Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/3d838c-8622-4e58-870f-de9e02d41797/1/mgdjMrvSgPCFLbafYVsPFJkUgxs.mft
File: mgdjMrvSgPCFLbafYVsPFJkUgxs.mft (raw, json)
Hash identifier: +44c6Dag0hUM2oUOjX6E9JXDnGWHe4xbBpbvfWS7+Fg=
Subject key identifier: 41:F6:7C:0F:B7:E6:C3:04:69:EC:08:FC:10:0F:41:E0:05:E9:67:B6
Authority key identifier: 9A:07:63:32:BB:D2:80:F0:85:2D:B6:9F:61:5B:0F:14:99:14:83:1B
Certificate issuer: /CN=9a076332bbd280f0852db69f615b0f149914831b
Certificate serial: 0196CA974B8E6DAA416CC5C9DA613E3461E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mgdjMrvSgPCFLbafYVsPFJkUgxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/3d838c-8622-4e58-870f-de9e02d41797/1/mgdjMrvSgPCFLbafYVsPFJkUgxs.mft
Manifest number: 02C7
Signing time: Tue 13 May 2025 17:00:34 +0000
Manifest this update: Tue 13 May 2025 17:00:34 +0000
Manifest next update: Wed 14 May 2025 17:00:34 +0000
Files and hashes: 1: mgdjMrvSgPCFLbafYVsPFJkUgxs.crl (hash: bhzCHbnpqgP4i8ZzqigXD5pl+KXFieAwnz7qwQQTbsE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/3d838c-8622-4e58-870f-de9e02d41797/1/mgdjMrvSgPCFLbafYVsPFJkUgxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/3d838c-8622-4e58-870f-de9e02d41797/1/mgdjMrvSgPCFLbafYVsPFJkUgxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/mgdjMrvSgPCFLbafYVsPFJkUgxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ca:97:4b:8e:6d:aa:41:6c:c5:c9:da:61:3e:34:61:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a076332bbd280f0852db69f615b0f149914831b
Validity
Not Before: May 13 17:00:34 2025 GMT
Not After : May 14 17:00:34 2025 GMT
Subject: CN=41f67c0fb7e6c30469ec08fc100f41e005e967b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ca:47:2a:5c:83:d1:95:d1:b1:6b:af:6d:31:
75:91:f6:31:51:e6:2b:6c:9d:ff:fe:91:b9:62:a8:
73:86:76:80:07:81:6c:89:71:f1:69:4a:7b:bd:2e:
42:aa:cc:0b:93:77:f7:18:df:c8:25:f4:34:8b:cb:
30:c4:63:e7:93:93:b3:84:85:84:43:03:87:25:c8:
06:36:cc:0f:fe:af:12:55:14:27:c9:35:d2:59:6f:
9f:0e:9f:96:af:83:0d:e8:e8:a4:76:f5:5b:8c:be:
1d:bd:67:8c:5e:4b:c0:d9:49:d6:d0:09:e5:fe:02:
f2:2a:ae:c1:c0:8f:0d:a3:c6:99:c8:f4:b6:22:58:
88:2f:7a:c1:ae:73:a2:25:11:76:04:1e:c8:a7:1e:
0b:ec:2c:03:ec:ad:13:89:79:c7:33:8d:24:1e:51:
07:31:ee:c8:b5:4e:89:da:bd:0c:73:ef:b4:88:51:
2e:4f:7a:36:3b:10:64:58:61:26:f9:73:5d:ea:9b:
8f:9a:12:71:bc:98:55:34:ec:25:09:14:34:f8:b1:
9b:e1:3f:01:cd:c2:b1:ec:89:09:d7:d1:bc:e3:25:
1e:f5:a8:c3:2c:4a:92:bb:eb:30:77:9e:51:21:00:
ef:24:b1:56:46:68:ec:11:c8:68:c9:9a:ce:84:c1:
8f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:F6:7C:0F:B7:E6:C3:04:69:EC:08:FC:10:0F:41:E0:05:E9:67:B6
X509v3 Authority Key Identifier:
