Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9bc9a2e7-61e8-4e70-942d-c545cf0674c3/0/4E3434F13A572BF5E189F1B7FA148F5D107F6F57.mft
File: 4E3434F13A572BF5E189F1B7FA148F5D107F6F57.mft (raw, json)
Hash identifier: xFwmm9HE3QnYgS8YnKHNugwOpDbIH35yx/4ZT22Wqzk=
Subject key identifier: 10:AC:36:3B:35:06:32:45:E8:53:9F:E1:79:27:52:C7:5C:5D:A4:57
Authority key identifier: 4E:34:34:F1:3A:57:2B:F5:E1:89:F1:B7:FA:14:8F:5D:10:7F:6F:57
Certificate issuer: /CN=4e3434f13a572bf5e189f1b7fa148f5d107f6f57
Certificate serial: 0C2D3CE96C11A73421D29C258BB15A2F973909AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TjQ08TpXK_XhifG3-hSPXRB_b1c.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9bc9a2e7-61e8-4e70-942d-c545cf0674c3/0/4E3434F13A572BF5E189F1B7FA148F5D107F6F57.mft
Manifest number: 3B
Signing time: Mon 28 Apr 2025 10:55:35 +0000
Manifest this update: Mon 28 Apr 2025 10:50:35 +0000
Manifest next update: Tue 29 Apr 2025 14:44:35 +0000
Files and hashes: 1: AS215277.asa (hash: /NSm7byRzs0tpnovtHnCzzB6PpqZTxUH8EmHV77zmWY=)
2: 4E3434F13A572BF5E189F1B7FA148F5D107F6F57.crl (hash: CTH+qaRKxplPQ91cHhZx2wsdrSbZdeCFjCbuISjAZVM=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9bc9a2e7-61e8-4e70-942d-c545cf0674c3/0/4E3434F13A572BF5E189F1B7FA148F5D107F6F57.crl
rsync://rsync.paas.rpki.ripe.net/repository/9bc9a2e7-61e8-4e70-942d-c545cf0674c3/0/4E3434F13A572BF5E189F1B7FA148F5D107F6F57.mft
rsync://rpki.ripe.net/repository/DEFAULT/TjQ08TpXK_XhifG3-hSPXRB_b1c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 14:44:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:2d:3c:e9:6c:11:a7:34:21:d2:9c:25:8b:b1:5a:2f:97:39:09:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e3434f13a572bf5e189f1b7fa148f5d107f6f57
Validity
Not Before: Apr 28 10:50:35 2025 GMT
Not After : Apr 29 14:44:35 2025 GMT
Subject: CN=10AC363B35063245E8539FE1792752C75C5DA457
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a2:25:57:14:53:22:d7:c0:f2:38:d3:7a:5e:
17:44:db:e1:f1:07:81:de:01:f1:2c:18:de:49:b9:
59:c0:cd:6a:16:4e:fc:7a:92:30:72:95:cf:54:b2:
28:03:d3:43:af:c4:23:e1:a6:47:f6:84:46:f5:09:
d9:b9:df:c7:15:be:fb:1c:c1:1f:f6:06:4b:6c:05:
73:4a:6a:d7:ae:79:be:12:aa:f6:06:76:5f:88:0b:
03:be:14:d1:96:25:6f:bc:04:28:de:fe:d3:0f:25:
b7:ab:ba:b5:95:60:7a:d2:4c:09:1a:b8:0d:0d:71:
f9:5f:6c:c7:00:29:6c:42:b0:12:e0:f1:08:ae:57:
08:c1:fd:b0:db:51:98:d9:f6:3c:96:71:42:f1:fd:
d3:c7:80:60:9f:a0:3a:4b:4a:01:e1:4a:7c:a7:d2:
37:02:51:ee:71:25:a5:d5:04:dc:8c:04:43:12:34:
02:45:8f:c9:15:7a:e9:42:b8:cd:13:25:c8:3f:e9:
e2:5e:d3:94:aa:f1:72:2e:b0:b3:c3:e3:5e:31:8a:
2d:a0:61:a5:8e:b0:23:40:4d:13:17:7b:72:ab:41:
0c:91:c5:75:46:ec:db:a4:a9:d3:89:e1:e0:fb:04:
99:86:7a:e7:47:cd:98:18:9f:72:24:ca:cb:6e:f5:
38:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:AC:36:3B:35:06:32:45:E8:53:9F:E1:79:27:52:C7:5C:5D:A4:57
X509v3 Authority Key Identifier:
keyid:4E:34:34:F1:3A:57:2B:F5:E1:89:F1:B7:FA:14:8F:5D:10:7F:6F:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9bc9a2e7-61e8-4e70-942d-c545cf0674c3/0/4E3434F13A572BF5E189F1B7FA148F5D107F6F57.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TjQ08TpXK_XhifG3-hSPXRB_b1c.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9bc9a2e7-61e8-4e70-942d-c545cf0674c3/0/4E3434F13A572BF5E189F1B7FA148F5D107F6F57.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:dc:de:93:99:59:3b:eb:bf:a3:14:d2:90:35:aa:ab:3b:6d:
de:b5:9b:aa:99:93:ac:78:07:d4:9a:5b:50:f1:78:8e:0f:8c:
b1:5a:e3:d3:0c:d1:64:7e:98:68:db:a8:e7:d4:35:14:5c:bb:
78:40:e0:12:ce:cf:3a:95:3b:96:9e:11:dd:93:e8:16:71:a1:
7d:25:20:8a:18:60:c8:7a:cf:82:c0:c0:22:e7:be:ac:05:c1:
74:46:3a:7a:0e:6b:3d:2b:f8:80:4d:9d:ff:72:0a:36:9c:5c:
a1:94:f6:ce:06:bb:94:d2:91:93:a3:dd:f9:26:54:99:09:c7:
da:9e:a1:ab:f2:86:c0:10:c7:64:e4:7d:6b:3a:3d:54:a0:2d:
52:fd:be:9a:69:90:14:72:70:7b:f2:ec:9d:63:24:79:23:61:
30:ed:bb:36:03:aa:36:d8:39:e9:ca:85:53:2b:31:b7:4a:ab:
75:1a:c0:d1:e1:58:65:41:a4:82:14:59:9c:7e:08:ce:d5:ec:
9b:a6:8b:bf:0f:c6:f7:85:64:96:3b:e5:86:08:97:00:23:28:
d4:29:c6:bd:df:94:48:15:09:2b:8e:7a:a5:2d:e6:48:ed:f2:
85:32:14:e0:f2:91:23:0a:de:75:a7:67:5e:3d:27:3d:90:71:
28:77:84:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:28:52 2025 by rpki-client