Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/0/B5703F6700E832900122BBE6A5086441EB37BD2C.mft
File: B5703F6700E832900122BBE6A5086441EB37BD2C.mft (raw, json)
Hash identifier: ii2tr1K3YjeRgIcwkmHzJ+Qr83lM8FRYjN3I0PLNKRA=
Subject key identifier: F0:C5:10:C4:53:45:E0:91:2A:9E:50:D8:CA:51:64:18:C1:3C:B7:E4
Authority key identifier: B5:70:3F:67:00:E8:32:90:01:22:BB:E6:A5:08:64:41:EB:37:BD:2C
Certificate issuer: /CN=b5703f6700e832900122bbe6a5086441eb37bd2c
Certificate serial: 28B2AC029E6811C0D6EF2425D723FB6A70B7DDD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tXA_ZwDoMpABIrvmpQhkQes3vSw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/0/B5703F6700E832900122BBE6A5086441EB37BD2C.mft
Manifest number: 5E
Signing time: Sun 02 Feb 2025 04:12:32 +0000
Manifest this update: Sun 02 Feb 2025 04:07:32 +0000
Manifest next update: Mon 03 Feb 2025 07:01:32 +0000
Files and hashes: 1: B5703F6700E832900122BBE6A5086441EB37BD2C.crl (hash: 8D3tT+GcDYXjnBYkESivfyp/JlYqgqhnQ7uv8v87E5k=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/0/B5703F6700E832900122BBE6A5086441EB37BD2C.crl
rsync://rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/0/B5703F6700E832900122BBE6A5086441EB37BD2C.mft
rsync://rpki.ripe.net/repository/DEFAULT/tXA_ZwDoMpABIrvmpQhkQes3vSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:b2:ac:02:9e:68:11:c0:d6:ef:24:25:d7:23:fb:6a:70:b7:dd:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5703f6700e832900122bbe6a5086441eb37bd2c
Validity
Not Before: Feb 2 04:07:32 2025 GMT
Not After : Feb 3 07:01:32 2025 GMT
Subject: CN=F0C510C45345E0912A9E50D8CA516418C13CB7E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:17:37:00:83:38:4e:6b:32:8c:ac:68:4f:80:
6d:93:57:8a:f5:33:2a:b7:b2:a6:bf:7a:0c:12:c7:
ea:a2:fb:cf:36:8b:4e:aa:72:a2:5d:b5:43:62:c4:
5d:5c:75:b0:93:9f:25:03:54:f2:2e:db:7a:8f:80:
0c:00:d1:82:0b:57:34:78:fe:a6:4a:4e:83:44:9e:
62:37:df:73:e2:ec:93:f8:df:64:6e:64:c7:fb:61:
d0:df:65:24:b3:08:4c:f5:d5:81:df:fd:e2:c8:ed:
2f:ae:11:fa:c3:e1:0f:65:1f:f5:03:21:1c:15:cb:
27:31:2f:fb:68:e9:31:e1:ab:05:81:ab:2a:fe:b5:
91:6c:83:f7:f0:5d:18:9e:0a:88:06:66:97:be:3a:
42:90:d4:84:0a:03:cb:44:78:77:e8:61:db:d9:5c:
78:e8:79:ff:07:b0:7c:3e:9a:4f:4c:40:2f:e5:61:
41:57:e8:d3:e5:b5:fe:84:5e:4b:dc:6d:3b:7f:37:
4b:a0:26:22:15:10:ff:43:8e:25:dc:b7:f3:55:a5:
df:30:48:de:bf:af:84:16:c6:ba:2f:28:74:2e:f8:
a5:be:43:33:40:f7:e5:e6:42:e1:fb:ef:3b:63:7a:
49:21:62:bc:eb:95:fc:a5:a7:8e:50:f0:bc:a8:a5:
39:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:C5:10:C4:53:45:E0:91:2A:9E:50:D8:CA:51:64:18:C1:3C:B7:E4
X509v3 Authority Key Identifier:
keyid:B5:70:3F:67:00:E8:32:90:01:22:BB:E6:A5:08:64:41:EB:37:BD:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/0/B5703F6700E832900122BBE6A5086441EB37BD2C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tXA_ZwDoMpABIrvmpQhkQes3vSw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/0/B5703F6700E832900122BBE6A5086441EB37BD2C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:78:20:5b:3f:48:4e:8c:74:ce:07:d2:a4:aa:72:b3:70:a6:
24:14:63:68:76:74:b6:7a:d6:75:1a:99:7b:f5:8f:99:f7:cc:
f7:af:bb:ea:26:af:e7:89:e4:48:11:8c:47:ad:74:68:85:31:
41:67:12:42:b3:09:0d:c9:26:e4:ed:10:ec:79:6f:d2:ab:c3:
05:24:7b:02:0d:d0:dc:3a:3e:aa:d4:cd:0c:ae:71:a1:ab:b3:
1d:cc:df:01:f9:3a:ab:98:65:db:b2:fb:1e:fa:25:92:4e:f7:
9b:a6:b8:91:d5:e7:e3:2c:c0:78:5f:ad:1f:d6:9b:8f:99:fb:
17:e2:05:9f:bb:67:2e:ce:72:19:4a:4d:61:10:f7:03:22:3c:
d9:fc:62:e8:0d:4f:ab:40:7c:9f:e0:98:28:6b:9d:2d:f7:8d:
30:f6:1c:93:11:ab:2d:20:0a:0a:33:12:09:d9:70:b3:e9:cd:
75:4b:81:96:4a:0c:8b:2f:3d:ca:81:96:67:b8:c7:3f:bf:5e:
59:dd:9b:28:58:87:83:ed:e0:af:10:db:17:50:1c:14:c2:9b:
83:19:00:3a:ef:cc:82:1e:21:66:23:8c:c4:ca:89:84:80:f1:
c7:15:5c:aa:c6:94:04:88:35:a8:62:0a:02:52:c6:3a:66:64:
cf:b5:12:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:08:36 2025 by rpki-client