Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/2/D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.mft
File: D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.mft (raw, json)
Hash identifier: 0a46emjsNvqXhd/hw123Oa4MzJW+3gMg9zj1Ra8UJCA=
Subject key identifier: 78:11:38:9A:82:2B:0E:BE:57:89:DA:F3:BC:27:37:76:95:4B:F3:05
Authority key identifier: D2:FF:07:93:2C:3F:4C:1B:34:65:FF:4F:0D:96:48:47:33:E0:2E:AD
Certificate issuer: /CN=d2ff07932c3f4c1b3465ff4f0d96484733e02ead
Certificate serial: 0DDE0C3FB1F0EAB3BE7AF204A0C1A6BFAAFA9394
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0v8Hkyw_TBs0Zf9PDZZIRzPgLq0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/2/D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.mft
Manifest number: 038C
Signing time: Fri 04 Apr 2025 01:06:26 +0000
Manifest this update: Fri 04 Apr 2025 01:01:26 +0000
Manifest next update: Sat 05 Apr 2025 02:32:26 +0000
Files and hashes: 1: AS51019.asa (hash: RqQYQxP2LlV4zO7/d8ske+S6p2B1SREg+ga188kx8/8=)
2: D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.crl (hash: NhriuWL6DrVhqK9cTBJ64lhXDmADnoZiWoqTsnNMvgs=)
3: 323030313a3637633a6264633a3a2f34382d3438203d3e203531303139.roa (hash: PeKrYlxO9aJzSjjq2GCsehA7RgIXos16I20n9tzXipg=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/2/D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.crl
rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/2/D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.mft
rsync://rpki.ripe.net/repository/DEFAULT/0v8Hkyw_TBs0Zf9PDZZIRzPgLq0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 02:32:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:de:0c:3f:b1:f0:ea:b3:be:7a:f2:04:a0:c1:a6:bf:aa:fa:93:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2ff07932c3f4c1b3465ff4f0d96484733e02ead
Validity
Not Before: Apr 4 01:01:26 2025 GMT
Not After : Apr 5 02:32:26 2025 GMT
Subject: CN=7811389A822B0EBE5789DAF3BC273776954BF305
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ee:48:84:06:43:f9:29:ef:fc:8b:ef:34:2f:
c5:2c:12:5c:39:24:1d:16:e3:fe:8d:f9:ed:8d:1c:
63:45:74:c1:07:95:6e:52:8e:30:b2:d1:85:cb:be:
96:a7:16:cb:3d:77:a7:02:4d:3e:ec:6f:3e:e0:e0:
d1:f0:6b:30:f1:13:6d:de:57:83:51:2f:e8:d4:3e:
ba:bc:7f:8f:87:40:fb:d6:89:b7:f7:7f:b8:43:29:
29:78:dd:4d:4b:92:3a:fc:2d:50:2a:8a:db:18:8a:
92:8c:17:85:32:ff:cd:44:d9:76:e1:5a:b5:c5:7e:
d6:2e:46:9c:16:e8:15:9c:40:ca:56:75:08:c0:a1:
d5:84:3b:91:38:52:4b:0d:9c:b5:83:6f:45:15:6c:
81:82:87:c1:81:bb:8c:5f:84:49:25:f3:b8:b0:f3:
d0:b8:8e:c9:40:9c:9c:54:68:c1:15:ae:1d:ef:40:
f4:ab:02:46:d8:77:19:05:0a:1d:f1:f7:d4:45:77:
51:62:80:25:2f:e9:cd:bf:c5:d0:1f:2a:ee:a7:9f:
56:96:ca:e2:a2:a8:97:7b:93:3f:e3:20:2a:fe:ff:
85:5d:0a:48:ae:d2:69:1e:19:60:ac:20:ed:2b:74:
28:3f:b1:e9:e0:ac:cf:f8:c4:7d:55:14:61:4d:0a:
35:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:11:38:9A:82:2B:0E:BE:57:89:DA:F3:BC:27:37:76:95:4B:F3:05
X509v3 Authority Key Identifier:
keyid:D2:FF:07:93:2C:3F:4C:1B:34:65:FF:4F:0D:96:48:47:33:E0:2E:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/2/D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0v8Hkyw_TBs0Zf9PDZZIRzPgLq0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/2/D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:c1:11:e5:f6:92:c7:39:7b:a1:cd:a4:91:96:c8:cf:99:11:
b2:ad:7e:ad:01:3a:dd:11:23:32:5d:dd:7c:8a:58:5a:19:c0:
e8:c7:b5:df:a0:92:c1:9a:07:6f:4a:b7:d4:f2:0e:21:f2:ca:
18:13:9b:a2:64:32:5c:1c:94:2b:12:10:64:17:98:2c:88:aa:
05:bd:97:d3:c9:d4:b2:7a:92:b0:ed:99:03:4f:b6:c4:79:2c:
0e:b7:52:ba:0d:2f:05:a7:af:e7:a2:a7:ca:8e:ce:20:6c:f4:
9c:c0:36:20:f4:49:04:cc:6d:c4:03:92:eb:7d:c2:27:a2:c7:
cc:c0:e9:89:23:86:07:fd:14:c4:a4:10:0c:20:7c:17:78:47:
d7:6a:dc:ce:cd:41:34:02:c4:38:14:6e:59:2c:8e:f6:c5:42:
c4:29:1d:8f:99:f3:6c:13:81:6f:72:65:82:94:87:54:d7:87:
a9:d1:d2:5c:ce:b8:5b:ae:5d:56:a8:99:e6:4e:9d:4f:4d:c0:
e9:ad:24:0a:47:f9:fb:30:c8:28:e7:7a:b5:a8:17:6a:88:b4:
7f:a6:32:d0:04:e4:92:88:8b:f0:1a:33:c8:c9:d1:b0:70:f1:
2d:51:05:1c:f1:8b:ef:f9:e8:13:95:5b:72:bf:da:7c:20:ff:
0b:60:af:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:40:48 2025 by rpki-client