Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/1/1305A50FEEC042C917D8EF2D77D1D2448848C0F9.mft
File: 1305A50FEEC042C917D8EF2D77D1D2448848C0F9.mft (raw, json)
Hash identifier: r46K+aPEjyvEISN4uEZ/lpVa0qKsDgyiKLsei8SApac=
Subject key identifier: 44:65:F5:39:2A:36:88:A6:B1:84:9E:DB:93:5E:40:5F:60:D7:A8:20
Authority key identifier: 13:05:A5:0F:EE:C0:42:C9:17:D8:EF:2D:77:D1:D2:44:88:48:C0:F9
Certificate issuer: /CN=1305A50FEEC042C917D8EF2D77D1D2448848C0F9
Certificate serial: 491A7BF6B036A0CD78A4CFAAEC03EAC2D7DA2B56
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/1305A50FEEC042C917D8EF2D77D1D2448848C0F9.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/1/1305A50FEEC042C917D8EF2D77D1D2448848C0F9.mft
Manifest number: 02CA
Signing time: Mon 07 Apr 2025 22:59:12 +0000
Manifest this update: Mon 07 Apr 2025 22:54:12 +0000
Manifest next update: Tue 08 Apr 2025 23:13:12 +0000
Files and hashes: 1: 1305A50FEEC042C917D8EF2D77D1D2448848C0F9.crl (hash: DS8w+RcFfJkpII84tU6LOYISFjMWqc38bQddSXEggOs=)
2: 326130353a646663313a393630303a3a2f34302d3430203d3e20323136343535.roa (hash: R8rTJIYEOHmNtQ+W65HlVcJr9EAiC7WNdRoszOqVDfk=)
3: 326130353a646663313a383530303a3a2f34302d3430203d3e20323136343535.roa (hash: E/OJJsH8vRLWk7ObLOrajKk/aVne0/9cuXNyPD2i5xg=)
4: 326130353a646663313a383531313a3a2f34382d3438203d3e20323136343535.roa (hash: Lfg3mHt7cy+TUJoGs7HICBQr97boLuR2prHw+KIv6RY=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/1/1305A50FEEC042C917D8EF2D77D1D2448848C0F9.crl
rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/1/1305A50FEEC042C917D8EF2D77D1D2448848C0F9.mft
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/1305A50FEEC042C917D8EF2D77D1D2448848C0F9.cer
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:13:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:1a:7b:f6:b0:36:a0:cd:78:a4:cf:aa:ec:03:ea:c2:d7:da:2b:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1305A50FEEC042C917D8EF2D77D1D2448848C0F9
Validity
Not Before: Apr 7 22:54:12 2025 GMT
Not After : Apr 8 23:13:12 2025 GMT
Subject: CN=4465F5392A3688A6B1849EDB935E405F60D7A820
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:20:d0:26:66:93:c2:bd:b7:cd:22:e7:81:d7:
4f:d3:af:4d:d8:53:70:ed:ad:28:f9:6e:8d:82:a7:
39:95:6b:eb:a6:3a:51:8e:f0:66:73:7a:93:a8:71:
bc:59:e2:6a:e1:53:a2:b9:c0:77:c2:32:40:16:5e:
ad:bd:02:31:a0:b2:1a:b9:cc:24:58:ee:76:1c:45:
bf:21:b2:43:d1:a8:b0:7e:7e:6c:57:e5:ed:d5:e3:
d4:87:d9:c9:ac:cb:9b:c2:d2:47:fa:00:b5:57:56:
5a:98:b9:f0:e9:bb:6f:d3:e3:db:a1:17:73:4a:f2:
71:f1:41:57:b5:fd:31:3e:3a:19:e2:b0:08:14:a7:
70:28:4a:09:fb:3d:a8:2a:a7:a8:58:d0:9b:27:e1:
d4:bf:c6:22:b6:39:5c:c5:db:9d:7d:be:6b:bc:67:
97:d5:59:3d:33:b5:4c:31:63:dd:9a:b5:3f:ea:c7:
e3:65:f9:04:ce:df:3f:14:3b:fa:06:71:b8:ce:89:
6e:81:1e:f9:25:f0:db:57:a3:00:af:31:b9:ac:64:
9b:15:6c:9e:3a:42:79:29:bb:19:58:3d:2b:c4:53:
6d:fb:13:50:76:4e:76:bb:78:1d:de:d8:2b:6d:71:
84:0b:ac:91:fb:83:15:4c:a3:b6:11:ba:40:1c:8f:
0f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:65:F5:39:2A:36:88:A6:B1:84:9E:DB:93:5E:40:5F:60:D7:A8:20
X509v3 Authority Key Identifier:
keyid:13:05:A5:0F:EE:C0:42:C9:17:D8:EF:2D:77:D1:D2:44:88:48:C0:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/1/1305A50FEEC042C917D8EF2D77D1D2448848C0F9.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/1305A50FEEC042C917D8EF2D77D1D2448848C0F9.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/1/1305A50FEEC042C917D8EF2D77D1D2448848C0F9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:30:1d:6e:de:f7:14:34:0c:d7:ad:88:ec:db:b1:d1:fe:a4:
77:02:c1:d8:13:b8:67:c0:85:81:71:94:41:c1:9e:45:4e:a0:
aa:68:6b:49:7c:ac:2e:c9:ca:62:74:82:10:ea:cb:ad:dd:13:
51:87:93:2b:d6:f5:bf:a6:d5:5e:df:2e:1a:1d:c6:da:42:5b:
36:5e:81:64:94:42:13:74:a1:50:76:17:f2:51:2c:3d:eb:f5:
1e:98:4b:97:11:71:0a:e8:54:cf:f8:24:13:38:24:bf:52:59:
74:a0:bd:73:ad:2d:f8:89:2d:64:36:8d:85:15:4b:9d:40:09:
60:d7:b7:60:61:37:ba:42:cc:41:8c:e2:4a:5a:66:9c:6f:4e:
80:89:90:fb:ad:b4:07:80:a1:20:aa:97:ee:a9:f2:a8:ca:98:
64:90:54:ac:fc:11:a1:b2:7b:22:a4:ef:34:fe:7e:7c:b1:18:
86:61:d0:72:a4:0f:8b:cc:2d:8d:96:db:05:0b:98:97:c1:99:
e2:5f:c1:51:c9:01:e6:a1:6f:e3:7f:17:f5:f3:b2:11:2a:b6:
23:56:28:6e:57:78:83:63:a5:dd:33:a2:0b:9e:ab:eb:0a:49:
c9:f7:27:04:f4:f9:93:22:9b:b5:62:12:f5:40:08:0f:34:18:
00:60:d8:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 12:45:00 2025 by rpki-client