Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c26199-3303-4223-9f0f-5dafc634ccd6/1/MgrQyxyPq9KnFycj8utT6gLoSmk.mft
File: MgrQyxyPq9KnFycj8utT6gLoSmk.mft (raw, json)
Hash identifier: Xmj+Uok9KRJMEvsEQOImE/a1xCPWFMUpsgpXQXchq40=
Subject key identifier: DB:86:86:47:5F:CD:28:19:3C:39:EB:CF:20:02:5A:2F:46:02:4A:FD
Authority key identifier: 32:0A:D0:CB:1C:8F:AB:D2:A7:17:27:23:F2:EB:53:EA:02:E8:4A:69
Certificate issuer: /CN=320ad0cb1c8fabd2a7172723f2eb53ea02e84a69
Certificate serial: 0194C42C4E5E10DF8374BBAAF0EE99016C71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MgrQyxyPq9KnFycj8utT6gLoSmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c26199-3303-4223-9f0f-5dafc634ccd6/1/MgrQyxyPq9KnFycj8utT6gLoSmk.mft
Manifest number: 9B
Signing time: Sun 02 Feb 2025 01:00:25 +0000
Manifest this update: Sun 02 Feb 2025 01:00:25 +0000
Manifest next update: Mon 03 Feb 2025 01:00:25 +0000
Files and hashes: 1: JyQJbELaexgQ6fqiGT_WU8kf0iA.roa (hash: k3GN2/34cdpJMDa/U2bzg9E3dU3QeePwWvyheMjQ+5o=)
2: MgrQyxyPq9KnFycj8utT6gLoSmk.crl (hash: VNWsW4b5L1XVhTB+DIK+ABCyC2Mf+2p6y6dDDHe/kTg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/c26199-3303-4223-9f0f-5dafc634ccd6/1/MgrQyxyPq9KnFycj8utT6gLoSmk.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/c26199-3303-4223-9f0f-5dafc634ccd6/1/MgrQyxyPq9KnFycj8utT6gLoSmk.mft
rsync://rpki.ripe.net/repository/DEFAULT/MgrQyxyPq9KnFycj8utT6gLoSmk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:2c:4e:5e:10:df:83:74:bb:aa:f0:ee:99:01:6c:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=320ad0cb1c8fabd2a7172723f2eb53ea02e84a69
Validity
Not Before: Feb 2 01:00:25 2025 GMT
Not After : Feb 3 01:00:25 2025 GMT
Subject: CN=db8686475fcd28193c39ebcf20025a2f46024afd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:cb:c6:26:4c:54:7c:74:5d:82:66:97:24:49:
f9:d0:c9:e3:b9:ea:e1:32:62:c4:29:1f:55:5a:77:
c7:8d:fe:aa:e3:02:77:76:d5:3f:97:76:c2:cf:e1:
82:7d:6c:01:da:31:b7:89:ba:5b:e1:bc:fd:8e:ed:
f8:9c:e8:19:d2:a2:41:0a:e4:9f:cd:69:83:52:21:
34:57:cd:2e:69:1f:47:18:43:d3:bf:8a:3c:96:ba:
bd:0c:f2:a2:3e:7c:ab:6e:0c:72:fe:71:4e:e9:b4:
e4:95:5b:f2:47:12:b8:0a:20:f0:b5:6e:2e:e5:ca:
ec:65:bb:34:fd:2f:4e:b4:1e:f7:bb:dc:87:b1:dc:
8d:09:37:18:88:3b:02:b4:8e:f1:6c:bf:aa:11:18:
8d:62:48:00:d7:85:9f:c0:90:08:d8:2d:01:90:99:
e8:f4:55:44:85:98:2b:d8:b7:45:14:db:08:87:16:
de:1a:f9:af:91:58:53:fb:9b:27:5e:b5:d7:7c:ef:
ff:44:95:bf:85:39:43:32:33:0e:1e:0d:d4:b3:02:
06:b3:20:53:fb:ed:e2:53:24:90:f3:7d:94:f0:ba:
f6:b7:ea:bf:cd:ec:0a:f7:49:3f:40:4a:f5:77:0f:
42:96:43:8c:72:f0:d1:ee:81:9a:2e:2d:22:ef:11:
a1:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:86:86:47:5F:CD:28:19:3C:39:EB:CF:20:02:5A:2F:46:02:4A:FD
X509v3 Authority Key Identifier:
keyid:32:0A:D0:CB:1C:8F:AB:D2:A7:17:27:23:F2:EB:53:EA:02:E8:4A:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MgrQyxyPq9KnFycj8utT6gLoSmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c26199-3303-4223-9f0f-5dafc634ccd6/1/MgrQyxyPq9KnFycj8utT6gLoSmk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c26199-3303-4223-9f0f-5dafc634ccd6/1/MgrQyxyPq9KnFycj8utT6gLoSmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:92:8b:2e:aa:aa:8e:32:ab:82:a2:22:50:fd:de:68:b6:1f:
a6:0b:05:5a:c8:46:3a:4d:5c:fe:b8:54:ee:70:0c:5d:2e:0a:
ce:86:06:b0:98:8e:7c:81:dd:dc:59:d3:75:fa:dc:ac:a8:ab:
06:39:65:d9:e3:ba:99:80:5c:bb:df:4e:e5:19:97:7d:ad:e0:
9b:b6:fe:2e:15:02:98:56:f9:83:b0:8d:7b:72:41:23:4e:0d:
99:42:75:77:c1:01:d8:a8:32:3f:11:a7:7a:1f:40:75:85:39:
8a:d5:55:2a:c9:5c:46:ce:d3:0a:fa:7d:a1:72:3e:f3:7c:99:
c8:59:35:8f:79:bb:c4:09:59:b1:1f:14:bf:10:36:dc:46:4a:
12:cc:73:6f:62:70:97:c7:3a:de:e3:86:35:d1:25:c3:67:f8:
46:9a:2d:12:d9:f6:bb:9d:a3:f5:ec:6f:f7:7c:e5:cd:e1:2d:
cb:c8:83:90:86:d4:a5:1f:fe:52:37:5c:35:3c:eb:e0:f3:28:
14:c4:44:92:0e:0f:aa:c0:f1:f3:e0:77:7b:d3:96:b7:88:b0:
62:84:6f:19:ae:eb:04:a0:d9:6d:75:ba:bc:0d:67:8d:20:11:
8d:c9:67:f6:8c:e7:a5:e4:1f:42:9a:da:f6:ca:6d:2e:01:6b:
45:e6:17:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTELE5eEN+DdLuq8O6ZAWxxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyMGFkMGNiMWM4ZmFiZDJhNzE3MjcyM2YyZWI1M2VhMDJl
ODRhNjkwHhcNMjUwMjAyMDEwMDI1WhcNMjUwMjAzMDEwMDI1WjAzMTEwLwYDVQQD
EyhkYjg2ODY0NzVmY2QyODE5M2MzOWViY2YyMDAyNWEyZjQ2MDI0YWZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqcvGJkxUfHRdgmaXJEn50Mnjuerh
MmLEKR9VWnfHjf6q4wJ3dtU/l3bCz+GCfWwB2jG3ibpb4bz9ju34nOgZ0qJBCuSf
zWmDUiE0V80uaR9HGEPTv4o8lrq9DPKiPnyrbgxy/nFO6bTklVvyRxK4CiDwtW4u
5crsZbs0/S9OtB73u9yHsdyNCTcYiDsCtI7xbL+qERiNYkgA14WfwJAI2C0BkJno
9FVEhZgr2LdFFNsIhxbeGvmvkVhT+5snXrXXfO//RJW/hTlDMjMOHg3UswIGsyBT
++3iUySQ832U8Lr2t+q/zewK90k/QEr1dw9ClkOMcvDR7oGaLi0i7xGh4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNuGhkdfzSgZPDnrzyACWi9GAkr9MB8GA1UdIwQY
MBaAFDIK0Mscj6vSpxcnI/LrU+oC6EppMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWdyUXl4eVBxOUtuRnljajh1dFQ2Z0xvU21rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9jMjYxOTktMzMwMy00MjIzLTlmMGYt
NWRhZmM2MzRjY2Q2LzEvTWdyUXl4eVBxOUtuRnljajh1dFQ2Z0xvU21rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy9jMjYxOTktMzMwMy00MjIzLTlmMGYtNWRhZmM2MzRjY2Q2
LzEvTWdyUXl4eVBxOUtuRnljajh1dFQ2Z0xvU21rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAopKLLqqq
jjKrgqIiUP3eaLYfpgsFWshGOk1c/rhU7nAMXS4KzoYGsJiOfIHd3FnTdfrcrKir
Bjll2eO6mYBcu99O5RmXfa3gm7b+LhUCmFb5g7CNe3JBI04NmUJ1d8EB2KgyPxGn
eh9AdYU5itVVKslcRs7TCvp9oXI+83yZyFk1j3m7xAlZsR8UvxA23EZKEsxzb2Jw
l8c63uOGNdElw2f4RpotEtn2u52j9exv93zlzeEty8iDkIbUpR/+UjdcNTzr4PMo
FMREkg4PqsDx8+B3e9OWt4iwYoRvGa7rBKDZbXW6vA1njSARjcln9oznpeQfQpra
9sptLgFrReYXxg==
-----END CERTIFICATE-----
Generated at Sun Feb 2 05:43:31 2025 by rpki-client