Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ed81477e-510b-4d37-a229-ed4e88fbe65a/0/922085CFF3657FA2AEC6F91D91BBF0CD4DD24418.mft
File: 922085CFF3657FA2AEC6F91D91BBF0CD4DD24418.mft (raw, json)
Hash identifier: fZy04TSUIHtTcp+Pq0ALfLAsAOAsGFvqme7e3OhRUVY=
Subject key identifier: D2:EE:4A:68:00:A8:E6:8B:77:F8:E3:B8:02:4C:C0:CD:7F:29:C9:08
Authority key identifier: 92:20:85:CF:F3:65:7F:A2:AE:C6:F9:1D:91:BB:F0:CD:4D:D2:44:18
Certificate issuer: /CN=922085cff3657fa2aec6f91d91bbf0cd4dd24418
Certificate serial: 4E066C7165624FC53A479EA718805222CD8CD5B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiCFz_Nlf6KuxvkdkbvwzU3SRBg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ed81477e-510b-4d37-a229-ed4e88fbe65a/0/922085CFF3657FA2AEC6F91D91BBF0CD4DD24418.mft
Manifest number: 0223
Signing time: Fri 04 Apr 2025 12:50:39 +0000
Manifest this update: Fri 04 Apr 2025 12:45:39 +0000
Manifest next update: Sat 05 Apr 2025 13:42:39 +0000
Files and hashes: 1: 922085CFF3657FA2AEC6F91D91BBF0CD4DD24418.crl (hash: vT+T5u+5hDbmNXKvLnR5ElqpVgOfdwW1cPS0nC3vOPc=)
2: 3138352e3232392e3230372e302f32342d3234203d3e203538303631.roa (hash: eMEaJUhKjzifHfRSQ+k4fEgpWBIPjheGZTeseXumKH8=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ed81477e-510b-4d37-a229-ed4e88fbe65a/0/922085CFF3657FA2AEC6F91D91BBF0CD4DD24418.crl
rsync://rsync.paas.rpki.ripe.net/repository/ed81477e-510b-4d37-a229-ed4e88fbe65a/0/922085CFF3657FA2AEC6F91D91BBF0CD4DD24418.mft
rsync://rpki.ripe.net/repository/DEFAULT/kiCFz_Nlf6KuxvkdkbvwzU3SRBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 13:42:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:06:6c:71:65:62:4f:c5:3a:47:9e:a7:18:80:52:22:cd:8c:d5:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=922085cff3657fa2aec6f91d91bbf0cd4dd24418
Validity
Not Before: Apr 4 12:45:39 2025 GMT
Not After : Apr 5 13:42:39 2025 GMT
Subject: CN=D2EE4A6800A8E68B77F8E3B8024CC0CD7F29C908
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5a:b9:c5:35:c4:4c:03:c3:ab:e9:f8:a4:9d:
50:90:fa:25:8b:65:d3:fb:da:b8:5e:7d:af:84:a0:
a1:43:62:2d:41:43:8f:9f:00:ee:3d:82:35:fb:e5:
de:d7:1b:8b:04:93:97:73:50:96:b3:4d:30:81:2d:
3c:f1:c5:b7:60:e0:f0:0e:24:63:6c:49:ac:a3:91:
96:ff:15:fc:38:78:23:bd:82:4f:93:c0:f0:24:41:
13:57:c5:88:eb:29:67:dd:9f:d3:e1:ed:5f:05:ad:
bb:52:94:85:a1:7b:b9:14:76:52:e0:76:30:c1:10:
c9:3a:eb:aa:60:cb:09:04:e5:8f:3f:8f:11:cb:1c:
75:a4:e8:e9:f2:e9:8b:e9:ea:18:ba:09:4e:3c:bc:
7c:9b:2f:c9:9f:31:5b:66:e0:da:16:c6:d0:f7:e9:
4b:cc:8b:d2:91:3c:47:74:9f:50:e2:71:a9:17:19:
38:34:ec:04:ca:43:fe:da:bf:72:6c:6e:fd:1e:6f:
82:30:20:7f:8b:0f:6d:3a:79:e1:74:64:05:06:41:
d7:d8:8c:92:ff:4e:37:cc:df:fc:e7:fe:2a:d4:00:
e6:1d:8b:88:d6:16:12:cf:dd:58:a1:1d:87:3b:e6:
ca:00:6e:f7:f8:8b:b1:4e:4a:ac:a8:64:1a:74:d5:
f0:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:EE:4A:68:00:A8:E6:8B:77:F8:E3:B8:02:4C:C0:CD:7F:29:C9:08
X509v3 Authority Key Identifier:
keyid:92:20:85:CF:F3:65:7F:A2:AE:C6:F9:1D:91:BB:F0:CD:4D:D2:44:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ed81477e-510b-4d37-a229-ed4e88fbe65a/0/922085CFF3657FA2AEC6F91D91BBF0CD4DD24418.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiCFz_Nlf6KuxvkdkbvwzU3SRBg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ed81477e-510b-4d37-a229-ed4e88fbe65a/0/922085CFF3657FA2AEC6F91D91BBF0CD4DD24418.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:96:1e:95:b3:99:41:6e:1b:6d:60:26:cc:52:79:a0:50:b1:
8b:ac:b0:3d:3c:03:2a:81:98:c9:b3:90:ac:fa:2e:59:17:e1:
6c:c9:ef:c2:7b:02:06:1f:a8:2c:fa:29:36:4f:9a:b4:65:6d:
02:7f:4b:2d:a2:37:f3:d0:0a:1f:da:7c:e0:35:bc:76:2a:14:
32:b1:68:6c:15:35:74:17:5f:bc:48:44:be:2e:fc:63:eb:ec:
ee:30:76:db:c1:d5:f2:c0:0e:02:f2:30:24:28:55:61:cd:0e:
7e:0a:ac:19:cc:ca:90:1a:94:7b:de:a4:8f:3c:67:8d:0a:8f:
cd:ab:0d:5f:6e:0c:86:3a:fc:f8:dc:ba:2a:35:ff:4f:25:dd:
50:ba:76:57:9d:ae:24:1f:9e:78:c5:7f:39:e2:59:e3:35:24:
f7:27:73:2b:5e:d5:9f:77:08:cc:0c:66:d3:34:63:a6:7f:85:
2a:e3:3b:0c:e5:38:cc:81:54:03:1f:8d:ab:92:b2:b3:04:7c:
43:18:fb:c5:d7:a3:93:6d:bc:db:5b:e0:87:1e:a4:3e:6f:49:
6d:90:98:39:62:46:2f:a8:c6:d1:d5:43:39:44:c7:59:d6:20:
2c:51:b8:1c:72:58:4b:a0:a2:16:30:6a:7b:77:5e:62:87:bb:
34:ca:84:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:23:41 2025 by rpki-client