Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/0/2211E25C2234C1E5A2BFCF7FDCAC54B01AF373BD.mft
File: 2211E25C2234C1E5A2BFCF7FDCAC54B01AF373BD.mft (raw, json)
Hash identifier: 0DWkkF2zAL14/R8KGXrgyASIy6S0ricfmalhmCK3c+w=
Subject key identifier: 07:FF:20:08:ED:20:DA:C2:7C:A4:91:36:FA:92:BA:0E:ED:8E:53:0D
Authority key identifier: 22:11:E2:5C:22:34:C1:E5:A2:BF:CF:7F:DC:AC:54:B0:1A:F3:73:BD
Certificate issuer: /CN=2211e25c2234c1e5a2bfcf7fdcac54b01af373bd
Certificate serial: 35AF0ECB7C3234A24711E309BB8B46DF1E7222D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IhHiXCI0weWiv89_3KxUsBrzc70.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/0/2211E25C2234C1E5A2BFCF7FDCAC54B01AF373BD.mft
Manifest number: 02BF
Signing time: Fri 13 Jun 2025 10:42:32 +0000
Manifest this update: Fri 13 Jun 2025 10:37:32 +0000
Manifest next update: Sat 14 Jun 2025 14:01:32 +0000
Files and hashes: 1: 2211E25C2234C1E5A2BFCF7FDCAC54B01AF373BD.crl (hash: TmTpmXvGE7TNOwYBba/omDR5M3nUDdrLNIVKjDNKJ/E=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/0/2211E25C2234C1E5A2BFCF7FDCAC54B01AF373BD.crl
rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/0/2211E25C2234C1E5A2BFCF7FDCAC54B01AF373BD.mft
rsync://rpki.ripe.net/repository/DEFAULT/IhHiXCI0weWiv89_3KxUsBrzc70.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:af:0e:cb:7c:32:34:a2:47:11:e3:09:bb:8b:46:df:1e:72:22:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2211e25c2234c1e5a2bfcf7fdcac54b01af373bd
Validity
Not Before: Jun 13 10:37:32 2025 GMT
Not After : Jun 14 14:01:32 2025 GMT
Subject: CN=07FF2008ED20DAC27CA49136FA92BA0EED8E530D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:db:e3:bc:09:9d:a3:f7:6e:b2:7f:40:f8:c7:
d1:a8:f0:19:e6:df:7d:40:78:75:97:f7:74:09:4b:
0b:3e:c5:fa:cf:77:58:5b:1b:b7:d0:58:9d:dd:e7:
85:3d:67:ea:2b:15:4b:19:d4:c0:68:69:02:dc:91:
45:4d:9a:c9:3c:38:c7:7a:cf:fd:05:19:36:f7:9f:
66:ca:53:3e:e5:13:73:a0:e2:d8:54:52:c7:39:3f:
e5:fa:0d:f6:56:53:d0:8a:aa:0f:57:f5:81:36:90:
d0:83:d0:58:39:c5:c6:57:a1:71:ca:ef:de:5e:12:
75:08:5e:86:60:c0:77:31:67:97:e6:b2:ed:17:f5:
64:5c:f3:fc:2b:2d:b3:1a:51:37:1b:24:ec:ad:b8:
b5:84:4a:78:ad:e9:7b:41:69:0c:6f:35:80:82:5f:
3a:ee:6e:a0:fe:44:8f:ac:e7:de:ba:ba:42:a9:6d:
a1:be:7f:83:7b:80:b2:d7:b9:15:f8:a0:88:ea:47:
a3:ed:f7:9b:a2:3f:61:4e:95:23:02:b7:b1:7c:31:
e4:0c:1b:33:36:2e:9b:e3:a8:f3:4f:65:cd:ea:7d:
19:b6:a8:bf:76:d0:0a:d6:de:98:70:96:26:5e:53:
a1:04:90:e3:1e:0f:40:16:50:ae:85:c8:63:4e:5f:
33:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:FF:20:08:ED:20:DA:C2:7C:A4:91:36:FA:92:BA:0E:ED:8E:53:0D
X509v3 Authority Key Identifier:
keyid:22:11:E2:5C:22:34:C1:E5:A2:BF:CF:7F:DC:AC:54:B0:1A:F3:73:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/0/2211E25C2234C1E5A2BFCF7FDCAC54B01AF373BD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IhHiXCI0weWiv89_3KxUsBrzc70.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/0/2211E25C2234C1E5A2BFCF7FDCAC54B01AF373BD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:d2:17:1d:ed:cb:40:ea:6d:e3:de:d4:d0:4a:bb:7f:e4:66:
14:af:8f:03:09:85:de:2f:75:b0:48:18:aa:19:ea:94:b7:20:
77:19:35:70:c2:ff:fe:ee:8b:ba:6c:36:3f:21:dd:17:5f:2e:
9e:7e:23:8c:0f:26:60:62:79:d2:ad:86:34:39:a4:32:b1:7a:
98:61:1a:6d:09:87:59:42:40:a4:08:07:a4:e6:4a:46:62:c7:
6a:ca:ba:3d:cc:4d:18:b3:bf:51:8b:ae:a0:db:20:b5:c7:3a:
d1:be:1a:0d:06:36:67:46:61:7e:91:d7:ec:65:8d:54:1b:3e:
f4:d9:e9:df:5d:04:40:8a:55:ae:0d:35:84:87:bc:06:10:8e:
c6:0e:88:d7:05:31:27:b0:cf:3f:0a:5a:95:cd:fc:d3:9d:3c:
25:30:b1:60:be:19:eb:78:fa:79:08:c6:62:21:90:db:68:0f:
5b:0a:2e:9f:fa:b3:7a:5a:d6:f6:fb:34:9f:13:75:20:83:00:
8b:d3:a1:d4:68:97:24:fd:66:04:52:a0:31:0c:77:ab:5b:40:
5d:93:71:dc:fb:c5:85:05:9f:bb:0a:01:37:a7:b9:23:06:3c:
8c:d9:e3:96:1a:ff:45:e3:a6:43:3c:f4:f5:3b:38:85:a4:69:
a6:c2:31:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:24:49 2025 by rpki-client