Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/0/193B972646653C886D4001CDAD73EC4E473DA173.mft
File: 193B972646653C886D4001CDAD73EC4E473DA173.mft (raw, json)
Hash identifier: JxeUhD5IoikW9ZTvYQzvsVgdbkwud9cO3x9uBsIrqP0=
Subject key identifier: 0A:9E:2C:08:20:AC:A5:5F:3F:27:45:C9:35:49:6B:C8:1A:CB:23:1A
Authority key identifier: 19:3B:97:26:46:65:3C:88:6D:40:01:CD:AD:73:EC:4E:47:3D:A1:73
Certificate issuer: /CN=193b972646653c886d4001cdad73ec4e473da173
Certificate serial: 123B1459E5E02EAE4FDCEC4738D50F3271B91EAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GTuXJkZlPIhtQAHNrXPsTkc9oXM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/0/193B972646653C886D4001CDAD73EC4E473DA173.mft
Manifest number: 0145
Signing time: Fri 04 Apr 2025 17:41:09 +0000
Manifest this update: Fri 04 Apr 2025 17:36:09 +0000
Manifest next update: Sat 05 Apr 2025 17:44:09 +0000
Files and hashes: 1: 193B972646653C886D4001CDAD73EC4E473DA173.crl (hash: a27SX27xplD8RzMrDmQXtfyyj6DkcOzbZhc11SwqZKE=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/0/193B972646653C886D4001CDAD73EC4E473DA173.crl
rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/0/193B972646653C886D4001CDAD73EC4E473DA173.mft
rsync://rpki.ripe.net/repository/DEFAULT/GTuXJkZlPIhtQAHNrXPsTkc9oXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 17:44:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:3b:14:59:e5:e0:2e:ae:4f:dc:ec:47:38:d5:0f:32:71:b9:1e:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=193b972646653c886d4001cdad73ec4e473da173
Validity
Not Before: Apr 4 17:36:09 2025 GMT
Not After : Apr 5 17:44:09 2025 GMT
Subject: CN=0A9E2C0820ACA55F3F2745C935496BC81ACB231A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:04:90:52:04:8b:53:c2:4a:1c:d7:cb:46:c3:
30:e7:0b:15:d6:6d:38:2e:44:31:62:a6:52:97:92:
6e:a1:ce:7a:31:bb:59:fe:74:d6:71:9b:01:29:95:
fa:74:36:bf:21:6c:c3:1a:11:fb:fa:0c:de:d4:cb:
6c:b0:88:a9:30:d0:db:c5:f3:1d:23:50:73:4b:30:
e0:82:1c:13:e9:6b:a7:4a:98:d3:8b:10:44:2c:6b:
df:4b:ca:eb:c4:6d:71:d9:f5:64:20:b9:6a:18:c5:
2c:ec:64:f9:f4:a7:8d:4c:e7:77:c1:6c:ae:62:87:
d3:6a:12:be:fc:3f:7e:6c:25:e4:33:0f:17:5a:cd:
cc:46:32:7b:ce:b2:45:62:47:91:b1:fe:36:46:14:
a5:8e:f7:9a:5c:b0:30:0f:67:61:c6:16:72:19:37:
ce:47:e9:04:8a:65:05:a5:1e:9f:8b:c2:d1:e6:5a:
ac:af:ce:91:b7:21:06:76:2b:77:3e:82:ae:22:ae:
f4:09:bf:df:d9:2a:b6:8b:25:67:34:18:cc:d2:eb:
d0:2d:0c:c8:85:17:76:23:87:95:8f:9a:e6:b8:e8:
1b:59:81:61:be:78:5c:1c:e0:01:33:23:bb:d0:4e:
14:0c:d7:fd:88:37:2b:c5:55:ec:41:7e:05:bb:a2:
01:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:9E:2C:08:20:AC:A5:5F:3F:27:45:C9:35:49:6B:C8:1A:CB:23:1A
X509v3 Authority Key Identifier:
keyid:19:3B:97:26:46:65:3C:88:6D:40:01:CD:AD:73:EC:4E:47:3D:A1:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/0/193B972646653C886D4001CDAD73EC4E473DA173.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GTuXJkZlPIhtQAHNrXPsTkc9oXM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/0/193B972646653C886D4001CDAD73EC4E473DA173.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:51:7a:02:c2:68:6d:33:9a:f1:a7:bc:26:45:da:8a:4a:d8:
1a:9a:7a:98:ab:e2:8e:45:15:23:8f:41:fd:81:07:8e:f9:b4:
0e:18:40:49:07:ca:2a:f7:10:05:2e:c7:fb:12:95:49:46:76:
c3:4a:aa:24:e2:30:81:da:b0:f1:8d:d2:38:85:63:8a:8e:56:
12:0a:b4:c1:66:78:bf:c3:5c:c8:c8:9d:f8:01:ae:a6:08:d3:
c1:ea:b9:b7:f2:5b:43:aa:d1:64:fd:7a:d3:27:dd:06:fb:20:
7a:f3:12:2a:21:da:58:77:62:22:e1:ae:c2:29:d3:f1:e0:60:
51:8b:16:00:c4:77:86:8c:40:cb:af:b5:e2:5b:ac:72:9e:6c:
a2:21:7d:1f:22:a6:6a:7a:6a:56:9f:5a:68:eb:21:49:ff:b2:
62:e9:cf:54:20:b6:88:68:c6:68:b3:85:96:6f:83:d1:41:b6:
27:bb:a1:f6:c8:27:8b:3d:71:e4:4e:ad:41:43:6f:69:9f:fd:
db:d7:b5:ff:17:de:14:d5:84:04:fe:4c:a9:9f:9a:a8:13:9b:
08:a8:5c:5e:13:8a:ae:00:0b:64:ad:93:ef:86:90:ea:d6:4c:
41:a9:4a:ed:28:e3:c3:89:90:11:cf:b9:b7:64:39:ba:90:3d:
f5:cb:66:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:34:19 2025 by rpki-client