Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/2a9acf-2f1e-4c9c-b810-a047816d6283/1/RIMxhRs1WdPMgpn2sCDvN44uSwQ.mft
File: RIMxhRs1WdPMgpn2sCDvN44uSwQ.mft (raw, json)
Hash identifier: uG/a5lA3EKEJa4bqg7jPh0gNpYliyg5aey4DJr68ras=
Subject key identifier: 9A:07:57:32:92:76:FF:8F:61:32:0E:1A:9A:9C:70:F1:38:60:68:70
Authority key identifier: 44:83:31:85:1B:35:59:D3:CC:82:99:F6:B0:20:EF:37:8E:2E:4B:04
Certificate issuer: /CN=448331851b3559d3cc8299f6b020ef378e2e4b04
Certificate serial: 0194C3F57F88C5C4AF036A142341128EDECA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RIMxhRs1WdPMgpn2sCDvN44uSwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/2a9acf-2f1e-4c9c-b810-a047816d6283/1/RIMxhRs1WdPMgpn2sCDvN44uSwQ.mft
Manifest number: 055E
Signing time: Sun 02 Feb 2025 00:00:33 +0000
Manifest this update: Sun 02 Feb 2025 00:00:33 +0000
Manifest next update: Mon 03 Feb 2025 00:00:33 +0000
Files and hashes: 1: Mr0WRrlMlv0_Evxeakjpwz7LiPg.roa (hash: gsCCcQlF73dWTqboxZPlvCMCNzkEYN7/m7aejhTDik0=)
2: RIMxhRs1WdPMgpn2sCDvN44uSwQ.crl (hash: 2jLFixBN1NRi24by959muNrzIFQtGlkoaBX5aLHIH/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/2a9acf-2f1e-4c9c-b810-a047816d6283/1/RIMxhRs1WdPMgpn2sCDvN44uSwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/2a9acf-2f1e-4c9c-b810-a047816d6283/1/RIMxhRs1WdPMgpn2sCDvN44uSwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/RIMxhRs1WdPMgpn2sCDvN44uSwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:f5:7f:88:c5:c4:af:03:6a:14:23:41:12:8e:de:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=448331851b3559d3cc8299f6b020ef378e2e4b04
Validity
Not Before: Feb 2 00:00:33 2025 GMT
Not After : Feb 3 00:00:33 2025 GMT
Subject: CN=9a0757329276ff8f61320e1a9a9c70f138606870
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:93:e2:08:7b:df:2e:12:78:49:ad:d6:ed:d9:
8c:4b:15:ca:2d:05:c1:7e:f6:e5:3f:e0:ec:01:62:
06:46:6d:90:68:25:01:c8:26:85:38:13:f5:8c:3a:
73:35:6a:81:a7:6f:e9:84:ca:47:20:f7:d5:06:c8:
1f:2e:5b:ef:dc:e1:99:6b:dc:bc:59:b5:e9:7d:50:
b3:0f:f7:78:c3:50:6d:6b:b6:5f:65:d0:e2:51:5d:
14:ab:2d:53:3b:61:1c:66:16:26:93:af:69:ec:69:
41:00:93:e5:f9:0f:7a:18:c7:ac:00:2a:f1:fd:a7:
aa:e6:73:00:1b:aa:5e:ca:7d:5a:e7:14:65:1f:49:
de:b0:32:aa:19:d2:84:91:b4:49:f5:5e:f5:35:12:
ac:63:6b:29:08:9f:bc:43:ff:3f:93:c2:c3:43:69:
0d:64:1a:e6:c8:52:58:5b:99:60:2d:fe:a1:90:0d:
a0:e7:df:6e:6a:42:0e:1c:cc:23:80:a9:d1:29:96:
d4:a9:b4:3d:32:ec:8b:c0:52:7b:95:1d:70:b6:92:
38:50:b9:19:fd:d6:26:72:d3:8a:ff:6c:75:08:64:
76:da:3a:1d:33:bd:99:dd:67:cc:e6:97:9b:19:41:
a7:b4:fc:45:54:30:88:b0:cf:3f:69:b9:8c:35:fe:
99:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:07:57:32:92:76:FF:8F:61:32:0E:1A:9A:9C:70:F1:38:60:68:70
X509v3 Authority Key Identifier:
