Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.mft
File: ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.mft (raw, json)
Hash identifier: 9drEtcWReXT1Q70R/WzrGJFBNTPcyTo6M2tLszCA1VM=
Subject key identifier: F3:5D:FE:DD:BB:F2:1E:31:FA:7F:28:17:C3:A1:31:F5:A7:40:EA:B7
Authority key identifier: AD:FF:D4:77:85:7D:1E:9B:E9:5B:82:71:7A:42:7F:35:AF:A9:A7:D6
Certificate issuer: /CN=adffd477857d1e9be95b82717a427f35afa9a7d6
Certificate serial: 277851FD255CDC017BE1D583C93C542642982AD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rf_Ud4V9HpvpW4JxekJ_Na-pp9Y.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.mft
Manifest number: ED
Signing time: Mon 28 Apr 2025 11:01:42 +0000
Manifest this update: Mon 28 Apr 2025 10:56:42 +0000
Manifest next update: Wed 30 Apr 2025 12:51:42 +0000
Files and hashes: 1: ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.crl (hash: bmTOHVRK8My4QAD5YUKnSY421I2JtDu6TTmJH4s3SOM=)
2: AS44355.asa (hash: suHXzL7+p9pEhy3V1lXLsc7/MuuAkxWi6AeYlUGu+1w=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.mft
rsync://rpki.ripe.net/repository/DEFAULT/rf_Ud4V9HpvpW4JxekJ_Na-pp9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 08:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:78:51:fd:25:5c:dc:01:7b:e1:d5:83:c9:3c:54:26:42:98:2a:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adffd477857d1e9be95b82717a427f35afa9a7d6
Validity
Not Before: Apr 28 10:56:42 2025 GMT
Not After : Apr 30 12:51:42 2025 GMT
Subject: CN=F35DFEDDBBF21E31FA7F2817C3A131F5A740EAB7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:e9:d7:96:5c:ea:eb:59:fb:5c:8f:f3:a3:0e:
f9:a5:27:7c:75:4a:68:8a:46:6e:5f:03:8e:2d:dc:
7f:bf:cf:3e:d1:1f:6b:90:45:cc:49:ad:8d:1e:b5:
d2:cd:03:46:16:21:c8:62:2a:a9:29:bc:63:8e:44:
8d:0c:38:11:a8:7e:36:f0:b0:89:db:23:38:09:e2:
01:41:5a:72:47:d1:3a:f1:e3:54:4e:c4:99:d9:6b:
f1:57:a9:9d:53:19:64:29:34:b8:1c:aa:26:e4:76:
37:6e:dd:56:83:da:fa:59:37:42:f2:a1:06:1b:a3:
bd:13:b8:cb:21:f9:9a:db:0a:ad:19:96:5f:d1:7c:
90:ab:46:37:f2:d0:20:f0:00:d2:d7:8e:5f:70:45:
cc:82:06:01:4e:6d:65:04:bb:01:8b:ed:9a:f7:d7:
43:d6:4c:b9:84:33:17:02:d3:a1:77:bb:72:36:16:
18:53:89:0c:04:63:74:46:5d:c5:38:6e:9c:20:61:
d0:0a:0c:d2:00:15:4c:44:1a:79:34:d2:1f:98:d5:
83:49:c2:29:b1:33:41:1f:86:00:69:81:c8:a1:8d:
1a:8a:21:95:3c:d0:3d:12:b0:de:da:50:6a:34:c4:
a6:97:46:81:bf:55:84:4e:14:0c:8f:3d:6b:fb:ce:
80:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:5D:FE:DD:BB:F2:1E:31:FA:7F:28:17:C3:A1:31:F5:A7:40:EA:B7
X509v3 Authority Key Identifier:
keyid:AD:FF:D4:77:85:7D:1E:9B:E9:5B:82:71:7A:42:7F:35:AF:A9:A7:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rf_Ud4V9HpvpW4JxekJ_Na-pp9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:09:80:3c:20:ef:a6:28:a9:3c:e8:d5:d3:eb:f1:c6:e4:04:
39:db:e6:bd:41:1d:e0:d2:86:2b:92:6a:f7:2a:5a:5f:5e:98:
ff:89:78:4e:3f:9d:ad:57:4f:02:0c:9f:51:73:4c:ae:f4:22:
8d:66:02:90:ec:97:95:b6:11:6a:7c:ef:91:dd:e5:66:5d:b8:
c1:23:60:64:41:b4:39:ae:50:00:be:b2:67:36:82:0c:bd:22:
36:fe:80:e6:6c:b4:c8:9d:62:47:f1:75:14:2c:e7:d2:38:69:
c0:b6:5d:00:44:2b:3c:0d:ff:b4:3b:cb:dd:67:5e:74:0e:75:
0d:8c:cb:a3:16:f0:1c:7a:ae:9a:49:10:b9:73:ab:5d:04:d4:
1d:dc:2d:dd:97:09:5c:ea:92:91:d9:f8:ec:ec:b0:1e:6b:b6:
4b:92:2f:89:f6:fb:90:04:67:7f:ef:c8:2a:1d:35:44:65:ff:
d9:33:64:03:da:03:aa:60:40:ef:3e:46:a3:64:35:fc:58:83:
bb:05:55:6b:66:b8:8f:7f:62:3a:74:a2:bf:17:f3:14:9a:f4:
d6:d7:6a:94:bb:d2:16:a0:d8:a2:b0:ea:4c:68:fd:df:f3:47:
8d:29:07:8e:01:da:20:c0:2f:95:2d:69:b8:5c:71:93:5c:99:
5d:33:b6:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:32:00 2025 by rpki-client