Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/b7ca89-70f2-408f-a4e4-b4a0cb8ed821/1/bWUK8XJES1IRanpn10qsffilXhw.mft
File: bWUK8XJES1IRanpn10qsffilXhw.mft (raw, json)
Hash identifier: YeklWpBWZIFt8lFrJTJD9kwoSDFWjrHQLM2g2wf9FY4=
Subject key identifier: 5E:B5:71:2E:11:53:1C:F2:4C:31:ED:07:55:33:D2:37:91:00:75:94
Authority key identifier: 6D:65:0A:F1:72:44:4B:52:11:6A:7A:67:D7:4A:AC:7D:F8:A5:5E:1C
Certificate issuer: /CN=6d650af172444b52116a7a67d74aac7df8a55e1c
Certificate serial: 0194C49A2E89C16679438D665BF133A7FC26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bWUK8XJES1IRanpn10qsffilXhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/b7ca89-70f2-408f-a4e4-b4a0cb8ed821/1/bWUK8XJES1IRanpn10qsffilXhw.mft
Manifest number: 052C
Signing time: Sun 02 Feb 2025 03:00:25 +0000
Manifest this update: Sun 02 Feb 2025 03:00:25 +0000
Manifest next update: Mon 03 Feb 2025 03:00:25 +0000
Files and hashes: 1: JA7bmNFaXPZ3zOhIhSoSK6cX0GM.roa (hash: /9NIaaC/nQfKu4JBvIQ0FkNL7E03OA0xPdL0pUFpcGQ=)
2: bWUK8XJES1IRanpn10qsffilXhw.crl (hash: LyC0nO652DpBSUkbjdpm7vbIBq6gnQOTb4yxhOQM1K4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/b7ca89-70f2-408f-a4e4-b4a0cb8ed821/1/bWUK8XJES1IRanpn10qsffilXhw.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/b7ca89-70f2-408f-a4e4-b4a0cb8ed821/1/bWUK8XJES1IRanpn10qsffilXhw.mft
rsync://rpki.ripe.net/repository/DEFAULT/bWUK8XJES1IRanpn10qsffilXhw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:9a:2e:89:c1:66:79:43:8d:66:5b:f1:33:a7:fc:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d650af172444b52116a7a67d74aac7df8a55e1c
Validity
Not Before: Feb 2 03:00:25 2025 GMT
Not After : Feb 3 03:00:25 2025 GMT
Subject: CN=5eb5712e11531cf24c31ed075533d23791007594
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:63:75:39:8b:fc:60:8e:bb:01:5a:46:53:98:
ba:59:f8:d2:57:76:80:c9:53:1b:9b:b6:06:09:fd:
ea:fc:48:7f:42:e0:cb:27:96:01:50:e6:91:30:83:
d1:42:f6:ed:af:ff:bb:ef:ff:dc:c6:a0:a5:d9:fc:
e7:41:cc:ca:cb:45:94:d5:d3:0a:81:e5:95:86:ba:
83:62:12:51:df:e6:c6:a8:2c:7e:d8:41:4e:0d:42:
1c:f0:fb:9a:7f:3a:4f:ee:81:78:e1:fd:2f:70:64:
70:0b:ed:a7:fa:3d:6e:d1:59:8b:6a:06:96:d6:b1:
3d:2e:92:82:8e:68:f1:37:f7:da:e4:70:72:75:1b:
ef:ec:45:44:29:b7:71:0a:14:81:5c:17:03:50:c8:
be:5b:7e:95:84:bf:69:64:ef:30:da:9d:9d:0c:6c:
85:c9:5d:61:02:f1:30:96:25:47:94:05:06:78:4f:
cb:8f:8a:e1:09:0d:c9:3c:44:6b:49:ba:2e:fa:0f:
f1:87:f0:3f:40:89:3d:0d:81:ae:f5:e6:0d:ea:12:
8f:a2:50:f9:ab:2b:d5:db:9d:01:2b:8f:86:1b:fb:
da:c4:27:ca:b5:cd:13:b4:a5:67:49:4e:bd:b9:4a:
6b:5d:02:00:91:9b:b8:f1:69:c5:20:d2:9f:61:bb:
da:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:B5:71:2E:11:53:1C:F2:4C:31:ED:07:55:33:D2:37:91:00:75:94
X509v3 Authority Key Identifier:
