Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.mft
File: rMGajH8XQRRJx9SP-TCNJIMulSs.mft (raw, json)
Hash identifier: KayxzIhpHOyvxLiCAj/LkMjlT4qQWbiCHJBTSaVg9s0=
Subject key identifier: 08:FE:A8:E4:2F:49:BF:39:59:B5:99:8A:64:04:B1:5D:11:6B:94:05
Authority key identifier: AC:C1:9A:8C:7F:17:41:14:49:C7:D4:8F:F9:30:8D:24:83:2E:95:2B
Certificate issuer: /CN=acc19a8c7f17411449c7d48ff9308d24832e952b
Certificate serial: 0195127E1314476811109B8CEDE81AA91590
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rMGajH8XQRRJx9SP-TCNJIMulSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.mft
Manifest number: 1458
Signing time: Mon 17 Feb 2025 06:00:07 +0000
Manifest this update: Mon 17 Feb 2025 06:00:07 +0000
Manifest next update: Tue 18 Feb 2025 06:00:07 +0000
Files and hashes: 1: Qwfm7iyTFcUFA4cP-BGJUr6nVGo.roa (hash: cGT3x4JJQpP+f+7JmlJEaoJ5r1uUvYJMBAOOSckaWRE=)
2: rMGajH8XQRRJx9SP-TCNJIMulSs.crl (hash: NJy5U9D1nfacNHkqh1KcRa8PNZ8EqXtac2DWOHok/LA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.mft
rsync://rpki.ripe.net/repository/DEFAULT/rMGajH8XQRRJx9SP-TCNJIMulSs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:7e:13:14:47:68:11:10:9b:8c:ed:e8:1a:a9:15:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acc19a8c7f17411449c7d48ff9308d24832e952b
Validity
Not Before: Feb 17 06:00:07 2025 GMT
Not After : Feb 18 06:00:07 2025 GMT
Subject: CN=08fea8e42f49bf3959b5998a6404b15d116b9405
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c6:45:11:5f:7c:82:3c:8f:06:ed:ee:ef:e4:
f5:c4:dd:ad:f6:42:da:9c:d4:b7:a8:fb:b4:13:0b:
a7:cf:02:7b:08:80:c8:e5:32:54:75:26:f0:62:75:
55:e5:d8:c7:bd:6a:bd:24:01:f2:11:69:56:2f:5a:
33:86:6c:a4:45:8d:c5:40:5b:e7:2a:62:99:4c:dd:
19:71:39:5d:ae:2b:ce:57:64:a0:ee:79:5e:ce:90:
cd:1f:3e:b4:6c:58:8d:5e:55:34:f5:07:00:2d:02:
5c:db:0e:fe:1b:92:5b:35:de:a1:78:ac:ef:c7:b3:
a4:52:eb:21:95:9c:c2:dc:3a:1b:c2:27:c7:ad:48:
9c:0f:f6:e6:95:b5:41:99:90:e7:76:d3:27:d9:30:
d8:32:77:76:14:78:7b:da:e9:86:a2:bd:44:d4:3e:
d5:73:25:23:ad:8c:4c:07:37:ac:b8:ea:03:8a:5d:
0d:3b:98:c0:f7:26:bc:0f:b5:49:a7:66:02:2a:c3:
dc:3f:a7:a4:52:46:27:f9:8e:b5:1d:0c:b6:04:f6:
85:09:01:1e:d8:4c:9e:68:52:3a:10:a6:01:60:c7:
61:35:3e:1f:f1:ca:c6:cc:85:c9:60:ca:50:2b:04:
57:a1:30:3a:26:fe:88:ae:64:4a:77:19:6f:d2:1c:
1f:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:FE:A8:E4:2F:49:BF:39:59:B5:99:8A:64:04:B1:5D:11:6B:94:05
X509v3 Authority Key Identifier:
keyid:AC:C1:9A:8C:7F:17:41:14:49:C7:D4:8F:F9:30:8D:24:83:2E:95:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rMGajH8XQRRJx9SP-TCNJIMulSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:c4:9b:aa:f2:91:37:69:8f:fd:fa:4b:49:87:0b:25:16:6a:
