Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/0/0EED1B7B26C35D22B50C5D0CD85544BE88DD8F23.mft
File: 0EED1B7B26C35D22B50C5D0CD85544BE88DD8F23.mft (raw, json)
Hash identifier: XIutyHsAKkC4j0u9dzlCr+Vccjo6n4Mn3lfdg843oPs=
Subject key identifier: A4:1F:EC:EA:7C:3F:45:6A:FD:7A:F5:DB:B1:16:8C:5E:6A:47:9D:C1
Authority key identifier: 0E:ED:1B:7B:26:C3:5D:22:B5:0C:5D:0C:D8:55:44:BE:88:DD:8F:23
Certificate issuer: /CN=0eed1b7b26c35d22b50c5d0cd85544be88dd8f23
Certificate serial: 267E8B6A2E8DEFFD0E959EA5804B67979973F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Du0beybDXSK1DF0M2FVEvojdjyM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/0/0EED1B7B26C35D22B50C5D0CD85544BE88DD8F23.mft
Manifest number: 0394
Signing time: Tue 22 Apr 2025 11:46:18 +0000
Manifest this update: Tue 22 Apr 2025 11:41:18 +0000
Manifest next update: Wed 23 Apr 2025 12:59:18 +0000
Files and hashes: 1: 0EED1B7B26C35D22B50C5D0CD85544BE88DD8F23.crl (hash: EHQKQYT1jv7PX8g7oipS63X2XfgBiLfVhn8XTj/etUg=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/0/0EED1B7B26C35D22B50C5D0CD85544BE88DD8F23.crl
rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/0/0EED1B7B26C35D22B50C5D0CD85544BE88DD8F23.mft
rsync://rpki.ripe.net/repository/DEFAULT/Du0beybDXSK1DF0M2FVEvojdjyM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 12:59:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:7e:8b:6a:2e:8d:ef:fd:0e:95:9e:a5:80:4b:67:97:99:73:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0eed1b7b26c35d22b50c5d0cd85544be88dd8f23
Validity
Not Before: Apr 22 11:41:18 2025 GMT
Not After : Apr 23 12:59:18 2025 GMT
Subject: CN=A41FECEA7C3F456AFD7AF5DBB1168C5E6A479DC1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:0f:9d:56:df:dc:18:e5:7a:3a:49:56:1a:7d:
3d:f6:fe:7a:86:6a:a6:10:f4:71:6e:27:f0:8e:d8:
49:9f:f8:cd:95:ee:4c:31:26:3f:a8:63:20:69:59:
4b:6f:a7:a3:a1:36:c3:24:b0:62:8c:63:92:22:c7:
91:d4:ea:29:a6:7c:5b:01:9c:69:6c:71:c0:bb:5c:
36:3d:19:20:f9:10:e2:25:e1:4e:8c:ed:30:ad:82:
0e:c2:fd:d9:d4:4b:6d:b1:c3:28:30:b9:04:35:77:
f9:ef:30:e7:52:e6:56:4e:72:ed:ec:3f:62:68:3a:
1f:86:28:10:ff:af:48:e2:42:25:0f:ed:48:98:0f:
81:9c:ec:88:f1:1c:ee:7a:79:98:23:8b:cc:73:6c:
1d:bf:bd:20:22:ca:65:f3:07:5c:dc:8b:ff:02:60:
35:dd:de:be:d0:3e:2a:09:35:76:e0:65:e0:44:9b:
ad:e3:cf:a6:56:b8:ed:b8:6f:f1:65:c7:55:c5:82:
32:28:a0:cf:74:0b:99:4b:df:2a:c5:bb:19:ec:33:
f6:d0:1e:27:ef:c9:5d:3b:55:65:cc:20:e8:07:21:
ed:c3:1d:d2:a0:5e:52:55:9a:75:be:55:5e:06:02:
e4:e8:cc:b3:7f:d0:47:d9:e3:98:d0:12:f1:b7:32:
49:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:1F:EC:EA:7C:3F:45:6A:FD:7A:F5:DB:B1:16:8C:5E:6A:47:9D:C1
X509v3 Authority Key Identifier:
keyid:0E:ED:1B:7B:26:C3:5D:22:B5:0C:5D:0C:D8:55:44:BE:88:DD:8F:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/0/0EED1B7B26C35D22B50C5D0CD85544BE88DD8F23.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Du0beybDXSK1DF0M2FVEvojdjyM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/0/0EED1B7B26C35D22B50C5D0CD85544BE88DD8F23.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:3f:d0:8f:57:8b:72:22:78:0c:cc:9a:cd:dd:4c:ce:a1:45:
66:17:4a:b2:46:2a:ef:1e:4d:b4:55:b2:85:73:af:1b:03:9d:
34:9d:a4:2b:01:62:aa:cf:0e:1d:b1:67:7c:3e:47:dc:b3:f3:
56:2e:1f:77:fc:ed:be:8b:d3:b4:48:09:e9:1c:e6:a9:2f:cc:
c7:ef:4d:f7:54:97:11:2b:5b:28:a8:fc:20:14:5e:7e:6a:ba:
19:b7:9f:17:32:b8:3b:d4:e1:90:3a:cb:80:46:1b:f3:80:bf:
a3:19:1a:3c:e2:b9:86:6a:c6:aa:10:54:54:83:61:c2:db:05:
dd:e7:bc:20:31:26:d4:74:bb:03:a9:45:35:bc:c2:89:61:1b:
f0:26:8d:5d:ea:0f:01:b7:a5:9e:f7:14:b8:e9:32:51:19:74:
78:b6:47:cc:d0:e2:44:32:95:ea:c4:5f:e6:9b:f7:e0:9e:03:
00:8a:b6:51:07:f6:b7:81:2b:70:b2:f8:fe:5c:71:0a:c4:83:
c6:dd:56:44:dd:e4:ae:0d:8e:7b:6f:9f:30:d1:b2:01:94:fe:
f9:33:68:50:1c:06:39:7b:71:42:bf:59:c2:0d:c2:88:44:34:
cb:08:9a:49:f6:84:75:d1:76:50:55:e2:c5:f1:63:71:aa:d7:
55:59:c2:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 23:24:18 2025 by rpki-client