keyid:9A:07:63:32:BB:D2:80:F0:85:2D:B6:9F:61:5B:0F:14:99:14:83:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mgdjMrvSgPCFLbafYVsPFJkUgxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3d838c-8622-4e58-870f-de9e02d41797/1/mgdjMrvSgPCFLbafYVsPFJkUgxs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3d838c-8622-4e58-870f-de9e02d41797/1/mgdjMrvSgPCFLbafYVsPFJkUgxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:31:11:2d:fd:87:dc:6d:26:82:1c:d2:be:5f:2c:d6:42:4f:
01:d9:de:9c:a6:e2:29:a5:97:18:40:f6:6c:4d:96:ec:43:e3:
ac:7c:ff:c8:80:df:9c:50:09:0e:5f:f1:5a:5b:bf:cc:a3:2a:
2a:4e:04:a9:9c:3b:05:c9:c9:48:d0:6d:86:76:82:01:c2:a1:
41:35:6a:47:4c:a8:47:20:d5:35:e4:d7:34:07:02:7b:d4:fb:
bb:75:74:d3:fe:3d:65:42:32:65:f8:d3:3f:76:8b:42:f9:2d:
a0:f2:2a:2c:0d:7a:66:a5:80:2e:98:12:a2:2d:d6:29:41:9a:
62:53:8e:23:72:4e:09:ec:d2:12:68:3e:e1:a2:ef:7a:cf:1d:
61:94:75:26:3a:e1:f9:1c:a3:af:f0:c9:d2:40:23:d9:d3:f5:
19:70:08:af:92:41:be:9f:e0:c7:37:95:8c:62:48:b0:46:26:
5a:a5:fa:43:42:99:06:15:0a:4f:79:b3:db:83:23:4b:44:7a:
52:96:21:cd:af:6f:fc:fd:84:52:c9:87:6c:fc:8d:00:bf:fc:
91:57:7f:30:5d:23:15:ed:cb:8b:88:7a:cb:0e:83:97:61:d7:
86:96:ae:02:23:de:74:88:38:10:27:a8:5f:2f:10:51:2b:34:
9f:22:45:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbKl0uObapBbMXJ2mE+NGHiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhMDc2MzMyYmJkMjgwZjA4NTJkYjY5ZjYxNWIwZjE0OTkx
NDgzMWIwHhcNMjUwNTEzMTcwMDM0WhcNMjUwNTE0MTcwMDM0WjAzMTEwLwYDVQQD
Eyg0MWY2N2MwZmI3ZTZjMzA0NjllYzA4ZmMxMDBmNDFlMDA1ZTk2N2I2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArspHKlyD0ZXRsWuvbTF1kfYxUeYr
bJ3//pG5YqhzhnaAB4FsiXHxaUp7vS5CqswLk3f3GN/IJfQ0i8swxGPnk5OzhIWE
QwOHJcgGNswP/q8SVRQnyTXSWW+fDp+Wr4MN6OikdvVbjL4dvWeMXkvA2UnW0Anl
/gLyKq7BwI8No8aZyPS2IliIL3rBrnOiJRF2BB7Ipx4L7CwD7K0TiXnHM40kHlEH
Me7ItU6J2r0Mc++0iFEuT3o2OxBkWGEm+XNd6puPmhJxvJhVNOwlCRQ0+LGb4T8B
zcKx7IkJ19G84yUe9ajDLEqSu+swd55RIQDvJLFWRmjsEchoyZrOhMGP5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEH2fA+35sMEaewI/BAPQeAF6We2MB8GA1UdIwQY
MBaAFJoHYzK70oDwhS22n2FbDxSZFIMbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWdkak1ydlNnUENGTGJhZllWc1BGSmtVZ3hzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8zZDgzOGMtODYyMi00ZTU4LTg3MGYt
ZGU5ZTAyZDQxNzk3LzEvbWdkak1ydlNnUENGTGJhZllWc1BGSmtVZ3hzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy8zZDgzOGMtODYyMi00ZTU4LTg3MGYtZGU5ZTAyZDQxNzk3
LzEvbWdkak1ydlNnUENGTGJhZllWc1BGSmtVZ3hzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADzERLf2H
3G0mghzSvl8s1kJPAdnenKbiKaWXGED2bE2W7EPjrHz/yIDfnFAJDl/xWlu/zKMq
Kk4EqZw7BcnJSNBthnaCAcKhQTVqR0yoRyDVNeTXNAcCe9T7u3V00/49ZUIyZfjT
P3aLQvktoPIqLA16ZqWALpgSoi3WKUGaYlOOI3JOCezSEmg+4aLves8dYZR1Jjrh
+Ryjr/DJ0kAj2dP1GXAIr5JBvp/gxzeVjGJIsEYmWqX6Q0KZBhUKT3mz24MjS0R6
UpYhza9v/P2EUsmHbPyNAL/8kVd/MF0jFe3Li4h6yw6Dl2HXhpauAiPedIg4ECeo
Xy8QUSs0nyJFcg==
-----END CERTIFICATE-----
Generated at Tue May 13 23:58:08 2025 by rpki-client