Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ab83a38a-7a39-4397-b588-edb9fbb62817/0/E92D148583A4642D90D4C4BC47B4504E180EA0C3.mft
File: E92D148583A4642D90D4C4BC47B4504E180EA0C3.mft (raw, json)
Hash identifier: VmngIttUJsE61wOatAcU31L4Ngz3RcfSoAzMGK2tmTY=
Subject key identifier: 5C:D8:9D:6F:B0:6A:83:95:C6:B2:03:1E:27:E6:95:10:F1:56:6E:E9
Authority key identifier: E9:2D:14:85:83:A4:64:2D:90:D4:C4:BC:47:B4:50:4E:18:0E:A0:C3
Certificate issuer: /CN=e92d148583a4642d90d4c4bc47b4504e180ea0c3
Certificate serial: 2E91FA50AC327C5706A5DCA39123468B706A8E23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6S0UhYOkZC2Q1MS8R7RQThgOoMM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ab83a38a-7a39-4397-b588-edb9fbb62817/0/E92D148583A4642D90D4C4BC47B4504E180EA0C3.mft
Manifest number: 034D
Signing time: Sun 16 Feb 2025 08:01:46 +0000
Manifest this update: Sun 16 Feb 2025 07:56:46 +0000
Manifest next update: Mon 17 Feb 2025 08:26:46 +0000
Files and hashes: 1: 39312e3233352e3230352e302f32342d3234203d3e203136323736.roa (hash: p/F0OkbT4gUH7RMUTLSzXd9N6M9/tCs2QiOrUFAeaQQ=)
2: E92D148583A4642D90D4C4BC47B4504E180EA0C3.crl (hash: PXma2a0+p14K7rT2EQk2tLHuP16zqmKEyWkJJtUNjts=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ab83a38a-7a39-4397-b588-edb9fbb62817/0/E92D148583A4642D90D4C4BC47B4504E180EA0C3.crl
rsync://rsync.paas.rpki.ripe.net/repository/ab83a38a-7a39-4397-b588-edb9fbb62817/0/E92D148583A4642D90D4C4BC47B4504E180EA0C3.mft
rsync://rpki.ripe.net/repository/DEFAULT/6S0UhYOkZC2Q1MS8R7RQThgOoMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 08:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:91:fa:50:ac:32:7c:57:06:a5:dc:a3:91:23:46:8b:70:6a:8e:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e92d148583a4642d90d4c4bc47b4504e180ea0c3
Validity
Not Before: Feb 16 07:56:46 2025 GMT
Not After : Feb 17 08:26:46 2025 GMT
Subject: CN=5CD89D6FB06A8395C6B2031E27E69510F1566EE9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:8d:fe:29:d6:83:4a:33:d9:32:dc:bf:7f:ce:
2c:70:d9:b0:db:c7:9f:9d:78:cf:a1:2d:d4:52:35:
be:86:f9:d1:d9:f7:72:dd:0d:d0:c5:e4:46:f2:75:
23:01:f5:fa:43:4b:1b:bf:6d:21:ee:0a:3c:39:21:
52:be:df:56:c3:0e:8c:54:12:d4:22:47:01:af:a8:
43:9a:11:b0:eb:d8:8b:5f:a3:57:27:6f:a4:91:53:
ed:1b:94:ee:5e:bc:e3:09:c1:6d:f9:05:e3:4b:23:
73:78:d6:b9:b6:47:70:35:6c:b4:53:38:c4:15:bf:
3f:32:3f:cd:ff:fd:f2:cd:de:6d:81:14:62:db:9a:
3d:e8:34:70:53:8b:31:b8:8e:72:68:aa:a0:42:f9:
72:94:dc:2c:97:d5:3b:4e:be:f7:00:79:b0:09:cb:
1a:31:b0:a3:91:39:13:b2:17:79:66:ec:3b:5f:16:
17:2d:dd:a0:d3:4c:cd:ce:6d:4f:c7:33:fe:16:ab:
78:d5:0f:8a:80:5e:b6:35:d6:0c:6f:21:7b:b0:6a:
50:ed:e4:32:e3:f2:f0:d0:a0:ee:1c:41:0b:ed:b1:
d6:84:dc:a4:01:53:d6:21:01:d9:be:36:67:67:07:
97:f8:17:5e:76:e8:c8:ce:a7:21:b7:4c:17:bb:27:
2a:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:D8:9D:6F:B0:6A:83:95:C6:B2:03:1E:27:E6:95:10:F1:56:6E:E9
X509v3 Authority Key Identifier:
keyid:E9:2D:14:85:83:A4:64:2D:90:D4:C4:BC:47:B4:50:4E:18:0E:A0:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ab83a38a-7a39-4397-b588-edb9fbb62817/0/E92D148583A4642D90D4C4BC47B4504E180EA0C3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6S0UhYOkZC2Q1MS8R7RQThgOoMM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ab83a38a-7a39-4397-b588-edb9fbb62817/0/E92D148583A4642D90D4C4BC47B4504E180EA0C3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:43:81:ea:57:58:b7:9b:e1:40:49:89:20:d4:69:b3:81:1e:
7a:0d:7f:0f:bc:48:0b:18:5d:63:01:1b:4b:aa:0b:3a:67:e2:
d1:22:28:eb:49:46:2f:fd:e4:1c:3b:e1:98:e7:23:db:4d:00:
2f:90:3c:2e:11:a7:8d:dd:20:fb:68:05:c9:e9:32:ad:fc:bd:
dd:3a:cc:87:a2:e8:a5:87:54:f3:0d:28:a5:0c:8b:a0:b0:aa:
60:8d:07:c6:19:48:c0:ab:74:01:c1:0f:1d:f7:58:af:df:e1:
e3:a9:29:37:bf:a0:03:c4:67:39:19:08:48:1d:17:7c:d6:4b:
99:55:40:f5:8a:3e:fa:97:ba:9e:32:e7:9c:ac:0b:9e:35:97:
6d:e9:5b:8f:62:00:c1:3b:bb:8b:c1:b2:7d:8f:b0:9c:2f:39:
d0:cd:e3:de:00:9a:bc:b1:ef:7a:d5:28:9c:ea:88:24:be:12:
f1:06:8c:79:b7:50:48:25:c2:60:a0:53:f7:94:34:3f:63:8b:
ad:03:2b:be:ee:e5:9a:07:1f:89:6c:90:f1:70:0f:ea:00:7b:
6a:bf:d0:03:b6:56:e5:79:93:a2:33:f4:27:86:15:20:01:a4:
fd:5f:9b:16:80:0d:d5:29:17:26:c0:e8:aa:74:33:cc:2b:73:
20:ce:17:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:25:46 2025 by rpki-client