Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.mft
File: 94521D5EA7B7900080F6E66836D4DEDA347054FD.mft (raw, json)
Hash identifier: yMgw+WDqz0+kiiFH8m8P67HcYqk+Hjuefbkg+INooZ8=
Subject key identifier: 74:0E:DF:11:3D:C3:29:96:DD:FB:D8:7C:2A:65:67:4B:35:9E:2F:7A
Authority key identifier: 94:52:1D:5E:A7:B7:90:00:80:F6:E6:68:36:D4:DE:DA:34:70:54:FD
Certificate issuer: /CN=94521d5ea7b7900080f6e66836d4deda347054fd
Certificate serial: 786CFA66845EFBDE1CA2B2C6683687445612779E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lFIdXqe3kACA9uZoNtTe2jRwVP0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.mft
Manifest number: 49
Signing time: Fri 04 Apr 2025 17:30:50 +0000
Manifest this update: Fri 04 Apr 2025 17:25:50 +0000
Manifest next update: Sat 05 Apr 2025 20:23:50 +0000
Files and hashes: 1: AS214701.asa (hash: h7Wrg67TmClaqULNaqcHtma2p64TKkbxqfig9hQ2iG8=)
2: 94521D5EA7B7900080F6E66836D4DEDA347054FD.crl (hash: 8P2I5A/ssr7ruxYVk8IksUOPVxIFVq+PTYmm4+Yd4f0=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.crl
rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.mft
rsync://rpki.ripe.net/repository/DEFAULT/lFIdXqe3kACA9uZoNtTe2jRwVP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:6c:fa:66:84:5e:fb:de:1c:a2:b2:c6:68:36:87:44:56:12:77:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94521d5ea7b7900080f6e66836d4deda347054fd
Validity
Not Before: Apr 4 17:25:50 2025 GMT
Not After : Apr 5 20:23:50 2025 GMT
Subject: CN=740EDF113DC32996DDFBD87C2A65674B359E2F7A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8b:35:53:10:a6:37:3e:2d:8c:51:64:e1:67:
de:7e:95:f1:58:e4:fe:92:f1:f4:3a:04:aa:22:87:
04:20:da:3d:9a:4a:38:62:79:b4:a1:bf:3c:18:0b:
08:8d:98:80:c4:90:f4:50:27:33:4c:c2:1b:4f:06:
90:15:0c:82:7a:39:a7:52:32:ca:e3:81:a8:e7:aa:
71:4e:67:2b:bd:90:17:c0:ca:bd:5e:64:22:49:31:
7f:d8:f2:8a:75:b6:f8:08:38:8e:66:83:4e:3f:16:
16:78:55:d9:85:24:8a:19:04:e1:bd:a1:2d:19:86:
38:ce:83:38:fc:64:23:2e:dc:04:6f:6b:7f:3d:fe:
b0:13:cc:90:2a:5f:48:72:a2:d1:26:0d:5d:ad:c6:
45:1b:e9:3a:b8:f7:f5:08:6b:c6:99:14:fb:01:41:
8d:3a:2b:44:29:7b:f6:6d:20:c9:e9:48:b3:d9:e5:
76:da:7e:fb:7f:26:f5:06:c5:7c:36:c4:cc:22:d5:
81:1d:a2:08:db:00:d6:ab:95:cb:bd:09:80:52:e7:
46:20:ee:cf:3e:d0:eb:ab:e6:ab:7b:9c:0d:79:09:
01:fd:df:c2:8a:ee:31:03:bb:ad:58:5e:8e:1c:0a:
cd:70:bd:fb:e6:d7:82:00:4e:63:8f:ee:d1:aa:1a:
22:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:0E:DF:11:3D:C3:29:96:DD:FB:D8:7C:2A:65:67:4B:35:9E:2F:7A
X509v3 Authority Key Identifier:
keyid:94:52:1D:5E:A7:B7:90:00:80:F6:E6:68:36:D4:DE:DA:34:70:54:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lFIdXqe3kACA9uZoNtTe2jRwVP0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:41:fc:d1:fc:37:db:19:a7:1c:25:a3:81:56:4f:f8:11:6d:
04:e8:11:a7:76:9b:df:1f:60:c6:2f:0f:48:6d:f5:f1:f8:b3:
ba:35:29:82:5d:a2:dd:4e:58:3b:0e:0b:22:9c:1a:0b:ee:91:
01:27:b9:a7:06:f1:7c:53:2e:3e:21:2b:fe:9c:0e:8c:f0:28:
f8:42:83:24:29:42:d3:97:01:10:3e:8c:32:ce:26:2c:15:c8:
b0:59:30:40:8b:d8:10:eb:da:d2:a5:b8:39:bc:dc:c8:bc:fd:
e0:74:34:f5:6f:b1:b9:36:f3:70:ab:f5:87:a0:88:18:13:44:
09:89:8e:bb:a0:e5:ec:1e:26:93:d1:a3:31:28:48:91:44:b5:
c8:b6:f7:b6:bc:b4:33:38:55:95:47:a9:35:a5:6d:bd:90:7c:
c5:7b:b3:da:89:d1:4d:f6:9d:76:34:e6:e4:8a:48:a6:9e:de:
61:9e:aa:86:4a:56:d1:47:1c:f0:ac:bf:d3:7d:07:4b:59:91:
2e:ff:aa:95:ce:9d:11:60:75:6e:9b:5f:d7:1d:a5:98:d9:c8:
c7:8e:4e:8a:67:5a:81:40:96:9f:7b:eb:43:a8:93:16:32:95:
f9:97:47:5e:ab:29:f7:18:1b:10:23:81:58:e4:da:63:f7:98:
7a:d2:6c:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:21:58 2025 by rpki-client