Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/0/B5703F6700E832900122BBE6A5086441EB37BD2C.mft
File: B5703F6700E832900122BBE6A5086441EB37BD2C.mft (raw, json)
Hash identifier: vgzuIKYene5C4umaGa2LMmgFOfQeht+rgMUUPtn7mws=
Subject key identifier: 7A:23:A4:F9:0F:F3:0D:41:29:E4:20:9D:30:27:31:A0:93:73:25:50
Authority key identifier: B5:70:3F:67:00:E8:32:90:01:22:BB:E6:A5:08:64:41:EB:37:BD:2C
Certificate issuer: /CN=b5703f6700e832900122bbe6a5086441eb37bd2c
Certificate serial: 69929240D56D4B349AD22B38794B16A56356DD19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tXA_ZwDoMpABIrvmpQhkQes3vSw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/0/B5703F6700E832900122BBE6A5086441EB37BD2C.mft
Manifest number: 0119
Signing time: Fri 06 Jun 2025 14:23:05 +0000
Manifest this update: Fri 06 Jun 2025 14:18:05 +0000
Manifest next update: Sat 07 Jun 2025 15:17:05 +0000
Files and hashes: 1: B5703F6700E832900122BBE6A5086441EB37BD2C.crl (hash: nTKtSQnVxTGGsEHi8bYE0qgAJdzizJxxCGzu7+oelqQ=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/0/B5703F6700E832900122BBE6A5086441EB37BD2C.crl
rsync://rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/0/B5703F6700E832900122BBE6A5086441EB37BD2C.mft
rsync://rpki.ripe.net/repository/DEFAULT/tXA_ZwDoMpABIrvmpQhkQes3vSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:92:92:40:d5:6d:4b:34:9a:d2:2b:38:79:4b:16:a5:63:56:dd:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5703f6700e832900122bbe6a5086441eb37bd2c
Validity
Not Before: Jun 6 14:18:05 2025 GMT
Not After : Jun 7 15:17:05 2025 GMT
Subject: CN=7A23A4F90FF30D4129E4209D302731A093732550
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3d:78:ac:24:67:31:1f:47:68:85:d7:fa:17:
71:21:00:c4:3d:53:0f:40:1c:93:a9:f9:c4:9d:0b:
da:35:69:09:d0:8b:d5:32:ec:49:cd:15:d3:71:a0:
69:60:dc:ad:b5:15:77:17:5b:81:5c:44:3b:3c:31:
04:ff:7d:47:e6:4e:90:9b:e2:58:8f:a6:c8:bd:5c:
55:8a:b3:de:74:80:51:c9:72:b9:cc:5a:86:30:24:
dd:c3:1e:b0:7c:0a:70:07:77:ff:53:fb:9e:cf:fb:
bc:87:04:18:05:67:1d:6e:39:c5:16:22:8a:e6:a4:
84:30:ad:d5:8d:01:38:46:ec:9c:a7:07:c9:87:97:
7d:c1:a4:ad:9b:7e:b6:c0:a7:ad:93:d2:88:69:b7:
09:75:b7:82:d7:d5:f7:62:b5:c9:5c:6e:56:b3:7c:
b0:bd:c1:e0:95:42:f5:b7:ee:cd:7c:59:e8:be:6c:
3f:41:7a:87:a8:68:85:c8:58:33:35:cf:8e:70:e3:
d5:4e:a1:c7:95:ff:aa:82:e7:81:a5:f8:fe:75:07:
6b:51:51:c7:34:d8:c9:01:79:d1:b0:a7:67:23:f6:
13:67:1a:b0:1a:e5:35:0e:0b:0f:ad:25:82:ff:95:
8d:8a:e5:9a:5f:0d:de:c8:a2:af:e4:2b:1f:ef:c4:
37:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:23:A4:F9:0F:F3:0D:41:29:E4:20:9D:30:27:31:A0:93:73:25:50
X509v3 Authority Key Identifier:
