Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/0/FB64D48D941F2F324279CF863188D26D2056D11D.mft
File: FB64D48D941F2F324279CF863188D26D2056D11D.mft (raw, json)
Hash identifier: nnAaV1PNsAQEPEphX/7k6iOKwONnqyx0OwBtaTNGEwg=
Subject key identifier: 7A:0B:88:06:C7:63:85:E8:8D:46:AA:51:AF:06:4D:4A:16:02:C7:04
Authority key identifier: FB:64:D4:8D:94:1F:2F:32:42:79:CF:86:31:88:D2:6D:20:56:D1:1D
Certificate issuer: /CN=fb64d48d941f2f324279cf863188d26d2056d11d
Certificate serial: 2482D794B9E09CFA722F34E7DBD34F4B62AB8390
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-2TUjZQfLzJCec-GMYjSbSBW0R0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/0/FB64D48D941F2F324279CF863188D26D2056D11D.mft
Manifest number: 02D0
Signing time: Mon 28 Apr 2025 00:32:30 +0000
Manifest this update: Mon 28 Apr 2025 00:27:30 +0000
Manifest next update: Tue 29 Apr 2025 02:52:30 +0000
Files and hashes: 1: FB64D48D941F2F324279CF863188D26D2056D11D.crl (hash: 03sIxEBfxgh04phDVQbyEn6GxWiCf64WBUU09g7sD+U=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/0/FB64D48D941F2F324279CF863188D26D2056D11D.crl
rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/0/FB64D48D941F2F324279CF863188D26D2056D11D.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-2TUjZQfLzJCec-GMYjSbSBW0R0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:82:d7:94:b9:e0:9c:fa:72:2f:34:e7:db:d3:4f:4b:62:ab:83:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb64d48d941f2f324279cf863188d26d2056d11d
Validity
Not Before: Apr 28 00:27:30 2025 GMT
Not After : Apr 29 02:52:30 2025 GMT
Subject: CN=7A0B8806C76385E88D46AA51AF064D4A1602C704
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:17:f5:5c:fa:c5:35:3d:60:e1:b2:8b:f4:b7:
87:e8:e0:6d:a3:f8:20:69:29:fa:9b:87:68:86:ae:
37:7f:38:2c:4b:c1:5a:2c:e0:1d:67:47:28:d8:f2:
b4:9e:1a:30:fd:b4:a3:d2:a8:48:d8:ff:b5:e7:90:
46:b9:50:94:36:87:f6:c8:f0:85:bc:bd:2e:ec:a2:
51:57:cb:be:9a:ec:fc:64:23:9e:dd:b0:f6:24:a1:
db:c4:dc:0c:56:b9:32:2d:65:83:31:6e:44:35:2f:
5f:a5:54:4f:62:ad:33:cf:9a:27:4e:27:fd:f8:76:
c3:c5:24:eb:02:57:78:ec:a5:f5:8c:1d:0d:7f:f5:
45:0b:c8:2a:e7:df:ac:a3:3e:b8:30:0c:4c:51:8e:
1a:fd:78:0d:a7:ac:58:e5:a5:af:ef:bc:50:ac:8f:
40:96:61:8e:ac:c3:3b:da:a4:89:04:34:74:21:93:
fe:e3:72:75:77:b4:9d:90:95:7b:a4:a6:6b:e2:ee:
f0:aa:aa:21:cf:44:d1:c8:10:61:05:b6:c8:3a:17:
3b:a4:c3:8c:eb:67:82:5c:42:e4:67:dd:88:0e:98:
f4:00:b6:f6:56:6a:5e:a4:c9:01:6b:3f:0c:32:1a:
ef:0b:4a:fe:82:2b:13:af:23:64:e9:73:d9:39:be:
8d:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:0B:88:06:C7:63:85:E8:8D:46:AA:51:AF:06:4D:4A:16:02:C7:04
X509v3 Authority Key Identifier:
