Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/0/2211E25C2234C1E5A2BFCF7FDCAC54B01AF373BD.mft
File: 2211E25C2234C1E5A2BFCF7FDCAC54B01AF373BD.mft (raw, json)
Hash identifier: i2u3mq0iYvWeXfRq/+eOp5nTXu/PTIoITfT/FZF0goo=
Subject key identifier: 51:8B:8E:D5:E8:5C:39:96:39:AE:17:34:C6:F5:C2:2C:1B:36:3D:0D
Authority key identifier: 22:11:E2:5C:22:34:C1:E5:A2:BF:CF:7F:DC:AC:54:B0:1A:F3:73:BD
Certificate issuer: /CN=2211e25c2234c1e5a2bfcf7fdcac54b01af373bd
Certificate serial: 205D4A97AA7A286D46A6FC26DA68BFD6D0D4342E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IhHiXCI0weWiv89_3KxUsBrzc70.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/0/2211E25C2234C1E5A2BFCF7FDCAC54B01AF373BD.mft
Manifest number: 0222
Signing time: Sun 16 Feb 2025 09:29:44 +0000
Manifest this update: Sun 16 Feb 2025 09:24:44 +0000
Manifest next update: Mon 17 Feb 2025 10:15:44 +0000
Files and hashes: 1: 2211E25C2234C1E5A2BFCF7FDCAC54B01AF373BD.crl (hash: bfYQ/fEusy3D1bKk8M1RIFXbiloWHcR3bylhhrHonRc=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/0/2211E25C2234C1E5A2BFCF7FDCAC54B01AF373BD.crl
rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/0/2211E25C2234C1E5A2BFCF7FDCAC54B01AF373BD.mft
rsync://rpki.ripe.net/repository/DEFAULT/IhHiXCI0weWiv89_3KxUsBrzc70.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 10:15:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:5d:4a:97:aa:7a:28:6d:46:a6:fc:26:da:68:bf:d6:d0:d4:34:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2211e25c2234c1e5a2bfcf7fdcac54b01af373bd
Validity
Not Before: Feb 16 09:24:44 2025 GMT
Not After : Feb 17 10:15:44 2025 GMT
Subject: CN=518B8ED5E85C399639AE1734C6F5C22C1B363D0D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:07:3c:77:fd:31:38:ed:db:43:ac:de:5c:d8:
6f:e7:b4:25:18:61:98:1f:df:bc:6f:a9:e9:09:94:
05:9d:54:a7:9c:41:fe:67:88:81:19:0c:6d:fa:d3:
0f:43:8c:00:45:38:e0:0b:52:f5:c3:e0:c1:66:df:
e4:66:9f:dc:db:88:5b:e4:86:d4:b8:35:ad:d6:a1:
b3:31:3b:9e:0c:18:c6:91:8b:95:dd:43:16:de:ee:
81:9c:ef:dd:ca:80:41:5d:88:f3:3a:a3:bb:00:94:
29:ed:76:12:61:8a:2b:80:30:c5:01:94:11:34:01:
e1:65:3f:ba:5d:a1:b2:af:00:a5:cd:b3:f1:15:b0:
01:54:31:19:c3:0f:16:70:ae:90:2f:a5:79:c6:1d:
47:5b:ce:10:81:2d:82:14:86:6a:85:7a:66:6d:dc:
ef:4a:2d:a6:27:39:63:c6:c3:62:50:de:65:5c:8b:
5b:f8:85:a5:d8:0e:9a:db:e7:20:9a:e1:af:9c:00:
8d:9d:2a:92:54:87:31:df:96:b8:ee:1a:b6:e1:49:
40:93:df:8d:8a:b1:f0:f3:98:0d:4e:8c:84:ea:15:
ac:c8:ba:76:53:2f:62:2f:1f:37:de:92:2e:09:da:
17:5d:17:bf:01:5f:3d:a6:5d:a1:c4:94:a5:5e:22:
f6:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:8B:8E:D5:E8:5C:39:96:39:AE:17:34:C6:F5:C2:2C:1B:36:3D:0D
X509v3 Authority Key Identifier:
keyid:22:11:E2:5C:22:34:C1:E5:A2:BF:CF:7F:DC:AC:54:B0:1A:F3:73:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/0/2211E25C2234C1E5A2BFCF7FDCAC54B01AF373BD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IhHiXCI0weWiv89_3KxUsBrzc70.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/0/2211E25C2234C1E5A2BFCF7FDCAC54B01AF373BD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:1c:fb:9f:2c:6a:5d:1d:c5:cd:d3:0d:0f:59:d7:6f:ac:e3:
b5:fe:d9:19:a2:b2:30:0a:10:18:64:34:38:f1:04:d7:47:9a:
74:3a:b2:8c:af:24:dd:e1:81:cc:4d:8c:36:0c:49:6d:e2:58:
5e:90:50:25:82:a7:37:bf:55:e0:6d:e1:03:d4:5f:f4:8d:36:
b9:70:1d:f1:2a:6b:b3:4d:7c:6f:1b:09:c2:58:25:5f:a5:fc:
03:5c:e9:29:cc:5e:3a:8d:88:a3:bf:bb:e5:72:31:80:b5:2c:
e6:4a:d1:d3:2e:68:c7:27:7e:27:18:23:b0:31:1e:f8:ca:7d:
61:c3:a6:a8:f3:cc:40:fd:e2:0a:99:cf:68:38:8b:a5:fd:fb:
90:62:88:02:c4:cf:b1:28:c2:9f:f3:5a:8c:a5:0e:46:84:39:
ab:a4:be:19:ea:a7:e3:70:71:b6:5b:b3:38:ee:7e:86:88:f0:
62:16:22:66:a7:6a:d7:69:eb:aa:97:1a:4f:fc:fa:d9:54:f8:
89:5b:0c:58:37:6a:24:d0:7e:2e:97:df:d9:44:8a:41:46:f2:
36:59:5e:ab:dd:15:13:46:b7:3b:6f:2a:11:88:fe:8e:e9:7d:
33:62:cf:d0:90:d9:2a:0a:ed:78:ca:a5:2b:9d:3c:ca:b8:fa:
70:17:9d:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:15:55 2025 by rpki-client