Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/624e63-b876-4ef4-bf19-e43620880cb6/1/MgJHUW6RAX4tvLVyyg8poSKBrPA.mft
File: MgJHUW6RAX4tvLVyyg8poSKBrPA.mft (raw, json)
Hash identifier: /7/6gUARhflmDsfseiNniw+aGRaatZuv40j0LUtZY+w=
Subject key identifier: FB:B8:03:5D:51:7C:63:9A:F6:65:FB:64:73:EC:D4:39:52:82:26:A1
Authority key identifier: 32:02:47:51:6E:91:01:7E:2D:BC:B5:72:CA:0F:29:A1:22:81:AC:F0
Certificate issuer: /CN=320247516e91017e2dbcb572ca0f29a12281acf0
Certificate serial: 0194BAF291110D75B6F0B81B0FF17C130904
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MgJHUW6RAX4tvLVyyg8poSKBrPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/624e63-b876-4ef4-bf19-e43620880cb6/1/MgJHUW6RAX4tvLVyyg8poSKBrPA.mft
Manifest number: 02D1
Signing time: Fri 31 Jan 2025 06:00:46 +0000
Manifest this update: Fri 31 Jan 2025 06:00:46 +0000
Manifest next update: Sat 01 Feb 2025 06:00:46 +0000
Files and hashes: 1: MgJHUW6RAX4tvLVyyg8poSKBrPA.crl (hash: JoXVkdQiwmp6EpvQIRS5JJ3ZYP2DnL0ZBgUVjlunVyE=)
2: m7C6K0Dm5PPkueps5pZmHrJAHsQ.roa (hash: keru/3nPFQZwhtdrj8XoRvNJqtUTfDmo1KvvBMCi2Bg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/624e63-b876-4ef4-bf19-e43620880cb6/1/MgJHUW6RAX4tvLVyyg8poSKBrPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/624e63-b876-4ef4-bf19-e43620880cb6/1/MgJHUW6RAX4tvLVyyg8poSKBrPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/MgJHUW6RAX4tvLVyyg8poSKBrPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 06:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:f2:91:11:0d:75:b6:f0:b8:1b:0f:f1:7c:13:09:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=320247516e91017e2dbcb572ca0f29a12281acf0
Validity
Not Before: Jan 31 06:00:46 2025 GMT
Not After : Feb 1 06:00:46 2025 GMT
Subject: CN=fbb8035d517c639af665fb6473ecd439528226a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:23:da:35:85:45:d9:e7:4f:46:dc:b8:19:ed:
f8:42:d8:78:9b:fe:32:86:ac:72:3e:b3:ae:66:0a:
4e:f6:e6:58:e7:37:ae:54:eb:80:d4:ff:17:dd:74:
c9:af:67:36:44:e2:40:ca:bf:1e:5b:e0:fe:32:67:
c9:e9:2f:7f:cc:38:83:9a:17:73:cb:df:4c:ca:63:
44:67:e3:d6:26:eb:09:78:9f:df:92:de:66:6e:83:
c3:a2:58:fc:b2:7f:c9:2d:71:ac:aa:b3:c1:12:b5:
5b:ff:12:54:bd:bb:6c:1a:ef:16:28:b4:39:1b:9f:
a1:a8:00:a7:f8:59:49:36:22:be:12:4b:f0:d1:be:
cf:26:d2:aa:2d:2e:df:f7:59:87:99:8c:5d:65:ea:
5f:1e:2b:7a:92:65:06:4e:a1:78:ab:e1:4c:ca:c7:
3a:4c:35:f4:46:8e:c5:21:a4:76:9a:6b:bc:77:e8:
8e:3d:81:eb:70:b0:07:c4:e0:be:bd:04:b6:1c:61:
4c:24:00:80:13:7a:7d:4e:41:87:e9:1c:57:09:63:
29:56:da:5a:10:9f:3e:2b:f3:d9:d2:78:d5:62:a2:
40:66:2c:ea:60:f8:54:26:26:bd:cc:50:f7:6d:17:
16:47:2a:bf:1d:f3:96:6b:3e:7e:62:e5:fa:cd:12:
81:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:B8:03:5D:51:7C:63:9A:F6:65:FB:64:73:EC:D4:39:52:82:26:A1
X509v3 Authority Key Identifier:
