Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/0/B5703F6700E832900122BBE6A5086441EB37BD2C.mft
File: B5703F6700E832900122BBE6A5086441EB37BD2C.mft (raw, json)
Hash identifier: +26ZZ2r2GDzsg5hVW+eWA3291pYPVYvNJdrgYhBu3JM=
Subject key identifier: 99:A6:76:70:97:EA:FD:53:77:05:48:06:4C:79:B8:8C:65:1C:23:9D
Authority key identifier: B5:70:3F:67:00:E8:32:90:01:22:BB:E6:A5:08:64:41:EB:37:BD:2C
Certificate issuer: /CN=b5703f6700e832900122bbe6a5086441eb37bd2c
Certificate serial: 5D901DCB71401093363E29675ADF7522CF5331C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tXA_ZwDoMpABIrvmpQhkQes3vSw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/0/B5703F6700E832900122BBE6A5086441EB37BD2C.mft
Manifest number: D8
Signing time: Sun 20 Apr 2025 12:20:20 +0000
Manifest this update: Sun 20 Apr 2025 12:15:20 +0000
Manifest next update: Mon 21 Apr 2025 15:12:20 +0000
Files and hashes: 1: B5703F6700E832900122BBE6A5086441EB37BD2C.crl (hash: e8eDHV1gW2VcTGrgisUtfEoTV7t9EhWfH3efIkHXS/E=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/0/B5703F6700E832900122BBE6A5086441EB37BD2C.crl
rsync://rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/0/B5703F6700E832900122BBE6A5086441EB37BD2C.mft
rsync://rpki.ripe.net/repository/DEFAULT/tXA_ZwDoMpABIrvmpQhkQes3vSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 15:12:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:90:1d:cb:71:40:10:93:36:3e:29:67:5a:df:75:22:cf:53:31:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5703f6700e832900122bbe6a5086441eb37bd2c
Validity
Not Before: Apr 20 12:15:20 2025 GMT
Not After : Apr 21 15:12:20 2025 GMT
Subject: CN=99A6767097EAFD53770548064C79B88C651C239D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:77:c1:f5:c5:7b:dc:4c:9c:fc:7c:67:08:8d:
90:6d:87:32:ae:89:74:9d:99:94:53:45:98:34:16:
30:bc:ad:55:7b:69:07:44:5b:5b:43:c0:2a:02:15:
e5:b0:e2:e6:3d:73:2e:0f:92:0d:99:01:92:ac:6b:
bb:e2:13:98:c4:68:c7:ee:6b:4a:6b:3c:e3:c9:9a:
fe:87:e9:39:0c:32:c3:8f:92:7c:b5:0f:4a:2d:37:
bd:1c:a9:eb:35:95:cc:44:02:66:3f:cc:70:8d:d0:
4b:ae:63:f1:2b:13:21:56:98:8a:a4:c2:79:fd:ab:
82:26:3a:5f:04:c5:15:8c:ef:e2:3d:f9:96:72:d4:
21:2c:ba:0f:2a:bb:3a:02:4c:91:ef:6a:77:18:95:
55:6e:13:19:98:6d:24:03:84:bb:19:50:5e:e7:5a:
23:91:c0:9f:46:7a:2c:fe:ab:80:02:c6:ca:84:50:
30:9b:c1:57:69:b5:1d:07:7a:e7:95:df:4d:71:d1:
ae:be:b2:98:87:a9:20:7c:81:9d:b0:95:08:69:4b:
59:36:eb:d5:87:d2:7e:de:c9:3f:3c:6a:c3:cf:8a:
4c:4f:e9:c1:7e:96:13:a0:84:72:31:c0:88:0c:ab:
ec:9b:27:a8:72:8b:32:88:52:4c:11:0b:c1:ef:d6:
53:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:A6:76:70:97:EA:FD:53:77:05:48:06:4C:79:B8:8C:65:1C:23:9D
X509v3 Authority Key Identifier:
