Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.mft
File: ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.mft (raw, json)
Hash identifier: OUPkGAfIt/Ja05gMTRj9URrj0o+aCBQiYS0tOdL9SCk=
Subject key identifier: D3:F9:91:31:9B:0E:AC:EB:79:8A:E5:78:0A:A0:F8:46:65:87:1D:91
Authority key identifier: AD:FF:D4:77:85:7D:1E:9B:E9:5B:82:71:7A:42:7F:35:AF:A9:A7:D6
Certificate issuer: /CN=adffd477857d1e9be95b82717a427f35afa9a7d6
Certificate serial: 54AF28CF43E17DA59FC406C8BD5AC7F79B8CEE0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rf_Ud4V9HpvpW4JxekJ_Na-pp9Y.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.mft
Manifest number: E4
Signing time: Mon 21 Apr 2025 10:41:34 +0000
Manifest this update: Mon 21 Apr 2025 10:36:34 +0000
Manifest next update: Wed 23 Apr 2025 11:46:34 +0000
Files and hashes: 1: AS44355.asa (hash: suHXzL7+p9pEhy3V1lXLsc7/MuuAkxWi6AeYlUGu+1w=)
2: ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.crl (hash: PGnFQZkmySgB3Hv/3smFhbdKGpV0l7mTmcJ5f3TCIfQ=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.mft
rsync://rpki.ripe.net/repository/DEFAULT/rf_Ud4V9HpvpW4JxekJ_Na-pp9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:af:28:cf:43:e1:7d:a5:9f:c4:06:c8:bd:5a:c7:f7:9b:8c:ee:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adffd477857d1e9be95b82717a427f35afa9a7d6
Validity
Not Before: Apr 21 10:36:34 2025 GMT
Not After : Apr 23 11:46:34 2025 GMT
Subject: CN=D3F991319B0EACEB798AE5780AA0F84665871D91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ed:0e:78:80:a7:19:21:b5:31:b1:37:d9:ad:
90:c0:34:90:d0:bd:82:aa:36:34:a3:38:e9:f6:73:
29:e2:37:bc:f1:69:a3:60:f1:a8:cb:3f:b8:f1:17:
56:7f:8c:fe:ed:ca:3e:42:93:38:d0:1a:5e:7d:b4:
3f:b3:6e:75:47:ca:57:70:d5:13:0e:bb:5f:0f:43:
62:a6:5f:49:92:3b:6b:4e:34:0a:57:69:0f:65:5d:
6a:94:0c:64:6b:58:e1:9c:a2:60:6e:f2:11:38:2a:
5b:69:dc:77:71:38:da:87:4b:97:c6:c2:bd:30:9b:
b9:07:b4:00:44:68:83:87:7f:39:4c:25:33:8e:f0:
80:21:92:5d:0d:fd:eb:f4:e6:fe:dd:cb:87:af:8d:
77:25:1a:13:c8:08:b4:4e:b3:f1:62:c8:93:f5:24:
f8:cc:46:66:22:7f:c7:0a:2f:24:3f:b7:19:7c:81:
7a:72:af:14:1f:6a:96:d1:a5:49:51:d3:80:99:90:
df:15:a0:a3:f0:6c:69:1d:b3:43:11:a1:af:0c:b1:
14:43:40:a1:5f:99:22:22:4b:bd:97:fd:bd:f7:c9:
ff:95:ff:40:2f:54:49:27:8c:27:18:9e:93:4f:5d:
b4:fb:bd:8f:28:2f:62:f2:5b:22:e8:42:90:18:0f:
c9:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:F9:91:31:9B:0E:AC:EB:79:8A:E5:78:0A:A0:F8:46:65:87:1D:91
X509v3 Authority Key Identifier:
keyid:AD:FF:D4:77:85:7D:1E:9B:E9:5B:82:71:7A:42:7F:35:AF:A9:A7:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rf_Ud4V9HpvpW4JxekJ_Na-pp9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:61:56:eb:47:16:0f:d1:46:b0:e4:8c:98:a7:68:cf:7b:af:
8d:8c:f2:48:b6:dd:07:82:91:bd:0f:2c:47:ca:43:5a:5a:94:
12:e1:9c:55:f4:6a:9f:27:19:09:0f:18:c7:1b:dc:be:8d:4a:
f6:de:b4:98:ad:f1:87:98:61:27:90:35:d8:5b:00:4b:88:ea:
ca:e1:f4:e7:7d:d1:2f:75:45:d0:65:78:8e:59:e8:25:16:a0:
95:22:86:9a:bb:4b:57:89:80:c6:fe:85:32:c4:73:6b:33:f8:
68:91:d7:86:52:4a:01:e8:f7:06:bf:b7:9e:91:9e:42:cf:56:
c6:be:c8:d4:18:4b:c5:3e:dd:87:0d:df:7b:be:84:7e:ed:c2:
bf:58:20:c9:b3:59:a5:1a:83:c1:2d:0e:22:f8:15:48:2e:8a:
d6:9f:4a:e2:2a:0a:34:cb:c0:66:03:8c:b6:03:70:76:61:8e:
8f:fc:13:72:f1:0d:58:3b:8e:68:56:05:ea:3e:5f:6a:5e:85:
31:0d:c7:26:91:39:fd:db:e3:82:25:5a:1f:e4:4a:df:4a:1b:
23:ed:77:9d:b6:a4:e5:85:37:8b:8b:d8:6a:cf:b3:9a:2b:cc:
88:7f:8b:c6:8f:ca:89:30:67:8c:e7:4a:19:93:ae:dd:65:c1:
fd:13:d1:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 00:08:23 2025 by rpki-client