Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.mft
File: ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.mft (raw, json)
Hash identifier: jr/aG7i/LR1N7R7yZY8nRAyR91YYLdXpIEAeXgmCO1Q=
Subject key identifier: C5:D8:C6:07:74:76:D3:C3:DE:B7:90:82:1B:85:19:75:BD:AC:63:31
Authority key identifier: AD:FF:D4:77:85:7D:1E:9B:E9:5B:82:71:7A:42:7F:35:AF:A9:A7:D6
Certificate issuer: /CN=adffd477857d1e9be95b82717a427f35afa9a7d6
Certificate serial: 122351C313524A80891089C6DFDB9E668ACAB615
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rf_Ud4V9HpvpW4JxekJ_Na-pp9Y.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.mft
Manifest number: 52
Signing time: Sat 01 Feb 2025 23:48:54 +0000
Manifest this update: Sat 01 Feb 2025 23:43:54 +0000
Manifest next update: Tue 04 Feb 2025 00:21:54 +0000
Files and hashes: 1: ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.crl (hash: 7t+oNbrgrb2VH4S8mu5jaeIwcRxtW5X/8RvXQPbjVRw=)
2: AS44355.asa (hash: suHXzL7+p9pEhy3V1lXLsc7/MuuAkxWi6AeYlUGu+1w=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.mft
rsync://rpki.ripe.net/repository/DEFAULT/rf_Ud4V9HpvpW4JxekJ_Na-pp9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:23:51:c3:13:52:4a:80:89:10:89:c6:df:db:9e:66:8a:ca:b6:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adffd477857d1e9be95b82717a427f35afa9a7d6
Validity
Not Before: Feb 1 23:43:54 2025 GMT
Not After : Feb 4 00:21:54 2025 GMT
Subject: CN=C5D8C6077476D3C3DEB790821B851975BDAC6331
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:34:e1:56:2d:8a:95:fd:04:bc:86:22:12:32:
c3:37:38:28:25:cb:e8:9c:fc:80:54:f5:56:6c:95:
2e:d1:5a:37:5d:c7:3d:63:10:67:29:19:25:5a:de:
08:9d:77:17:a6:7d:9e:d1:2a:4b:e3:1a:48:b6:3a:
bd:2a:b9:46:44:6f:17:24:f9:27:15:1a:71:e9:62:
a9:99:6d:67:f1:87:c7:7f:17:0e:08:ca:ef:5f:15:
4e:19:3c:99:48:7e:4b:71:ac:3c:65:7c:70:52:c3:
bd:df:a9:1e:c8:64:09:0c:c6:ce:93:7a:33:6c:6d:
03:81:fe:8b:24:05:89:69:b4:c4:cf:65:29:d8:22:
10:bc:09:9b:39:1b:a4:da:ab:7c:21:8d:8e:98:a1:
5f:d9:b1:c3:03:4e:67:80:3c:c5:98:2b:d8:64:7c:
0a:24:52:35:f9:8c:8c:6f:58:4d:84:df:32:d5:be:
a4:8c:3e:97:cc:3c:7a:82:b0:d3:3a:ed:0b:45:9e:
bd:fe:7f:9d:83:e6:db:3a:2f:27:a9:fd:a4:00:ed:
69:4c:a9:6c:bf:48:cb:9a:0c:47:2a:b6:37:9b:dd:
75:29:3b:62:f4:2c:10:69:1b:75:57:ec:5d:a3:d4:
a2:4a:5c:99:f5:dc:7e:60:bb:5a:1c:6a:49:e4:14:
e6:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:D8:C6:07:74:76:D3:C3:DE:B7:90:82:1B:85:19:75:BD:AC:63:31
X509v3 Authority Key Identifier:
keyid:AD:FF:D4:77:85:7D:1E:9B:E9:5B:82:71:7A:42:7F:35:AF:A9:A7:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rf_Ud4V9HpvpW4JxekJ_Na-pp9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:9a:85:0c:e9:cb:2d:dc:25:95:e4:52:20:99:6a:b3:80:95:
35:ea:c9:72:4b:c9:de:c9:bb:cf:f0:fe:01:d2:70:f0:e8:82:
d8:90:39:71:ea:87:d0:0d:33:70:13:d4:64:b8:d5:2f:40:d6:
a1:9e:8c:2b:56:aa:83:78:7e:04:f9:c6:5d:39:3e:a3:4f:3d:
60:b5:3a:ec:b6:40:8f:9a:7d:88:59:d7:e8:65:aa:38:f8:9f:
5d:10:d6:ba:92:57:a7:dd:98:5e:16:b8:c4:d8:2e:a0:e5:a7:
e4:7e:1a:3b:45:fd:80:7d:5d:df:0b:66:49:6d:fa:8d:33:8e:
40:92:18:e8:70:11:ce:41:82:81:ed:52:fe:d8:6c:7b:f6:80:
13:c9:9f:be:bf:13:9e:36:5a:1a:3a:60:b4:fe:eb:8d:4d:33:
3f:78:4c:bf:97:0c:42:ff:36:6a:32:dd:96:58:61:ad:58:d5:
09:6b:af:f3:12:62:37:4a:2b:13:11:d5:3d:41:84:29:e0:80:
65:da:5d:54:e9:3d:10:60:26:fc:74:ec:33:d3:fc:b8:a4:e6:
b9:f4:f6:46:1c:bd:28:28:f5:de:ca:9b:ae:45:9c:2b:a1:18:
33:4d:b7:bd:db:2b:2d:02:2f:64:41:70:75:e6:56:fe:2c:56:
e6:65:6b:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:46:39 2025 by rpki-client