keyid:6D:65:0A:F1:72:44:4B:52:11:6A:7A:67:D7:4A:AC:7D:F8:A5:5E:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWUK8XJES1IRanpn10qsffilXhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/b7ca89-70f2-408f-a4e4-b4a0cb8ed821/1/bWUK8XJES1IRanpn10qsffilXhw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/b7ca89-70f2-408f-a4e4-b4a0cb8ed821/1/bWUK8XJES1IRanpn10qsffilXhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:72:09:80:f7:bf:59:3f:90:07:cb:8c:fd:b2:49:4c:70:a9:
6e:83:50:fb:9f:6f:dc:f9:7b:64:e9:03:d8:e2:05:13:bb:0b:
f5:8f:ac:f9:45:e3:0e:ae:00:99:a6:6a:4c:17:a8:9c:98:49:
90:3d:45:bc:1a:2f:ed:c7:f5:ba:d5:32:ef:15:55:8a:62:17:
ae:4e:33:3c:ca:f4:93:c6:ce:85:db:8f:1b:16:cc:29:a6:11:
94:33:9f:93:e2:c9:e0:41:39:57:80:57:09:22:d1:2e:6d:73:
55:29:b7:ea:8d:4f:17:38:42:65:8c:f5:f5:0a:42:d8:97:5a:
68:66:35:08:f5:d6:b7:47:67:16:3a:61:63:bd:a1:aa:47:82:
bf:c4:ad:76:8f:06:aa:86:19:67:b5:8c:dc:ae:1a:bf:80:26:
40:4e:27:21:93:a7:72:8d:05:fd:ef:84:33:13:c8:4b:87:13:
6c:de:73:28:ff:ae:35:26:a1:37:d6:0b:22:67:67:a0:45:96:
81:35:11:92:5b:05:3b:31:6c:10:cb:4d:36:34:46:97:b3:1f:
bb:19:a8:50:8f:97:9c:cd:9d:95:f2:dc:41:9e:39:34:4e:05:
df:f4:36:3e:c4:0b:8f:b6:74:3b:e4:45:8b:cd:86:2e:bf:2a:
0d:92:d9:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTEmi6JwWZ5Q41mW/Ezp/wmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkNjUwYWYxNzI0NDRiNTIxMTZhN2E2N2Q3NGFhYzdkZjhh
NTVlMWMwHhcNMjUwMjAyMDMwMDI1WhcNMjUwMjAzMDMwMDI1WjAzMTEwLwYDVQQD
Eyg1ZWI1NzEyZTExNTMxY2YyNGMzMWVkMDc1NTMzZDIzNzkxMDA3NTk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0GN1OYv8YI67AVpGU5i6WfjSV3aA
yVMbm7YGCf3q/Eh/QuDLJ5YBUOaRMIPRQvbtr/+77//cxqCl2fznQczKy0WU1dMK
geWVhrqDYhJR3+bGqCx+2EFODUIc8PuafzpP7oF44f0vcGRwC+2n+j1u0VmLagaW
1rE9LpKCjmjxN/fa5HBydRvv7EVEKbdxChSBXBcDUMi+W36VhL9pZO8w2p2dDGyF
yV1hAvEwliVHlAUGeE/Lj4rhCQ3JPERrSbou+g/xh/A/QIk9DYGu9eYN6hKPolD5
qyvV250BK4+GG/vaxCfKtc0TtKVnSU69uUprXQIAkZu48WnFINKfYbvabwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF61cS4RUxzyTDHtB1Uz0jeRAHWUMB8GA1UdIwQY
MBaAFG1lCvFyREtSEWp6Z9dKrH34pV4cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYldVSzhYSkVTMUlSYW5wbjEwcXNmZmlsWGh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9iN2NhODktNzBmMi00MDhmLWE0ZTQt
YjRhMGNiOGVkODIxLzEvYldVSzhYSkVTMUlSYW5wbjEwcXNmZmlsWGh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC9iN2NhODktNzBmMi00MDhmLWE0ZTQtYjRhMGNiOGVkODIx
LzEvYldVSzhYSkVTMUlSYW5wbjEwcXNmZmlsWGh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARHIJgPe/
WT+QB8uM/bJJTHCpboNQ+59v3Pl7ZOkD2OIFE7sL9Y+s+UXjDq4AmaZqTBeonJhJ
kD1FvBov7cf1utUy7xVVimIXrk4zPMr0k8bOhduPGxbMKaYRlDOfk+LJ4EE5V4BX
CSLRLm1zVSm36o1PFzhCZYz19QpC2JdaaGY1CPXWt0dnFjphY72hqkeCv8Stdo8G
qoYZZ7WM3K4av4AmQE4nIZOnco0F/e+EMxPIS4cTbN5zKP+uNSahN9YLImdnoEWW
gTURklsFOzFsEMtNNjRGl7MfuxmoUI+XnM2dlfLcQZ45NE4F3/Q2PsQLj7Z0O+RF
i82GLr8qDZLZig==
-----END CERTIFICATE-----
Generated at Sun Feb 2 07:06:54 2025 by rpki-client