Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bfbe5957-324b-4d45-9b5b-d091cc750589/0/83666A3E14FA71085B875F98C756DDE1C40FC6BB.mft
File: 83666A3E14FA71085B875F98C756DDE1C40FC6BB.mft (raw, json)
Hash identifier: AAJb4k+F3Ojit219btf/MjUCPL0fwddjzOE/zksPglU=
Subject key identifier: 8E:5E:05:C2:8A:81:3F:2C:62:19:78:2B:5B:61:1A:82:BB:6F:99:45
Authority key identifier: 83:66:6A:3E:14:FA:71:08:5B:87:5F:98:C7:56:DD:E1:C4:0F:C6:BB
Certificate issuer: /CN=83666a3e14fa71085b875f98c756dde1c40fc6bb
Certificate serial: 2E6407931AEC9B8C3F5ACF6DA38C6C77C267E161
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g2ZqPhT6cQhbh1-Yx1bd4cQPxrs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bfbe5957-324b-4d45-9b5b-d091cc750589/0/83666A3E14FA71085B875F98C756DDE1C40FC6BB.mft
Manifest number: 1A
Signing time: Fri 06 Jun 2025 03:56:54 +0000
Manifest this update: Fri 06 Jun 2025 03:51:54 +0000
Manifest next update: Sat 07 Jun 2025 06:53:54 +0000
Files and hashes: 1: 83666A3E14FA71085B875F98C756DDE1C40FC6BB.crl (hash: IJGohX28yDl2J37WMqqxdT5vNSIBOFHFPiNEYTZQMIA=)
2: AS213768.asa (hash: R9ERvttyM23Nz4uP5cMSLIdDTei/lOmIkuEaLWi+d1s=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bfbe5957-324b-4d45-9b5b-d091cc750589/0/83666A3E14FA71085B875F98C756DDE1C40FC6BB.crl
rsync://rsync.paas.rpki.ripe.net/repository/bfbe5957-324b-4d45-9b5b-d091cc750589/0/83666A3E14FA71085B875F98C756DDE1C40FC6BB.mft
rsync://rpki.ripe.net/repository/DEFAULT/g2ZqPhT6cQhbh1-Yx1bd4cQPxrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 06:53:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:64:07:93:1a:ec:9b:8c:3f:5a:cf:6d:a3:8c:6c:77:c2:67:e1:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83666a3e14fa71085b875f98c756dde1c40fc6bb
Validity
Not Before: Jun 6 03:51:54 2025 GMT
Not After : Jun 7 06:53:54 2025 GMT
Subject: CN=8E5E05C28A813F2C6219782B5B611A82BB6F9945
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ae:19:ee:5d:d4:51:98:9e:c5:cc:fd:6f:e1:
de:15:15:38:99:8d:ad:6a:2d:62:85:54:d7:da:a6:
b9:12:87:a9:e6:d2:82:46:d2:74:5d:f9:77:b0:98:
0b:50:61:e4:e4:f6:73:07:5c:77:8e:c4:49:90:d1:
75:c4:99:9b:dc:21:1a:a3:91:20:5c:88:d0:0d:4d:
8a:1e:cd:e3:16:bc:e6:22:87:df:1e:0c:7a:93:ed:
41:8a:70:4b:28:23:d9:58:ee:91:96:30:81:50:1c:
3c:9d:d7:03:6c:ab:d6:0a:c7:72:f0:ff:d1:29:b9:
cc:f1:02:e5:68:16:fa:3c:b3:5b:b5:21:bc:28:c7:
74:af:b2:5a:34:05:8e:6e:ed:7f:ee:de:6e:ef:ba:
b0:12:e2:03:94:b0:dc:36:a9:b3:cf:53:77:47:76:
1e:82:09:e0:0e:da:f8:5c:a4:d5:6f:27:e3:f0:08:
49:d4:4e:62:c1:17:a0:13:2b:88:7a:ca:8f:46:68:
a1:d8:bd:8e:be:0f:a5:37:91:7f:dd:bf:34:2f:4f:
87:39:df:42:6c:9e:71:33:cb:b8:48:51:f4:42:69:
93:64:0c:4a:73:ce:f1:f1:40:54:8e:60:c8:77:7b:
c6:42:d0:98:37:c6:f3:6c:0d:40:f8:8f:60:95:39:
56:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:5E:05:C2:8A:81:3F:2C:62:19:78:2B:5B:61:1A:82:BB:6F:99:45
X509v3 Authority Key Identifier:
keyid:83:66:6A:3E:14:FA:71:08:5B:87:5F:98:C7:56:DD:E1:C4:0F:C6:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/bfbe5957-324b-4d45-9b5b-d091cc750589/0/83666A3E14FA71085B875F98C756DDE1C40FC6BB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2ZqPhT6cQhbh1-Yx1bd4cQPxrs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bfbe5957-324b-4d45-9b5b-d091cc750589/0/83666A3E14FA71085B875F98C756DDE1C40FC6BB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:fe:12:78:cc:19:15:01:58:26:5b:99:3e:83:86:4f:bd:41:
23:e1:00:b8:b2:f1:6b:a0:f5:ba:2f:01:b7:bb:98:56:8f:fe:
ed:9a:72:ff:07:af:8d:b8:01:2a:57:da:02:39:f8:1c:04:f6:
f5:a2:0b:7a:d3:e3:1f:58:bf:78:13:97:d9:7a:86:bb:4f:70:
6e:d7:4c:7a:a7:ae:0e:a7:b7:67:a5:8c:41:13:5b:ba:d4:9c:
17:c7:84:74:d5:88:69:56:c6:7d:fc:97:5c:27:b9:ea:dc:30:
8c:ab:3a:64:12:00:ad:cd:6e:2a:ad:d2:a0:b8:8f:ae:6a:d7:
29:34:45:a9:c2:da:bc:80:b4:08:ea:f4:4c:d8:0e:19:4e:8b:
5f:3f:9b:cd:4c:24:24:c4:48:f2:f5:56:76:65:26:a8:b0:b5:
0d:9a:11:7d:fb:20:3e:a7:82:e6:73:74:5f:c8:b9:3c:91:05:
8e:54:00:10:14:f3:b4:99:e3:76:c0:66:31:8a:9c:ca:c9:55:
8c:a9:41:ae:86:e5:27:42:87:00:a0:a7:91:d4:e3:13:3c:f5:
8d:12:c3:d5:a2:1d:60:99:98:45:4c:72:a9:d5:46:b9:e3:31:
9b:39:f8:7f:82:0c:b1:5f:21:37:d4:11:f6:ac:03:b4:89:be:
eb:5b:c6:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 00:48:51 2025 by rpki-client