keyid:44:83:31:85:1B:35:59:D3:CC:82:99:F6:B0:20:EF:37:8E:2E:4B:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RIMxhRs1WdPMgpn2sCDvN44uSwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/2a9acf-2f1e-4c9c-b810-a047816d6283/1/RIMxhRs1WdPMgpn2sCDvN44uSwQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/2a9acf-2f1e-4c9c-b810-a047816d6283/1/RIMxhRs1WdPMgpn2sCDvN44uSwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:43:5e:5b:5f:e2:73:e9:4f:5b:6e:f4:2d:09:ea:d4:25:41:
9e:bf:e5:6a:2f:92:89:43:86:21:73:c7:f2:2e:63:52:36:6a:
e5:95:95:5c:70:84:cd:40:44:fc:e4:ef:c1:2c:c1:ac:62:57:
3f:47:c0:27:a1:06:15:e0:8a:d0:48:1f:20:07:13:87:ac:ee:
29:45:1f:15:b4:f6:60:f3:e6:99:a9:4b:e4:2c:11:af:de:58:
fc:bc:4d:fd:b1:b0:49:8c:2a:0c:f6:c6:ed:d1:1d:95:d8:dd:
c6:2a:6f:4b:ca:68:36:23:a5:af:3c:68:0c:70:74:e6:b9:31:
e1:d8:ed:21:66:d2:b5:f0:8b:fb:71:4e:55:47:d5:b9:dd:1a:
93:1f:08:a9:d4:cc:33:9d:12:4f:c7:35:f6:74:73:0d:2e:ea:
ac:a5:4d:3b:cd:04:fa:04:ab:4c:b3:8a:b3:30:cc:2f:7c:bc:
7c:e2:0f:20:1c:f4:d8:e1:4c:ce:5e:4c:a2:06:46:dd:6b:97:
58:be:a0:0d:9c:ca:a0:ca:c8:69:21:6c:50:46:6f:45:9e:b2:
cd:b3:e0:90:87:88:ac:49:9b:01:cf:bd:38:1e:18:51:17:e2:
2d:7f:7d:0f:99:9a:34:e7:72:87:b0:db:89:fa:88:6b:8a:c1:
35:68:d9:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTD9X+IxcSvA2oUI0ESjt7KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0ODMzMTg1MWIzNTU5ZDNjYzgyOTlmNmIwMjBlZjM3OGUy
ZTRiMDQwHhcNMjUwMjAyMDAwMDMzWhcNMjUwMjAzMDAwMDMzWjAzMTEwLwYDVQQD
Eyg5YTA3NTczMjkyNzZmZjhmNjEzMjBlMWE5YTljNzBmMTM4NjA2ODcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJPiCHvfLhJ4Sa3W7dmMSxXKLQXB
fvblP+DsAWIGRm2QaCUByCaFOBP1jDpzNWqBp2/phMpHIPfVBsgfLlvv3OGZa9y8
WbXpfVCzD/d4w1Bta7ZfZdDiUV0Uqy1TO2EcZhYmk69p7GlBAJPl+Q96GMesACrx
/aeq5nMAG6peyn1a5xRlH0nesDKqGdKEkbRJ9V71NRKsY2spCJ+8Q/8/k8LDQ2kN
ZBrmyFJYW5lgLf6hkA2g599uakIOHMwjgKnRKZbUqbQ9MuyLwFJ7lR1wtpI4ULkZ
/dYmctOK/2x1CGR22jodM72Z3WfM5pebGUGntPxFVDCIsM8/abmMNf6ZMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJoHVzKSdv+PYTIOGpqccPE4YGhwMB8GA1UdIwQY
MBaAFESDMYUbNVnTzIKZ9rAg7zeOLksEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUklNeGhSczFXZFBNZ3BuMnNDRHZONDR1U3dRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi8yYTlhY2YtMmYxZS00YzljLWI4MTAt
YTA0NzgxNmQ2MjgzLzEvUklNeGhSczFXZFBNZ3BuMnNDRHZONDR1U3dRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi8yYTlhY2YtMmYxZS00YzljLWI4MTAtYTA0NzgxNmQ2Mjgz
LzEvUklNeGhSczFXZFBNZ3BuMnNDRHZONDR1U3dRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXkNeW1/i
c+lPW270LQnq1CVBnr/lai+SiUOGIXPH8i5jUjZq5ZWVXHCEzUBE/OTvwSzBrGJX
P0fAJ6EGFeCK0EgfIAcTh6zuKUUfFbT2YPPmmalL5CwRr95Y/LxN/bGwSYwqDPbG
7dEdldjdxipvS8poNiOlrzxoDHB05rkx4djtIWbStfCL+3FOVUfVud0akx8IqdTM
M50ST8c19nRzDS7qrKVNO80E+gSrTLOKszDML3y8fOIPIBz02OFMzl5MogZG3WuX
WL6gDZzKoMrIaSFsUEZvRZ6yzbPgkIeIrEmbAc+9OB4YURfiLX99D5maNOdyh7Db
ifqIa4rBNWjZ4w==
-----END CERTIFICATE-----
Generated at Sun Feb 2 06:05:26 2025 by rpki-client