Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/1/25BB542055398CAC21DB2407FD8E7D795A10F5ED.mft
File: 25BB542055398CAC21DB2407FD8E7D795A10F5ED.mft (raw, json)
Hash identifier: MCGBasVNNprBxhgISIngBk2bWQe/tAHhPOaRskZrxBk=
Subject key identifier: 02:90:E4:5F:56:EB:17:53:DE:AA:E7:72:BF:9C:C1:60:B2:78:E1:64
Authority key identifier: 25:BB:54:20:55:39:8C:AC:21:DB:24:07:FD:8E:7D:79:5A:10:F5:ED
Certificate issuer: /CN=25bb542055398cac21db2407fd8e7d795a10f5ed
Certificate serial: 6D2B5762AC0DCD0D832759E2DDE423E505CB6B95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JbtUIFU5jKwh2yQH_Y59eVoQ9e0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/1/25BB542055398CAC21DB2407FD8E7D795A10F5ED.mft
Manifest number: 11
Signing time: Fri 04 Apr 2025 12:11:47 +0000
Manifest this update: Fri 04 Apr 2025 12:06:47 +0000
Manifest next update: Sat 05 Apr 2025 14:26:47 +0000
Files and hashes: 1: 25BB542055398CAC21DB2407FD8E7D795A10F5ED.crl (hash: aygAnMFmRQQgvtDw1TsJ6W4GV54U6zeScduvudq8yXI=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/1/25BB542055398CAC21DB2407FD8E7D795A10F5ED.crl
rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/1/25BB542055398CAC21DB2407FD8E7D795A10F5ED.mft
rsync://rpki.ripe.net/repository/DEFAULT/JbtUIFU5jKwh2yQH_Y59eVoQ9e0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 14:26:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:2b:57:62:ac:0d:cd:0d:83:27:59:e2:dd:e4:23:e5:05:cb:6b:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25bb542055398cac21db2407fd8e7d795a10f5ed
Validity
Not Before: Apr 4 12:06:47 2025 GMT
Not After : Apr 5 14:26:47 2025 GMT
Subject: CN=0290E45F56EB1753DEAAE772BF9CC160B278E164
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d1:e8:9a:b6:49:be:80:80:02:d5:b9:9e:17:
8c:70:eb:45:b9:13:dd:b2:6d:e4:a3:54:93:4f:48:
f6:b1:2a:aa:41:3d:9d:b6:af:65:13:f3:43:12:22:
b3:6c:d4:c0:c0:f4:52:32:ae:60:0f:d4:e0:aa:6f:
4f:f6:35:bb:21:d4:d9:9b:df:ad:cf:40:38:30:ea:
ec:c4:5e:69:fe:c6:a0:69:47:21:98:db:46:43:d4:
68:43:f9:c2:36:6d:6c:1e:1e:ea:d9:b5:79:d3:32:
6d:47:83:6e:6a:13:ce:fb:81:f4:c2:a2:ff:ed:d9:
00:27:e8:2b:93:a3:58:5b:11:5b:3d:31:6c:cd:1e:
80:c5:2e:98:f4:bd:ce:1b:cb:09:46:d4:32:d7:7f:
8d:a8:fc:f1:8b:dd:58:00:01:b3:7c:18:28:ed:3f:
a6:73:db:6c:f6:ef:a9:20:4c:43:80:16:3f:41:0a:
27:0d:f5:1a:b8:4f:12:b6:c7:d7:92:af:48:07:41:
47:5b:38:0e:86:a3:09:d8:dd:82:56:1a:da:70:a8:
f8:19:1a:f4:59:e7:db:fc:a8:28:fb:39:fb:9c:20:
b8:3d:2f:83:a8:89:da:a3:87:03:40:b7:1e:b9:4e:
47:04:fe:71:0e:fb:51:74:dc:f0:7c:8d:df:15:30:
11:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:90:E4:5F:56:EB:17:53:DE:AA:E7:72:BF:9C:C1:60:B2:78:E1:64
X509v3 Authority Key Identifier:
keyid:25:BB:54:20:55:39:8C:AC:21:DB:24:07:FD:8E:7D:79:5A:10:F5:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/1/25BB542055398CAC21DB2407FD8E7D795A10F5ED.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JbtUIFU5jKwh2yQH_Y59eVoQ9e0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/1/25BB542055398CAC21DB2407FD8E7D795A10F5ED.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:b9:49:72:88:ac:1c:15:6c:4c:26:ce:66:85:f7:01:e8:49:
b4:de:c8:d9:39:2a:82:b3:e2:66:02:de:4a:86:78:f7:7e:af:
0f:18:17:81:9f:ab:dc:c1:14:62:a0:dc:0f:1f:ed:d6:41:9e:
8c:44:34:23:74:56:d8:24:43:4e:01:67:5d:e8:d8:9b:c8:99:
31:11:ca:11:fb:02:2e:54:df:b8:39:c7:53:7b:53:4d:35:f1:
8e:82:4a:bd:7b:d0:b1:d7:53:2f:23:7c:45:ac:f0:c0:61:69:
27:8d:38:5b:e3:ee:35:7b:43:87:f9:bd:b3:c8:2a:0a:a8:42:
0f:ae:41:7e:b7:1f:aa:a3:d0:a8:51:25:5d:02:9c:c5:aa:ae:
a1:0b:5b:aa:5c:28:0d:60:80:ac:09:05:84:df:e4:60:2f:8a:
92:65:d2:92:b7:84:fe:b3:0b:f4:fe:74:26:fe:3b:39:4b:8b:
aa:d5:7e:76:80:56:47:76:00:94:ab:2d:42:31:d3:72:d8:30:
29:db:2d:5f:b3:ff:7a:c7:82:cc:26:3b:5e:ab:3a:66:33:fa:
2d:b7:44:7e:8d:6f:ff:1f:f5:d8:52:11:76:e2:e6:53:5f:09:
06:81:32:82:0d:7c:48:76:e0:3f:ea:d6:52:2a:ac:90:64:e8:
f7:2a:0a:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:32:07 2025 by rpki-client