Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/0/2211E25C2234C1E5A2BFCF7FDCAC54B01AF373BD.mft
File: 2211E25C2234C1E5A2BFCF7FDCAC54B01AF373BD.mft (raw, json)
Hash identifier: pSseVuPQArshXS6H4LpX1JoaS5x1DLIzLqTEBb08Hgg=
Subject key identifier: 3C:FC:61:A8:E1:AD:3E:AF:D1:7A:03:BA:46:65:C2:FD:A5:A3:B6:97
Authority key identifier: 22:11:E2:5C:22:34:C1:E5:A2:BF:CF:7F:DC:AC:54:B0:1A:F3:73:BD
Certificate issuer: /CN=2211e25c2234c1e5a2bfcf7fdcac54b01af373bd
Certificate serial: 2E9912CC1AB6EFD616127CB3F815F8EE4DC1A903
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IhHiXCI0weWiv89_3KxUsBrzc70.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/0/2211E25C2234C1E5A2BFCF7FDCAC54B01AF373BD.mft
Manifest number: 0243
Signing time: Thu 13 Mar 2025 08:36:15 +0000
Manifest this update: Thu 13 Mar 2025 08:31:15 +0000
Manifest next update: Fri 14 Mar 2025 11:31:15 +0000
Files and hashes: 1: 2211E25C2234C1E5A2BFCF7FDCAC54B01AF373BD.crl (hash: tdRQDtHFPN5PuZ7gXjVR43rQ5y+jbIEcWieFeDzRL1Y=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/0/2211E25C2234C1E5A2BFCF7FDCAC54B01AF373BD.crl
rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/0/2211E25C2234C1E5A2BFCF7FDCAC54B01AF373BD.mft
rsync://rpki.ripe.net/repository/DEFAULT/IhHiXCI0weWiv89_3KxUsBrzc70.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 11:31:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:99:12:cc:1a:b6:ef:d6:16:12:7c:b3:f8:15:f8:ee:4d:c1:a9:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2211e25c2234c1e5a2bfcf7fdcac54b01af373bd
Validity
Not Before: Mar 13 08:31:15 2025 GMT
Not After : Mar 14 11:31:15 2025 GMT
Subject: CN=3CFC61A8E1AD3EAFD17A03BA4665C2FDA5A3B697
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:5b:90:07:0d:9e:96:63:96:6a:ec:74:3f:6c:
73:e7:b4:fe:ff:6f:4c:98:4c:22:b0:cc:59:97:01:
4e:0b:85:1b:df:36:6f:3c:e5:ec:b1:90:53:9b:25:
5c:3b:a9:d2:67:43:d4:6a:2e:2a:1d:aa:a0:27:37:
71:0c:fa:1e:15:d1:52:07:a0:ed:03:f3:db:1b:57:
9b:4a:4d:0e:e4:59:64:4b:ac:36:19:fa:d9:93:c1:
49:ba:53:6d:07:66:82:96:6c:36:1a:d2:e7:22:61:
86:57:49:cc:99:b0:e4:4d:3f:b9:31:11:0d:53:25:
0f:24:ed:ed:3a:47:f8:f9:34:b0:22:ac:b2:58:93:
c1:50:4e:60:34:86:e4:b7:d4:5d:f6:a4:a1:de:3d:
9b:f1:fb:41:b3:5b:97:ff:6c:c3:fe:d8:b0:83:48:
e5:bc:05:39:15:06:55:37:5e:67:c7:49:60:08:53:
05:71:0c:c8:7c:ed:18:5a:bc:9d:60:0c:e5:47:eb:
f9:b3:65:4a:24:3b:6a:81:7d:93:a3:32:e1:d2:21:
db:6b:4f:58:1b:eb:e4:c7:fa:7d:11:7c:92:10:1a:
6c:81:e8:67:ea:7b:03:cd:9f:09:c6:12:4e:76:d7:
29:7c:d8:c9:2d:92:19:e8:97:e8:e8:0d:4b:50:b0:
10:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:FC:61:A8:E1:AD:3E:AF:D1:7A:03:BA:46:65:C2:FD:A5:A3:B6:97
X509v3 Authority Key Identifier:
keyid:22:11:E2:5C:22:34:C1:E5:A2:BF:CF:7F:DC:AC:54:B0:1A:F3:73:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/0/2211E25C2234C1E5A2BFCF7FDCAC54B01AF373BD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IhHiXCI0weWiv89_3KxUsBrzc70.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/0/2211E25C2234C1E5A2BFCF7FDCAC54B01AF373BD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:fb:cd:b4:37:a9:3c:13:45:45:f3:f4:b0:a4:19:1c:5c:70:
69:ea:c0:ad:f9:fb:7b:3a:12:e4:bd:41:0e:73:fb:92:7e:9a:
19:d1:be:da:88:40:46:d2:83:97:09:67:5d:9d:f2:72:b7:5d:
5d:69:00:30:cd:bd:41:cd:67:b9:d9:38:f4:fc:8b:2d:12:43:
2c:81:ec:0a:4e:4f:93:fb:29:32:92:e6:20:06:c9:71:e2:a7:
bc:88:e0:c8:39:dd:49:ca:84:86:9b:29:d8:5b:8b:7b:4a:5b:
0b:77:75:18:41:08:bc:94:b1:5f:d0:96:d8:7a:9a:d9:85:5c:
f6:57:44:dd:9e:d8:13:80:25:d9:2a:40:44:f4:6d:2b:78:f5:
5a:77:9c:08:dc:6f:8a:f2:d9:73:3e:a4:32:55:b7:d2:24:ce:
29:89:52:c0:41:34:a4:f2:6e:68:e1:ba:24:60:cd:1a:68:94:
28:a1:aa:8c:ab:f4:b5:be:6e:ec:bd:67:b1:ef:29:85:8a:93:
29:e0:da:18:1b:61:92:a0:1d:19:9f:8d:ee:eb:e7:06:6b:04:
a2:53:39:ec:62:a0:76:7d:21:32:f6:5e:98:6c:da:32:9c:c8:
f4:bb:36:b5:30:53:87:0f:61:25:5a:a4:8a:a6:cf:62:3e:06:
7a:8a:a6:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 23:17:21 2025 by rpki-client