Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/0/B5703F6700E832900122BBE6A5086441EB37BD2C.mft
File: B5703F6700E832900122BBE6A5086441EB37BD2C.mft (raw, json)
Hash identifier: C2uLVJRGm7KqImvQwOaXtgEramZLO7kyn1FgZYez6EI=
Subject key identifier: C8:EE:AB:F8:3A:D7:0E:DF:B7:64:99:AC:AF:E5:CE:B5:6C:50:02:77
Authority key identifier: B5:70:3F:67:00:E8:32:90:01:22:BB:E6:A5:08:64:41:EB:37:BD:2C
Certificate issuer: /CN=b5703f6700e832900122bbe6a5086441eb37bd2c
Certificate serial: 3205E5F8B2A26733802E4A3793A6E43AFD79F413
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tXA_ZwDoMpABIrvmpQhkQes3vSw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/0/B5703F6700E832900122BBE6A5086441EB37BD2C.mft
Manifest number: 0123
Signing time: Fri 13 Jun 2025 22:51:16 +0000
Manifest this update: Fri 13 Jun 2025 22:46:16 +0000
Manifest next update: Sat 14 Jun 2025 23:56:16 +0000
Files and hashes: 1: B5703F6700E832900122BBE6A5086441EB37BD2C.crl (hash: fN8UQvqRbCA+kR/m0ta0Q/BvF2HnsTGr/y2hHrC5vkA=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/0/B5703F6700E832900122BBE6A5086441EB37BD2C.crl
rsync://rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/0/B5703F6700E832900122BBE6A5086441EB37BD2C.mft
rsync://rpki.ripe.net/repository/DEFAULT/tXA_ZwDoMpABIrvmpQhkQes3vSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 23:56:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:05:e5:f8:b2:a2:67:33:80:2e:4a:37:93:a6:e4:3a:fd:79:f4:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5703f6700e832900122bbe6a5086441eb37bd2c
Validity
Not Before: Jun 13 22:46:16 2025 GMT
Not After : Jun 14 23:56:16 2025 GMT
Subject: CN=C8EEABF83AD70EDFB76499ACAFE5CEB56C500277
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:77:1d:7d:5b:93:93:47:a8:27:28:06:8a:ec:
14:6e:4c:ac:8f:33:54:91:24:dd:9e:db:1b:83:37:
38:62:88:e4:eb:12:2c:15:58:22:8a:65:46:f6:b4:
3f:ae:de:b4:7d:06:dd:bd:cd:85:6a:e3:b4:3d:28:
84:5d:6e:e0:12:68:3c:71:6b:75:b3:3b:50:e9:38:
ff:be:60:48:b3:e9:af:1e:e0:56:0e:69:51:5e:55:
ad:63:c0:6b:2e:71:1c:85:0b:ff:6a:e9:ec:16:67:
ee:00:be:ee:0b:5b:d6:1f:bb:4a:d9:6b:2e:d5:e5:
d6:c0:5d:1e:8a:a8:14:04:eb:ad:79:33:65:90:bb:
ea:71:31:3f:8e:7c:36:4a:b9:08:64:39:14:73:e3:
6f:1f:0a:eb:41:c6:c4:ea:c4:85:85:05:8c:00:83:
f0:70:fd:c1:84:7f:f5:f7:75:69:11:2d:f8:28:b8:
b3:95:1a:55:46:24:93:1d:59:13:8d:5f:60:b2:45:
9c:51:78:ab:f9:00:e2:03:62:a8:56:08:14:28:73:
48:d5:bd:03:90:22:fc:42:ba:01:ed:87:90:de:99:
54:35:75:43:76:36:34:5d:f4:28:77:3e:b5:33:a1:
f0:7e:9b:13:bb:e3:80:da:58:ee:b9:13:80:63:1b:
8d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:EE:AB:F8:3A:D7:0E:DF:B7:64:99:AC:AF:E5:CE:B5:6C:50:02:77
X509v3 Authority Key Identifier:
keyid:B5:70:3F:67:00:E8:32:90:01:22:BB:E6:A5:08:64:41:EB:37:BD:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/0/B5703F6700E832900122BBE6A5086441EB37BD2C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tXA_ZwDoMpABIrvmpQhkQes3vSw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/0/B5703F6700E832900122BBE6A5086441EB37BD2C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:47:24:fb:1c:6f:e3:81:ad:ff:1e:2d:4b:3e:d7:aa:c3:f7:
36:7a:2b:ce:18:2b:39:47:f3:86:a8:8d:9e:f5:9e:a8:02:17:
17:cf:0c:3e:8c:f7:ad:d2:36:c3:69:b2:2b:2d:e4:40:69:21:
98:37:91:aa:08:1e:04:fb:41:5c:40:35:b3:f4:6f:13:8e:69:
ee:38:c8:3d:1a:96:ed:49:fe:36:1d:93:62:ce:6f:44:d2:0d:
aa:3e:cb:67:17:48:a3:90:bb:4f:40:90:a9:b4:aa:50:18:6d:
44:e9:4c:2d:a0:67:66:a8:9d:e3:b7:56:3a:dc:4b:6a:d5:d8:
23:3c:98:e5:b9:16:29:29:cf:78:fd:38:87:e2:2a:e2:22:ff:
1c:86:5d:e8:86:78:b6:39:56:82:3f:04:f1:4c:15:b2:56:ce:
d4:63:54:c2:f2:31:81:b0:e4:a4:f1:58:69:58:3f:20:93:09:
48:03:ef:05:ea:d8:10:01:fa:94:71:fb:80:89:71:ac:e6:17:
4e:5c:e6:c7:6c:b3:8d:04:72:84:e5:9f:c2:4c:ee:85:fb:87:
3d:7b:49:9f:9b:5c:e4:53:48:28:e3:d7:bf:22:c2:5c:16:0f:
a2:ca:0d:9c:58:49:e7:6d:c0:47:f1:85:79:e1:9c:13:04:58:
77:d9:5c:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:43:35 2025 by rpki-client