Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.mft
File: E8BC9876174D9A7385FCE9343E2BB7D98F523B11.mft (raw, json)
Hash identifier: 6IYPF8qRqwPvVrsB81KHFlUeGDPRfTuh7jN6RHydC30=
Subject key identifier: C5:11:50:D8:00:B8:E1:E2:78:19:53:49:9C:12:9F:DE:5D:F8:73:A3
Authority key identifier: E8:BC:98:76:17:4D:9A:73:85:FC:E9:34:3E:2B:B7:D9:8F:52:3B:11
Certificate issuer: /CN=e8bc9876174d9a7385fce9343e2bb7d98f523b11
Certificate serial: 124BFE0376D357318994D22FEDF29468B1F74BD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6LyYdhdNmnOF_Ok0Piu32Y9SOxE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.mft
Manifest number: 03CC
Signing time: Sun 27 Apr 2025 20:24:38 +0000
Manifest this update: Sun 27 Apr 2025 20:19:38 +0000
Manifest next update: Mon 28 Apr 2025 23:39:38 +0000
Files and hashes: 1: E8BC9876174D9A7385FCE9343E2BB7D98F523B11.crl (hash: UynaQcFxAAGWnfCi+LApYu9nReNMi8XoLoFTdnwH3L4=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.crl
rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.mft
rsync://rpki.ripe.net/repository/DEFAULT/6LyYdhdNmnOF_Ok0Piu32Y9SOxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:39:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:4b:fe:03:76:d3:57:31:89:94:d2:2f:ed:f2:94:68:b1:f7:4b:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8bc9876174d9a7385fce9343e2bb7d98f523b11
Validity
Not Before: Apr 27 20:19:38 2025 GMT
Not After : Apr 28 23:39:38 2025 GMT
Subject: CN=C51150D800B8E1E2781953499C129FDE5DF873A3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:11:23:50:2d:14:a9:22:4a:5c:a7:d9:be:8c:
96:5b:44:37:69:5c:1a:62:9a:7e:09:90:87:a2:98:
57:75:96:2e:51:77:29:b5:c2:13:01:ab:f3:fb:14:
98:d9:26:a4:6d:b9:0e:54:24:74:fd:c8:5a:48:76:
bb:9e:14:67:f5:19:12:e0:44:35:d2:d7:44:f0:9f:
60:68:27:73:d6:85:60:df:58:c8:6c:01:19:0e:48:
f5:63:45:41:06:11:26:c5:f7:0f:fa:d2:2c:59:02:
dc:3c:98:5e:1d:5e:87:62:36:a4:82:ba:94:f4:b2:
cc:80:b5:ab:bb:53:c3:25:58:bf:45:c1:bb:c5:b5:
9a:1e:50:9e:e7:3f:4d:da:a6:6f:04:72:2e:34:2e:
6d:1c:6d:4c:37:f3:b2:93:83:5a:60:14:d4:c6:87:
ba:34:11:4d:af:0e:5d:6e:b0:24:d7:6f:1f:ba:3c:
c4:ab:60:70:08:bd:2d:30:b1:8b:f1:11:55:41:49:
6b:96:a3:dc:80:ba:34:3f:14:be:4a:7c:79:7c:49:
b0:b7:71:32:01:1b:4c:eb:b7:31:f0:9d:a9:77:32:
1d:c9:c7:03:9a:c6:6c:6b:15:ed:1a:e4:ed:12:ab:
d1:9d:22:ec:a3:53:b7:bd:d5:fe:73:f8:6a:1d:07:
e1:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:11:50:D8:00:B8:E1:E2:78:19:53:49:9C:12:9F:DE:5D:F8:73:A3
X509v3 Authority Key Identifier:
keyid:E8:BC:98:76:17:4D:9A:73:85:FC:E9:34:3E:2B:B7:D9:8F:52:3B:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6LyYdhdNmnOF_Ok0Piu32Y9SOxE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:55:73:fa:30:88:8c:55:1d:0c:82:de:b7:51:9c:2b:76:07:
a6:0f:f5:bc:54:10:d0:61:4f:d3:cf:bb:83:47:70:d4:2b:4c:
93:98:0e:78:ed:be:a8:5b:6f:61:4a:c0:22:26:1b:10:0e:51:
b0:a6:da:60:4b:42:be:15:21:44:85:6e:00:d5:0a:a1:17:e7:
4d:c7:55:b6:e6:80:6c:7f:65:40:47:5b:0a:71:0c:a3:b0:3d:
f6:8b:fc:f0:9b:f9:0a:14:99:ba:e6:9e:5d:f4:df:39:82:89:
4e:77:b1:4f:61:7c:9b:be:5c:a7:60:b6:36:ef:cd:02:e3:3e:
6c:d6:61:45:ad:3f:78:ef:43:3f:a3:c2:f7:fb:e6:36:aa:e6:
e4:ca:63:dd:ae:d3:14:bd:75:f7:a3:23:3a:22:30:21:79:07:
4d:ac:17:6f:8c:72:26:7c:40:65:26:ed:f4:1d:a4:40:a7:4a:
ee:53:19:5e:6d:02:b2:93:ba:15:ec:31:0e:09:d3:f7:a2:86:
14:57:2c:1e:07:81:de:ac:f3:fa:3a:f5:0c:7e:16:e4:fe:ff:
97:78:fd:44:12:a8:41:9b:05:09:a9:48:70:6f:eb:b6:44:8f:
31:ce:4f:91:73:22:a2:19:85:58:d5:50:78:a6:7d:cd:da:1b:
aa:c6:ff:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 14:20:08 2025 by rpki-client