Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/9/CFC26A6DEF2E2FF1EBCC10A9871478B8A8BF3908.mft
File: CFC26A6DEF2E2FF1EBCC10A9871478B8A8BF3908.mft (raw, json)
Hash identifier: GJhU8z/S/ah7GCgouVT0b5YCIbB5Zqe6EPP0xFH5H0A=
Subject key identifier: B0:79:26:3B:3F:ED:69:CC:40:1D:10:34:0A:D9:92:34:07:84:BB:A9
Authority key identifier: CF:C2:6A:6D:EF:2E:2F:F1:EB:CC:10:A9:87:14:78:B8:A8:BF:39:08
Certificate issuer: /CN=cfc26a6def2e2ff1ebcc10a9871478b8a8bf3908
Certificate serial: 6DA24E49601CC34BBBBE5CCB9880548D51A45C41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z8Jqbe8uL_HrzBCphxR4uKi_OQg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/9/CFC26A6DEF2E2FF1EBCC10A9871478B8A8BF3908.mft
Manifest number: 033D
Signing time: Fri 04 Apr 2025 20:17:42 +0000
Manifest this update: Fri 04 Apr 2025 20:12:42 +0000
Manifest next update: Sat 05 Apr 2025 22:15:42 +0000
Files and hashes: 1: CFC26A6DEF2E2FF1EBCC10A9871478B8A8BF3908.crl (hash: 4mKd3GyKTIu1d0Su/nREogyDRkadEz4hFfwRsK868FQ=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/9/CFC26A6DEF2E2FF1EBCC10A9871478B8A8BF3908.crl
rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/9/CFC26A6DEF2E2FF1EBCC10A9871478B8A8BF3908.mft
rsync://rpki.ripe.net/repository/DEFAULT/z8Jqbe8uL_HrzBCphxR4uKi_OQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 22:15:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:a2:4e:49:60:1c:c3:4b:bb:be:5c:cb:98:80:54:8d:51:a4:5c:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfc26a6def2e2ff1ebcc10a9871478b8a8bf3908
Validity
Not Before: Apr 4 20:12:42 2025 GMT
Not After : Apr 5 22:15:42 2025 GMT
Subject: CN=B079263B3FED69CC401D10340AD992340784BBA9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:00:4b:65:a5:04:a3:5b:2e:b5:0c:f2:1f:9d:
4c:6c:94:c6:2c:f8:55:d7:d0:42:9a:c4:95:76:7d:
83:70:d8:80:6a:e8:2a:35:0d:cc:7c:36:d1:a8:59:
2c:1f:7c:3a:de:12:1e:73:15:64:6f:cd:4f:08:32:
c2:52:ce:ad:6b:be:a5:1e:f3:97:d7:f3:81:9b:41:
e6:e0:e6:22:b5:79:2c:de:d7:f5:00:12:5a:35:70:
61:6f:06:25:5c:ec:b1:55:51:da:35:a2:48:7d:7a:
ac:ca:ac:88:50:b3:d0:66:a4:de:8c:12:c7:1b:73:
bb:c9:7e:d1:df:02:40:b4:04:6d:9a:60:0f:fe:b7:
2d:25:e4:52:03:3b:d8:77:2d:fe:68:cb:f3:54:d0:
13:95:6d:18:41:92:b6:08:e5:70:d5:a8:d0:a2:36:
7a:0e:3e:3d:df:d0:bb:ea:14:5c:35:63:1e:b7:1d:
3f:46:34:7d:83:d4:46:f8:9c:13:ab:c7:6f:86:24:
c7:b1:e5:8c:4a:5e:d9:e3:fe:39:17:5e:14:53:a4:
aa:0c:8a:9b:27:0d:8b:b2:0d:b2:cd:7c:ae:00:8c:
4c:26:e4:39:9e:34:75:6f:ea:22:8f:be:5c:b8:f9:
09:3a:c3:d0:bc:ce:7f:77:bc:77:5f:fd:0c:46:b9:
fd:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:79:26:3B:3F:ED:69:CC:40:1D:10:34:0A:D9:92:34:07:84:BB:A9
X509v3 Authority Key Identifier:
keyid:CF:C2:6A:6D:EF:2E:2F:F1:EB:CC:10:A9:87:14:78:B8:A8:BF:39:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/9/CFC26A6DEF2E2FF1EBCC10A9871478B8A8BF3908.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8Jqbe8uL_HrzBCphxR4uKi_OQg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/9/CFC26A6DEF2E2FF1EBCC10A9871478B8A8BF3908.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:fc:66:38:d4:4e:59:51:44:76:63:3c:73:bf:4a:6e:17:d8:
7d:dc:c0:4b:32:0c:90:45:18:2d:f0:09:a9:4a:56:fb:67:55:
6e:d5:32:ed:e9:52:40:45:28:99:fd:d9:aa:81:7e:64:ef:b7:
24:c0:ab:76:20:b1:cd:01:fc:3b:df:b0:e9:95:30:97:4f:5d:
d7:f4:09:e6:fd:81:58:91:e0:c9:e8:61:9a:ac:46:b9:94:74:
4c:9b:2f:1e:6d:10:a0:50:75:ee:5d:c9:e3:cd:d7:39:46:fc:
c7:c1:d9:57:d1:43:e7:65:40:fb:cb:22:37:99:94:36:c8:31:
19:9a:a8:ef:d5:4c:ee:0b:67:6c:5e:45:5b:6c:22:d0:01:64:
bb:e2:0a:21:51:70:39:e8:29:8d:53:fd:7d:50:80:0d:ff:c1:
ea:ec:ae:a8:8c:48:17:96:9f:ba:bc:73:ad:65:89:73:4e:e3:
9f:6c:3e:a1:53:b4:8e:e0:05:cd:bd:cf:d2:28:8e:e9:d7:99:
6a:43:8a:1d:d7:28:cd:3c:95:ac:c2:eb:fa:49:5f:6b:11:cc:
f1:6a:6e:5f:5c:2f:06:d7:b8:97:79:c4:7a:cf:41:61:33:7a:
e1:7b:64:c8:dd:68:c6:c6:6a:63:ec:a7:5b:41:ed:75:e7:0f:
8e:db:c7:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:26:27 2025 by rpki-client