Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/39721b99-0b2e-4f77-9a2f-8c335a3e27ad/0/DC6B06B855BF97C397BDB8516944B4DB18663F92.mft
File: DC6B06B855BF97C397BDB8516944B4DB18663F92.mft (raw, json)
Hash identifier: QWFBoc63cORg+sctulBPM5tiwUR5nmT+T+gx5n4rpto=
Subject key identifier: 00:7D:72:AF:A3:74:7E:0A:18:E8:24:2D:EA:1A:D5:00:17:27:E8:CC
Authority key identifier: DC:6B:06:B8:55:BF:97:C3:97:BD:B8:51:69:44:B4:DB:18:66:3F:92
Certificate issuer: /CN=dc6b06b855bf97c397bdb8516944b4db18663f92
Certificate serial: 1C28E19E8BD1397870E0E84E471673818699D805
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3GsGuFW_l8OXvbhRaUS02xhmP5I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/39721b99-0b2e-4f77-9a2f-8c335a3e27ad/0/DC6B06B855BF97C397BDB8516944B4DB18663F92.mft
Manifest number: 02B9
Signing time: Sun 27 Apr 2025 18:31:50 +0000
Manifest this update: Sun 27 Apr 2025 18:26:50 +0000
Manifest next update: Mon 28 Apr 2025 19:33:50 +0000
Files and hashes: 1: DC6B06B855BF97C397BDB8516944B4DB18663F92.crl (hash: /0dLpCGbDaYb7HADqfTctI9sFT5scw9PFPs2UfaCWuw=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/39721b99-0b2e-4f77-9a2f-8c335a3e27ad/0/DC6B06B855BF97C397BDB8516944B4DB18663F92.crl
rsync://rsync.paas.rpki.ripe.net/repository/39721b99-0b2e-4f77-9a2f-8c335a3e27ad/0/DC6B06B855BF97C397BDB8516944B4DB18663F92.mft
rsync://rpki.ripe.net/repository/DEFAULT/3GsGuFW_l8OXvbhRaUS02xhmP5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 19:33:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:28:e1:9e:8b:d1:39:78:70:e0:e8:4e:47:16:73:81:86:99:d8:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc6b06b855bf97c397bdb8516944b4db18663f92
Validity
Not Before: Apr 27 18:26:50 2025 GMT
Not After : Apr 28 19:33:50 2025 GMT
Subject: CN=007D72AFA3747E0A18E8242DEA1AD5001727E8CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ff:d3:d2:1f:ed:ec:94:ea:0e:d2:63:fe:fa:
aa:44:76:56:e7:e7:fd:01:c3:bf:7c:12:d3:60:a5:
f7:8d:30:fe:c6:57:98:81:df:4e:75:2f:07:43:5a:
00:fe:ad:29:ec:eb:f5:bd:f5:bb:7b:af:c7:73:ad:
a9:53:c2:01:34:02:41:c3:09:c2:09:fd:32:ab:ca:
96:5f:89:9a:c9:22:6a:cb:8c:1b:bc:53:b6:33:5c:
9c:36:7f:d4:66:7a:a4:da:5c:d7:3f:d3:fb:d9:69:
96:9e:50:24:b9:b0:e6:02:61:cb:19:a8:c8:76:3a:
c6:3a:c6:e4:a6:da:54:8e:45:02:c1:33:94:8b:74:
1d:63:6a:8f:ad:ac:2f:dc:68:83:66:5f:be:f9:39:
2d:97:2e:ca:49:50:d8:6b:31:f8:ff:18:7f:78:da:
2f:f5:bb:e8:73:d7:59:59:6a:ca:02:56:69:96:6f:
06:0c:b9:a5:32:fd:0b:26:b2:7f:b2:e0:1f:92:fb:
f6:c9:2c:61:ca:b1:d6:7b:56:15:71:e9:69:01:55:
fd:7f:35:69:c1:6e:24:77:a7:80:95:2f:c2:86:08:
57:9d:d2:41:8e:e6:7c:24:0c:13:ee:e6:6f:03:b7:
b9:3f:3a:75:49:37:b1:6e:21:44:62:1a:f0:8f:47:
f8:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:7D:72:AF:A3:74:7E:0A:18:E8:24:2D:EA:1A:D5:00:17:27:E8:CC
X509v3 Authority Key Identifier:
keyid:DC:6B:06:B8:55:BF:97:C3:97:BD:B8:51:69:44:B4:DB:18:66:3F:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/39721b99-0b2e-4f77-9a2f-8c335a3e27ad/0/DC6B06B855BF97C397BDB8516944B4DB18663F92.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3GsGuFW_l8OXvbhRaUS02xhmP5I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/39721b99-0b2e-4f77-9a2f-8c335a3e27ad/0/DC6B06B855BF97C397BDB8516944B4DB18663F92.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:41:b4:24:31:60:25:92:5b:66:6b:00:c8:95:d5:70:bb:ce:
19:24:d2:8c:95:eb:6e:7c:85:df:5b:82:32:2a:9d:48:a6:af:
e4:96:79:0b:09:d1:a9:17:5a:69:b8:c3:0b:8e:12:c9:78:3d:
95:c8:59:10:fa:1c:fe:a8:21:70:4d:1d:8e:76:c5:14:cb:76:
58:b9:1f:57:b0:7d:56:fb:4a:e3:05:ad:25:d0:39:54:f0:73:
00:17:fc:0f:0a:b6:33:5e:5e:f0:be:cf:5d:0f:c0:41:46:37:
2f:29:54:e8:ea:58:cd:1c:11:54:fb:3f:2a:dc:0d:ce:ea:43:
dd:be:a5:d1:f1:98:ab:30:51:93:8d:22:04:b6:f8:19:bb:49:
60:92:9d:13:98:cb:2f:7f:3a:df:e0:5d:c4:d0:a3:54:f5:19:
08:69:0d:90:bb:a7:3c:ba:f2:ca:c5:2e:ac:76:cd:e1:79:8f:
af:f0:4e:5f:f0:c7:d2:31:61:9d:41:aa:69:f7:49:23:90:ac:
44:4d:41:52:cf:b1:6e:5b:95:44:c9:7e:b7:7a:3a:7c:a2:3d:
aa:04:9d:89:e6:26:3f:10:d3:f6:e4:34:9b:9b:df:4f:f2:06:
c1:bb:f3:d3:94:06:5c:7e:5f:b8:6c:ba:ca:f3:79:76:8e:4a:
86:79:7a:7c
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUHCjhnovROXhw4OhORxZzgYaZ2AUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZGM2YjA2Yjg1NWJmOTdjMzk3YmRiODUxNjk0NGI0ZGIx
ODY2M2Y5MjAeFw0yNTA0MjcxODI2NTBaFw0yNTA0MjgxOTMzNTBaMDMxMTAvBgNV
BAMTKDAwN0Q3MkFGQTM3NDdFMEExOEU4MjQyREVBMUFENTAwMTcyN0U4Q0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN/9PSH+3slOoO0mP++qpEdlbn
5/0Bw798EtNgpfeNMP7GV5iB3051LwdDWgD+rSns6/W99bt7r8dzralTwgE0AkHD
CcIJ/TKrypZfiZrJImrLjBu8U7YzXJw2f9RmeqTaXNc/0/vZaZaeUCS5sOYCYcsZ
qMh2OsY6xuSm2lSORQLBM5SLdB1jao+trC/caINmX775OS2XLspJUNhrMfj/GH94
2i/1u+hz11lZasoCVmmWbwYMuaUy/Qsmsn+y4B+S+/bJLGHKsdZ7VhVx6WkBVf1/
NWnBbiR3p4CVL8KGCFed0kGO5nwkDBPu5m8Dt7k/OnVJN7FuIURiGvCPR/gBAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUAH1yr6N0fgoY6CQt6hrVABcn6MwwHwYDVR0j
BBgwFoAU3GsGuFW/l8OXvbhRaUS02xhmP5IwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMzk3MjFiOTktMGIyZS00Zjc3LTlhMmYtOGMzMzVhM2Uy
N2FkLzAvREM2QjA2Qjg1NUJGOTdDMzk3QkRCODUxNjk0NEI0REIxODY2M0Y5Mi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNHc0d1RldfbDhPWHZiaFJhVVMwMnho
bVA1SS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zOTcyMWI5OS0w
YjJlLTRmNzctOWEyZi04YzMzNWEzZTI3YWQvMC9EQzZCMDZCODU1QkY5N0MzOTdC
REI4NTE2OTQ0QjREQjE4NjYzRjkyLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeEG0JDFgJZJbZmsAyJXV
cLvOGSTSjJXrbnyF31uCMiqdSKav5JZ5CwnRqRdaabjDC44SyXg9lchZEPoc/qgh
cE0djnbFFMt2WLkfV7B9VvtK4wWtJdA5VPBzABf8Dwq2M15e8L7PXQ/AQUY3LylU
6OpYzRwRVPs/KtwNzupD3b6l0fGYqzBRk40iBLb4GbtJYJKdE5jLL3863+BdxNCj
VPUZCGkNkLunPLryysUurHbN4XmPr/BOX/DH0jFhnUGqafdJI5CsRE1BUs+xbluV
RMl+t3o6fKI9qgSdieYmPxDT9uQ0m5vfT/IGwbvz05QGXH5fuGy6yvN5do5Khnl6
fA==
-----END CERTIFICATE-----
Generated at Mon Apr 28 05:32:41 2025 by rpki-client