Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/A715A7C4243DFD5608AC7C5962055125B94D1763.mft
File: A715A7C4243DFD5608AC7C5962055125B94D1763.mft (raw, json)
Hash identifier: IdWVgvImnlpbldm2G+h/GfrVh3qXPCpwWVlftioBUK0=
Subject key identifier: 56:11:9C:88:82:DE:3B:11:49:8B:5E:05:4B:6C:B0:F2:66:13:0C:DD
Authority key identifier: A7:15:A7:C4:24:3D:FD:56:08:AC:7C:59:62:05:51:25:B9:4D:17:63
Certificate issuer: /CN=a715a7c4243dfd5608ac7c5962055125b94d1763
Certificate serial: 062644C8477ACFDA7DFF4C3DC3F8DFD528EB9B74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pxWnxCQ9_VYIrHxZYgVRJblNF2M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/A715A7C4243DFD5608AC7C5962055125B94D1763.mft
Manifest number: 04CE
Signing time: Wed 16 Apr 2025 16:38:30 +0000
Manifest this update: Wed 16 Apr 2025 16:33:30 +0000
Manifest next update: Thu 17 Apr 2025 16:49:30 +0000
Files and hashes: 1: A715A7C4243DFD5608AC7C5962055125B94D1763.crl (hash: tlPCYH4d4KicSwKfWh5JKKQ3eWGcpWAAPJGy+ZlEdd4=)
2: 698CBB9E641A60FE66E1B58C92ACD281637ED767.cer (hash: tNwFc0wxK30edc2dJgBKjPLV9///2mnITAEpNIZ0d8k=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/A715A7C4243DFD5608AC7C5962055125B94D1763.crl
rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/A715A7C4243DFD5608AC7C5962055125B94D1763.mft
rsync://rpki.ripe.net/repository/DEFAULT/pxWnxCQ9_VYIrHxZYgVRJblNF2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:26:44:c8:47:7a:cf:da:7d:ff:4c:3d:c3:f8:df:d5:28:eb:9b:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a715a7c4243dfd5608ac7c5962055125b94d1763
Validity
Not Before: Apr 16 16:33:30 2025 GMT
Not After : Apr 17 16:49:30 2025 GMT
Subject: CN=56119C8882DE3B11498B5E054B6CB0F266130CDD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:0b:7b:fa:09:09:e5:22:86:cc:34:12:96:b5:
58:17:1e:7b:a2:5c:7c:27:11:7d:72:d5:a3:fb:63:
4f:dc:74:c3:0c:7d:83:c6:60:ef:d1:de:82:29:19:
13:ab:b5:da:f6:6c:97:a3:ab:95:65:c4:df:4e:dd:
e5:8f:bc:1f:00:48:fd:84:c8:3f:ea:3c:3c:34:bc:
18:16:c6:7e:46:f3:20:25:6a:c2:c4:1d:17:46:df:
99:86:5d:45:4e:47:7d:9e:2c:2f:14:dc:3d:60:fc:
39:fd:84:79:8b:07:72:01:b4:0b:a8:f1:7f:e0:fa:
a8:2a:a9:1b:b0:72:ad:d5:60:09:3a:9c:44:0a:49:
f4:5c:69:3c:1b:6a:a9:16:89:ce:4c:a5:0f:19:9d:
3c:41:83:71:c7:dc:c1:cc:2a:50:f2:92:58:34:c9:
fe:bb:7b:27:3e:1a:18:b6:9d:4f:cc:04:84:08:25:
f6:2a:bb:f5:c2:2b:d5:11:0a:60:47:4c:44:68:d9:
9e:1e:c8:17:93:29:51:82:5c:5b:e3:83:7c:75:fb:
82:ed:f1:2f:ef:2c:75:b2:37:cf:4f:6f:b3:0d:31:
a3:4d:bd:b1:84:37:ac:00:d6:96:09:8b:df:ff:08:
31:1b:47:fc:56:0a:17:ed:91:67:1f:d4:ec:27:00:
93:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:11:9C:88:82:DE:3B:11:49:8B:5E:05:4B:6C:B0:F2:66:13:0C:DD
X509v3 Authority Key Identifier:
keyid:A7:15:A7:C4:24:3D:FD:56:08:AC:7C:59:62:05:51:25:B9:4D:17:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/A715A7C4243DFD5608AC7C5962055125B94D1763.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pxWnxCQ9_VYIrHxZYgVRJblNF2M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/A715A7C4243DFD5608AC7C5962055125B94D1763.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:90:f1:0a:9d:b9:1c:25:1c:d2:29:cf:12:4a:d1:23:5f:69:
1f:fd:4a:88:33:a3:25:c0:3b:b2:dc:02:0d:a1:2e:fc:d8:87:
fd:e1:1f:e6:ad:0e:b8:c3:e9:8c:7f:57:b3:1b:45:a7:99:a5:
5a:2c:9f:63:3e:84:81:52:82:31:10:fd:01:31:68:28:a1:2c:
a9:49:a8:fe:cc:f4:bd:bf:13:59:67:df:23:a6:60:bf:9e:ef:
2d:b0:7f:5f:eb:28:1b:1a:5f:ce:fe:de:52:12:ce:0b:b4:0f:
f4:e7:ac:b6:b7:23:8f:36:e0:9c:ee:1f:75:61:ab:61:6f:e5:
16:00:ea:66:38:22:0a:dd:e4:17:89:90:5f:91:34:f4:91:7d:
55:d4:80:fb:cd:d0:5e:7d:29:f8:cc:2a:a2:c7:2b:19:cf:68:
63:91:e2:d1:6f:e6:c9:d2:ee:9f:28:32:83:3e:ff:b3:8e:55:
ee:8f:c5:8f:6e:44:69:7a:67:53:23:90:b9:45:5c:37:3b:c1:
0e:25:8f:79:c0:82:c8:de:81:40:c2:b5:79:a5:66:0b:a2:57:
59:e4:92:0b:a5:51:59:1e:66:69:05:52:90:36:4a:c8:01:4d:
0d:6b:3c:97:ad:50:5b:8c:02:0a:4c:54:63:ae:fa:59:33:bf:
1e:2f:8d:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 06:31:09 2025 by rpki-client