Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d2b0a202-e1f4-4f72-a6d2-e2b297ac2b94/0/91A33711A470A1CAF41284B368F40FD2BDF16F01.mft
File: 91A33711A470A1CAF41284B368F40FD2BDF16F01.mft (raw, json)
Hash identifier: NXI9o7xI7LA4LN2ZARiIZXzZwUaVl5tMsfR3aNde6Lg=
Subject key identifier: 45:2C:2E:47:A3:F5:F6:92:79:2F:69:B6:9C:89:92:E2:57:AA:7F:47
Authority key identifier: 91:A3:37:11:A4:70:A1:CA:F4:12:84:B3:68:F4:0F:D2:BD:F1:6F:01
Certificate issuer: /CN=91a33711a470a1caf41284b368f40fd2bdf16f01
Certificate serial: 046A041F94A3A13721903802C8AF9D99A0770B16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kaM3EaRwocr0EoSzaPQP0r3xbwE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d2b0a202-e1f4-4f72-a6d2-e2b297ac2b94/0/91A33711A470A1CAF41284B368F40FD2BDF16F01.mft
Manifest number: 02AA
Signing time: Fri 04 Apr 2025 18:05:42 +0000
Manifest this update: Fri 04 Apr 2025 18:00:42 +0000
Manifest next update: Sat 05 Apr 2025 21:57:42 +0000
Files and hashes: 1: 91A33711A470A1CAF41284B368F40FD2BDF16F01.crl (hash: HW/v7umhlKtsB4FogaNOUiDa1C8Ke6r/qrVS89mz13g=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d2b0a202-e1f4-4f72-a6d2-e2b297ac2b94/0/91A33711A470A1CAF41284B368F40FD2BDF16F01.crl
rsync://rsync.paas.rpki.ripe.net/repository/d2b0a202-e1f4-4f72-a6d2-e2b297ac2b94/0/91A33711A470A1CAF41284B368F40FD2BDF16F01.mft
rsync://rpki.ripe.net/repository/DEFAULT/kaM3EaRwocr0EoSzaPQP0r3xbwE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:6a:04:1f:94:a3:a1:37:21:90:38:02:c8:af:9d:99:a0:77:0b:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91a33711a470a1caf41284b368f40fd2bdf16f01
Validity
Not Before: Apr 4 18:00:42 2025 GMT
Not After : Apr 5 21:57:42 2025 GMT
Subject: CN=452C2E47A3F5F692792F69B69C8992E257AA7F47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c9:29:1b:18:56:7b:4a:3e:29:fd:23:05:77:
62:14:b6:4b:18:c7:30:d1:01:5c:10:2d:20:a6:08:
21:74:2d:a3:9a:21:27:f4:a5:af:a8:06:f3:dc:2e:
1a:27:c5:12:93:e2:d4:53:e8:10:5a:d4:a1:34:c9:
df:c2:70:44:bb:bd:aa:05:f4:d2:d0:8d:89:7b:91:
c0:85:18:74:f6:bc:90:0c:05:3c:c5:fd:c4:da:6d:
e1:90:f9:22:bf:3d:bf:e1:74:d9:9b:7f:6a:17:a2:
7b:83:e0:a3:76:96:79:ec:fc:cb:0e:fa:3d:81:7b:
bc:9a:77:c5:e1:fc:0e:93:0b:7a:a6:d2:2f:11:5b:
22:b2:f7:4d:3e:1e:0f:87:08:3e:af:75:08:fb:bb:
28:1a:b4:05:10:5c:a5:76:b6:17:4b:e8:88:a0:cb:
11:36:0e:76:99:8f:d2:48:4d:e4:d9:38:d2:70:8e:
cc:76:88:9e:0c:69:a3:0c:e6:f5:d0:5f:3c:d7:4d:
cf:50:42:2f:26:28:6c:1f:97:90:8d:12:30:ed:c7:
93:d3:1f:f0:3d:2a:30:fd:fc:ee:f6:b3:e7:bf:35:
a1:56:07:c7:94:65:83:70:35:c0:17:3b:ad:33:e7:
ab:fb:08:9e:a6:7a:d4:e2:a4:56:9a:75:dd:d9:82:
e9:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:2C:2E:47:A3:F5:F6:92:79:2F:69:B6:9C:89:92:E2:57:AA:7F:47
X509v3 Authority Key Identifier:
