Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.mft
File: D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.mft (raw, json)
Hash identifier: ZlFveLsdj9zdl5fEzDYl/lidc6Ppd/uO1jlTpsRdXx4=
Subject key identifier: D1:1D:7A:CD:57:5D:29:52:88:14:D7:45:AF:48:28:6F:A8:35:92:A9
Authority key identifier: D0:2B:BB:44:0B:9D:D4:40:88:DB:68:4E:E8:2F:A2:A7:DA:06:FC:F6
Certificate issuer: /CN=d02bbb440b9dd44088db684ee82fa2a7da06fcf6
Certificate serial: 12F28CE35F8320683497BAB76B8145F1D11E33ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Cu7RAud1ECI22hO6C-ip9oG_PY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.mft
Manifest number: 0339
Signing time: Sun 15 Jun 2025 07:19:58 +0000
Manifest this update: Sun 15 Jun 2025 07:14:58 +0000
Manifest next update: Mon 16 Jun 2025 07:20:58 +0000
Files and hashes: 1: D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.crl (hash: j60SWAihRGO1Pb+T3cupcBpRrZImeeRqUk1qEk6DF/I=)
2: AS203843.asa (hash: SjQvRdVSyAmhreUXMnoTzQGOfU82fRyH6H45jAscwqs=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.crl
rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Cu7RAud1ECI22hO6C-ip9oG_PY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 07:20:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:f2:8c:e3:5f:83:20:68:34:97:ba:b7:6b:81:45:f1:d1:1e:33:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d02bbb440b9dd44088db684ee82fa2a7da06fcf6
Validity
Not Before: Jun 15 07:14:58 2025 GMT
Not After : Jun 16 07:20:58 2025 GMT
Subject: CN=D11D7ACD575D29528814D745AF48286FA83592A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:86:a3:aa:0c:f8:03:b1:82:c7:31:3d:e0:b8:
0d:95:b1:ae:15:31:6d:6b:87:a6:17:70:6c:ed:05:
30:a0:82:e0:4f:3e:e4:40:72:c3:0d:bc:3b:24:66:
20:31:60:2a:a1:d6:87:be:68:b3:c1:a7:d4:dd:5f:
2a:e8:63:4f:2a:9a:d6:98:eb:44:26:c4:18:fd:9f:
f9:94:0e:d7:54:ac:51:2c:dc:0d:59:43:90:85:1e:
96:9a:a3:4f:a2:11:a6:81:90:41:bc:76:11:74:f6:
10:fb:94:b8:48:8a:bf:2e:96:b9:f9:f7:64:06:c8:
f3:eb:73:84:b2:96:5e:55:60:8c:b1:f7:44:0b:aa:
ce:23:d7:a6:1c:dd:29:95:c4:83:84:cf:26:90:40:
a4:e5:73:b4:9b:2e:e9:f3:37:12:b9:23:39:31:02:
95:b1:3b:b7:69:89:ee:df:6c:da:1f:e5:b6:cc:02:
f8:c9:8a:99:48:0d:4d:b8:e2:33:e6:b9:e1:16:95:
5d:5f:b0:65:9d:7c:90:3a:1b:fd:cf:fb:2c:9d:3a:
40:c9:66:8d:a2:11:b3:32:a3:1b:d8:7e:c5:83:63:
45:ee:11:71:52:93:a3:bc:1e:ea:22:55:46:b6:78:
de:b7:03:75:f1:9f:0a:53:03:4f:49:e4:31:3e:1c:
e1:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:1D:7A:CD:57:5D:29:52:88:14:D7:45:AF:48:28:6F:A8:35:92:A9
X509v3 Authority Key Identifier:
keyid:D0:2B:BB:44:0B:9D:D4:40:88:DB:68:4E:E8:2F:A2:A7:DA:06:FC:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Cu7RAud1ECI22hO6C-ip9oG_PY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:40:c9:23:a9:ea:02:cf:78:63:ba:7e:65:8f:e9:20:2b:f4:
ca:da:c9:77:dd:cf:c6:26:19:5c:9f:fb:3f:8a:79:ae:45:1d:
a7:c2:c5:5d:b2:26:7f:f9:e1:07:17:ae:5e:2c:3e:7c:05:cc:
49:51:86:d5:eb:f9:a8:7e:5f:c5:14:96:da:c9:1c:e7:8c:d2:
28:65:8d:f8:04:3e:35:dc:53:b9:14:94:85:f7:b8:a6:ab:ae:
cb:c3:6d:23:d2:f3:a5:be:03:7b:aa:90:ba:d7:1c:8f:20:a8:
f1:7f:61:dc:d7:9f:b4:85:a4:2b:88:0f:40:37:48:ba:45:21:
20:6a:9f:a4:c0:ac:61:1d:1d:90:77:08:41:78:0c:ea:ba:c7:
d6:69:fb:81:5c:86:8e:49:44:f7:36:95:8b:88:75:15:a0:dd:
84:ee:0d:22:76:f9:a0:8d:b8:91:ec:22:5e:0c:0f:b4:2f:50:
e6:77:68:3d:7f:ec:23:66:57:79:c3:90:14:43:96:0b:e3:26:
fa:c6:b6:2f:36:50:60:7a:b8:4b:e5:79:3f:53:81:ff:bb:2a:
95:79:c8:ef:01:a2:74:62:dd:6c:54:b6:f3:3d:67:db:00:c6:
0b:9f:f1:57:ba:bc:ea:36:45:00:b4:42:bd:97:65:48:e7:cf:
6b:39:35:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 19:25:18 2025 by rpki-client