Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ab83a38a-7a39-4397-b588-edb9fbb62817/0/E92D148583A4642D90D4C4BC47B4504E180EA0C3.mft
File: E92D148583A4642D90D4C4BC47B4504E180EA0C3.mft (raw, json)
Hash identifier: Z4MpBxw5CRtOzIzvbgSCNuTSHPZMBQ261pAgqjSYlxA=
Subject key identifier: 3F:D9:13:A6:AE:F9:D0:21:E1:96:F9:A6:27:E9:EB:D5:E3:08:A8:E7
Authority key identifier: E9:2D:14:85:83:A4:64:2D:90:D4:C4:BC:47:B4:50:4E:18:0E:A0:C3
Certificate issuer: /CN=e92d148583a4642d90d4c4bc47b4504e180ea0c3
Certificate serial: 38F07D0F321C6C0E29BD2105D40284B7C6A0D4F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6S0UhYOkZC2Q1MS8R7RQThgOoMM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ab83a38a-7a39-4397-b588-edb9fbb62817/0/E92D148583A4642D90D4C4BC47B4504E180EA0C3.mft
Manifest number: 03BA
Signing time: Fri 09 May 2025 05:40:25 +0000
Manifest this update: Fri 09 May 2025 05:35:25 +0000
Manifest next update: Sat 10 May 2025 07:30:25 +0000
Files and hashes: 1: 39312e3233352e3230352e302f32342d3234203d3e203136323736.roa (hash: p/F0OkbT4gUH7RMUTLSzXd9N6M9/tCs2QiOrUFAeaQQ=)
2: E92D148583A4642D90D4C4BC47B4504E180EA0C3.crl (hash: naZq0fPGFRsjDLPpTVsT8sUBvn4lCS/LyoqDGSQsTvc=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ab83a38a-7a39-4397-b588-edb9fbb62817/0/E92D148583A4642D90D4C4BC47B4504E180EA0C3.crl
rsync://rsync.paas.rpki.ripe.net/repository/ab83a38a-7a39-4397-b588-edb9fbb62817/0/E92D148583A4642D90D4C4BC47B4504E180EA0C3.mft
rsync://rpki.ripe.net/repository/DEFAULT/6S0UhYOkZC2Q1MS8R7RQThgOoMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 07:30:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:f0:7d:0f:32:1c:6c:0e:29:bd:21:05:d4:02:84:b7:c6:a0:d4:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e92d148583a4642d90d4c4bc47b4504e180ea0c3
Validity
Not Before: May 9 05:35:25 2025 GMT
Not After : May 10 07:30:25 2025 GMT
Subject: CN=3FD913A6AEF9D021E196F9A627E9EBD5E308A8E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6a:33:d0:af:98:be:97:36:56:45:b2:40:99:
92:ca:68:92:1f:95:af:36:45:80:91:13:c8:b8:b7:
fc:52:90:dd:3d:89:6a:c7:38:e5:5a:01:0f:9a:24:
32:44:14:da:43:50:d1:a3:af:7b:0f:b6:e9:28:0e:
7e:07:0a:2b:77:41:c6:32:01:10:e7:21:94:2d:d5:
e8:f0:d7:42:fa:65:81:25:2d:c8:2d:50:8a:e3:8d:
b2:fe:ce:00:82:33:31:96:52:e6:41:15:e7:f8:e4:
9e:21:33:18:8d:4f:f2:4e:22:24:86:69:96:4e:ed:
12:d3:c4:7b:9f:bd:94:10:eb:a1:f1:f0:47:7e:56:
6e:37:a3:0d:10:8f:e1:da:91:de:2c:bf:73:b4:ba:
e0:ab:a8:23:4d:c5:70:7e:2a:58:29:85:77:9d:33:
3e:a3:80:8f:86:a3:dc:9f:56:fb:24:da:09:86:c1:
b3:00:7d:77:c1:76:92:9c:49:01:dc:52:1f:ce:e3:
bd:95:70:4f:ee:0d:b2:24:fe:d4:e0:a5:7f:b4:ac:
e0:ee:db:01:95:38:50:17:29:92:f4:0f:41:72:13:
02:e6:1e:97:49:9a:8a:a0:24:93:f9:ba:b0:dc:b6:
54:a5:9d:37:83:5a:bc:82:b4:b5:6d:83:c6:8a:2d:
7d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:D9:13:A6:AE:F9:D0:21:E1:96:F9:A6:27:E9:EB:D5:E3:08:A8:E7
X509v3 Authority Key Identifier:
keyid:E9:2D:14:85:83:A4:64:2D:90:D4:C4:BC:47:B4:50:4E:18:0E:A0:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ab83a38a-7a39-4397-b588-edb9fbb62817/0/E92D148583A4642D90D4C4BC47B4504E180EA0C3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6S0UhYOkZC2Q1MS8R7RQThgOoMM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ab83a38a-7a39-4397-b588-edb9fbb62817/0/E92D148583A4642D90D4C4BC47B4504E180EA0C3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:42:7e:e2:73:79:d9:88:6a:43:dc:82:8e:b4:58:81:3a:ce:
89:8f:08:60:54:7f:83:2a:70:c1:37:1e:e3:1d:a4:db:26:5b:
ab:96:44:a7:a0:b3:c4:0d:a0:00:14:6c:fa:63:7e:6e:59:4f:
d5:39:ab:b3:60:e6:3b:0e:98:c0:26:17:95:3c:96:14:5f:7b:
d9:c7:25:14:f8:0a:7b:e6:72:81:03:e8:8a:dc:11:8a:3e:92:
c4:c1:2b:cd:05:02:3d:db:2f:93:80:19:6c:15:48:78:9d:1b:
9c:b3:be:5f:b9:79:9f:bf:79:3e:3f:05:54:10:67:9a:7d:ef:
5b:4a:cc:2b:d9:c9:8b:63:88:28:87:58:98:90:5b:bd:f8:2c:
d4:0d:c2:d0:60:91:40:83:d9:19:94:8c:86:50:5c:50:7d:b5:
b2:d1:24:76:21:d1:89:c2:93:3a:72:03:47:f9:85:6b:11:20:
bb:9c:7b:1b:04:cb:d6:66:c7:a4:cf:d2:27:2a:6a:ba:30:19:
d1:80:84:50:1b:3a:e8:76:89:f3:24:2b:4f:56:fe:58:87:08:
1c:d1:ed:0a:77:3b:93:2c:be:00:61:18:37:bd:6e:54:fb:b5:
8c:e4:f5:19:8c:20:53:84:34:82:c9:51:ad:ef:07:04:db:81:
f2:5f:e3:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 20:12:33 2025 by rpki-client