keyid:91:A3:37:11:A4:70:A1:CA:F4:12:84:B3:68:F4:0F:D2:BD:F1:6F:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d2b0a202-e1f4-4f72-a6d2-e2b297ac2b94/0/91A33711A470A1CAF41284B368F40FD2BDF16F01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kaM3EaRwocr0EoSzaPQP0r3xbwE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d2b0a202-e1f4-4f72-a6d2-e2b297ac2b94/0/91A33711A470A1CAF41284B368F40FD2BDF16F01.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:17:dc:1a:4a:1e:0b:c9:29:59:94:f3:65:c4:cd:0a:1e:28:
e5:b3:6b:55:59:3f:e5:ea:09:19:69:23:15:76:d8:94:6a:2e:
8b:65:13:f6:83:f7:23:ea:c3:bf:ed:05:65:96:45:b0:18:86:
32:d3:ca:59:60:bf:2b:58:0e:51:10:37:d6:8d:89:9e:6b:57:
39:d6:78:4b:5a:e1:01:c1:c4:b6:df:74:32:4a:69:45:b9:93:
01:73:cf:9f:fc:ac:fc:49:1d:83:c5:76:6a:bc:57:e4:a2:0e:
21:16:ad:6a:6a:f6:fa:8f:5c:3e:dd:cb:ed:ff:0b:cb:f5:cb:
cc:52:47:80:ce:b8:5f:27:e6:14:48:52:b8:6d:da:92:65:49:
40:7e:5a:67:66:f8:79:75:62:3d:82:12:ac:74:0c:81:76:54:
b9:46:a9:02:ed:8e:cc:ce:3a:0e:75:84:19:a1:da:cd:70:9d:
55:a5:59:79:2c:92:8b:eb:0c:35:65:0f:a8:fb:bc:a7:b1:51:
55:26:85:19:6c:59:1b:9e:56:8a:7b:ea:85:6d:7f:06:8d:7c:
65:2f:0e:5b:29:85:aa:b8:b8:9d:e5:0b:40:1e:96:c0:a5:cd:
ae:26:59:c3:4a:30:96:c4:86:8c:a4:f9:b9:21:be:34:68:fe:
b5:38:d3:65
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUBGoEH5SjoTchkDgCyK+dmaB3CxYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTFhMzM3MTFhNDcwYTFjYWY0MTI4NGIzNjhmNDBmZDJi
ZGYxNmYwMTAeFw0yNTA0MDQxODAwNDJaFw0yNTA0MDUyMTU3NDJaMDMxMTAvBgNV
BAMTKDQ1MkMyRTQ3QTNGNUY2OTI3OTJGNjlCNjlDODk5MkUyNTdBQTdGNDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrySkbGFZ7Sj4p/SMFd2IUtksY
xzDRAVwQLSCmCCF0LaOaISf0pa+oBvPcLhonxRKT4tRT6BBa1KE0yd/CcES7vaoF
9NLQjYl7kcCFGHT2vJAMBTzF/cTabeGQ+SK/Pb/hdNmbf2oXonuD4KN2lnns/MsO
+j2Be7yad8Xh/A6TC3qm0i8RWyKy900+Hg+HCD6vdQj7uygatAUQXKV2thdL6Iig
yxE2DnaZj9JITeTZONJwjsx2iJ4MaaMM5vXQXzzXTc9QQi8mKGwfl5CNEjDtx5PT
H/A9KjD9/O72s+e/NaFWB8eUZYNwNcAXO60z56v7CJ6metTipFaadd3ZgunRAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQURSwuR6P19pJ5L2m2nImS4leqf0cwHwYDVR0j
BBgwFoAUkaM3EaRwocr0EoSzaPQP0r3xbwEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZDJiMGEyMDItZTFmNC00ZjcyLWE2ZDItZTJiMjk3YWMy
Yjk0LzAvOTFBMzM3MTFBNDcwQTFDQUY0MTI4NEIzNjhGNDBGRDJCREYxNkYwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2thTTNFYVJ3b2NyMEVvU3phUFFQMHIz
eGJ3RS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kMmIwYTIwMi1l
MWY0LTRmNzItYTZkMi1lMmIyOTdhYzJiOTQvMC85MUEzMzcxMUE0NzBBMUNBRjQx
Mjg0QjM2OEY0MEZEMkJERjE2RjAxLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMBfcGkoeC8kpWZTzZcTN
Ch4o5bNrVVk/5eoJGWkjFXbYlGoui2UT9oP3I+rDv+0FZZZFsBiGMtPKWWC/K1gO
URA31o2JnmtXOdZ4S1rhAcHEtt90MkppRbmTAXPPn/ys/Ekdg8V2arxX5KIOIRat
amr2+o9cPt3L7f8Ly/XLzFJHgM64XyfmFEhSuG3akmVJQH5aZ2b4eXViPYISrHQM
gXZUuUapAu2OzM46DnWEGaHazXCdVaVZeSySi+sMNWUPqPu8p7FRVSaFGWxZG55W
invqhW1/Bo18ZS8OWymFqri4neULQB6WwKXNriZZw0owlsSGjKT5uSG+NGj+tTjT
ZQ==
-----END CERTIFICATE-----
Generated at Sat Apr 5 03:41:48 2025 by rpki-client