Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/c40875-061a-42df-9c6d-87a6845f66f9/1/cimwOc-KrxQdbm1hbnwWkInLyzI.mft
File: cimwOc-KrxQdbm1hbnwWkInLyzI.mft (raw, json)
Hash identifier: ahmFnHI9rRAT0cwA/sSil5vx73mpLPK0l/2Wjfe8TtQ=
Subject key identifier: AE:96:FF:D7:63:49:6C:36:4D:B7:E0:C1:E4:68:18:4C:F4:01:13:43
Authority key identifier: 72:29:B0:39:CF:8A:AF:14:1D:6E:6D:61:6E:7C:16:90:89:CB:CB:32
Certificate issuer: /CN=7229b039cf8aaf141d6e6d616e7c169089cbcb32
Certificate serial: 01967E6AD366E4723443D96570EC5CB79A2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cimwOc-KrxQdbm1hbnwWkInLyzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/c40875-061a-42df-9c6d-87a6845f66f9/1/cimwOc-KrxQdbm1hbnwWkInLyzI.mft
Manifest number: 0C50
Signing time: Mon 28 Apr 2025 22:00:52 +0000
Manifest this update: Mon 28 Apr 2025 22:00:52 +0000
Manifest next update: Tue 29 Apr 2025 22:00:52 +0000
Files and hashes: 1: _11c4KnryngFBZ3LrSwCjXVWAnI.roa (hash: 4suX3JVW+dbra41XqoLSgaNnHC7+X6k6GS1R8JLgxL8=)
2: cimwOc-KrxQdbm1hbnwWkInLyzI.crl (hash: pPBSnwp2TeMIXw7y5Tyij7rCew1qEQ3kF3cB8e/tQGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/c40875-061a-42df-9c6d-87a6845f66f9/1/cimwOc-KrxQdbm1hbnwWkInLyzI.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/c40875-061a-42df-9c6d-87a6845f66f9/1/cimwOc-KrxQdbm1hbnwWkInLyzI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cimwOc-KrxQdbm1hbnwWkInLyzI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 22:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:6a:d3:66:e4:72:34:43:d9:65:70:ec:5c:b7:9a:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7229b039cf8aaf141d6e6d616e7c169089cbcb32
Validity
Not Before: Apr 28 22:00:52 2025 GMT
Not After : Apr 29 22:00:52 2025 GMT
Subject: CN=ae96ffd763496c364db7e0c1e468184cf4011343
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:7d:cd:b2:f3:65:a3:dc:89:06:3c:11:2f:45:
68:48:e1:3e:9c:1e:eb:8a:7a:56:0e:51:9a:6e:a5:
cc:8a:9f:c5:4b:e0:27:43:f1:a8:5d:4d:0d:0d:da:
e2:00:36:e4:6f:b6:b4:63:51:4f:46:44:3f:6d:a7:
21:bc:0f:f4:09:02:74:2f:64:f5:6a:0b:cb:db:67:
ed:ad:cd:b5:85:c3:ae:33:73:62:b8:b2:e1:8c:23:
b8:a0:6d:53:61:8b:c4:06:42:0e:3e:95:81:c9:e4:
4f:ed:0e:82:77:ca:8d:7c:12:e0:f7:3e:e9:5e:e6:
04:19:d5:1d:22:db:ff:1f:38:60:c6:ce:ac:05:b5:
bb:a8:98:cb:38:06:79:bf:7f:a8:3c:3a:11:b9:54:
c1:ff:f1:7e:c2:79:e3:c9:f5:b5:64:26:a8:bb:02:
a3:81:f5:99:42:c4:36:e7:e3:a7:f0:9e:db:a4:d5:
b5:2d:e5:98:e0:7f:b7:dd:f4:c7:5b:3f:4c:96:e8:
20:54:b8:51:70:f4:7a:14:f0:38:48:bb:c3:30:14:
f5:a8:f4:c6:92:32:b4:3b:cd:e2:f7:a3:64:96:d7:
b6:a1:d0:10:63:a3:bd:23:4d:66:64:11:ed:22:5a:
78:4a:3c:d0:db:45:18:64:9d:2f:67:42:b5:22:c8:
df:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:96:FF:D7:63:49:6C:36:4D:B7:E0:C1:E4:68:18:4C:F4:01:13:43
X509v3 Authority Key Identifier:
