Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fa1b8677-ea6b-4043-907d-59f4675f2977/0/C3A70AD7F32685733597C663E02CE28A3306F923.mft
File: C3A70AD7F32685733597C663E02CE28A3306F923.mft (raw, json)
Hash identifier: pS86ym81zw6miXy48AOve1lb6tlYwN5T1UTHDVZ3jxc=
Subject key identifier: 77:E2:31:5C:EE:26:52:EB:7D:22:56:B7:01:F5:F0:38:28:66:32:24
Authority key identifier: C3:A7:0A:D7:F3:26:85:73:35:97:C6:63:E0:2C:E2:8A:33:06:F9:23
Certificate issuer: /CN=c3a70ad7f32685733597c663e02ce28a3306f923
Certificate serial: 49184FA512FFC6AC4462580ED305E13C18806173
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w6cK1_MmhXM1l8Zj4CziijMG-SM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fa1b8677-ea6b-4043-907d-59f4675f2977/0/C3A70AD7F32685733597C663E02CE28A3306F923.mft
Manifest number: 8E
Signing time: Fri 06 Jun 2025 11:08:26 +0000
Manifest this update: Fri 06 Jun 2025 11:03:26 +0000
Manifest next update: Sat 07 Jun 2025 14:55:26 +0000
Files and hashes: 1: C3A70AD7F32685733597C663E02CE28A3306F923.crl (hash: xsS+ryOnK2B3ye5HZ5lzdjsOEhFV1ZBIJLQCg8M7Lec=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fa1b8677-ea6b-4043-907d-59f4675f2977/0/C3A70AD7F32685733597C663E02CE28A3306F923.crl
rsync://rsync.paas.rpki.ripe.net/repository/fa1b8677-ea6b-4043-907d-59f4675f2977/0/C3A70AD7F32685733597C663E02CE28A3306F923.mft
rsync://rpki.ripe.net/repository/DEFAULT/w6cK1_MmhXM1l8Zj4CziijMG-SM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 14:55:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:18:4f:a5:12:ff:c6:ac:44:62:58:0e:d3:05:e1:3c:18:80:61:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3a70ad7f32685733597c663e02ce28a3306f923
Validity
Not Before: Jun 6 11:03:26 2025 GMT
Not After : Jun 7 14:55:26 2025 GMT
Subject: CN=77E2315CEE2652EB7D2256B701F5F03828663224
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c1:db:ca:e7:4f:a2:6f:59:3c:61:10:1a:08:
6a:f4:bd:71:10:f3:aa:87:e1:26:c6:dd:fa:cd:5e:
c4:01:9b:e0:b2:66:aa:c1:0e:2e:14:c4:44:0b:c0:
2c:ae:c3:dc:fd:fd:d7:ad:2f:14:0f:46:01:d3:8a:
5a:04:86:a0:88:37:97:cd:23:e1:ac:ee:8e:ea:29:
6c:bb:d7:a0:dd:1a:e8:dc:48:f4:25:7d:82:29:6f:
aa:4c:fb:24:ad:86:70:3d:68:88:05:4d:64:e5:c1:
e5:40:78:9e:29:52:a5:59:0c:10:16:d3:a8:78:3c:
14:ce:d4:b5:1b:1d:11:5f:c8:e5:54:cf:a6:7d:68:
b7:2c:e8:5a:04:e4:2d:af:02:64:9a:0c:f6:ef:a8:
4a:c9:16:29:b5:2a:e6:2e:ab:87:c3:9d:4a:c4:f2:
ef:bc:4e:d2:00:53:60:cf:71:ff:06:22:f6:c3:b5:
bc:1c:3b:8d:72:bd:8c:fd:66:56:10:c2:6b:f9:ac:
fc:d6:5a:4c:3f:2a:9e:d5:d2:94:2e:5b:1b:ee:04:
a8:a8:83:99:8d:22:09:a5:b4:ba:23:f5:ee:dd:5c:
08:d9:92:a2:6f:c9:3c:68:00:44:61:a5:7e:0f:a3:
d6:fe:b5:16:c1:d8:2e:62:31:05:32:e0:15:0c:eb:
85:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:E2:31:5C:EE:26:52:EB:7D:22:56:B7:01:F5:F0:38:28:66:32:24
X509v3 Authority Key Identifier:
keyid:C3:A7:0A:D7:F3:26:85:73:35:97:C6:63:E0:2C:E2:8A:33:06:F9:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fa1b8677-ea6b-4043-907d-59f4675f2977/0/C3A70AD7F32685733597C663E02CE28A3306F923.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w6cK1_MmhXM1l8Zj4CziijMG-SM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fa1b8677-ea6b-4043-907d-59f4675f2977/0/C3A70AD7F32685733597C663E02CE28A3306F923.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:2b:d3:c0:f6:e6:9f:9a:41:90:57:72:9c:7d:b7:7c:b1:21:
0c:72:43:97:df:19:d9:14:3e:aa:92:7a:88:3b:57:69:a3:08:
95:3b:a9:90:5d:0f:a1:b3:b8:13:32:0e:6b:e5:55:d3:bb:50:
d5:de:41:51:4a:24:3a:f8:77:38:00:51:14:3f:59:e5:de:b8:
26:62:e1:f0:89:8f:22:16:84:3c:af:72:0a:77:5f:ad:16:d5:
d7:bd:e1:32:f8:38:92:66:b0:69:54:a8:07:0d:b3:cf:b1:48:
33:3c:8a:e7:06:1b:83:ee:b2:c5:80:6b:c8:c5:72:be:52:77:
d4:5e:2d:3c:37:c3:aa:d1:c5:48:76:4a:59:e9:c9:b5:37:0b:
de:7b:b2:fb:af:85:22:da:3c:2c:22:9e:11:e3:6b:2d:26:0d:
f0:d2:55:27:72:40:99:93:b2:21:e9:8c:73:fe:6a:ce:7d:3a:
19:94:78:86:67:da:32:f6:c1:77:21:3e:7e:a3:bc:f0:b4:f3:
ee:57:13:33:a4:89:05:f2:a5:99:e4:c4:1d:8d:ed:b0:65:a7:
a8:54:e6:4e:c1:ab:43:ac:2f:8b:06:b8:31:3b:09:5a:12:8b:
5f:33:bd:24:d2:ef:d7:60:03:46:e8:c9:a0:6d:37:ae:4e:96:
97:b0:6f:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 08:14:06 2025 by rpki-client