Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.mft
File: CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.mft (raw, json)
Hash identifier: IlFgXLjFVXDpOeTf2ioUH9CK8Z3LCZH58+ba3cLS5qU=
Subject key identifier: 6C:70:27:50:8B:44:C1:BB:80:DD:12:89:EA:BC:E6:32:72:54:C0:CB
Authority key identifier: 0A:35:57:5B:99:47:AC:E2:5C:E8:77:74:C8:27:75:F1:89:77:FD:19
Certificate issuer: /CN=0a35575b9947ace25ce87774c82775f18977fd19
Certificate serial: 01951135763064DEF9D3D2AFAC1ED971C832
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.mft
Manifest number: 11E3
Signing time: Mon 17 Feb 2025 00:01:11 +0000
Manifest this update: Mon 17 Feb 2025 00:01:11 +0000
Manifest next update: Tue 18 Feb 2025 00:01:11 +0000
Files and hashes: 1: CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.crl (hash: 6xWhrf5HCafXoHy87H4uDNutDubShaCT8MVTMF40ibY=)
2: H8Hgbzgx0A7FcofaefkTfVc8Xz0.roa (hash: 1i3t+G4LlCk005AGKE/RTc337vB1zniPnJjKB0owze0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:35:76:30:64:de:f9:d3:d2:af:ac:1e:d9:71:c8:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a35575b9947ace25ce87774c82775f18977fd19
Validity
Not Before: Feb 17 00:01:11 2025 GMT
Not After : Feb 18 00:01:11 2025 GMT
Subject: CN=6c7027508b44c1bb80dd1289eabce6327254c0cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:64:76:6f:9a:14:62:a4:07:39:06:5b:55:20:
e9:85:72:a4:6b:59:60:77:52:d9:d6:19:2c:fd:51:
21:f6:ed:fe:ad:ce:70:7e:cc:34:f2:0e:06:77:0b:
6d:ce:02:d2:30:31:98:8a:be:5e:32:32:98:ea:83:
b7:99:8c:2e:bf:fe:28:94:d6:e7:26:65:5a:54:8f:
84:12:55:b6:ad:30:5d:96:ca:c8:4f:28:24:f6:55:
cf:d3:33:3a:d6:0c:22:74:ff:68:85:b2:91:11:05:
07:bc:66:ab:1e:2c:a7:57:99:77:e1:66:8f:b1:a6:
a2:a0:76:3b:85:b7:f7:dd:89:32:0a:71:91:35:53:
66:66:18:65:2b:ec:42:fe:10:4f:ae:0c:f1:5f:5c:
7c:86:4d:b1:b1:64:84:be:fb:56:05:4e:26:bc:0f:
d0:a2:0f:e3:bf:ac:22:8f:80:c3:04:7d:4e:47:32:
5b:ce:30:17:3b:d1:cc:a2:1b:31:65:bd:68:d0:66:
c6:52:87:c5:8d:18:9b:12:23:61:f8:10:3c:1c:58:
f0:77:83:7c:0c:d4:df:e7:78:f1:10:cb:35:3c:d0:
2e:10:0e:66:ba:a1:92:36:1c:bf:22:c6:e9:b5:3b:
87:40:25:4e:93:04:4c:28:82:0e:8c:4c:7b:f3:12:
ea:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:70:27:50:8B:44:C1:BB:80:DD:12:89:EA:BC:E6:32:72:54:C0:CB
X509v3 Authority Key Identifier:
keyid:0A:35:57:5B:99:47:AC:E2:5C:E8:77:74:C8:27:75:F1:89:77:FD:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:c6:19:72:b1:a3:5a:1b:39:f0:f7:f3:1a:37:e6:d2:f2:7e:
