Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/01b20176-76b9-4000-a6e6-ba547b524143/0/84101CECAA6A71465DCF665D716279A008341EA4.mft
File: 84101CECAA6A71465DCF665D716279A008341EA4.mft (raw, json)
Hash identifier: +o8Vh1qZudtpHz0gp06f5MpFcJnTczCzb6wKiPwUy8c=
Subject key identifier: 8C:25:39:35:E8:84:CB:82:F8:D4:11:88:4D:54:D0:3E:AB:90:5D:8C
Authority key identifier: 84:10:1C:EC:AA:6A:71:46:5D:CF:66:5D:71:62:79:A0:08:34:1E:A4
Certificate issuer: /CN=84101cecaa6a71465dcf665d716279a008341ea4
Certificate serial: 49722C0083DB3F18F648947DC81338AECB644FF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hBAc7KpqcUZdz2ZdcWJ5oAg0HqQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/01b20176-76b9-4000-a6e6-ba547b524143/0/84101CECAA6A71465DCF665D716279A008341EA4.mft
Manifest number: 1B
Signing time: Sun 27 Apr 2025 15:02:21 +0000
Manifest this update: Sun 27 Apr 2025 14:57:21 +0000
Manifest next update: Mon 28 Apr 2025 16:22:21 +0000
Files and hashes: 1: AS216311.asa (hash: Dmw7omaWtWOpKd5S/DPOujGFLODAQcprPtQE3Nwf75E=)
2: 84101CECAA6A71465DCF665D716279A008341EA4.crl (hash: cfg9yauQlhKUGWCFJxXlrN52C75l2myKEb7Vko1LX20=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/01b20176-76b9-4000-a6e6-ba547b524143/0/84101CECAA6A71465DCF665D716279A008341EA4.crl
rsync://rsync.paas.rpki.ripe.net/repository/01b20176-76b9-4000-a6e6-ba547b524143/0/84101CECAA6A71465DCF665D716279A008341EA4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hBAc7KpqcUZdz2ZdcWJ5oAg0HqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:72:2c:00:83:db:3f:18:f6:48:94:7d:c8:13:38:ae:cb:64:4f:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84101cecaa6a71465dcf665d716279a008341ea4
Validity
Not Before: Apr 27 14:57:21 2025 GMT
Not After : Apr 28 16:22:21 2025 GMT
Subject: CN=8C253935E884CB82F8D411884D54D03EAB905D8C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:3e:94:75:a7:a7:84:88:c3:ad:73:dd:5d:a6:
74:c6:55:42:f7:6b:b2:42:1c:a5:7a:de:33:19:20:
06:97:9b:b7:8c:16:7a:ae:c5:92:4f:59:13:3d:17:
2b:b5:ed:58:be:2c:2e:68:41:0c:50:9d:20:41:11:
c8:69:5b:05:ea:f8:60:57:a5:da:38:41:04:53:10:
e0:16:6f:bb:fc:59:0d:51:4b:d0:26:0d:05:7a:f9:
74:35:77:f8:da:2e:e0:46:4e:16:ad:79:04:51:f9:
b5:41:c5:de:5e:15:48:68:86:b8:7c:43:04:8e:8d:
87:4e:ef:ad:0e:09:f1:cd:e1:89:48:8b:c7:3e:d6:
08:8d:38:ca:78:74:fc:4a:0d:4a:1e:e4:6d:a1:3a:
4e:50:64:34:ef:3f:bd:21:7b:79:a6:e6:b1:01:40:
b6:34:fc:ca:3c:5d:59:d5:30:9f:98:96:dd:8c:8b:
64:b7:43:c1:69:cf:d5:79:a4:75:49:95:f5:d8:69:
79:a6:4d:c6:61:11:aa:9c:88:80:1f:23:0c:74:81:
06:3f:58:2e:bf:a9:ef:ce:03:e9:77:4d:c2:da:ac:
d6:cb:b1:eb:64:59:13:0b:74:12:0c:42:71:27:af:
81:6c:dd:45:40:ab:a0:50:70:c9:03:b6:c5:65:d7:
c1:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:25:39:35:E8:84:CB:82:F8:D4:11:88:4D:54:D0:3E:AB:90:5D:8C
X509v3 Authority Key Identifier:
keyid:84:10:1C:EC:AA:6A:71:46:5D:CF:66:5D:71:62:79:A0:08:34:1E:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/01b20176-76b9-4000-a6e6-ba547b524143/0/84101CECAA6A71465DCF665D716279A008341EA4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hBAc7KpqcUZdz2ZdcWJ5oAg0HqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/01b20176-76b9-4000-a6e6-ba547b524143/0/84101CECAA6A71465DCF665D716279A008341EA4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:94:d8:43:f3:06:2d:45:17:e6:be:95:31:49:f1:c1:67:3e:
b7:18:05:f3:13:63:de:28:64:9f:71:6c:4a:7f:b7:30:48:f0:
d3:1e:0b:23:be:cf:e8:c5:40:66:8f:bb:53:b5:66:c9:0a:a8:
7a:17:1a:26:71:25:ef:78:39:f4:6e:3c:fa:3a:39:0c:14:76:
03:f7:ae:1b:5b:80:48:c9:00:27:3a:31:db:7d:d6:49:13:96:
71:7b:74:6e:2f:8d:47:c5:41:0f:87:c6:d1:c2:58:6b:8e:ce:
40:30:04:ea:3a:f9:13:96:97:54:de:32:76:25:ea:93:11:96:
e5:00:07:72:28:b0:c9:68:8c:fc:26:02:de:e4:92:ff:9b:e4:
f4:69:48:1a:b8:e4:67:ff:51:ec:28:f1:bb:8c:50:b6:ec:b1:
47:93:ca:ee:f6:f6:04:60:ed:b2:f6:00:48:bc:b6:ea:53:01:
46:11:14:b8:e7:16:f8:4a:b8:64:8d:57:9d:43:fc:11:b4:4c:
57:20:9f:c5:ab:3b:28:92:de:85:31:e3:d8:ab:7f:0c:39:61:
78:b7:d5:28:65:d0:dd:f4:ee:79:ff:60:46:00:b3:d5:2f:1e:
7a:84:a5:ac:b4:9a:39:54:43:9a:5a:38:45:73:94:5a:7d:82:
f4:32:98:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 19:11:59 2025 by rpki-client