
Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.mft
File: D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.mft (raw, json)
Hash identifier: yD2AVR/GTQFjdJpQSP8d2TFO4W3VwLFja83TSaLrIoI=
Subject key identifier: 20:E4:E7:8A:F2:AE:C6:38:07:BE:4D:6C:55:33:97:DF:41:38:4A:90
Authority key identifier: D0:2B:BB:44:0B:9D:D4:40:88:DB:68:4E:E8:2F:A2:A7:DA:06:FC:F6
Certificate issuer: /CN=d02bbb440b9dd44088db684ee82fa2a7da06fcf6
Certificate serial: 27B347CAFC6C4293883FFE860FF54077C429EDD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Cu7RAud1ECI22hO6C-ip9oG_PY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.mft
Manifest number: 02F5
Signing time: Sun 27 Apr 2025 16:21:49 +0000
Manifest this update: Sun 27 Apr 2025 16:16:49 +0000
Manifest next update: Mon 28 Apr 2025 17:38:49 +0000
Files and hashes: 1: D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.crl (hash: 7UFh6vISImDjHheJFGz9wpSDX3I9noNvcWVhG0yi4Fc=)
2: AS203843.asa (hash: 1nvMUb4vpCLR+7MIYxF2m/d77v/ZfxcpM67pQPAefbg=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.crl
rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Cu7RAud1ECI22hO6C-ip9oG_PY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:b3:47:ca:fc:6c:42:93:88:3f:fe:86:0f:f5:40:77:c4:29:ed:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d02bbb440b9dd44088db684ee82fa2a7da06fcf6
Validity
Not Before: Apr 27 16:16:49 2025 GMT
Not After : Apr 28 17:38:49 2025 GMT
Subject: CN=20E4E78AF2AEC63807BE4D6C553397DF41384A90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:cb:06:d9:dc:39:c4:30:4f:13:ff:ee:6a:5d:
d8:02:0f:bd:fe:f4:bf:2f:71:1f:49:9d:36:45:99:
24:a5:a2:a2:c4:1d:f6:fd:e2:92:8b:c4:8a:99:2c:
ad:51:9d:d5:7d:d2:9b:a7:92:e7:45:fa:ae:1c:40:
fb:28:a9:0e:ae:79:d5:d9:f1:1b:5a:e1:ed:83:7e:
65:8f:8b:ad:a3:c3:85:a2:f9:83:e8:ec:1f:b6:39:
c6:74:e8:97:c2:38:23:f4:a4:e4:e9:11:51:35:ad:
4a:db:08:e5:37:ff:27:88:56:fd:19:59:14:a5:61:
ef:42:ed:c9:82:a7:60:7a:fe:8e:c9:37:2b:2a:ab:
81:ee:29:75:6d:83:fe:27:34:83:1d:fd:28:2e:26:
6c:29:38:dd:48:65:61:20:26:f9:51:25:ac:56:01:
7b:31:96:59:26:5c:f0:b3:3f:94:0c:3b:f1:d6:4e:
6a:6b:97:aa:19:48:8f:58:1a:5b:65:41:5e:e0:37:
04:15:85:7f:8f:b6:9e:a0:b5:b6:c8:b7:46:50:02:
66:73:67:4b:5f:e2:a9:72:3f:43:37:b1:96:b2:0b:
b4:61:71:16:0d:e2:5a:9c:9e:94:07:4e:e3:06:95:
f3:88:99:95:d5:9f:a7:63:45:fd:53:45:8a:de:78:
4d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:E4:E7:8A:F2:AE:C6:38:07:BE:4D:6C:55:33:97:DF:41:38:4A:90
X509v3 Authority Key Identifier:
keyid:D0:2B:BB:44:0B:9D:D4:40:88:DB:68:4E:E8:2F:A2:A7:DA:06:FC:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Cu7RAud1ECI22hO6C-ip9oG_PY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:4d:06:ba:11:27:96:ff:dc:be:5b:df:57:f3:32:8d:ee:0d:
09:cf:72:66:46:7a:04:8e:e5:a9:0c:fb:69:16:95:f2:09:72:
1e:2d:ec:f2:f5:b9:1e:28:31:78:d4:76:f1:13:38:26:5e:5c:
74:e5:1b:01:ff:6f:83:c6:52:d1:dd:06:d8:c0:10:53:af:1d:
6e:97:39:c9:b3:bb:01:ca:25:86:0f:0b:bb:11:81:a7:56:d6:
c3:8e:0e:fd:15:5b:55:ee:f8:72:b4:85:07:0e:47:70:e5:25:
70:70:2c:a3:53:8e:f9:54:64:92:c0:ea:8e:2b:da:33:fb:e1:
de:93:31:b4:84:4c:95:d1:81:cb:79:20:22:4b:04:66:03:ba:
16:a5:53:2e:ed:d4:79:04:55:d2:8c:0c:e6:18:11:3e:72:51:
13:0e:e1:16:18:1c:38:6a:7a:07:c4:99:0a:02:32:06:71:c6:
53:4e:46:7c:7a:9f:5f:33:fa:20:b9:a6:28:58:22:49:c2:a0:
93:44:b0:ac:03:3b:2c:17:7e:6d:a0:b9:28:3b:68:08:20:e5:
03:34:23:75:33:4d:41:c9:ad:bc:e6:37:ab:38:47:ef:5f:c8:
9d:99:77:bb:76:e9:ab:05:44:41:d7:55:b7:20:9d:49:bc:14:
09:a8:e4:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 18:34:05 2025 by rpki-client