54:7d:d4:f4:35:49:36:b8:b0:00:f4:5d:e0:14:7b:93:61:21:
26:aa:41:c4:fd:07:c7:64:b1:7c:9d:86:c8:17:fd:60:0c:0a:
2b:5d:73:b4:67:75:ac:f5:94:9c:f1:23:6b:66:ac:8e:a6:95:
36:56:4c:b3:f7:6a:c2:c7:70:3e:8c:42:90:96:8c:63:fc:eb:
ee:12:7a:63:01:dd:a3:2f:94:6c:03:df:59:b0:9f:5e:b8:2c:
7f:98:cc:f0:b9:e1:74:a1:61:53:12:ea:84:c8:a6:1c:89:bf:
02:20:30:70:53:7f:22:6e:2f:3e:d5:b1:e0:a3:66:c4:74:0a:
19:2d:cc:ff:88:59:ae:40:f5:3b:a4:74:65:df:ff:d3:2a:8e:
15:49:4f:ac:22:5d:23:8f:b0:50:37:17:4b:1c:a9:e8:8c:be:
66:78:49:a8:06:0a:d0:45:d9:ec:5c:f2:31:ae:14:b5:26:b7:
34:2d:60:1a:47:cd:ac:29:c8:0a:47:74:74:88:ec:ad:5c:b5:
f5:30:1b:46:31:1a:20:e5:fa:ab:4f:83:ee:2e:ee:92:4b:32:
c7:37:ef:58:96:27:fe:46:be:a8:f8:05:46:1e:d2:e6:f9:ca:
2e:53:ef:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZURNXYwZN7509KvrB7ZccgyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhMzU1NzViOTk0N2FjZTI1Y2U4Nzc3NGM4Mjc3NWYxODk3
N2ZkMTkwHhcNMjUwMjE3MDAwMTExWhcNMjUwMjE4MDAwMTExWjAzMTEwLwYDVQQD
Eyg2YzcwMjc1MDhiNDRjMWJiODBkZDEyODllYWJjZTYzMjcyNTRjMGNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2R2b5oUYqQHOQZbVSDphXKka1lg
d1LZ1hks/VEh9u3+rc5wfsw08g4GdwttzgLSMDGYir5eMjKY6oO3mYwuv/4olNbn
JmVaVI+EElW2rTBdlsrITygk9lXP0zM61gwidP9ohbKREQUHvGarHiynV5l34WaP
saaioHY7hbf33YkyCnGRNVNmZhhlK+xC/hBPrgzxX1x8hk2xsWSEvvtWBU4mvA/Q
og/jv6wij4DDBH1ORzJbzjAXO9HMohsxZb1o0GbGUofFjRibEiNh+BA8HFjwd4N8
DNTf53jxEMs1PNAuEA5muqGSNhy/IsbptTuHQCVOkwRMKIIOjEx78xLqdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGxwJ1CLRMG7gN0Sieq85jJyVMDLMB8GA1UdIwQY
MBaAFAo1V1uZR6ziXOh3dMgndfGJd/0ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2pWWFc1bEhyT0pjNkhkMHlDZDE4WWwzX1JrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8wZjJkYTktZjNkNS00YWI0LWJhYmUt
NzlkOTFlZjgyN2NlLzEvQ2pWWFc1bEhyT0pjNkhkMHlDZDE4WWwzX1JrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC8wZjJkYTktZjNkNS00YWI0LWJhYmUtNzlkOTFlZjgyN2Nl
LzEvQ2pWWFc1bEhyT0pjNkhkMHlDZDE4WWwzX1JrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjcYZcrGj
Whs58PfzGjfm0vJ+VH3U9DVJNriwAPRd4BR7k2EhJqpBxP0Hx2SxfJ2GyBf9YAwK
K11ztGd1rPWUnPEja2asjqaVNlZMs/dqwsdwPoxCkJaMY/zr7hJ6YwHdoy+UbAPf
WbCfXrgsf5jM8LnhdKFhUxLqhMimHIm/AiAwcFN/Im4vPtWx4KNmxHQKGS3M/4hZ
rkD1O6R0Zd//0yqOFUlPrCJdI4+wUDcXSxyp6Iy+ZnhJqAYK0EXZ7FzyMa4UtSa3
NC1gGkfNrCnICkd0dIjsrVy19TAbRjEaIOX6q0+D7i7ukksyxzfvWJYn/ka+qPgF
Rh7S5vnKLlPvSg==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:23:02 2025 by rpki-client