Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.mft
File: D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.mft (raw, json)
Hash identifier: XCnprZSSB8b8iEFyqZOR6uTax39XAZSr1B/AjOZL0Dg=
Subject key identifier: 0D:BB:15:5B:C1:DD:88:E5:46:2B:89:4B:10:EB:F1:71:F2:B9:70:16
Authority key identifier: D0:2B:BB:44:0B:9D:D4:40:88:DB:68:4E:E8:2F:A2:A7:DA:06:FC:F6
Certificate issuer: /CN=d02bbb440b9dd44088db684ee82fa2a7da06fcf6
Certificate serial: 0D592EA0E5D597F18EF7D838F68094E37A609407
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Cu7RAud1ECI22hO6C-ip9oG_PY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.mft
Manifest number: 032D
Signing time: Fri 06 Jun 2025 08:54:36 +0000
Manifest this update: Fri 06 Jun 2025 08:49:36 +0000
Manifest next update: Sat 07 Jun 2025 11:01:36 +0000
Files and hashes: 1: D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.crl (hash: 1n04hjozafj+xs/HspTbURuF+IsRQZKTS2U7QwGtrL0=)
2: AS203843.asa (hash: SjQvRdVSyAmhreUXMnoTzQGOfU82fRyH6H45jAscwqs=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.crl
rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Cu7RAud1ECI22hO6C-ip9oG_PY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 11:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:59:2e:a0:e5:d5:97:f1:8e:f7:d8:38:f6:80:94:e3:7a:60:94:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d02bbb440b9dd44088db684ee82fa2a7da06fcf6
Validity
Not Before: Jun 6 08:49:36 2025 GMT
Not After : Jun 7 11:01:36 2025 GMT
Subject: CN=0DBB155BC1DD88E5462B894B10EBF171F2B97016
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b7:b2:45:81:7a:59:c4:e0:93:86:f3:c3:5b:
7f:7f:31:04:96:91:f4:a5:34:cf:14:fe:e6:7d:fb:
39:62:ba:5a:4b:0d:a6:46:b9:b7:ef:14:a8:d8:35:
87:5c:3c:99:c6:1e:3a:bc:4f:f1:8b:c6:30:56:59:
c3:4f:4e:00:78:af:23:3b:4e:1a:bb:43:00:c1:2c:
af:03:9b:38:37:68:33:f3:32:66:2b:82:18:08:38:
26:11:87:02:8b:54:e3:18:56:ad:c0:a7:6a:13:60:
16:c7:64:d5:58:15:26:d5:20:31:8e:80:d4:5b:59:
53:1f:13:6e:9c:25:40:91:a7:eb:2c:f0:ff:9a:19:
29:51:a0:19:03:59:5f:61:30:93:5e:2d:c9:2a:09:
9b:b9:fe:21:4b:c9:93:2d:09:a1:d1:60:35:52:82:
3a:d2:ad:0e:3b:c8:ed:7a:e7:5d:1e:87:f9:94:c8:
4c:99:5b:30:4f:98:b6:83:b9:e7:c1:0c:20:d0:33:
66:5b:a5:b2:ba:ae:af:ff:7a:39:a9:2d:ad:6f:3d:
94:0e:85:f2:88:35:97:bf:5a:1b:00:a8:48:04:20:
14:d3:a2:37:d0:2a:8d:96:77:6d:f1:4e:2c:57:5c:
02:94:70:34:2a:25:0c:3c:94:69:e3:e2:e3:f9:c2:
d0:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:BB:15:5B:C1:DD:88:E5:46:2B:89:4B:10:EB:F1:71:F2:B9:70:16
X509v3 Authority Key Identifier:
keyid:D0:2B:BB:44:0B:9D:D4:40:88:DB:68:4E:E8:2F:A2:A7:DA:06:FC:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Cu7RAud1ECI22hO6C-ip9oG_PY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:65:e2:f8:13:8e:ae:bb:f7:c7:f6:27:b3:ff:0f:94:f1:79:
5b:aa:4b:13:51:ad:20:ab:3a:15:72:8d:00:73:fa:27:f5:cd:
15:61:fa:da:d4:7d:88:e9:71:b0:8d:73:30:88:74:5f:87:6d:
a2:5c:3f:23:41:09:46:bb:65:51:a0:9d:f1:40:a8:54:54:88:
2e:1a:f4:84:4f:2e:da:86:9f:ed:e0:c2:61:62:f7:e6:a0:74:
1e:0c:52:5c:fa:07:a2:bf:24:9d:f4:c4:68:63:f1:d7:31:40:
17:97:25:ed:bd:81:90:ac:5b:14:56:e5:36:ca:77:12:eb:9b:
50:d9:03:23:cc:a6:2f:56:26:ea:57:ae:c1:f3:d0:c9:72:25:
91:cd:fc:d5:3a:60:6d:ce:bc:49:79:57:41:e8:2a:20:3c:ff:
a4:d3:f8:a5:2a:70:fb:26:4c:ed:c0:d6:1b:db:f4:b7:1e:2d:
97:d7:93:6e:40:ad:20:81:62:8e:af:0d:8e:ed:af:6d:fc:8f:
5b:66:0e:c5:c0:08:6a:62:e8:41:b7:ee:a9:9b:90:64:78:a7:
a9:74:93:52:76:e7:9b:7b:3a:a1:10:56:40:30:e2:d1:96:be:
88:f2:91:64:fd:0e:67:b3:ab:86:3d:ee:87:3c:24:d4:12:00:
e9:ae:9e:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 22:08:17 2025 by rpki-client