keyid:B5:70:3F:67:00:E8:32:90:01:22:BB:E6:A5:08:64:41:EB:37:BD:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/0/B5703F6700E832900122BBE6A5086441EB37BD2C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tXA_ZwDoMpABIrvmpQhkQes3vSw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/0/B5703F6700E832900122BBE6A5086441EB37BD2C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:bb:36:ab:85:2c:e5:ae:a2:d3:41:a1:be:38:12:8b:bc:9e:
88:8e:3a:24:da:95:98:81:7d:c0:3b:9f:f9:4b:6b:06:95:87:
5e:89:64:23:20:ec:64:28:f9:56:6a:45:79:a7:50:c3:b1:1e:
4b:13:99:9d:d8:34:2d:40:a4:e1:35:a3:26:e8:12:54:53:31:
bb:fe:32:de:5b:67:bc:21:e7:2c:d6:f6:01:95:fd:78:db:b1:
57:48:fb:95:b3:b9:45:ff:f5:cc:4a:4d:4f:37:42:f5:b8:fd:
b3:38:f6:97:66:d2:4e:1c:fe:57:43:d4:af:93:80:05:1d:7a:
f0:06:6a:30:f1:87:1b:81:6b:96:77:e9:fa:c3:43:06:b7:3d:
05:42:34:e0:6b:b8:ea:51:dc:51:57:f1:80:07:47:b3:6c:ed:
94:06:79:26:21:bc:d6:3b:7e:cf:fe:88:be:ad:4c:b1:73:a6:
f9:ad:7e:c4:97:5a:71:51:a4:3e:9f:20:5d:c7:b6:88:15:74:
45:01:29:73:b1:06:f9:b1:e2:50:bd:51:30:c0:2e:3b:b1:a6:
0d:78:0a:57:d0:96:89:10:e6:7e:9c:2a:cf:86:01:7d:29:00:
e8:02:42:92:f7:de:d5:58:4a:b7:9d:f8:57:07:c2:88:8d:ec:
b9:8d:8d:55
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUXZAdy3FAEJM2PilnWt91Is9TMcYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYjU3MDNmNjcwMGU4MzI5MDAxMjJiYmU2YTUwODY0NDFl
YjM3YmQyYzAeFw0yNTA0MjAxMjE1MjBaFw0yNTA0MjExNTEyMjBaMDMxMTAvBgNV
BAMTKDk5QTY3NjcwOTdFQUZENTM3NzA1NDgwNjRDNzlCODhDNjUxQzIzOUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAd8H1xXvcTJz8fGcIjZBthzKu
iXSdmZRTRZg0FjC8rVV7aQdEW1tDwCoCFeWw4uY9cy4Pkg2ZAZKsa7viE5jEaMfu
a0prPOPJmv6H6TkMMsOPkny1D0otN70cqes1lcxEAmY/zHCN0EuuY/ErEyFWmIqk
wnn9q4ImOl8ExRWM7+I9+ZZy1CEsug8quzoCTJHvancYlVVuExmYbSQDhLsZUF7n
WiORwJ9Geiz+q4ACxsqEUDCbwVdptR0HeueV301x0a6+spiHqSB8gZ2wlQhpS1k2
69WH0n7eyT88asPPikxP6cF+lhOghHIxwIgMq+ybJ6hyizKIUkwRC8Hv1lPlAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUmaZ2cJfq/VN3BUgGTHm4jGUcI50wHwYDVR0j
BBgwFoAUtXA/ZwDoMpABIrvmpQhkQes3vSwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMmYwZDRiNGUtOWY3NC00ZGY0LWJmNWUtMDkyOTA5NmRi
ZTA0LzAvQjU3MDNGNjcwMEU4MzI5MDAxMjJCQkU2QTUwODY0NDFFQjM3QkQyQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3RYQV9ad0RvTXBBQklydm1wUWhrUWVz
M3ZTdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yZjBkNGI0ZS05
Zjc0LTRkZjQtYmY1ZS0wOTI5MDk2ZGJlMDQvMC9CNTcwM0Y2NzAwRTgzMjkwMDEy
MkJCRTZBNTA4NjQ0MUVCMzdCRDJDLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgbs2q4Us5a6i00GhvjgS
i7yeiI46JNqVmIF9wDuf+UtrBpWHXolkIyDsZCj5VmpFeadQw7EeSxOZndg0LUCk
4TWjJugSVFMxu/4y3ltnvCHnLNb2AZX9eNuxV0j7lbO5Rf/1zEpNTzdC9bj9szj2
l2bSThz+V0PUr5OABR168AZqMPGHG4Frlnfp+sNDBrc9BUI04Gu46lHcUVfxgAdH
s2ztlAZ5JiG81jt+z/6Ivq1MsXOm+a1+xJdacVGkPp8gXce2iBV0RQEpc7EG+bHi
UL1RMMAuO7GmDXgKV9CWiRDmfpwqz4YBfSkA6AJCkvfe1VhKt534VwfCiI3suY2N
VQ==
-----END CERTIFICATE-----
Generated at Mon Apr 21 05:34:39 2025 by rpki-client