keyid:B5:70:3F:67:00:E8:32:90:01:22:BB:E6:A5:08:64:41:EB:37:BD:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/0/B5703F6700E832900122BBE6A5086441EB37BD2C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tXA_ZwDoMpABIrvmpQhkQes3vSw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/0/B5703F6700E832900122BBE6A5086441EB37BD2C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:17:45:dd:21:f6:21:64:02:0f:f2:c9:f4:25:e0:e4:10:24:
88:12:f8:00:8b:ff:00:f4:fe:a3:d6:2e:4d:96:fb:2f:64:4d:
a2:bf:e3:7f:d3:5c:71:fa:01:dd:6d:d1:5e:1e:dc:bf:e4:8b:
57:1c:ea:a9:99:dd:87:9f:43:d9:86:05:0d:3d:6e:bf:bd:8c:
5a:36:2a:98:21:4b:9d:9e:0d:e4:18:0a:9f:ed:d1:eb:4c:a1:
74:03:76:8f:a9:3c:91:64:60:cd:32:4b:7d:ea:c5:7b:1e:d1:
e3:48:2a:c9:d3:57:4c:f6:b4:12:d4:b3:d2:39:d3:7b:ec:71:
c8:cb:de:b4:00:67:31:ab:2e:06:18:9d:c3:06:46:48:98:ab:
5a:e9:e0:68:de:3b:9b:c4:04:ff:56:ef:17:50:89:60:8c:9e:
40:b4:9c:f8:46:4e:2c:4e:ce:bc:51:0a:6f:37:bc:cb:d5:c1:
55:83:2b:1a:43:00:fb:74:ba:11:c1:35:6c:e2:86:95:de:4f:
e8:a8:8f:d5:0b:b0:32:00:5c:83:9e:78:7a:e7:c9:63:15:e5:
81:84:aa:7f:f4:46:8a:5b:95:70:43:e2:b8:1c:36:05:58:99:
a4:76:a0:c6:4a:3c:98:9d:7f:f9:e4:c0:26:b7:df:8b:9f:ca:
24:8a:3e:d3
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUaZKSQNVtSzSa0is4eUsWpWNW3RkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYjU3MDNmNjcwMGU4MzI5MDAxMjJiYmU2YTUwODY0NDFl
YjM3YmQyYzAeFw0yNTA2MDYxNDE4MDVaFw0yNTA2MDcxNTE3MDVaMDMxMTAvBgNV
BAMTKDdBMjNBNEY5MEZGMzBENDEyOUU0MjA5RDMwMjczMUEwOTM3MzI1NTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvPXisJGcxH0dohdf6F3EhAMQ9
Uw9AHJOp+cSdC9o1aQnQi9Uy7EnNFdNxoGlg3K21FXcXW4FcRDs8MQT/fUfmTpCb
4liPpsi9XFWKs950gFHJcrnMWoYwJN3DHrB8CnAHd/9T+57P+7yHBBgFZx1uOcUW
IormpIQwrdWNAThG7JynB8mHl33BpK2bfrbAp62T0ohptwl1t4LX1fditclcblaz
fLC9weCVQvW37s18Wei+bD9BeoeoaIXIWDM1z45w49VOoceV/6qC54Gl+P51B2tR
Ucc02MkBedGwp2cj9hNnGrAa5TUOCw+tJYL/lY2K5ZpfDd7Ioq/kKx/vxDcVAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUeiOk+Q/zDUEp5CCdMCcxoJNzJVAwHwYDVR0j
BBgwFoAUtXA/ZwDoMpABIrvmpQhkQes3vSwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMmYwZDRiNGUtOWY3NC00ZGY0LWJmNWUtMDkyOTA5NmRi
ZTA0LzAvQjU3MDNGNjcwMEU4MzI5MDAxMjJCQkU2QTUwODY0NDFFQjM3QkQyQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3RYQV9ad0RvTXBBQklydm1wUWhrUWVz
M3ZTdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yZjBkNGI0ZS05
Zjc0LTRkZjQtYmY1ZS0wOTI5MDk2ZGJlMDQvMC9CNTcwM0Y2NzAwRTgzMjkwMDEy
MkJCRTZBNTA4NjQ0MUVCMzdCRDJDLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtxdF3SH2IWQCD/LJ9CXg
5BAkiBL4AIv/APT+o9YuTZb7L2RNor/jf9NccfoB3W3RXh7cv+SLVxzqqZndh59D
2YYFDT1uv72MWjYqmCFLnZ4N5BgKn+3R60yhdAN2j6k8kWRgzTJLferFex7R40gq
ydNXTPa0EtSz0jnTe+xxyMvetABnMasuBhidwwZGSJirWungaN47m8QE/1bvF1CJ
YIyeQLSc+EZOLE7OvFEKbze8y9XBVYMrGkMA+3S6EcE1bOKGld5P6KiP1QuwMgBc
g554eufJYxXlgYSqf/RGiluVcEPiuBw2BViZpHagxko8mJ1/+eTAJrffi5/KJIo+
0w==
-----END CERTIFICATE-----
Generated at Sat Jun 7 01:11:43 2025 by rpki-client