keyid:FB:64:D4:8D:94:1F:2F:32:42:79:CF:86:31:88:D2:6D:20:56:D1:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/0/FB64D48D941F2F324279CF863188D26D2056D11D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-2TUjZQfLzJCec-GMYjSbSBW0R0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/0/FB64D48D941F2F324279CF863188D26D2056D11D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:28:1e:42:62:e9:4f:6b:ba:6b:62:fb:06:ab:90:8e:6e:96:
db:84:1f:8c:b0:16:64:4a:75:41:46:0f:ef:40:b8:87:9f:1d:
b6:7c:17:2b:97:99:da:c1:81:91:75:26:a9:4c:e6:55:00:e8:
bf:23:55:ea:73:be:5f:11:16:df:96:28:b6:f4:ad:13:d5:87:
b6:08:35:d8:87:49:16:58:fc:22:bd:a2:9a:f6:c2:cb:6b:6f:
94:79:cf:74:b2:8e:76:d6:9c:49:05:c4:fb:22:7d:23:16:b7:
54:07:df:79:2d:35:5c:25:73:c5:3e:d4:d2:79:57:44:7a:11:
13:5d:e9:58:ee:5a:49:9a:0b:2c:ac:1e:55:67:28:0e:d0:81:
d0:6d:89:fb:ea:5e:22:a7:9c:d2:da:87:70:01:b6:b3:1a:30:
ba:4a:8e:16:6a:1a:27:a2:90:28:c5:51:0e:82:60:81:1f:fb:
2a:f4:d9:2c:6d:97:55:cc:24:e3:38:c1:5a:4c:56:1c:a5:86:
5c:0c:d8:df:6d:bd:65:b2:c6:d5:07:24:4d:4b:4b:0a:47:c0:
0b:0b:12:84:9f:48:ec:c9:b9:e2:44:64:22:ec:b6:6b:95:9b:
30:52:7f:e1:18:2e:67:b2:63:e4:2e:b7:e4:e0:7a:2e:b8:c3:
89:43:be:5f
-----BEGIN CERTIFICATE-----
MIIFPjCCBCagAwIBAgIUJILXlLngnPpyLzTn29NPS2Krg5AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZmI2NGQ0OGQ5NDFmMmYzMjQyNzljZjg2MzE4OGQyNmQy
MDU2ZDExZDAeFw0yNTA0MjgwMDI3MzBaFw0yNTA0MjkwMjUyMzBaMDMxMTAvBgNV
BAMTKDdBMEI4ODA2Qzc2Mzg1RTg4RDQ2QUE1MUFGMDY0RDRBMTYwMkM3MDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuF/Vc+sU1PWDhsov0t4fo4G2j
+CBpKfqbh2iGrjd/OCxLwVos4B1nRyjY8rSeGjD9tKPSqEjY/7XnkEa5UJQ2h/bI
8IW8vS7solFXy76a7PxkI57dsPYkodvE3AxWuTItZYMxbkQ1L1+lVE9irTPPmidO
J/34dsPFJOsCV3jspfWMHQ1/9UULyCrn36yjPrgwDExRjhr9eA2nrFjlpa/vvFCs
j0CWYY6swzvapIkENHQhk/7jcnV3tJ2QlXukpmvi7vCqqiHPRNHIEGEFtsg6Fzuk
w4zrZ4JcQuRn3YgOmPQAtvZWal6kyQFrPwwyGu8LSv6CKxOvI2Tpc9k5vo3vAgMB
AAGjggJIMIICRDAdBgNVHQ4EFgQUeguIBsdjheiNRqpRrwZNShYCxwQwHwYDVR0j
BBgwFoAU+2TUjZQfLzJCec+GMYjSbSBW0R0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMzExZTQ3YzQtMDJmMC00NjU3LTkwMjItZDJiODNjZmY4
NzU1LzAvRkI2NEQ0OEQ5NDFGMkYzMjQyNzlDRjg2MzE4OEQyNkQyMDU2RDExRC5j
cmwwZQYIKwYBBQUHAQEEWTBXMFUGCCsGAQUFBzAChklyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEtMlRValpRZkx6SkNlYy1HTVlqU2JT
QlcwUjAuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMzExZTQ3YzQt
MDJmMC00NjU3LTkwMjItZDJiODNjZmY4NzU1LzAvRkI2NEQ0OEQ5NDFGMkYzMjQy
NzlDRjg2MzE4OEQyNkQyMDU2RDExRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF
BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAKIoHkJi6U9rumti+war
kI5ultuEH4ywFmRKdUFGD+9AuIefHbZ8FyuXmdrBgZF1JqlM5lUA6L8jVepzvl8R
Ft+WKLb0rRPVh7YINdiHSRZY/CK9opr2wstrb5R5z3SyjnbWnEkFxPsifSMWt1QH
33ktNVwlc8U+1NJ5V0R6ERNd6VjuWkmaCyysHlVnKA7QgdBtifvqXiKnnNLah3AB
trMaMLpKjhZqGieikCjFUQ6CYIEf+yr02Sxtl1XMJOM4wVpMVhylhlwM2N9tvWWy
xtUHJE1LSwpHwAsLEoSfSOzJueJEZCLstmuVmzBSf+EYLmeyY+Qut+Tgei64w4lD
vl8=
-----END CERTIFICATE-----
Generated at Mon Apr 28 05:33:32 2025 by rpki-client