Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/93f083b7-7818-4ccf-8663-9191f8a8616a/0/05BBDB629FDD0F1C33BFB1AC7CF44121BC5E6EAD.mft
File: 05BBDB629FDD0F1C33BFB1AC7CF44121BC5E6EAD.mft (raw, json)
Hash identifier: /TSqGocnL8zh3f6gfH4IKcw7QiGdTgyfD3q/jq/vsXk=
Subject key identifier: E8:BD:DE:96:B3:47:D2:E5:78:CB:D8:83:41:1B:64:70:F6:CE:40:64
Authority key identifier: 05:BB:DB:62:9F:DD:0F:1C:33:BF:B1:AC:7C:F4:41:21:BC:5E:6E:AD
Certificate issuer: /CN=05bbdb629fdd0f1c33bfb1ac7cf44121bc5e6ead
Certificate serial: 1B3568F010C095462A75A6F96DBF64E0741F204D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbvbYp_dDxwzv7GsfPRBIbxebq0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/93f083b7-7818-4ccf-8663-9191f8a8616a/0/05BBDB629FDD0F1C33BFB1AC7CF44121BC5E6EAD.mft
Manifest number: 0397
Signing time: Mon 28 Apr 2025 21:24:59 +0000
Manifest this update: Mon 28 Apr 2025 21:19:59 +0000
Manifest next update: Tue 29 Apr 2025 21:29:59 +0000
Files and hashes: 1: 05BBDB629FDD0F1C33BFB1AC7CF44121BC5E6EAD.crl (hash: k8B4+dwe9u4to7RkkE1LAzZb8DSXoTLRGPzr0xJ2RCA=)
2: 38342e33382e3235342e302f32342d3234203d3e203634323637.roa (hash: 9kep0y5iWWXIJpO3TiiRho2v0RZ/t5nwkbbRFjNIkHc=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/93f083b7-7818-4ccf-8663-9191f8a8616a/0/05BBDB629FDD0F1C33BFB1AC7CF44121BC5E6EAD.crl
rsync://rsync.paas.rpki.ripe.net/repository/93f083b7-7818-4ccf-8663-9191f8a8616a/0/05BBDB629FDD0F1C33BFB1AC7CF44121BC5E6EAD.mft
rsync://rpki.ripe.net/repository/DEFAULT/BbvbYp_dDxwzv7GsfPRBIbxebq0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 21:29:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:35:68:f0:10:c0:95:46:2a:75:a6:f9:6d:bf:64:e0:74:1f:20:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05bbdb629fdd0f1c33bfb1ac7cf44121bc5e6ead
Validity
Not Before: Apr 28 21:19:59 2025 GMT
Not After : Apr 29 21:29:59 2025 GMT
Subject: CN=E8BDDE96B347D2E578CBD883411B6470F6CE4064
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:1e:92:a3:3a:be:a4:55:48:70:14:95:63:57:
7f:79:ac:1d:ff:e1:67:5f:29:20:66:76:9c:0f:9a:
09:f5:bb:e3:35:4d:de:39:37:aa:cf:6c:fd:05:8e:
40:2f:4d:32:87:65:95:1e:1c:a1:17:84:c8:4c:b5:
75:7a:ec:11:3c:df:11:c9:12:16:5d:46:db:55:95:
1d:a7:03:c8:77:b6:3d:31:e3:a3:1b:66:9e:48:94:
08:98:20:68:66:08:e5:27:83:fb:6a:ab:39:af:0f:
87:a1:d1:22:d6:18:97:ce:e9:7c:45:e4:fb:82:6d:
d8:8d:46:f1:cd:ff:bb:4c:e5:1f:c2:6b:92:cf:62:
43:62:bc:7f:50:09:70:21:9b:f9:41:ea:87:cb:c7:
56:a1:da:51:17:d1:4b:17:f9:2c:c6:50:fc:d5:a0:
89:11:54:83:85:25:2f:9d:85:d4:e2:ac:9e:a2:10:
5f:3d:ce:d2:76:f1:61:05:50:03:b3:5d:98:96:07:
40:36:bd:9c:63:07:bc:fc:9f:8d:0f:3b:fd:c7:85:
cc:8d:18:01:7e:26:32:b2:04:44:83:99:d7:7f:52:
f3:8b:cc:bc:6e:d5:85:d9:dc:a7:71:40:9e:b1:37:
88:09:9a:74:40:84:57:45:8f:6d:1c:e7:34:00:8b:
58:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:BD:DE:96:B3:47:D2:E5:78:CB:D8:83:41:1B:64:70:F6:CE:40:64
X509v3 Authority Key Identifier:
keyid:05:BB:DB:62:9F:DD:0F:1C:33:BF:B1:AC:7C:F4:41:21:BC:5E:6E:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/93f083b7-7818-4ccf-8663-9191f8a8616a/0/05BBDB629FDD0F1C33BFB1AC7CF44121BC5E6EAD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbvbYp_dDxwzv7GsfPRBIbxebq0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/93f083b7-7818-4ccf-8663-9191f8a8616a/0/05BBDB629FDD0F1C33BFB1AC7CF44121BC5E6EAD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:8e:c6:d9:70:23:2f:10:4a:87:43:d1:87:ca:a2:bd:6e:9f:
a6:b8:58:de:ba:af:a7:86:1b:d4:bf:8a:18:f6:1c:bf:c4:8e:
ff:6c:c0:b7:34:47:ac:4a:3e:c3:32:20:f7:10:01:8b:a7:25:
d2:17:c9:98:30:2f:34:12:df:59:72:cc:06:63:44:f9:dd:09:
64:64:b4:a9:3e:f1:41:e5:f2:f9:1a:06:72:a1:21:ce:14:b3:
11:34:2b:03:4b:b1:d0:af:71:59:58:e2:b5:e4:fd:5b:c6:63:
eb:83:a1:71:76:70:74:0f:8f:99:7e:ae:6c:13:fd:b6:75:ff:
f1:cf:8a:2b:56:d9:48:95:e4:04:fe:cc:6e:52:78:5d:6d:74:
96:37:eb:3f:0c:8b:72:02:68:4d:92:f4:e0:a9:cd:ff:82:30:
0a:67:67:6d:a9:2e:d4:b3:b6:5c:c7:1a:25:93:bb:00:71:80:
33:83:be:82:7d:2b:78:0a:15:fa:48:62:80:64:64:be:ae:41:
e0:b8:d3:25:84:98:2e:6a:c6:4d:c2:8a:28:be:b7:df:e2:16:
a4:f0:7f:65:a7:5c:64:5d:af:81:79:8e:6e:b1:e5:7c:d5:7d:
e5:63:56:12:a6:78:2a:89:3a:ed:30:d4:c9:b4:16:84:87:70:
7f:70:2e:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:26:34 2025 by rpki-client