Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/80a6dc53-b20d-453a-b7e5-3e06ef42bd26/0/B1D3049AB90B73314F2ADFCAD639336D9320B35E.mft
File: B1D3049AB90B73314F2ADFCAD639336D9320B35E.mft (raw, json)
Hash identifier: VBfxcBRV29tR76ivdDLJw32TWyWM/SPfrr4IhwA/Jx8=
Subject key identifier: 43:BA:C8:94:AC:26:A3:5E:BB:AF:DA:DB:9C:63:16:D7:E3:BE:DF:78
Authority key identifier: B1:D3:04:9A:B9:0B:73:31:4F:2A:DF:CA:D6:39:33:6D:93:20:B3:5E
Certificate issuer: /CN=b1d3049ab90b73314f2adfcad639336d9320b35e
Certificate serial: 3863D21B390DB5FC1472EF89C054770BE5B2BBE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sdMEmrkLczFPKt_K1jkzbZMgs14.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/80a6dc53-b20d-453a-b7e5-3e06ef42bd26/0/B1D3049AB90B73314F2ADFCAD639336D9320B35E.mft
Manifest number: 1C
Signing time: Sun 02 Feb 2025 05:18:38 +0000
Manifest this update: Sun 02 Feb 2025 05:13:38 +0000
Manifest next update: Mon 03 Feb 2025 09:15:38 +0000
Files and hashes: 1: B1D3049AB90B73314F2ADFCAD639336D9320B35E.crl (hash: eRz/jSOzJ37nfmlB81GvzXsKUj5EtqT+EpDw9G0qH7w=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/80a6dc53-b20d-453a-b7e5-3e06ef42bd26/0/B1D3049AB90B73314F2ADFCAD639336D9320B35E.crl
rsync://rsync.paas.rpki.ripe.net/repository/80a6dc53-b20d-453a-b7e5-3e06ef42bd26/0/B1D3049AB90B73314F2ADFCAD639336D9320B35E.mft
rsync://rpki.ripe.net/repository/DEFAULT/sdMEmrkLczFPKt_K1jkzbZMgs14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:63:d2:1b:39:0d:b5:fc:14:72:ef:89:c0:54:77:0b:e5:b2:bb:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1d3049ab90b73314f2adfcad639336d9320b35e
Validity
Not Before: Feb 2 05:13:38 2025 GMT
Not After : Feb 3 09:15:38 2025 GMT
Subject: CN=43BAC894AC26A35EBBAFDADB9C6316D7E3BEDF78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:17:af:2f:bc:8a:a7:10:ab:7b:16:81:1a:3c:
6b:61:70:e1:68:74:fd:ed:78:9a:f6:1b:f8:d5:57:
bf:bb:9b:92:36:cb:72:cb:98:61:ed:eb:dc:48:5f:
4b:80:1c:ff:31:ff:5d:c3:78:34:05:c5:62:17:17:
26:5d:d4:bb:f5:15:d6:eb:fe:47:09:90:a8:de:03:
4b:ea:76:1b:f1:60:5b:38:52:74:68:26:30:77:b1:
76:fe:ca:82:85:2f:80:75:6a:b9:15:0b:9c:51:fc:
b7:54:f1:4e:31:80:89:66:46:4c:bf:43:af:ea:83:
71:0d:54:cd:6b:58:b3:ed:d8:60:af:72:f0:3c:ca:
a8:d5:55:ae:c0:4e:87:a1:1d:80:a0:ac:1a:77:5d:
39:82:1f:12:7a:b4:03:7f:f4:f5:00:88:62:29:10:
26:da:3a:70:94:18:40:f3:d6:7b:9d:c6:99:1e:98:
d9:98:53:cf:8b:3a:c0:9c:87:4b:62:fe:c8:47:71:
fb:6a:3c:e3:2a:2f:05:cd:4e:7f:c9:92:80:58:c9:
50:27:98:b9:62:8b:dc:73:29:48:7f:7e:e0:c8:98:
72:a2:81:cd:09:71:8f:99:fa:95:53:44:1f:de:d6:
40:4d:03:c5:3b:27:49:6b:11:64:eb:72:10:e3:b3:
20:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:BA:C8:94:AC:26:A3:5E:BB:AF:DA:DB:9C:63:16:D7:E3:BE:DF:78
X509v3 Authority Key Identifier:
keyid:B1:D3:04:9A:B9:0B:73:31:4F:2A:DF:CA:D6:39:33:6D:93:20:B3:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/80a6dc53-b20d-453a-b7e5-3e06ef42bd26/0/B1D3049AB90B73314F2ADFCAD639336D9320B35E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sdMEmrkLczFPKt_K1jkzbZMgs14.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/80a6dc53-b20d-453a-b7e5-3e06ef42bd26/0/B1D3049AB90B73314F2ADFCAD639336D9320B35E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:e2:ec:2d:f4:06:21:68:97:7b:a2:03:af:69:5d:4c:ac:50:
f1:f8:a0:cb:ea:f3:37:59:e0:80:14:0c:5e:6b:69:69:4c:d6:
a5:ec:b6:29:ef:cf:b0:bf:db:23:cb:7f:88:b1:8a:02:8b:68:
b6:69:dc:0e:1b:ab:c1:2d:8a:67:52:27:74:d3:ae:93:8d:a0:
58:85:27:51:4d:05:1a:a0:e0:6c:df:df:97:77:6b:a0:46:9b:
b7:c5:cd:df:bf:84:dc:64:e6:9c:0b:0f:a7:5b:b8:77:25:08:
df:44:50:a4:f2:cd:81:3b:94:af:8f:00:0c:9a:53:ea:f5:ad:
ed:ba:c0:67:11:e4:28:e0:cc:2d:63:ea:26:69:dc:2e:06:7f:
08:41:13:38:68:43:ca:30:3d:24:40:f5:d9:a1:3d:bf:20:39:
54:73:68:13:4c:11:3e:6c:4f:47:f2:f3:18:b1:3a:89:b2:d6:
49:a8:cb:6e:51:37:80:c6:68:ad:57:89:4d:01:b2:65:02:92:
be:dc:4b:b8:8c:03:8c:6e:06:25:ef:0f:75:13:83:51:c8:96:
71:fa:a7:80:c6:44:74:a5:27:2a:dd:b5:e0:97:93:6f:44:e5:
68:52:07:7f:46:5f:2f:55:3d:0e:c5:84:d8:44:1b:4a:e8:0f:
b7:44:25:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:59:59 2025 by rpki-client