Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/24db6e0e-696c-4f89-8d48-274559700af5/1/A9DD9F6B65491D90C4E19E9C960252466C2C9D12.mft
File: A9DD9F6B65491D90C4E19E9C960252466C2C9D12.mft (raw, json)
Hash identifier: TLVX70/UUZELYRVEPyLluAhsmeAiyikRSE+KTbPwBVQ=
Subject key identifier: F0:1F:23:09:53:4F:87:54:0E:41:28:71:8A:3E:BD:76:EE:C3:A7:1D
Authority key identifier: A9:DD:9F:6B:65:49:1D:90:C4:E1:9E:9C:96:02:52:46:6C:2C:9D:12
Certificate issuer: /CN=a9dd9f6b65491d90c4e19e9c960252466c2c9d12
Certificate serial: 0F1EF7FC622836C44F39F775CAC9B29B46A44880
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qd2fa2VJHZDE4Z6clgJSRmwsnRI.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/24db6e0e-696c-4f89-8d48-274559700af5/1/A9DD9F6B65491D90C4E19E9C960252466C2C9D12.mft
Manifest number: 01CB
Signing time: Thu 15 May 2025 16:05:25 +0000
Manifest this update: Thu 15 May 2025 16:00:25 +0000
Manifest next update: Fri 16 May 2025 17:45:25 +0000
Files and hashes: 1: A9DD9F6B65491D90C4E19E9C960252466C2C9D12.crl (hash: MggwXGnIxPx0/y1RnLF5gpQDaGU/DjDyOVLb6TYLgg8=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/24db6e0e-696c-4f89-8d48-274559700af5/1/A9DD9F6B65491D90C4E19E9C960252466C2C9D12.crl
rsync://rsync.paas.rpki.ripe.net/repository/24db6e0e-696c-4f89-8d48-274559700af5/1/A9DD9F6B65491D90C4E19E9C960252466C2C9D12.mft
rsync://rpki.ripe.net/repository/DEFAULT/qd2fa2VJHZDE4Z6clgJSRmwsnRI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 May 2025 17:45:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:1e:f7:fc:62:28:36:c4:4f:39:f7:75:ca:c9:b2:9b:46:a4:48:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9dd9f6b65491d90c4e19e9c960252466c2c9d12
Validity
Not Before: May 15 16:00:25 2025 GMT
Not After : May 16 17:45:25 2025 GMT
Subject: CN=F01F2309534F87540E4128718A3EBD76EEC3A71D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:7c:b8:e5:c7:5e:06:37:26:c2:42:7d:33:d9:
20:e1:00:9e:b1:88:19:e3:7b:4f:31:50:a7:6d:7f:
e9:e8:1f:96:38:fe:08:06:c0:b6:a7:39:6e:a2:4f:
b5:cd:1c:9c:74:bc:b9:c8:32:7a:e3:7f:b9:72:b0:
34:92:4e:65:70:a1:34:c1:56:c8:f5:30:0c:5b:60:
23:b5:96:a9:3b:11:7e:b3:ec:fd:24:9e:15:19:b6:
0a:1d:f8:20:07:2a:f9:9d:10:b8:be:b8:c0:84:a3:
48:58:aa:35:9b:02:b6:97:cb:d4:a3:2e:9d:d0:ed:
2a:80:62:2c:f6:3d:b3:2d:39:14:67:0f:62:77:64:
c0:f2:15:e5:66:6c:8b:38:fd:e3:76:5b:bc:77:8e:
78:23:14:92:b1:77:64:3d:70:5e:f9:63:58:7f:42:
26:63:e1:0d:3a:5f:8b:d6:c1:77:6c:8f:65:d5:82:
17:a4:6a:cd:fe:05:22:f2:73:f6:72:ab:42:22:46:
5e:98:40:15:90:0f:9a:4e:61:3b:8c:f5:7e:33:7e:
d9:8c:60:14:be:18:59:a6:2b:cb:2d:cc:a6:e3:2d:
3b:ab:aa:e0:60:42:24:8f:53:12:bb:6e:f7:86:8c:
1a:99:cb:96:74:a6:67:b7:67:bf:74:af:a9:f1:4b:
0b:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:1F:23:09:53:4F:87:54:0E:41:28:71:8A:3E:BD:76:EE:C3:A7:1D
X509v3 Authority Key Identifier:
keyid:A9:DD:9F:6B:65:49:1D:90:C4:E1:9E:9C:96:02:52:46:6C:2C:9D:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/24db6e0e-696c-4f89-8d48-274559700af5/1/A9DD9F6B65491D90C4E19E9C960252466C2C9D12.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qd2fa2VJHZDE4Z6clgJSRmwsnRI.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/24db6e0e-696c-4f89-8d48-274559700af5/1/A9DD9F6B65491D90C4E19E9C960252466C2C9D12.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:80:f3:79:b0:e1:5c:f5:68:9e:cd:2d:5c:d4:64:26:b8:67:
65:44:4b:1f:18:9f:e3:5a:f4:bd:2c:b0:1e:8b:1f:51:d8:30:
4b:6e:08:2e:3c:5c:1d:4f:25:db:73:52:f1:f0:5d:d2:8c:d4:
da:54:4d:8b:45:ec:85:ae:d0:eb:05:87:b2:11:2a:d3:42:f7:
93:4f:1c:00:33:2d:a2:0f:74:dc:a0:a9:18:b1:32:b3:82:85:
e0:0e:d5:9a:c0:1f:a8:1e:66:49:95:1a:43:c6:a2:71:44:c3:
8f:23:69:62:61:97:69:02:e9:bb:60:1b:7c:6d:7c:70:11:fb:
17:e5:f0:1d:58:f9:7e:c7:e7:b3:a4:d4:90:0d:9f:d6:55:1d:
eb:b9:a2:19:f7:86:95:fa:13:77:29:a7:de:78:f5:c2:8f:d0:
9c:6c:cd:f9:09:55:6b:76:b6:67:2d:d5:b8:5b:da:47:f4:af:
01:ae:1a:0e:6a:73:a4:a4:55:e5:77:11:3c:67:5d:f7:a7:eb:
ae:83:27:4b:13:91:16:38:d9:8d:d5:c5:84:a3:80:91:94:db:
50:45:91:60:8a:fd:b0:c4:e9:91:75:c0:8f:1c:77:09:1a:02:
be:56:3b:81:64:70:e3:ae:7a:0c:5f:6c:b4:23:9b:56:96:6d:
d1:91:ab:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 08:30:15 2025 by rpki-client