Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ebc533f-7f31-4bd6-874d-e736e9fde5bd/0/6464045DA5BED0687D15CBDA67A04EB87A8FB03E.mft
File: 6464045DA5BED0687D15CBDA67A04EB87A8FB03E.mft (raw, json)
Hash identifier: mF39Sd7FA3VGU6Le0n9Tk8GpLbHvd9Y3H5ETgb81mzk=
Subject key identifier: 0D:9C:D2:BB:56:DD:9D:4B:BF:D9:64:A6:D8:46:FC:75:72:CF:BC:EC
Authority key identifier: 64:64:04:5D:A5:BE:D0:68:7D:15:CB:DA:67:A0:4E:B8:7A:8F:B0:3E
Certificate issuer: /CN=6464045da5bed0687d15cbda67a04eb87a8fb03e
Certificate serial: 5FCF333278DB30AC05F5BCF5E37B5B5DCC81660B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZGQEXaW-0Gh9FcvaZ6BOuHqPsD4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ebc533f-7f31-4bd6-874d-e736e9fde5bd/0/6464045DA5BED0687D15CBDA67A04EB87A8FB03E.mft
Manifest number: 02A0
Signing time: Fri 13 Jun 2025 07:12:46 +0000
Manifest this update: Fri 13 Jun 2025 07:07:46 +0000
Manifest next update: Sat 14 Jun 2025 09:39:46 +0000
Files and hashes: 1: 6464045DA5BED0687D15CBDA67A04EB87A8FB03E.crl (hash: OtHlFmVbU8PG9iT7d5GnG96DOHmmkrE/nbFkhGgOQzc=)
2: 3138352e33312e3230322e302f32342d3234203d3e2037303138.roa (hash: iL7YLdjFSsy+StKeV2OynMplvfVvVqa5nzn9JGMln1g=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ebc533f-7f31-4bd6-874d-e736e9fde5bd/0/6464045DA5BED0687D15CBDA67A04EB87A8FB03E.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ebc533f-7f31-4bd6-874d-e736e9fde5bd/0/6464045DA5BED0687D15CBDA67A04EB87A8FB03E.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZGQEXaW-0Gh9FcvaZ6BOuHqPsD4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 09:39:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:cf:33:32:78:db:30:ac:05:f5:bc:f5:e3:7b:5b:5d:cc:81:66:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6464045da5bed0687d15cbda67a04eb87a8fb03e
Validity
Not Before: Jun 13 07:07:46 2025 GMT
Not After : Jun 14 09:39:46 2025 GMT
Subject: CN=0D9CD2BB56DD9D4BBFD964A6D846FC7572CFBCEC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c1:54:9c:95:54:a5:75:05:61:2a:26:84:fc:
94:25:9b:53:b6:2d:2d:34:43:ab:92:d7:b7:dd:c7:
e8:4c:2b:b6:45:e4:f1:a9:a9:62:63:c4:1c:c0:0f:
df:ac:11:ee:7a:cb:8e:5d:80:f4:58:55:6c:84:12:
6f:a3:1b:33:05:d8:02:5e:92:12:8e:58:f1:7c:20:
fb:f5:29:13:ca:48:84:74:43:2d:19:47:79:fb:b1:
6f:37:35:d7:3b:49:49:b0:f3:24:32:60:cd:37:b3:
c8:1e:db:28:ec:ea:c5:15:a2:25:cd:f7:a0:18:ed:
32:68:1d:72:4c:49:79:97:8b:c4:f2:48:e0:48:b1:
18:9a:ba:ca:fe:11:c9:94:95:55:11:8f:04:0d:f3:
ba:61:34:11:55:57:f1:22:41:a5:63:5a:a2:73:f0:
d6:ea:17:a5:6a:5d:41:c2:40:31:60:b0:c7:fd:2e:
f8:7a:e0:2b:3e:10:af:15:f6:64:4d:76:dd:8a:3a:
00:c1:f6:52:e3:0f:7b:eb:27:fc:2c:84:df:33:ae:
fc:28:e3:6f:d2:e0:8a:b9:48:a7:da:f9:c8:0f:a1:
47:db:28:72:61:ac:bc:40:47:50:e8:eb:c9:af:7f:
6d:b1:a2:d1:39:85:5e:52:1b:75:38:62:39:e1:9b:
a3:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:9C:D2:BB:56:DD:9D:4B:BF:D9:64:A6:D8:46:FC:75:72:CF:BC:EC
X509v3 Authority Key Identifier:
keyid:64:64:04:5D:A5:BE:D0:68:7D:15:CB:DA:67:A0:4E:B8:7A:8F:B0:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ebc533f-7f31-4bd6-874d-e736e9fde5bd/0/6464045DA5BED0687D15CBDA67A04EB87A8FB03E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZGQEXaW-0Gh9FcvaZ6BOuHqPsD4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ebc533f-7f31-4bd6-874d-e736e9fde5bd/0/6464045DA5BED0687D15CBDA67A04EB87A8FB03E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:c2:18:df:25:9a:54:63:e5:11:1c:55:a4:0d:53:af:ae:f2:
7f:0f:1a:48:d5:7c:b2:c2:7d:36:e4:69:99:51:48:8c:7c:50:
d2:bd:b2:86:a3:17:e7:49:a7:72:fb:b4:8b:c8:35:8c:7e:f1:
f8:b7:69:d7:55:16:ef:2e:57:7d:ae:ef:40:fa:e5:1f:52:56:
5d:41:44:f5:e0:45:e5:af:68:c2:73:d8:51:b0:37:2b:f3:12:
19:af:a7:b9:d9:2a:84:3f:3f:1c:c1:4e:12:5c:3a:39:7e:2f:
ca:ae:a7:bd:5f:5b:e8:a0:eb:17:e9:b5:45:0f:5e:9a:2e:2f:
f5:e2:9d:3a:32:48:37:80:a5:3d:1c:f1:09:7b:42:5a:39:bc:
6a:df:ee:ce:0a:6c:f8:a2:65:82:3d:84:fa:15:c3:c1:20:35:
82:d2:8b:9a:79:7d:71:0f:59:bc:51:3d:4c:1a:e9:49:5d:d5:
7d:38:a8:82:68:a7:2a:4c:6b:08:b8:ba:d4:91:59:14:d2:49:
ef:ed:37:9f:2c:e5:5d:3f:0b:75:b0:91:4f:48:09:70:b9:9d:
a8:5f:f9:86:34:56:7b:10:22:0b:65:d9:78:8e:e4:f3:49:b3:
1d:11:a0:60:e0:f1:48:d8:fb:99:1c:1f:cc:3c:2a:0b:c4:54:
45:70:23:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:28:27 2025 by rpki-client