Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.mft
File: 0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.mft (raw, json)
Hash identifier: 91QvkDtDmqxh0IN1qnaezjpwmhJQGxPY5SwXube2S2c=
Subject key identifier: F6:AE:80:D8:4A:93:ED:EC:46:97:45:5A:D2:7B:10:42:1C:81:83:83
Authority key identifier: 0C:DB:32:D6:25:3F:BA:FE:07:37:8A:1A:30:94:6A:73:AE:C7:E3:D4
Certificate issuer: /CN=0cdb32d6253fbafe07378a1a30946a73aec7e3d4
Certificate serial: 2F1C209258345EA5DDB282A6E0CFBBD782D5C6B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DNsy1iU_uv4HN4oaMJRqc67H49Q.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.mft
Manifest number: 0172
Signing time: Thu 03 Apr 2025 12:39:08 +0000
Manifest this update: Thu 03 Apr 2025 12:34:08 +0000
Manifest next update: Fri 04 Apr 2025 12:54:08 +0000
Files and hashes: 1: 0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.crl (hash: I0rdLUZnDkeCkYdM4EPlvstiIqrmJr6piChQeZ+iMno=)
2: AS215084.asa (hash: VnCOMkKT2maWsf2f4NVt587A2kDQziKAN+YsQMVpLkI=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.crl
rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.mft
rsync://rpki.ripe.net/repository/DEFAULT/DNsy1iU_uv4HN4oaMJRqc67H49Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Apr 2025 12:54:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:1c:20:92:58:34:5e:a5:dd:b2:82:a6:e0:cf:bb:d7:82:d5:c6:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cdb32d6253fbafe07378a1a30946a73aec7e3d4
Validity
Not Before: Apr 3 12:34:08 2025 GMT
Not After : Apr 4 12:54:08 2025 GMT
Subject: CN=F6AE80D84A93EDEC4697455AD27B10421C818383
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:0a:ba:ef:3c:a0:ba:64:ff:f0:c2:95:1b:3c:
98:53:ec:0d:e4:27:54:70:fa:71:72:e1:75:b8:35:
03:51:86:c8:2b:b6:6c:bb:e0:db:86:f4:0f:20:87:
58:1c:0a:73:be:a7:51:e3:2c:a1:58:19:0e:48:d3:
cb:db:51:f6:e5:c7:e1:f3:ec:d7:75:ca:d4:87:8e:
07:2d:99:b0:dd:70:25:2c:62:25:ea:6c:c3:dc:de:
90:97:b7:77:8a:87:a6:16:8e:82:f5:c2:3e:8b:8e:
78:70:58:6f:96:48:3e:30:97:cb:43:5f:f9:e7:b8:
81:05:ca:e3:bb:11:33:ba:bf:30:06:19:27:7a:c1:
15:03:ee:62:10:d2:b8:cf:c1:33:51:65:d0:f0:a9:
bb:b1:47:de:57:c5:41:58:c3:a2:82:95:33:38:18:
50:1f:e0:d6:58:b1:72:49:58:38:88:4d:8e:bf:ed:
32:26:dd:a9:4b:5d:08:70:9f:13:2f:6f:a4:b1:aa:
3a:aa:8b:f0:db:4d:97:53:61:3f:a0:b8:2f:fc:7e:
7b:52:79:9e:7c:e8:d8:23:03:bf:d0:e1:0c:a3:a0:
39:5f:13:33:d1:1d:61:1a:5b:81:b3:1e:a8:d3:a8:
08:11:47:32:4a:df:97:62:7c:57:18:45:fb:88:8d:
d7:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:AE:80:D8:4A:93:ED:EC:46:97:45:5A:D2:7B:10:42:1C:81:83:83
X509v3 Authority Key Identifier:
keyid:0C:DB:32:D6:25:3F:BA:FE:07:37:8A:1A:30:94:6A:73:AE:C7:E3:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNsy1iU_uv4HN4oaMJRqc67H49Q.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:69:e3:af:df:b8:61:42:1f:7d:e8:fc:be:b7:33:97:ae:d4:
4c:82:0d:e5:03:1b:75:8d:bb:2f:af:72:59:43:df:fb:97:83:
0c:a2:a3:f6:f5:5d:71:5d:a0:66:ca:a8:36:b2:53:e3:04:f1:
59:08:2e:74:4e:c1:21:9f:3d:8c:d8:12:16:f3:96:7a:c0:9c:
f2:1e:cf:85:34:21:e8:a0:ce:37:32:79:f6:70:a1:83:20:90:
f5:aa:b6:7c:d1:1e:1e:f1:e6:57:e3:1f:61:b7:bd:a2:30:73:
79:07:05:05:4a:15:d0:76:73:77:dd:a6:38:ce:ab:8b:a0:ee:
67:5c:bb:4b:97:44:a1:1a:ff:c6:31:b8:1c:da:0f:c4:97:3d:
73:0e:8f:d8:fc:0b:39:85:2b:7c:5f:df:e5:b7:eb:fe:db:50:
95:d0:04:8f:d4:6d:4f:8b:ed:77:3b:f6:ac:f6:1e:3d:5d:c8:
a2:e4:88:57:ac:14:89:72:3d:32:f8:b7:c6:b8:21:a9:a4:8b:
ae:e1:44:4b:b9:d5:5f:57:ea:17:81:90:5b:93:cd:2e:72:27:
c6:a1:1f:fc:f4:ce:5a:e4:67:bc:01:c8:ba:1b:fe:6c:17:bd:
78:21:5a:20:15:e8:63:2c:e8:b4:3d:48:ae:d3:52:77:c2:a0:
be:c8:6e:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 05:55:30 2025 by rpki-client