Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/0/B1138D02124FB2326CF3FB351AD3251A63BEC739.mft
File: B1138D02124FB2326CF3FB351AD3251A63BEC739.mft (raw, json)
Hash identifier: iExaGqdRFRckfcNyWgVTMnDGPpJvEZpPkQ0D5G8M5ME=
Subject key identifier: B3:42:7E:12:80:BB:DE:E1:D5:C9:B1:5E:9F:95:AC:31:90:C4:22:97
Authority key identifier: B1:13:8D:02:12:4F:B2:32:6C:F3:FB:35:1A:D3:25:1A:63:BE:C7:39
Certificate issuer: /CN=b1138d02124fb2326cf3fb351ad3251a63bec739
Certificate serial: 734A83921AD1C12BBFD18B7382863CC88099E60C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sRONAhJPsjJs8_s1GtMlGmO-xzk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/0/B1138D02124FB2326CF3FB351AD3251A63BEC739.mft
Manifest number: 3B
Signing time: Fri 06 Jun 2025 05:25:19 +0000
Manifest this update: Fri 06 Jun 2025 05:20:19 +0000
Manifest next update: Sat 07 Jun 2025 08:29:19 +0000
Files and hashes: 1: B1138D02124FB2326CF3FB351AD3251A63BEC739.crl (hash: IgWvFN4SZKXplCThBRUyqOeUFh0+et/d9kRbYBX45a4=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/0/B1138D02124FB2326CF3FB351AD3251A63BEC739.crl
rsync://rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/0/B1138D02124FB2326CF3FB351AD3251A63BEC739.mft
rsync://rpki.ripe.net/repository/DEFAULT/sRONAhJPsjJs8_s1GtMlGmO-xzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 08:29:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:4a:83:92:1a:d1:c1:2b:bf:d1:8b:73:82:86:3c:c8:80:99:e6:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1138d02124fb2326cf3fb351ad3251a63bec739
Validity
Not Before: Jun 6 05:20:19 2025 GMT
Not After : Jun 7 08:29:19 2025 GMT
Subject: CN=B3427E1280BBDEE1D5C9B15E9F95AC3190C42297
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:bf:d0:65:0a:6f:4d:8e:58:10:24:45:59:4d:
f4:34:8a:7b:ed:1f:02:5c:f9:f0:24:ac:95:de:21:
a4:12:9d:a4:49:31:ce:fb:95:8b:15:e0:29:f4:c8:
66:ab:5a:4c:62:0c:43:c4:fb:f3:35:0b:a7:b7:9b:
81:3c:e2:b2:43:f1:c7:41:fc:bc:03:8e:07:0b:5f:
b2:13:d4:9f:02:fe:d6:1e:b5:be:e1:82:b3:9b:4c:
3c:71:02:e4:41:03:2d:c8:8e:37:e8:7e:65:07:31:
10:d5:f3:7a:f6:23:7b:10:d0:e5:5c:38:c2:7c:46:
c1:56:ad:04:7e:5d:7f:9d:40:e1:12:d4:8e:65:c4:
ff:29:aa:0b:87:06:09:9f:57:f1:83:18:09:26:83:
d4:f6:23:b4:b8:ed:a0:ac:f6:ff:e6:b5:2b:00:d9:
62:f8:89:7d:22:8d:32:35:43:85:5b:b9:4e:3a:02:
06:43:07:82:ad:44:65:27:65:79:3c:64:4c:77:06:
53:98:e3:c3:5f:44:78:19:dd:49:3c:ad:d5:2e:c5:
2a:af:95:92:01:af:d1:22:27:f8:1c:77:84:4c:47:
9c:40:23:2e:6f:e8:ed:12:a2:14:e7:52:a3:7d:26:
f3:da:8c:ea:c5:03:6d:f6:02:9d:26:63:a4:71:76:
90:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:42:7E:12:80:BB:DE:E1:D5:C9:B1:5E:9F:95:AC:31:90:C4:22:97
X509v3 Authority Key Identifier:
keyid:B1:13:8D:02:12:4F:B2:32:6C:F3:FB:35:1A:D3:25:1A:63:BE:C7:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/0/B1138D02124FB2326CF3FB351AD3251A63BEC739.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sRONAhJPsjJs8_s1GtMlGmO-xzk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/0/B1138D02124FB2326CF3FB351AD3251A63BEC739.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:c6:da:2c:e4:3e:d4:58:47:02:ae:23:c5:91:d8:0d:2f:3a:
e7:96:79:70:3a:ec:ab:78:6c:04:99:ae:c8:c1:52:79:d5:a6:
b5:82:b5:cb:92:e9:1f:d0:88:81:c2:16:23:95:3a:6f:4d:af:
fc:4b:12:f7:b0:a5:34:42:37:aa:f7:8a:24:8b:bd:1a:f3:87:
de:08:e7:e0:a3:71:40:98:e9:2d:98:14:49:6b:2a:f7:eb:d1:
28:1f:7d:03:a8:a6:d3:58:c1:00:d2:eb:0d:ad:af:75:9e:fc:
c4:f3:04:c0:2f:85:2c:63:e3:55:60:9c:c0:57:42:ec:75:f4:
2c:40:5c:0e:59:5c:df:ea:54:6b:96:50:87:21:bf:82:f2:44:
1f:d8:0d:4b:fe:c5:9e:52:f2:38:01:54:9d:5b:3d:03:06:33:
9c:91:66:65:f2:7d:df:ec:62:ba:9c:56:9e:89:33:57:d0:30:
39:ae:31:52:2b:88:ce:7b:9e:f8:35:f2:52:19:71:01:0c:33:
5b:7d:b3:2f:28:b9:5b:61:97:18:8b:34:a6:8b:18:06:8d:e1:
e4:24:e0:13:2f:b5:50:4f:7b:73:f3:0f:69:fe:5f:ff:f3:36:
82:ae:59:70:be:10:73:5b:6a:e5:c6:d2:e2:a9:a9:52:82:60:
8b:77:81:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 22:36:19 2025 by rpki-client