Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/0/2211E25C2234C1E5A2BFCF7FDCAC54B01AF373BD.mft
File: 2211E25C2234C1E5A2BFCF7FDCAC54B01AF373BD.mft (raw, json)
Hash identifier: ICTLY9V7MygtkRn63/fgdu/Kzi/YdAIu8beNfqUSn2I=
Subject key identifier: 75:69:9E:B3:FA:FB:C8:8E:07:85:98:5F:28:0A:3C:72:C1:DC:57:FA
Authority key identifier: 22:11:E2:5C:22:34:C1:E5:A2:BF:CF:7F:DC:AC:54:B0:1A:F3:73:BD
Certificate issuer: /CN=2211e25c2234c1e5a2bfcf7fdcac54b01af373bd
Certificate serial: 610E4EE724F326A4302E67B80F98AAE1888EB2AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IhHiXCI0weWiv89_3KxUsBrzc70.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/0/2211E25C2234C1E5A2BFCF7FDCAC54B01AF373BD.mft
Manifest number: 0280
Signing time: Sun 27 Apr 2025 23:01:44 +0000
Manifest this update: Sun 27 Apr 2025 22:56:44 +0000
Manifest next update: Tue 29 Apr 2025 02:22:44 +0000
Files and hashes: 1: 2211E25C2234C1E5A2BFCF7FDCAC54B01AF373BD.crl (hash: EUIY4yNnlFJM1pHKeJtg3h3QExCOCvUJyijgxJbda/s=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/0/2211E25C2234C1E5A2BFCF7FDCAC54B01AF373BD.crl
rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/0/2211E25C2234C1E5A2BFCF7FDCAC54B01AF373BD.mft
rsync://rpki.ripe.net/repository/DEFAULT/IhHiXCI0weWiv89_3KxUsBrzc70.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:0e:4e:e7:24:f3:26:a4:30:2e:67:b8:0f:98:aa:e1:88:8e:b2:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2211e25c2234c1e5a2bfcf7fdcac54b01af373bd
Validity
Not Before: Apr 27 22:56:44 2025 GMT
Not After : Apr 29 02:22:44 2025 GMT
Subject: CN=75699EB3FAFBC88E0785985F280A3C72C1DC57FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d1:ab:58:39:71:ef:b8:db:b4:06:97:5e:fe:
14:ac:e2:4c:3e:38:c9:5b:09:4e:b8:2e:89:2c:ec:
e8:86:86:2b:44:c8:11:fc:da:32:24:00:e2:20:0b:
eb:d2:3a:1f:ae:13:ef:da:0c:da:5b:00:d9:9d:80:
24:21:65:a4:db:8a:15:bf:ca:8f:d8:31:e2:bb:0b:
f8:22:de:e0:12:ec:b4:27:76:b9:1b:bd:d8:66:45:
7f:8b:71:38:3a:3c:c7:31:7f:c2:e9:9b:12:4b:64:
82:36:dd:ce:e1:61:51:c4:f6:e8:94:a6:cf:09:fa:
51:b4:cb:18:e3:2d:9d:e3:3a:6d:1f:9d:20:5a:f5:
69:61:a6:c1:52:8a:39:dc:ef:51:15:32:4b:94:90:
81:bb:61:46:6a:fb:89:52:ea:02:f5:dc:c4:fc:24:
aa:3e:10:17:94:d6:12:49:2a:9a:e9:d9:8a:d8:63:
eb:64:91:fc:22:26:21:8e:56:8e:99:42:c1:3a:d7:
79:ef:36:97:76:66:bd:f0:9d:f9:8d:2c:26:a8:1e:
cc:16:3a:61:d2:29:b7:46:15:17:e1:40:56:d7:84:
5a:2a:84:22:f7:ff:c3:5d:62:2a:db:62:c9:e9:aa:
ad:65:e8:b2:1d:64:17:15:db:d7:80:c3:7e:45:f9:
41:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:69:9E:B3:FA:FB:C8:8E:07:85:98:5F:28:0A:3C:72:C1:DC:57:FA
X509v3 Authority Key Identifier:
keyid:22:11:E2:5C:22:34:C1:E5:A2:BF:CF:7F:DC:AC:54:B0:1A:F3:73:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/0/2211E25C2234C1E5A2BFCF7FDCAC54B01AF373BD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IhHiXCI0weWiv89_3KxUsBrzc70.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/0/2211E25C2234C1E5A2BFCF7FDCAC54B01AF373BD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:de:f6:1d:b1:7c:36:40:ff:2a:0d:fd:a8:e6:6d:b4:12:44:
ff:f3:8f:86:d8:e0:33:f9:ac:ad:df:cb:f8:99:29:9e:27:64:
32:66:5c:4f:19:cc:66:1a:a1:02:85:eb:2a:e2:40:27:33:95:
90:e1:89:0b:0d:5a:ee:49:22:e0:8e:19:19:5c:e8:b1:b1:af:
c3:6c:5a:9f:24:bb:b6:35:5f:be:af:65:3b:40:94:68:f4:90:
d4:01:d1:30:85:36:a8:7b:3e:31:0f:85:d9:8e:33:0f:66:52:
21:0a:46:32:d1:d7:39:37:b2:44:92:14:6c:05:89:b1:b4:52:
d9:9c:80:c3:40:a3:77:48:9f:37:40:20:ce:f0:21:9a:cd:04:
6b:c2:c2:9b:3f:68:97:aa:e7:b4:c6:2d:f4:f2:7a:69:b4:10:
4c:cb:86:08:ab:5d:c4:ea:63:8c:a2:4e:8a:f1:7b:10:11:a7:
40:c3:2b:b4:6c:ec:12:a5:59:bf:ff:55:c0:b5:97:76:c0:8f:
ba:58:b4:9a:00:9c:1b:da:c7:60:99:16:fb:11:88:41:86:a6:
18:67:ab:89:1b:23:7a:51:82:35:48:5c:30:2c:19:f3:84:0a:
d8:f0:fb:ba:5e:78:19:3a:f4:d2:8e:e2:0a:f2:65:c3:18:d3:
2c:73:9f:52
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUYQ5O5yTzJqQwLme4D5iq4YiOsqowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjIxMWUyNWMyMjM0YzFlNWEyYmZjZjdmZGNhYzU0YjAx
YWYzNzNiZDAeFw0yNTA0MjcyMjU2NDRaFw0yNTA0MjkwMjIyNDRaMDMxMTAvBgNV
BAMTKDc1Njk5RUIzRkFGQkM4OEUwNzg1OTg1RjI4MEEzQzcyQzFEQzU3RkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC00atYOXHvuNu0Bpde/hSs4kw+
OMlbCU64Loks7OiGhitEyBH82jIkAOIgC+vSOh+uE+/aDNpbANmdgCQhZaTbihW/
yo/YMeK7C/gi3uAS7LQndrkbvdhmRX+LcTg6PMcxf8LpmxJLZII23c7hYVHE9uiU
ps8J+lG0yxjjLZ3jOm0fnSBa9WlhpsFSijnc71EVMkuUkIG7YUZq+4lS6gL13MT8
JKo+EBeU1hJJKprp2YrYY+tkkfwiJiGOVo6ZQsE613nvNpd2Zr3wnfmNLCaoHswW
OmHSKbdGFRfhQFbXhFoqhCL3/8NdYirbYsnpqq1l6LIdZBcV29eAw35F+UG/AgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUdWmes/r7yI4HhZhfKAo8csHcV/owHwYDVR0j
BBgwFoAUIhHiXCI0weWiv89/3KxUsBrzc70wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvM2RhNGQ4YjQtYTE1Ny00NjM0LWFiMTgtM2VmOWQwOTgy
MzUyLzAvMjIxMUUyNUMyMjM0QzFFNUEyQkZDRjdGRENBQzU0QjAxQUYzNzNCRC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0loSGlYQ0kwd2VXaXY4OV8zS3hVc0Jy
emM3MC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zZGE0ZDhiNC1h
MTU3LTQ2MzQtYWIxOC0zZWY5ZDA5ODIzNTIvMC8yMjExRTI1QzIyMzRDMUU1QTJC
RkNGN0ZEQ0FDNTRCMDFBRjM3M0JELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUd72HbF8NkD/Kg39qOZt
tBJE//OPhtjgM/msrd/L+JkpnidkMmZcTxnMZhqhAoXrKuJAJzOVkOGJCw1a7kki
4I4ZGVzosbGvw2xanyS7tjVfvq9lO0CUaPSQ1AHRMIU2qHs+MQ+F2Y4zD2ZSIQpG
MtHXOTeyRJIUbAWJsbRS2ZyAw0Cjd0ifN0AgzvAhms0Ea8LCmz9ol6rntMYt9PJ6
abQQTMuGCKtdxOpjjKJOivF7EBGnQMMrtGzsEqVZv/9VwLWXdsCPuli0mgCcG9rH
YJkW+xGIQYamGGeriRsjelGCNUhcMCwZ84QK2PD7ul54GTr00o7iCvJlwxjTLHOf
Ug==
-----END CERTIFICATE-----
Generated at Mon Apr 28 02:10:18 2025 by rpki-client