Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/3/58E92F2C3859C2D0EF322A871688CB22928E2F3E.mft
File: 58E92F2C3859C2D0EF322A871688CB22928E2F3E.mft (raw, json)
Hash identifier: velBCr1Rc2O1KnIT9Z6hBKhY/u8tkHLU3bApLJDzKz8=
Subject key identifier: 43:D3:A1:0D:02:2C:DA:E2:8C:F4:B7:4D:95:A9:41:1D:E2:C0:79:2C
Authority key identifier: 58:E9:2F:2C:38:59:C2:D0:EF:32:2A:87:16:88:CB:22:92:8E:2F:3E
Certificate issuer: /CN=58E92F2C3859C2D0EF322A871688CB22928E2F3E
Certificate serial: 2700889EABC8C50A4B712131282AF194E524CCBE
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/58E92F2C3859C2D0EF322A871688CB22928E2F3E.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/3/58E92F2C3859C2D0EF322A871688CB22928E2F3E.mft
Manifest number: 0216
Signing time: Sat 05 Apr 2025 16:06:42 +0000
Manifest this update: Sat 05 Apr 2025 16:01:42 +0000
Manifest next update: Sun 06 Apr 2025 19:39:42 +0000
Files and hashes: 1: 326131343a313463313a3130303a3a2f34382d3438203d3e203531303139.roa (hash: 69RcUidZnQ+LqgABsH+Kh3UWsC9vqAhVCCjeesgrVBw=)
2: 58E92F2C3859C2D0EF322A871688CB22928E2F3E.crl (hash: GKAY4Vj1ylXNXh4d/YpsJw2TxGxgpnxAgoFXIqO5UiU=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/3/58E92F2C3859C2D0EF322A871688CB22928E2F3E.crl
rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/3/58E92F2C3859C2D0EF322A871688CB22928E2F3E.mft
rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/58E92F2C3859C2D0EF322A871688CB22928E2F3E.cer
rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.crl
rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.mft
rsync://rpki.ripe.net/repository/DEFAULT/JYJ9hAVrhETMKnhCdZA1NUuEFrw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:00:88:9e:ab:c8:c5:0a:4b:71:21:31:28:2a:f1:94:e5:24:cc:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58E92F2C3859C2D0EF322A871688CB22928E2F3E
Validity
Not Before: Apr 5 16:01:42 2025 GMT
Not After : Apr 6 19:39:42 2025 GMT
Subject: CN=43D3A10D022CDAE28CF4B74D95A9411DE2C0792C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:3d:0e:f0:d2:14:6f:72:cf:09:7c:24:b5:55:
c5:8d:d7:d3:11:7f:9a:9a:ec:32:15:6d:2a:82:67:
53:38:1e:19:4e:0a:61:a6:de:26:66:29:67:9b:84:
98:bc:1f:f9:50:75:a8:57:f0:0e:84:98:c1:89:35:
d2:15:fd:58:ae:61:60:29:be:4c:08:f4:d7:d8:14:
e5:fb:41:d1:03:47:d2:de:f8:cb:51:16:94:af:fb:
f5:55:f7:0d:f9:1c:ac:83:c3:9c:76:2f:8a:a4:bf:
86:ca:9a:94:da:a8:94:8c:1e:d5:3f:f9:05:9e:8e:
3b:f2:91:7e:5a:0a:5e:6b:c3:9e:7a:75:35:68:b2:
c9:d3:96:60:06:ab:8a:ff:b7:07:ca:0c:1a:bc:65:
67:4f:37:a6:2b:19:e4:0c:84:62:b8:57:81:cb:e2:
67:dc:fe:fb:b2:0b:9c:f5:22:c7:eb:7b:6a:ae:74:
e8:7c:db:c2:c0:dc:64:8e:9f:ad:a9:ad:d6:03:53:
e2:c4:79:6e:4e:50:7e:b5:e4:9c:1e:11:4b:30:3a:
f3:63:52:03:e2:cb:e0:b1:46:d9:82:a6:f3:34:ee:
81:fe:0a:52:eb:62:8d:ee:34:9a:e9:e0:f1:76:62:
ae:f7:12:5e:e0:e0:e7:0c:b3:dc:2a:9d:c2:35:59:
34:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:D3:A1:0D:02:2C:DA:E2:8C:F4:B7:4D:95:A9:41:1D:E2:C0:79:2C
X509v3 Authority Key Identifier:
keyid:58:E9:2F:2C:38:59:C2:D0:EF:32:2A:87:16:88:CB:22:92:8E:2F:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/3/58E92F2C3859C2D0EF322A871688CB22928E2F3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/58E92F2C3859C2D0EF322A871688CB22928E2F3E.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/3/58E92F2C3859C2D0EF322A871688CB22928E2F3E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:48:fa:fa:0a:a8:e2:ea:6d:f9:f2:d2:12:78:3a:09:8c:7d:
25:c4:bb:dd:34:93:45:25:36:64:f0:b1:ce:64:72:98:00:0d:
6c:0d:88:e7:4e:b5:df:e6:02:b3:b4:ed:e0:f4:2a:01:4c:56:
8a:1d:c6:e9:ec:4e:24:f8:23:fc:bb:4a:0c:a5:c7:52:3b:c5:
c0:5f:31:00:e9:9c:a8:5c:14:21:5e:0f:48:35:c8:b2:5c:46:
28:72:17:a3:82:67:50:96:63:6b:d8:fe:3b:ed:e9:32:61:05:
03:3a:14:99:ae:64:cf:c9:0a:bb:a8:3b:7e:d0:a0:bf:dd:dc:
a6:ed:e9:1c:41:b1:66:c2:80:4d:06:ef:90:47:37:3f:f5:cc:
e7:c9:52:20:e3:a0:f8:72:f1:58:cc:99:b3:92:50:46:63:17:
53:55:04:01:2a:7b:55:9c:77:e4:69:9c:89:24:f2:3b:61:b4:
3f:25:3f:eb:35:ea:d8:49:8c:1a:db:ef:94:e7:96:c4:0c:83:
f1:e2:8c:b7:53:0e:13:25:45:ee:66:c1:6f:ed:50:97:d2:19:
f3:4b:09:1e:ad:58:2f:79:0c:eb:a7:b3:be:0b:df:0c:d2:9f:
3c:28:e8:1f:7b:9c:5a:7d:70:a2:21:41:a5:af:08:43:01:12:
21:2e:bb:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:29:01 2025 by rpki-client