Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fc8d19d0-d221-4448-811a-0e1611a46442/0/333190CA0710CD1A9121C0E7E96BF0E1D5375FD5.mft
File: 333190CA0710CD1A9121C0E7E96BF0E1D5375FD5.mft (raw, json)
Hash identifier: gm7wpn2lwNjwo80PQjPyWXqVZvxr5XRpgs5mCABxA4E=
Subject key identifier: F3:BE:83:67:06:AB:CB:CA:C8:D0:C3:DB:4E:56:88:F5:83:43:3D:F6
Authority key identifier: 33:31:90:CA:07:10:CD:1A:91:21:C0:E7:E9:6B:F0:E1:D5:37:5F:D5
Certificate issuer: /CN=333190ca0710cd1a9121c0e7e96bf0e1d5375fd5
Certificate serial: 665A9D5D78A19AE5AE38B33DEAA446C971C9FACE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MzGQygcQzRqRIcDn6Wvw4dU3X9U.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fc8d19d0-d221-4448-811a-0e1611a46442/0/333190CA0710CD1A9121C0E7E96BF0E1D5375FD5.mft
Manifest number: 1E
Signing time: Fri 04 Apr 2025 21:57:28 +0000
Manifest this update: Fri 04 Apr 2025 21:52:28 +0000
Manifest next update: Sat 05 Apr 2025 23:45:28 +0000
Files and hashes: 1: 333190CA0710CD1A9121C0E7E96BF0E1D5375FD5.crl (hash: 77xArBZpifWpyOUIPJqxuIyJ53vlFlefDu3WdhMhwDE=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fc8d19d0-d221-4448-811a-0e1611a46442/0/333190CA0710CD1A9121C0E7E96BF0E1D5375FD5.crl
rsync://rsync.paas.rpki.ripe.net/repository/fc8d19d0-d221-4448-811a-0e1611a46442/0/333190CA0710CD1A9121C0E7E96BF0E1D5375FD5.mft
rsync://rpki.ripe.net/repository/DEFAULT/MzGQygcQzRqRIcDn6Wvw4dU3X9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:5a:9d:5d:78:a1:9a:e5:ae:38:b3:3d:ea:a4:46:c9:71:c9:fa:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=333190ca0710cd1a9121c0e7e96bf0e1d5375fd5
Validity
Not Before: Apr 4 21:52:28 2025 GMT
Not After : Apr 5 23:45:28 2025 GMT
Subject: CN=F3BE836706ABCBCAC8D0C3DB4E5688F583433DF6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:d7:77:8e:4c:ff:af:31:20:c3:4f:b9:32:4f:
a7:d0:cc:b8:2e:4c:34:6c:1c:c6:f1:4b:dd:18:1c:
e7:88:4b:aa:27:47:e4:b5:01:9c:53:b6:2b:83:b8:
83:a4:52:db:d5:2a:f9:cd:9a:b4:6a:aa:9e:fd:67:
77:c4:c1:75:a9:ff:1c:55:cd:24:9b:51:15:d5:c4:
f0:1e:15:53:95:75:62:d1:6b:ed:29:0d:1d:11:03:
6d:50:12:61:d8:c7:07:ec:bb:88:18:00:0c:20:f0:
6f:33:d0:58:97:55:4b:e5:57:f2:02:ca:af:07:84:
b8:c2:5a:13:7e:40:03:33:12:18:a1:65:e2:ac:8c:
59:c8:13:2f:6a:ce:2c:bd:ab:be:05:75:83:04:60:
ae:aa:06:c8:f2:00:cb:fb:33:b9:2d:8b:32:a1:22:
47:d6:c1:b5:ec:e2:64:2e:54:bf:ca:1b:9d:ae:79:
1d:c1:02:04:21:c5:e5:51:ed:82:0f:7b:73:f0:1e:
27:0d:d8:c7:78:cc:c7:5a:a0:e2:5c:3c:b7:56:f2:
8e:ba:42:15:40:82:20:fe:c6:a5:38:6e:44:02:26:
3e:81:3d:6e:5b:32:4a:12:18:44:89:b4:20:af:7c:
39:33:ce:d2:d6:00:70:ce:cc:2b:08:5b:8e:f6:68:
f3:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:BE:83:67:06:AB:CB:CA:C8:D0:C3:DB:4E:56:88:F5:83:43:3D:F6
X509v3 Authority Key Identifier:
keyid:33:31:90:CA:07:10:CD:1A:91:21:C0:E7:E9:6B:F0:E1:D5:37:5F:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fc8d19d0-d221-4448-811a-0e1611a46442/0/333190CA0710CD1A9121C0E7E96BF0E1D5375FD5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzGQygcQzRqRIcDn6Wvw4dU3X9U.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc8d19d0-d221-4448-811a-0e1611a46442/0/333190CA0710CD1A9121C0E7E96BF0E1D5375FD5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:a1:02:dc:85:b8:b3:ed:11:ed:f7:37:f7:ac:ec:d5:5c:1e:
21:2f:b0:10:a0:62:b7:23:73:ff:bd:c8:1c:ad:0f:64:1a:96:
b2:61:ce:a6:8e:73:e9:69:78:02:a8:ad:83:e8:a3:ca:31:78:
ca:0a:6a:3c:e4:a4:34:94:17:4a:9e:45:be:80:9e:bd:70:58:
51:42:7e:69:81:fa:d3:43:58:bc:e5:29:71:fd:c6:44:7b:ef:
a1:b7:84:ca:c2:ff:a2:a1:4f:41:40:62:7a:7c:73:eb:7f:2e:
a9:fa:01:02:5d:36:56:fe:55:99:06:6f:62:8e:5a:b6:06:de:
68:84:70:33:5e:e4:1b:77:1a:1d:37:83:0a:9e:1e:f8:fb:ea:
c0:0c:b8:29:8d:29:ba:7f:1f:ec:6c:e6:e5:b4:32:4e:f7:0b:
e5:cc:4c:34:83:0a:76:fe:69:3f:20:b2:47:d2:fb:7c:ed:63:
6d:af:36:a9:be:a0:50:44:8e:7a:31:0f:53:7e:aa:10:98:0a:
14:2f:19:d8:2c:d8:2f:da:fb:c1:71:ff:59:e1:8c:03:7e:04:
a9:fe:81:55:2d:cc:9d:16:06:e0:1e:de:f8:3d:f0:29:44:08:
b6:3b:e1:e2:78:e0:72:6e:75:58:30:5d:7c:ae:2c:86:7e:8c:
9b:6f:c9:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:33:42 2025 by rpki-client