keyid:32:02:47:51:6E:91:01:7E:2D:BC:B5:72:CA:0F:29:A1:22:81:AC:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MgJHUW6RAX4tvLVyyg8poSKBrPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/624e63-b876-4ef4-bf19-e43620880cb6/1/MgJHUW6RAX4tvLVyyg8poSKBrPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/624e63-b876-4ef4-bf19-e43620880cb6/1/MgJHUW6RAX4tvLVyyg8poSKBrPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:ee:c0:51:6b:c9:a3:cd:f5:9e:56:eb:7d:84:3d:9b:ac:67:
6e:a9:46:e8:2c:ce:40:b4:37:b6:82:70:a0:87:94:ed:12:86:
fa:89:59:5b:a7:70:fc:0b:fc:4c:84:5b:35:11:36:8f:d7:2d:
ec:d2:7d:3e:46:fe:d2:c5:c5:db:ce:89:9a:df:aa:70:82:05:
58:be:7c:77:10:6a:b6:35:32:cb:32:96:e6:90:73:db:c4:db:
cb:d5:01:9d:77:c6:b2:02:db:91:52:86:3e:54:5d:83:2d:de:
23:eb:e6:93:90:fc:d7:dd:4a:4b:de:66:69:15:b2:a3:c7:f0:
28:5e:69:e0:ce:24:59:c9:9f:07:c5:10:b1:a3:f1:7d:fb:14:
d5:ab:35:53:52:a4:a1:4c:5e:e5:55:4c:d9:cc:0d:cc:21:c1:
cd:e7:ab:dc:57:5c:a7:4a:46:30:fe:42:d1:17:7a:e7:87:3e:
aa:9c:a5:54:fc:9b:4e:ff:5a:a1:3c:c0:98:a2:9f:91:73:4f:
0e:2a:5c:40:30:f8:c7:c5:33:76:4e:33:1d:54:f0:8b:92:75:
c3:c4:a0:36:02:89:1a:de:79:17:5a:d5:03:6e:11:cf:ae:34:
fc:0f:fb:3e:fc:17:91:e5:99:2a:f4:c6:b1:64:37:b4:76:c1:
ca:5f:c4:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS68pERDXW28LgbD/F8EwkEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyMDI0NzUxNmU5MTAxN2UyZGJjYjU3MmNhMGYyOWExMjI4
MWFjZjAwHhcNMjUwMTMxMDYwMDQ2WhcNMjUwMjAxMDYwMDQ2WjAzMTEwLwYDVQQD
EyhmYmI4MDM1ZDUxN2M2MzlhZjY2NWZiNjQ3M2VjZDQzOTUyODIyNmExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCPaNYVF2edPRty4Ge34Qth4m/4y
hqxyPrOuZgpO9uZY5zeuVOuA1P8X3XTJr2c2ROJAyr8eW+D+MmfJ6S9/zDiDmhdz
y99MymNEZ+PWJusJeJ/fkt5mboPDolj8sn/JLXGsqrPBErVb/xJUvbtsGu8WKLQ5
G5+hqACn+FlJNiK+Ekvw0b7PJtKqLS7f91mHmYxdZepfHit6kmUGTqF4q+FMysc6
TDX0Ro7FIaR2mmu8d+iOPYHrcLAHxOC+vQS2HGFMJACAE3p9TkGH6RxXCWMpVtpa
EJ8+K/PZ0njVYqJAZizqYPhUJia9zFD3bRcWRyq/HfOWaz5+YuX6zRKBKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPu4A11RfGOa9mX7ZHPs1DlSgiahMB8GA1UdIwQY
MBaAFDICR1FukQF+Lby1csoPKaEigazwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWdKSFVXNlJBWDR0dkxWeXlnOHBvU0tCclBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS82MjRlNjMtYjg3Ni00ZWY0LWJmMTkt
ZTQzNjIwODgwY2I2LzEvTWdKSFVXNlJBWDR0dkxWeXlnOHBvU0tCclBBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS82MjRlNjMtYjg3Ni00ZWY0LWJmMTktZTQzNjIwODgwY2I2
LzEvTWdKSFVXNlJBWDR0dkxWeXlnOHBvU0tCclBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnu7AUWvJ
o831nlbrfYQ9m6xnbqlG6CzOQLQ3toJwoIeU7RKG+olZW6dw/Av8TIRbNRE2j9ct
7NJ9Pkb+0sXF286Jmt+qcIIFWL58dxBqtjUyyzKW5pBz28Tby9UBnXfGsgLbkVKG
PlRdgy3eI+vmk5D8191KS95maRWyo8fwKF5p4M4kWcmfB8UQsaPxffsU1as1U1Kk
oUxe5VVM2cwNzCHBzeer3Fdcp0pGMP5C0Rd654c+qpylVPybTv9aoTzAmKKfkXNP
DipcQDD4x8Uzdk4zHVTwi5J1w8SgNgKJGt55F1rVA24Rz640/A/7PvwXkeWZKvTG
sWQ3tHbByl/EAg==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:39:51 2025 by rpki-client on console-fra.rpki-client.org