1a:40:01:64:c3:f7:8e:b0:81:0d:8c:64:9b:b7:6e:ad:06:22:
2e:ae:e3:98:cd:0c:e3:4b:1c:9c:34:b2:1e:59:c0:30:06:51:
72:81:0d:79:38:42:f9:d6:8f:b7:95:68:be:db:9b:36:4e:42:
a9:6e:88:22:77:ce:35:f2:dc:34:80:4a:cc:20:c0:cf:aa:80:
77:f8:95:ad:63:ef:3f:e2:0a:e4:c3:37:35:02:a9:97:23:80:
87:87:68:09:1b:c0:16:2d:ef:96:41:0c:a1:e7:d8:8e:4b:50:
c1:f3:94:c2:eb:50:84:21:c6:af:ab:3f:33:e3:03:97:e4:c5:
d1:57:24:17:e0:92:0e:c7:9b:06:87:6b:c1:42:8a:8e:6e:50:
60:31:ff:52:38:aa:a4:d3:5c:bf:fe:1b:00:96:e1:59:fa:f7:
47:fc:22:d0:f9:9f:92:aa:90:60:e3:02:e7:c2:5d:4f:eb:91:
67:5d:9b:b0:f9:cf:95:4c:b5:b6:f2:e8:f6:2a:56:ce:c2:c5:
25:f9:5d:37:88:a2:64:c6:ca:95:7b:65:44:60:0f:e5:c5:49:
d3:fb:9b:dc:ae:71:3b:f9:09:9c:87:1a:93:50:e4:66:35:0a:
c8:5d:de:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUSfhMUR2gREJuM7egaqRWQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjYzE5YThjN2YxNzQxMTQ0OWM3ZDQ4ZmY5MzA4ZDI0ODMy
ZTk1MmIwHhcNMjUwMjE3MDYwMDA3WhcNMjUwMjE4MDYwMDA3WjAzMTEwLwYDVQQD
EygwOGZlYThlNDJmNDliZjM5NTliNTk5OGE2NDA0YjE1ZDExNmI5NDA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8ZFEV98gjyPBu3u7+T1xN2t9kLa
nNS3qPu0EwunzwJ7CIDI5TJUdSbwYnVV5djHvWq9JAHyEWlWL1ozhmykRY3FQFvn
KmKZTN0ZcTldrivOV2Sg7nlezpDNHz60bFiNXlU09QcALQJc2w7+G5JbNd6heKzv
x7OkUushlZzC3DobwifHrUicD/bmlbVBmZDndtMn2TDYMnd2FHh72umGor1E1D7V
cyUjrYxMBzesuOoDil0NO5jA9ya8D7VJp2YCKsPcP6ekUkYn+Y61HQy2BPaFCQEe
2EyeaFI6EKYBYMdhNT4f8crGzIXJYMpQKwRXoTA6Jv6IrmRKdxlv0hwfwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAj+qOQvSb85WbWZimQEsV0Ra5QFMB8GA1UdIwQY
MBaAFKzBmox/F0EUScfUj/kwjSSDLpUrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvck1HYWpIOFhRUlJKeDlTUC1UQ05KSU11bFNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9mNDA1YTItNGUzZS00NjIxLTk3MWQt
YmY4ZjNkNDM4ODRmLzEvck1HYWpIOFhRUlJKeDlTUC1UQ05KSU11bFNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC9mNDA1YTItNGUzZS00NjIxLTk3MWQtYmY4ZjNkNDM4ODRm
LzEvck1HYWpIOFhRUlJKeDlTUC1UQ05KSU11bFNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATMSbqvKR
N2mP/fpLSYcLJRZqGkABZMP3jrCBDYxkm7durQYiLq7jmM0M40scnDSyHlnAMAZR
coENeThC+daPt5VovtubNk5CqW6IInfONfLcNIBKzCDAz6qAd/iVrWPvP+IK5MM3
NQKplyOAh4doCRvAFi3vlkEMoefYjktQwfOUwutQhCHGr6s/M+MDl+TF0VckF+CS
DsebBodrwUKKjm5QYDH/UjiqpNNcv/4bAJbhWfr3R/wi0PmfkqqQYOMC58JdT+uR
Z12bsPnPlUy1tvLo9ipWzsLFJfldN4iiZMbKlXtlRGAP5cVJ0/ub3K5xO/kJnIca
k1DkZjUKyF3eOQ==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:30:33 2025 by rpki-client