keyid:72:29:B0:39:CF:8A:AF:14:1D:6E:6D:61:6E:7C:16:90:89:CB:CB:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cimwOc-KrxQdbm1hbnwWkInLyzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/c40875-061a-42df-9c6d-87a6845f66f9/1/cimwOc-KrxQdbm1hbnwWkInLyzI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/c40875-061a-42df-9c6d-87a6845f66f9/1/cimwOc-KrxQdbm1hbnwWkInLyzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:ba:e1:9c:34:21:5a:97:95:fb:8d:a9:0d:6f:35:88:14:31:
a7:cd:8a:e7:80:d9:55:df:71:8c:70:24:34:f0:ed:7b:ec:90:
fc:c5:f2:d8:4b:60:91:63:17:62:21:3d:f1:d5:bf:62:e7:99:
55:0f:be:ce:40:7e:70:a0:f9:cf:cf:71:e3:1c:11:f9:34:7d:
b6:2d:bb:ae:6e:a7:eb:32:63:7e:4f:d1:c0:8a:ef:7e:1c:05:
5a:52:05:3d:f5:2e:2d:ef:81:f5:52:28:4f:a4:cd:34:6f:da:
08:c3:d9:4c:e7:26:32:0f:dc:6f:c9:7a:c8:67:e9:a9:cc:52:
2d:cf:aa:ad:4e:92:3a:7e:d2:da:98:ad:38:59:52:f0:ca:27:
52:b5:d7:5a:60:ea:66:9b:11:10:a4:9d:a0:56:b4:64:59:dd:
7d:67:b9:94:53:bb:b3:99:40:09:bb:09:c6:27:5c:5b:bd:eb:
0a:21:67:5e:1a:d8:56:1a:54:a5:49:d1:69:5c:73:df:a0:04:
5b:50:7f:9a:d9:8e:91:20:b6:38:d5:4f:16:2c:88:76:02:ae:
0b:0e:12:ec:9c:91:f7:8f:07:a3:cd:ae:3e:f5:37:56:69:b5:
9b:19:b8:01:97:67:b3:b3:04:f8:e1:f2:ee:bf:2c:ab:d3:b8:
38:a8:be:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ+atNm5HI0Q9llcOxct5osMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMjliMDM5Y2Y4YWFmMTQxZDZlNmQ2MTZlN2MxNjkwODlj
YmNiMzIwHhcNMjUwNDI4MjIwMDUyWhcNMjUwNDI5MjIwMDUyWjAzMTEwLwYDVQQD
EyhhZTk2ZmZkNzYzNDk2YzM2NGRiN2UwYzFlNDY4MTg0Y2Y0MDExMzQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAin3NsvNlo9yJBjwRL0VoSOE+nB7r
inpWDlGabqXMip/FS+AnQ/GoXU0NDdriADbkb7a0Y1FPRkQ/bachvA/0CQJ0L2T1
agvL22ftrc21hcOuM3NiuLLhjCO4oG1TYYvEBkIOPpWByeRP7Q6Cd8qNfBLg9z7p
XuYEGdUdItv/Hzhgxs6sBbW7qJjLOAZ5v3+oPDoRuVTB//F+wnnjyfW1ZCaouwKj
gfWZQsQ25+On8J7bpNW1LeWY4H+33fTHWz9MluggVLhRcPR6FPA4SLvDMBT1qPTG
kjK0O83i96Nklte2odAQY6O9I01mZBHtIlp4SjzQ20UYZJ0vZ0K1IsjfwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK6W/9djSWw2TbfgweRoGEz0ARNDMB8GA1UdIwQY
MBaAFHIpsDnPiq8UHW5tYW58FpCJy8syMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2ltd09jLUtyeFFkYm0xaGJud1drSW5MeXpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9jNDA4NzUtMDYxYS00MmRmLTljNmQt
ODdhNjg0NWY2NmY5LzEvY2ltd09jLUtyeFFkYm0xaGJud1drSW5MeXpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My9jNDA4NzUtMDYxYS00MmRmLTljNmQtODdhNjg0NWY2NmY5
LzEvY2ltd09jLUtyeFFkYm0xaGJud1drSW5MeXpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGbrhnDQh
WpeV+42pDW81iBQxp82K54DZVd9xjHAkNPDte+yQ/MXy2EtgkWMXYiE98dW/YueZ
VQ++zkB+cKD5z89x4xwR+TR9ti27rm6n6zJjfk/RwIrvfhwFWlIFPfUuLe+B9VIo
T6TNNG/aCMPZTOcmMg/cb8l6yGfpqcxSLc+qrU6SOn7S2pitOFlS8MonUrXXWmDq
ZpsREKSdoFa0ZFndfWe5lFO7s5lACbsJxidcW73rCiFnXhrYVhpUpUnRaVxz36AE
W1B/mtmOkSC2ONVPFiyIdgKuCw4S7JyR948Ho82uPvU3Vmm1mxm4AZdns7ME+OHy
7r8sq9O4OKi+SQ==
-----END CERTIFICATE-----
Generated at Tue Apr 29 07:03:35 2025 by rpki-client