Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/0/74E91965A809D1AC5AA0F0D05506ACB0DDB02AB8.mft
File: 74E91965A809D1AC5AA0F0D05506ACB0DDB02AB8.mft (raw, json)
Hash identifier: v80NT3/bVpYJ9KimMvY2ElNLsxhId9nRDZBJDvHvKJM=
Subject key identifier: 00:3F:54:6D:CD:B2:E9:C7:E3:F5:83:CF:6A:78:A1:C0:AE:B2:C9:D3
Authority key identifier: 74:E9:19:65:A8:09:D1:AC:5A:A0:F0:D0:55:06:AC:B0:DD:B0:2A:B8
Certificate issuer: /CN=74e91965a809d1ac5aa0f0d05506acb0ddb02ab8
Certificate serial: 589AD524B7CB9D985F54E060A47C4E7287E89365
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dOkZZagJ0axaoPDQVQassN2wKrg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/0/74E91965A809D1AC5AA0F0D05506ACB0DDB02AB8.mft
Manifest number: DB
Signing time: Fri 04 Apr 2025 13:03:51 +0000
Manifest this update: Fri 04 Apr 2025 12:58:51 +0000
Manifest next update: Sat 05 Apr 2025 14:26:51 +0000
Files and hashes: 1: 74E91965A809D1AC5AA0F0D05506ACB0DDB02AB8.crl (hash: 4o8oNO3aRBxDS2MrH4uWEjeAxIAHgGzMYVjpGowVhbE=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/0/74E91965A809D1AC5AA0F0D05506ACB0DDB02AB8.crl
rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/0/74E91965A809D1AC5AA0F0D05506ACB0DDB02AB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dOkZZagJ0axaoPDQVQassN2wKrg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 14:26:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:9a:d5:24:b7:cb:9d:98:5f:54:e0:60:a4:7c:4e:72:87:e8:93:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74e91965a809d1ac5aa0f0d05506acb0ddb02ab8
Validity
Not Before: Apr 4 12:58:51 2025 GMT
Not After : Apr 5 14:26:51 2025 GMT
Subject: CN=003F546DCDB2E9C7E3F583CF6A78A1C0AEB2C9D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:98:1e:82:ca:ac:58:b4:51:41:94:2e:5d:95:
12:c9:ac:33:4c:b2:e2:1e:23:6e:55:cc:7d:b2:6e:
c8:86:a5:3a:e2:87:c3:f5:95:ba:8d:00:26:2d:ab:
97:77:cd:23:ee:cb:19:33:50:83:6c:a4:d0:47:90:
2d:ab:00:26:03:dc:3c:87:3b:18:75:c6:53:d3:b0:
ec:80:29:88:f9:e3:e4:83:0b:cc:0e:b6:4f:92:90:
3b:01:92:34:2e:2e:87:b0:fc:a4:33:06:43:56:c8:
7f:44:39:57:c9:6e:fd:a3:25:0e:c5:dd:fc:14:a4:
9b:66:2c:d6:a6:a1:5e:a3:0f:61:e6:7f:7d:f7:4c:
91:25:83:f5:a4:99:c1:27:41:6a:ce:a2:7e:07:ca:
11:ad:3d:fc:65:c5:80:4f:13:97:b1:8d:e3:2f:65:
ce:ba:67:f6:2a:36:2c:d6:44:23:0d:4e:df:86:2d:
97:10:65:65:64:ff:ca:af:73:0a:33:79:c3:ca:cc:
0e:54:fb:55:f4:41:72:d1:e3:1b:2e:ae:48:25:61:
57:b6:fb:26:97:01:af:d5:fc:26:c5:fc:10:f5:aa:
44:7f:65:a2:0a:15:99:92:88:8f:56:9a:eb:03:1a:
22:ee:0b:20:ac:a6:10:0d:35:2e:d0:c4:67:2b:a5:
92:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:3F:54:6D:CD:B2:E9:C7:E3:F5:83:CF:6A:78:A1:C0:AE:B2:C9:D3
X509v3 Authority Key Identifier:
keyid:74:E9:19:65:A8:09:D1:AC:5A:A0:F0:D0:55:06:AC:B0:DD:B0:2A:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/0/74E91965A809D1AC5AA0F0D05506ACB0DDB02AB8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dOkZZagJ0axaoPDQVQassN2wKrg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/0/74E91965A809D1AC5AA0F0D05506ACB0DDB02AB8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:3b:bb:36:03:1e:48:fa:da:68:5c:b3:61:72:79:87:fd:87:
2e:68:ad:a0:4f:91:12:e5:80:24:95:3f:dd:68:6a:4b:37:a5:
48:85:c1:3b:77:bf:06:c7:3f:d2:17:44:a6:af:30:fb:bd:87:
5e:86:47:8a:92:5d:b1:7d:10:bf:23:2a:7c:5a:90:a4:89:1c:
cf:87:fe:36:d0:5e:bc:1b:ff:7e:76:9d:25:16:6e:3b:0e:99:
04:75:78:0d:52:f6:1c:9c:4f:2f:7b:e0:a8:61:1a:ad:0e:64:
64:10:ba:31:f5:53:4e:87:7d:0e:67:5c:1f:9b:bc:11:09:1c:
0d:7a:c7:8f:b1:43:bd:6e:c5:00:fc:09:d7:0a:db:f0:53:c8:
9b:34:51:91:d2:52:a8:09:1c:3e:ff:1b:2a:c9:6b:dc:eb:ce:
f9:c8:7a:91:d8:fc:8b:9c:2f:c5:37:f7:d1:c6:bc:da:9e:1f:
35:e3:8b:2c:8e:f8:6a:6c:53:e4:3d:54:7a:6c:e5:ee:48:14:
83:c0:41:0d:dc:41:18:5c:9b:e3:1c:9f:26:86:9b:64:d2:9d:
8e:03:d2:cd:a0:62:42:50:54:90:96:99:7e:81:4b:e5:5f:d3:
ba:5c:98:b2:e1:28:43:a3:8a:bd:43:87:21:29:aa:b4:cc:5d:
2d:7e:5f:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:33:36 2025 by rpki-client