3n3uWfYJxmSuM=
Subject key identifier: C6:85:54:AF:C9:D6:58:07:03:9E:5F:40:54:A1:6B:83:FF:86:76:A2
Authority key identifier: 30:68:3C:FF:A0:61:F2:8A:9E:11:35:C9:FC:30:37:6A:64:74:CB:F4
Certificate issuer: /CN=30683cffa061f28a9e1135c9fc30376a6474cbf4
Certificate serial: 01962A4E29BCF58E4E919812DD741FDEA924
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MGg8_6Bh8oqeETXJ_DA3amR0y_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/01f6ed-7b86-4f76-828f-4e19239f0c35/1/MGg8_6Bh8oqeETXJ_DA3amR0y_Q.mft
Manifest number: 135C
Signing time: Sat 12 Apr 2025 14:01:27 +0000
Manifest this update: Sat 12 Apr 2025 14:01:27 +0000
Manifest next update: Sun 13 Apr 2025 14:01:27 +0000
Files and hashes: 1: 2B-FwUEQx6Nr4Ray6DAMUlw7Mv8.roa (hash: BBGC/ULum47ycUnwMz9z0fK4GgKW3TWVfbzBiHksvmc=)
2: GtTmoRT7XNVXBnXOsHZVf63eiDE.roa (hash: D+k5RJe28ejPSPya6Jjm6aV5eby1Bwyad8Nl2+QCWeE=)
3: MGg8_6Bh8oqeETXJ_DA3amR0y_Q.crl (hash: ZKLII0hC60q3kzURp5FQcdzREjRn9A6eb4F3vPcopls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/01f6ed-7b86-4f76-828f-4e19239f0c35/1/MGg8_6Bh8oqeETXJ_DA3amR0y_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/01f6ed-7b86-4f76-828f-4e19239f0c35/1/MGg8_6Bh8oqeETXJ_DA3amR0y_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/MGg8_6Bh8oqeETXJ_DA3amR0y_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 14:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2a:4e:29:bc:f5:8e:4e:91:98:12:dd:74:1f:de:a9:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30683cffa061f28a9e1135c9fc30376a6474cbf4
Validity
Not Before: Apr 12 14:01:27 2025 GMT
Not After : Apr 13 14:01:27 2025 GMT
Subject: CN=c68554afc9d65807039e5f4054a16b83ff8676a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1a:6b:0f:61:79:ef:1d:b8:28:01:69:d6:da:
8c:24:5e:54:f0:1b:25:e1:18:1b:2c:22:a0:f5:91:
e3:1c:51:0a:f4:16:8d:56:9b:55:e8:04:31:f7:94:
12:54:c3:ec:86:18:29:e1:ec:c8:04:ea:90:38:d1:
5c:66:66:e4:64:64:5e:8b:49:aa:93:59:43:1f:50:
52:49:d6:0d:a3:45:e9:6f:7e:21:20:42:a9:5c:7e:
c8:06:73:21:c5:e7:c4:6b:06:14:21:03:89:94:1a:
e3:ab:74:bc:d8:45:2f:7b:bf:e8:0c:cb:0c:bb:59:
a4:10:5c:e0:cd:0c:75:23:67:e8:a4:fa:88:98:fd:
72:75:6b:35:5b:c9:5b:64:77:56:1f:ce:d9:ca:22:
f7:05:fc:be:6a:93:5d:e3:56:95:f1:7d:bf:39:f1:
a6:a8:e7:37:5a:72:ce:a6:d5:09:3d:f3:d8:ce:73:
96:c4:b2:d3:4a:4c:e6:a3:ee:95:3a:df:c9:8b:da:
49:9a:fb:aa:4d:95:7d:d7:ee:b2:f0:5a:06:45:d3:
7c:53:72:55:7f:8d:9a:29:63:1b:00:da:6d:37:4f:
61:c7:2c:83:43:57:d2:62:6a:0f:64:f7:b3:e8:98:
43:c5:37:f9:be:80:88:ba:b4:6d:6a:6f:c6:d6:f6:
72:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:85:54:AF:C9:D6:58:07:03:9E:5F:40:54:A1:6B:83:FF:86:76:A2
X509v3 Authority Key Identifier:
keyid:30:68:3C:FF:A0:61:F2:8A:9E:11:35:C9:FC:30:37:6A:64:74:CB:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGg8_6Bh8oqeETXJ_DA3amR0y_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/01f6ed-7b86-4f76-828f-4e19239f0c35/1/MGg8_6Bh8oqeETXJ_DA3amR0y_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/01f6ed-7b86-4f76-828f-4e19239f0c35/1/MGg8_6Bh8oqeETXJ_DA3amR0y_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:fb:07:45:e1:df:b6:19:a0:b6:7e:e4:fe:e4:9d:31:20:d5:
05:b4:f7:19:f6:74:57:14:0d:48:e3:db:ee:d7:60:6e:bf:56:
b1:03:52:56:7e:9c:28:9d:91:0c:16:ee:1a:f5:65:d3:0a:78:
af:40:54:d3:4f:72:d4:7a:0f:05:7f:e6:61:d8:78:c9:0a:9d:
ac:f9:89:89:e7:67:04:5d:ff:37:13:86:75:ee:05:62:48:87:
07:2e:2a:7c:c7:4d:bf:11:2e:01:18:e6:57:bc:c2:c6:3a:13:
b3:d9:98:3d:56:39:2e:84:83:60:c2:25:2e:1d:ba:93:2d:72:
7b:02:30:b3:65:24:4f:7b:26:12:71:5a:43:0d:bc:af:90:18:
6d:2c:3e:3f:8a:d2:87:53:06:aa:cd:75:93:b5:ed:8d:9b:1b:
f0:e5:4e:62:ce:bf:e5:47:4c:a8:d3:10:61:54:06:f3:b8:ea:
58:eb:0b:3e:49:92:c7:ec:2b:3b:fb:4d:ca:6e:75:98:02:f8:
21:29:69:66:15:94:b8:d8:95:9c:d5:8c:8c:2b:9f:78:d3:cf:
c2:87:e1:e0:ad:95:45:59:f8:f2:cd:ad:9c:6f:55:f8:8a:35:
ef:b0:20:bf:47:00:32:d5:dc:b8:58:48:95:73:f6:08:f7:13:
2d:6c:68:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYqTim89Y5OkZgS3XQf3qkkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwNjgzY2ZmYTA2MWYyOGE5ZTExMzVjOWZjMzAzNzZhNjQ3
NGNiZjQwHhcNMjUwNDEyMTQwMTI3WhcNMjUwNDEzMTQwMTI3WjAzMTEwLwYDVQQD
EyhjNjg1NTRhZmM5ZDY1ODA3MDM5ZTVmNDA1NGExNmI4M2ZmODY3NmEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvhprD2F57x24KAFp1tqMJF5U8Bsl
4RgbLCKg9ZHjHFEK9BaNVptV6AQx95QSVMPshhgp4ezIBOqQONFcZmbkZGRei0mq
k1lDH1BSSdYNo0Xpb34hIEKpXH7IBnMhxefEawYUIQOJlBrjq3S82EUve7/oDMsM
u1mkEFzgzQx1I2fopPqImP1ydWs1W8lbZHdWH87ZyiL3Bfy+apNd41aV8X2/OfGm
qOc3WnLOptUJPfPYznOWxLLTSkzmo+6VOt/Ji9pJmvuqTZV91+6y8FoGRdN8U3JV
f42aKWMbANptN09hxyyDQ1fSYmoPZPez6JhDxTf5voCIurRtam/G1vZyJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMaFVK/J1lgHA55fQFSha4P/hnaiMB8GA1UdIwQY
MBaAFDBoPP+gYfKKnhE1yfwwN2pkdMv0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUdnOF82Qmg4b3FlRVRYSl9EQTNhbVIweV9RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS8wMWY2ZWQtN2I4Ni00Zjc2LTgyOGYt
NGUxOTIzOWYwYzM1LzEvTUdnOF82Qmg4b3FlRVRYSl9EQTNhbVIweV9RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS8wMWY2ZWQtN2I4Ni00Zjc2LTgyOGYtNGUxOTIzOWYwYzM1
LzEvTUdnOF82Qmg4b3FlRVRYSl9EQTNhbVIweV9RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAfsHReHf
thmgtn7k/uSdMSDVBbT3GfZ0VxQNSOPb7tdgbr9WsQNSVn6cKJ2RDBbuGvVl0wp4
r0BU009y1HoPBX/mYdh4yQqdrPmJiednBF3/NxOGde4FYkiHBy4qfMdNvxEuARjm
V7zCxjoTs9mYPVY5LoSDYMIlLh26ky1yewIws2UkT3smEnFaQw28r5AYbSw+P4rS
h1MGqs11k7XtjZsb8OVOYs6/5UdMqNMQYVQG87jqWOsLPkmSx+wrO/tNym51mAL4
ISlpZhWUuNiVnNWMjCufeNPPwofh4K2VRVn48s2tnG9V+Io177Agv0cAMtXcuFhI
lXP2CPcTLWxoxA==
-----END CERTIFICATE-----
Generated at Sat Apr 12 20:45:08 2025 by rpki-client