Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/35baf3e6-49a6-476a-bbd0-964a5827e808/0/460FB7E5EEBB5F865DBF612966909CCCA71B3EBB.mft
File: 460FB7E5EEBB5F865DBF612966909CCCA71B3EBB.mft (raw, json)
Hash identifier: i7c0UTF1BTQAeSRt6AV4WzCTR1qxvOi+KZMuSBVITZQ=
Subject key identifier: 71:A7:32:4D:B8:54:BE:32:37:F7:F9:72:59:5D:2B:63:65:28:8F:45
Authority key identifier: 46:0F:B7:E5:EE:BB:5F:86:5D:BF:61:29:66:90:9C:CC:A7:1B:3E:BB
Certificate issuer: /CN=460fb7e5eebb5f865dbf612966909ccca71b3ebb
Certificate serial: 549AC371197FC7124E661EFD2507EDDCC95C7544
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rg-35e67X4Zdv2EpZpCczKcbPrs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/35baf3e6-49a6-476a-bbd0-964a5827e808/0/460FB7E5EEBB5F865DBF612966909CCCA71B3EBB.mft
Manifest number: 10
Signing time: Mon 10 Mar 2025 07:55:10 +0000
Manifest this update: Mon 10 Mar 2025 07:50:10 +0000
Manifest next update: Tue 11 Mar 2025 10:36:10 +0000
Files and hashes: 1: 460FB7E5EEBB5F865DBF612966909CCCA71B3EBB.crl (hash: S1UvI9a2bj7r1Zkjfic9Srflrb+Wr/aoCVLmJGFdNtE=)
2: AS213768.asa (hash: J13H9BuaKviNhPCxVwYXNwc2bQb/kTa45bbhm15NGa8=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/35baf3e6-49a6-476a-bbd0-964a5827e808/0/460FB7E5EEBB5F865DBF612966909CCCA71B3EBB.crl
rsync://rsync.paas.rpki.ripe.net/repository/35baf3e6-49a6-476a-bbd0-964a5827e808/0/460FB7E5EEBB5F865DBF612966909CCCA71B3EBB.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rg-35e67X4Zdv2EpZpCczKcbPrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 11 Mar 2025 10:36:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:9a:c3:71:19:7f:c7:12:4e:66:1e:fd:25:07:ed:dc:c9:5c:75:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=460fb7e5eebb5f865dbf612966909ccca71b3ebb
Validity
Not Before: Mar 10 07:50:10 2025 GMT
Not After : Mar 11 10:36:10 2025 GMT
Subject: CN=71A7324DB854BE3237F7F972595D2B6365288F45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:72:4b:c3:c0:94:ac:de:38:37:dc:d2:2a:a6:
70:d3:65:f3:88:67:87:13:92:73:ac:73:a7:33:4d:
da:9d:3b:72:de:00:ac:09:12:f5:cf:21:e6:54:2b:
95:33:62:2d:4d:60:6b:a2:93:e4:6b:5d:6a:d2:01:
09:8f:25:0a:4b:14:a3:1d:f8:5c:80:fb:9e:b1:a0:
b9:f3:5a:2b:cc:6e:c5:a7:2c:f4:5b:4b:47:f4:a5:
5a:ca:17:7f:31:e1:dd:ce:af:92:f8:f5:05:71:7f:
c5:6f:19:dd:5c:1b:b3:00:b7:07:45:48:99:4b:5e:
6f:2e:2c:b7:a3:89:a3:16:f4:e5:f5:d0:37:ae:bd:
41:ee:b5:8f:fe:20:21:32:06:e4:b9:98:17:2e:4a:
64:f3:a6:7d:c4:75:ed:65:59:b8:e9:4f:ff:6e:18:
a4:42:dd:16:cc:50:d8:7d:75:12:a8:8a:2a:48:78:
0a:d6:38:e9:5d:0f:2e:8b:c2:ec:76:89:0e:7b:d4:
50:f1:2b:82:78:ae:49:41:2a:82:b1:0d:97:4f:c0:
bc:c8:25:e4:2d:cc:d4:90:7e:be:c6:56:c5:dc:20:
a0:6a:f3:81:2b:5b:0a:1c:81:ac:a5:d5:bb:89:26:
a2:77:d4:b4:03:b1:52:b1:94:22:b9:73:cf:40:94:
26:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:A7:32:4D:B8:54:BE:32:37:F7:F9:72:59:5D:2B:63:65:28:8F:45
X509v3 Authority Key Identifier:
keyid:46:0F:B7:E5:EE:BB:5F:86:5D:BF:61:29:66:90:9C:CC:A7:1B:3E:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/35baf3e6-49a6-476a-bbd0-964a5827e808/0/460FB7E5EEBB5F865DBF612966909CCCA71B3EBB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rg-35e67X4Zdv2EpZpCczKcbPrs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/35baf3e6-49a6-476a-bbd0-964a5827e808/0/460FB7E5EEBB5F865DBF612966909CCCA71B3EBB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:52:02:ce:6a:1d:93:8e:0d:fe:56:d9:86:65:e2:ac:78:5d:
a8:34:28:b8:4d:2b:aa:6e:d3:e7:5a:11:da:33:16:9a:0d:e3:
8e:f6:95:f1:ed:60:44:91:90:ae:6d:ec:89:34:d5:a4:c5:aa:
89:d1:c0:e0:3b:1c:c7:38:8c:7f:d7:f0:43:b3:21:6b:56:14:
cb:9d:1f:7c:b2:2a:dd:08:af:42:0d:77:f3:3f:3f:3f:b3:0b:
98:b0:a0:1c:01:28:ad:07:10:42:a2:b5:20:23:19:f2:54:46:
57:89:ef:a7:4b:6a:69:e1:38:90:19:4a:9e:8d:30:74:4d:f4:
32:04:c1:b4:45:3e:1a:33:b2:21:77:88:00:0d:af:69:a6:08:
c1:54:ef:37:74:87:45:59:d6:79:fe:13:00:ee:b3:21:b2:a4:
0c:80:d7:71:26:23:e5:97:be:a7:d8:8f:6b:28:d4:50:63:af:
68:e0:64:9f:76:49:64:5f:15:f0:8f:a3:a5:b0:b8:d8:26:bb:
78:d5:8f:0e:27:0b:a0:d5:a4:7f:5f:00:e8:1e:b9:87:10:85:
fe:ae:9e:c6:86:50:38:8d:03:25:4c:12:ea:f6:f4:2e:57:78:
f2:c3:6f:60:f9:b4:e7:8e:f6:6d:d9:20:e0:ac:9f:a3:2d:71:
9a:f5:c6:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 11 01:14:00 2025 by rpki-client