Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.mft
File: 0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.mft (raw, json)
Hash identifier: 0t2lAbY9ijD8ofwzGKqhnQUjbqTZ7oGzgpLI/saOsZE=
Subject key identifier: F5:1E:81:35:24:05:BF:ED:F7:12:E7:0F:66:9C:95:B9:45:5D:A1:AD
Authority key identifier: 0C:DB:32:D6:25:3F:BA:FE:07:37:8A:1A:30:94:6A:73:AE:C7:E3:D4
Certificate issuer: /CN=0cdb32d6253fbafe07378a1a30946a73aec7e3d4
Certificate serial: 21203DD8F566FE1CB872B03CF0D848AB61D23C22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DNsy1iU_uv4HN4oaMJRqc67H49Q.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.mft
Manifest number: 019B
Signing time: Sun 15 Jun 2025 14:51:18 +0000
Manifest this update: Sun 15 Jun 2025 14:46:18 +0000
Manifest next update: Mon 16 Jun 2025 16:19:18 +0000
Files and hashes: 1: AS215084.asa (hash: VnCOMkKT2maWsf2f4NVt587A2kDQziKAN+YsQMVpLkI=)
2: 0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.crl (hash: mhK+byVkwqsaVrXWbtx3695jXsHka2aOyrv6PAub0gM=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.crl
rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.mft
rsync://rpki.ripe.net/repository/DEFAULT/DNsy1iU_uv4HN4oaMJRqc67H49Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 16:19:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:20:3d:d8:f5:66:fe:1c:b8:72:b0:3c:f0:d8:48:ab:61:d2:3c:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cdb32d6253fbafe07378a1a30946a73aec7e3d4
Validity
Not Before: Jun 15 14:46:18 2025 GMT
Not After : Jun 16 16:19:18 2025 GMT
Subject: CN=F51E81352405BFEDF712E70F669C95B9455DA1AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:9a:b6:65:9b:dc:f3:fe:98:82:74:11:09:d3:
61:90:5d:6b:1f:1c:a3:f4:04:b5:e9:a2:b3:6a:cf:
22:04:aa:40:33:e1:67:4f:bf:77:ee:b2:a4:c1:38:
5a:7a:2c:6f:74:e0:d7:fe:cd:6b:0e:c1:00:86:9d:
ba:18:89:40:c5:21:90:52:11:9a:df:24:53:e6:c1:
d1:07:09:05:8d:6f:6c:ab:89:c2:9e:80:e5:a1:03:
14:7e:4b:10:6b:00:fa:09:24:a3:5f:17:2e:f4:94:
8c:7c:db:10:d5:de:fc:87:16:be:01:48:ad:66:2c:
ef:a6:e0:b1:ec:92:85:55:6b:f5:97:6a:8b:8e:6f:
9c:6b:a7:97:41:a0:f8:02:f4:6c:2c:51:bd:cc:59:
68:2b:0c:2f:c4:93:83:3f:ce:91:9a:32:6a:08:70:
05:9c:e1:a5:38:83:49:69:d7:55:fa:d5:33:1c:ad:
12:15:82:9c:0f:28:eb:cf:d8:4c:99:10:a6:63:8d:
78:2c:fc:34:b4:70:6b:b6:89:3f:cd:dd:f2:95:01:
3e:ca:15:9f:4c:04:49:d5:39:c1:c9:09:c1:e5:90:
ae:b3:f7:b6:8d:c4:69:48:28:cb:be:6f:2f:08:9d:
58:ea:fc:af:24:47:fc:4f:a4:e3:59:1e:c6:9f:14:
54:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:1E:81:35:24:05:BF:ED:F7:12:E7:0F:66:9C:95:B9:45:5D:A1:AD
X509v3 Authority Key Identifier:
keyid:0C:DB:32:D6:25:3F:BA:FE:07:37:8A:1A:30:94:6A:73:AE:C7:E3:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNsy1iU_uv4HN4oaMJRqc67H49Q.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:6b:ff:88:87:f2:be:fc:51:d7:2e:6b:bb:05:99:1f:f9:4f:
57:b7:e9:ba:d0:8a:f9:34:07:dc:52:d0:65:e5:b2:57:1e:bb:
4f:f7:91:ac:be:e3:f3:5c:4b:5b:f5:02:18:6b:97:d8:e8:41:
1a:92:cf:66:d3:3b:f5:e8:00:2e:a0:b9:df:e3:c5:6f:b3:a0:
23:df:c0:b9:c3:a9:e5:c4:79:a3:58:d3:42:ce:ec:26:40:72:
a3:97:cf:86:d4:f4:da:51:11:6a:e9:e9:4a:f7:e6:3d:0d:91:
73:bc:b5:cf:23:04:6d:da:20:28:a4:36:c6:a0:b1:1d:29:8f:
bf:90:07:06:e2:ba:2e:1e:10:7d:f1:82:b1:86:54:f7:77:7b:
3a:2f:a1:48:b8:46:9e:d0:94:53:bc:c9:e4:f0:85:b7:97:66:
9e:44:78:8f:2e:fa:63:9b:11:7e:5f:51:bd:23:cd:b1:bb:25:
a6:be:3b:75:ab:99:97:cc:12:47:ef:6c:f2:00:ca:6c:20:ab:
68:7d:72:44:da:eb:09:78:f0:4f:2c:0c:b4:e7:30:56:ac:a1:
3b:d5:a7:0c:ff:4e:23:35:d0:68:f5:3a:1c:d5:fe:53:af:c0:
36:5f:93:86:68:40:65:7b:dd:bc:e2:bb:0e:d8:a1:eb:52:62:
ea:67:86:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 04:31:49 2025 by rpki-client