
Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/1/1BD68BB33CF4B2C0746A88537A13578C0074B4E6.mft
File: 1BD68BB33CF4B2C0746A88537A13578C0074B4E6.mft (raw, json)
Hash identifier: uQ1EdBQ4CehL29v/gPwQyLLs37/LJbOPZmz5BTgoMQg=
Subject key identifier: F1:0C:06:3A:4C:4C:16:5D:C6:A2:1F:12:A3:75:D9:A5:CF:79:E6:CF
Authority key identifier: 1B:D6:8B:B3:3C:F4:B2:C0:74:6A:88:53:7A:13:57:8C:00:74:B4:E6
Certificate issuer: /CN=1BD68BB33CF4B2C0746A88537A13578C0074B4E6
Certificate serial: 782E2AFC09E1131D0CFB6C842184A5A4C96CCAD3
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/1BD68BB33CF4B2C0746A88537A13578C0074B4E6.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/1/1BD68BB33CF4B2C0746A88537A13578C0074B4E6.mft
Manifest number: 40
Signing time: Mon 07 Apr 2025 01:25:58 +0000
Manifest this update: Mon 07 Apr 2025 01:20:58 +0000
Manifest next update: Tue 08 Apr 2025 05:19:58 +0000
Files and hashes: 1: 1BD68BB33CF4B2C0746A88537A13578C0074B4E6.crl (hash: F188TiP4Ll8ls72CvpT+/osYgRdT/WdBvIG2LOkwgrg=)
2: 326130623a346530373a363065303a3a2f34342d3438203d3e203339333531.roa (hash: IMKNeJEfMuHfhSaj38Sc75eloQxXN2xkH3325JQU+xs=)
3: 326130623a346530373a363030303a3a2f34312d3438203d3e20323134373031.roa (hash: J6IQBtHqaQrudykWH0k2e1lLzY1YgfTAocpTPX/tyNY=)
4: 326130623a346530373a363064303a3a2f34342d3438203d3e20323134373031.roa (hash: Mbx64j7UAG35RxfrZTK8oOnl74ijH3kmO/U7xup2Tw0=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/1/1BD68BB33CF4B2C0746A88537A13578C0074B4E6.crl
rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/1/1BD68BB33CF4B2C0746A88537A13578C0074B4E6.mft
rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/1BD68BB33CF4B2C0746A88537A13578C0074B4E6.cer
rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/D18207466AB0A7D7D1EF3C7CD02E80BED58340BC.crl
rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/D18207466AB0A7D7D1EF3C7CD02E80BED58340BC.mft
rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/D18207466AB0A7D7D1EF3C7CD02E80BED58340BC.cer
rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl
rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft
rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 19:52:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:2e:2a:fc:09:e1:13:1d:0c:fb:6c:84:21:84:a5:a4:c9:6c:ca:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1BD68BB33CF4B2C0746A88537A13578C0074B4E6
Validity
Not Before: Apr 7 01:20:58 2025 GMT
Not After : Apr 8 05:19:58 2025 GMT
Subject: CN=F10C063A4C4C165DC6A21F12A375D9A5CF79E6CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:58:f7:b8:ef:88:41:fc:ab:6b:fa:b3:fd:43:
01:96:64:e6:48:3e:cd:a6:0c:67:07:c9:67:0a:3c:
4f:10:24:65:7b:9a:89:ea:5e:57:cd:2f:db:27:ad:
78:81:77:32:32:fc:84:d3:21:1d:f3:51:89:98:93:
04:c9:05:1f:e1:84:d0:e4:0d:b0:86:2a:ae:bd:f9:
06:9c:49:e3:a9:c3:7e:70:da:6a:65:5b:37:34:c7:
ae:b6:63:d5:27:82:ea:81:ea:c8:c1:22:da:c5:67:
d0:5b:13:ff:e5:a5:ae:85:9c:1d:c5:5c:4e:5b:bd:
00:03:a1:9a:a6:cd:2a:cf:31:59:6e:3d:82:63:8b:
ea:88:35:4d:24:26:f7:bd:7b:bd:d5:d9:5d:2e:32:
71:20:30:8a:18:0b:3b:0a:8c:64:1f:2e:18:04:62:
bd:8b:c2:8c:92:99:2b:47:b3:8c:49:a9:0d:5a:4b:
ef:cc:e9:33:bc:40:57:ce:b5:7f:86:6e:87:84:eb:
c6:50:ca:cc:8b:07:ee:d5:6c:42:26:53:b3:fa:cb:
3d:9d:23:77:0f:0a:f2:81:08:58:b9:be:5b:75:2d:
7d:98:5c:20:7d:2e:74:ff:3f:d6:79:1f:4c:ed:36:
b0:39:4a:52:a1:a0:45:d1:6a:97:22:f3:97:c7:75:
69:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:0C:06:3A:4C:4C:16:5D:C6:A2:1F:12:A3:75:D9:A5:CF:79:E6:CF
X509v3 Authority Key Identifier:
keyid:1B:D6:8B:B3:3C:F4:B2:C0:74:6A:88:53:7A:13:57:8C:00:74:B4:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/1/1BD68BB33CF4B2C0746A88537A13578C0074B4E6.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/1BD68BB33CF4B2C0746A88537A13578C0074B4E6.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/1/1BD68BB33CF4B2C0746A88537A13578C0074B4E6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:81:eb:95:06:f8:e3:9f:58:c2:6d:fc:d2:b9:21:ac:17:1e:
3c:20:ad:25:2c:a6:e4:4c:3a:d5:87:fb:ce:2e:1c:57:78:2c:
08:aa:fd:04:d0:05:1e:e6:b5:ac:cd:bd:a1:a1:88:62:39:fa:
02:0d:94:3f:6c:40:ef:05:33:35:10:f8:84:84:95:b6:2d:83:
6d:69:c2:0f:25:d9:6b:b1:9a:5e:97:81:f2:52:14:47:4c:97:
d1:e4:68:23:c4:b6:c1:51:bf:8b:1c:5b:8d:cf:42:8b:f1:6c:
e6:f6:5d:62:a4:70:43:6f:cd:96:f5:61:65:63:ed:57:fd:7a:
0d:6c:71:f8:a4:d9:b7:96:70:7f:17:4d:00:c0:92:79:20:6f:
72:e1:c9:d2:44:f8:bc:17:41:e2:30:b3:a4:f5:56:03:18:70:
bf:33:f8:47:6a:03:28:1a:86:7f:78:d2:df:fb:a7:c7:2b:97:
14:7c:35:bc:23:ed:3a:92:df:72:11:02:4f:21:ed:a3:fc:aa:
ea:37:dd:6f:b3:44:4d:0f:7a:dc:66:03:00:af:b0:5e:3e:73:
dd:4d:a8:0e:b8:f5:08:f4:16:5b:cd:27:18:a8:6f:18:69:2e:
72:67:f6:5c:52:4b:52:e2:31:e7:40:58:d5:64:69:11:9d:46:
12:44:b5:11
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgIUeC4q/AnhEx0M+2yEIYSlpMlsytMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUJENjhCQjMzQ0Y0QjJDMDc0NkE4ODUzN0ExMzU3OEMw
MDc0QjRFNjAeFw0yNTA0MDcwMTIwNThaFw0yNTA0MDgwNTE5NThaMDMxMTAvBgNV
BAMTKEYxMEMwNjNBNEM0QzE2NURDNkEyMUYxMkEzNzVEOUE1Q0Y3OUU2Q0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuWPe474hB/Ktr+rP9QwGWZOZI
Ps2mDGcHyWcKPE8QJGV7monqXlfNL9snrXiBdzIy/ITTIR3zUYmYkwTJBR/hhNDk
DbCGKq69+QacSeOpw35w2mplWzc0x662Y9UnguqB6sjBItrFZ9BbE//lpa6FnB3F
XE5bvQADoZqmzSrPMVluPYJji+qINU0kJve9e73V2V0uMnEgMIoYCzsKjGQfLhgE
Yr2LwoySmStHs4xJqQ1aS+/M6TO8QFfOtX+GboeE68ZQysyLB+7VbEImU7P6yz2d
I3cPCvKBCFi5vlt1LX2YXCB9LnT/P9Z5H0ztNrA5SlKhoEXRapci85fHdWmTAgMB
AAGjggKCMIICfjAdBgNVHQ4EFgQU8QwGOkxMFl3Goh8So3XZpc955s8wHwYDVR0j
BBgwFoAUG9aLszz0ssB0aohTehNXjAB0tOYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYmVhZDJkY2YtZWFkNS00OTU0LWFkODQtNjU4MGNkMmE5
YzUwLzEvMUJENjhCQjMzQ0Y0QjJDMDc0NkE4ODUzN0ExMzU3OEMwMDc0QjRFNi5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8wYzcwNDAxYy03ZjQxLTRh
NmItOTQzNC1jYzgwZGNhMDkzZTYvMi8xQkQ2OEJCMzNDRjRCMkMwNzQ2QTg4NTM3
QTEzNTc4QzAwNzRCNEU2LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF
BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L2JlYWQyZGNmLWVhZDUtNDk1NC1hZDg0LTY1ODBjZDJhOWM1MC8xLzFCRDY4QkIz
M0NGNEIyQzA3NDZBODg1MzdBMTM1NzhDMDA3NEI0RTYubWZ0MBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB1geuV
Bvjjn1jCbfzSuSGsFx48IK0lLKbkTDrVh/vOLhxXeCwIqv0E0AUe5rWszb2hoYhi
OfoCDZQ/bEDvBTM1EPiEhJW2LYNtacIPJdlrsZpel4HyUhRHTJfR5GgjxLbBUb+L
HFuNz0KL8Wzm9l1ipHBDb82W9WFlY+1X/XoNbHH4pNm3lnB/F00AwJJ5IG9y4cnS
RPi8F0HiMLOk9VYDGHC/M/hHagMoGoZ/eNLf+6fHK5cUfDW8I+06kt9yEQJPIe2j
/KrqN91vs0RND3rcZgMAr7BePnPdTagOuPUI9BZbzScYqG8YaS5yZ/ZcUktS4jHn
QFjVZGkRnUYSRLUR
-----END CERTIFICATE-----
Generated at Mon Apr 7 13:49:32 2025 by rpki-client