Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9bc9a2e7-61e8-4e70-942d-c545cf0674c3/0/4E3434F13A572BF5E189F1B7FA148F5D107F6F57.mft
File: 4E3434F13A572BF5E189F1B7FA148F5D107F6F57.mft (raw, json)
Hash identifier: 1pytopMhkzfmNnu6vuomRjgBU3nuXxWyhp4vrb04c2I=
Subject key identifier: 1C:78:B8:DE:45:52:A2:68:42:46:BD:40:B3:9A:86:8D:3C:E6:4A:36
Authority key identifier: 4E:34:34:F1:3A:57:2B:F5:E1:89:F1:B7:FA:14:8F:5D:10:7F:6F:57
Certificate issuer: /CN=4e3434f13a572bf5e189f1b7fa148f5d107f6f57
Certificate serial: 66719A75FEA4720AAE9A9325729FA4BF29D2E906
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TjQ08TpXK_XhifG3-hSPXRB_b1c.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9bc9a2e7-61e8-4e70-942d-c545cf0674c3/0/4E3434F13A572BF5E189F1B7FA148F5D107F6F57.mft
Manifest number: 6F
Signing time: Fri 06 Jun 2025 08:41:49 +0000
Manifest this update: Fri 06 Jun 2025 08:36:49 +0000
Manifest next update: Sat 07 Jun 2025 10:15:49 +0000
Files and hashes: 1: AS215277.asa (hash: /NSm7byRzs0tpnovtHnCzzB6PpqZTxUH8EmHV77zmWY=)
2: 4E3434F13A572BF5E189F1B7FA148F5D107F6F57.crl (hash: ee2gFSMg+eZHuaZD5oxBctqyArwAuTv/+iL1WAqxAeI=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9bc9a2e7-61e8-4e70-942d-c545cf0674c3/0/4E3434F13A572BF5E189F1B7FA148F5D107F6F57.crl
rsync://rsync.paas.rpki.ripe.net/repository/9bc9a2e7-61e8-4e70-942d-c545cf0674c3/0/4E3434F13A572BF5E189F1B7FA148F5D107F6F57.mft
rsync://rpki.ripe.net/repository/DEFAULT/TjQ08TpXK_XhifG3-hSPXRB_b1c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 10:15:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:71:9a:75:fe:a4:72:0a:ae:9a:93:25:72:9f:a4:bf:29:d2:e9:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e3434f13a572bf5e189f1b7fa148f5d107f6f57
Validity
Not Before: Jun 6 08:36:49 2025 GMT
Not After : Jun 7 10:15:49 2025 GMT
Subject: CN=1C78B8DE4552A2684246BD40B39A868D3CE64A36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2d:df:19:a2:a2:c6:98:71:0c:b8:c9:4e:c7:
ef:12:ee:cf:88:ba:d5:b0:41:5c:bb:6e:54:bc:06:
8d:04:91:48:87:fa:93:7a:1f:10:35:bf:0f:41:d8:
3e:64:21:4e:44:7f:5e:88:bc:7d:5a:42:5a:f6:00:
e8:86:7b:37:e8:07:5a:cd:e4:ae:ee:b0:3c:29:3e:
a8:8d:ff:0c:9c:51:7b:7a:c7:7b:59:bb:f7:48:2c:
f5:40:01:27:e3:5b:52:98:61:ac:15:12:48:15:81:
54:e0:b6:0c:a6:cc:75:a4:c4:a8:8d:de:9e:98:80:
b3:ce:ba:90:2d:87:de:da:92:eb:c7:4b:1d:1c:8c:
9f:12:8e:7c:7b:f4:a8:8f:75:5f:98:b8:8f:22:94:
5d:6e:64:c0:1f:4b:e3:e5:2e:b6:05:f5:0f:3c:67:
69:75:0b:76:f7:84:53:ce:68:68:45:d7:e9:45:2b:
e9:c1:7a:14:0b:bf:75:49:0b:bf:bd:7b:be:af:23:
05:9b:22:7e:0d:83:49:99:87:11:f9:40:7e:ec:87:
c2:e4:e0:05:50:54:13:87:79:1c:51:a7:fc:d6:1a:
8a:1b:4b:b8:0c:3c:32:ef:04:62:82:3c:1a:f1:b4:
95:94:1e:89:2f:bf:43:cc:30:bc:3e:65:c8:8a:ca:
a0:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:78:B8:DE:45:52:A2:68:42:46:BD:40:B3:9A:86:8D:3C:E6:4A:36
X509v3 Authority Key Identifier:
keyid:4E:34:34:F1:3A:57:2B:F5:E1:89:F1:B7:FA:14:8F:5D:10:7F:6F:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9bc9a2e7-61e8-4e70-942d-c545cf0674c3/0/4E3434F13A572BF5E189F1B7FA148F5D107F6F57.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TjQ08TpXK_XhifG3-hSPXRB_b1c.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9bc9a2e7-61e8-4e70-942d-c545cf0674c3/0/4E3434F13A572BF5E189F1B7FA148F5D107F6F57.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:24:ea:68:c2:1f:e5:cf:a4:98:d3:4a:de:00:02:8b:b8:c5:
4e:c4:e0:f0:cb:7f:3e:c2:8c:72:65:75:2b:dc:a5:28:76:f8:
c2:e4:97:c1:53:36:e6:7c:37:83:51:c0:70:e9:16:54:d6:72:
39:7b:de:df:d2:15:43:a8:06:ca:a5:7b:73:fd:e9:cd:88:99:
1f:4b:6a:d0:49:ab:09:e4:cf:8f:9f:47:62:c5:a7:29:e2:3f:
a7:a5:86:c3:1e:29:73:0d:e9:ab:71:85:58:5a:43:2e:2e:40:
c0:19:1d:bc:16:4a:09:27:65:35:2d:14:f7:27:25:c3:50:97:
57:00:93:a6:44:17:ee:3f:0d:49:f4:45:3c:1f:3d:44:6c:62:
fa:4c:7f:cd:03:cc:a1:cc:25:78:1d:6d:9a:92:b8:40:22:e2:
13:c2:96:d0:0e:10:97:be:cb:b4:d6:32:53:8b:e6:16:2f:8f:
15:2f:12:4e:47:3b:e4:7f:18:b0:61:a6:a0:d9:ba:ac:c3:82:
49:38:0b:c1:1b:1b:ee:93:68:33:04:39:da:9d:52:44:01:fc:
94:f4:76:9e:90:35:16:50:b6:4d:6c:61:c7:2b:0a:eb:00:d5:
3f:b9:81:f9:f2:b5:9e:28:b4:3c:ad:8d:04:b5:0c:4c:e8:c1:
3c:e7:95:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 23:27:33 2025 by rpki-client