Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.mft
File: D8219647415018E4FFD3F11C27A807530D7B7CF1.mft (raw, json)
Hash identifier: EO3nrdVKYg6WJugFfJHbBGBK3KZSkFmr7tXR1kjbsoE=
Subject key identifier: AF:49:EA:B0:54:4B:AB:98:59:27:AC:85:6A:36:9C:CE:0D:90:FA:03
Authority key identifier: D8:21:96:47:41:50:18:E4:FF:D3:F1:1C:27:A8:07:53:0D:7B:7C:F1
Certificate issuer: /CN=d8219647415018e4ffd3f11c27a807530d7b7cf1
Certificate serial: 5199D3E554A868E68B2849EE79C677AF44641954
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2CGWR0FQGOT_0_EcJ6gHUw17fPE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.mft
Manifest number: 0201
Signing time: Sat 26 Apr 2025 18:48:43 +0000
Manifest this update: Sat 26 Apr 2025 18:43:43 +0000
Manifest next update: Sun 27 Apr 2025 21:14:43 +0000
Files and hashes: 1: D8219647415018E4FFD3F11C27A807530D7B7CF1.crl (hash: abD36ru34u0RnhVzZZDaYy4owgxeTdup6OgPbuqg0sU=)
2: AS215828.asa (hash: pljuqamxoFyrKyOB146Yq2hAbS4GhBcCYl/vXn6L4AI=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.crl
rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.mft
rsync://rpki.ripe.net/repository/DEFAULT/2CGWR0FQGOT_0_EcJ6gHUw17fPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 21:14:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:99:d3:e5:54:a8:68:e6:8b:28:49:ee:79:c6:77:af:44:64:19:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8219647415018e4ffd3f11c27a807530d7b7cf1
Validity
Not Before: Apr 26 18:43:43 2025 GMT
Not After : Apr 27 21:14:43 2025 GMT
Subject: CN=AF49EAB0544BAB985927AC856A369CCE0D90FA03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:57:c2:26:f1:65:7b:2b:29:bc:bc:5b:50:60:
81:1f:ef:4b:cd:88:9d:db:26:be:9c:1e:63:5d:e0:
4a:70:fc:9f:67:50:f8:db:52:c9:5c:aa:34:83:d1:
33:a3:5a:b9:3b:ad:57:cd:b2:9a:f3:79:cd:f1:24:
95:f3:37:06:dc:fb:48:9a:13:56:05:10:f7:b4:a3:
ce:a1:fe:c1:e6:df:5f:ff:71:4c:25:3e:d6:d6:15:
f8:b9:6e:ac:d5:86:ec:e2:79:ed:75:10:0b:6e:84:
42:8e:3d:2e:30:cb:dd:ba:ef:4f:f2:72:da:43:79:
a3:8a:23:46:61:90:2d:fb:64:4b:bf:60:37:da:59:
ba:bf:67:4f:61:c7:2b:22:10:d5:af:50:cb:ba:8c:
9a:22:86:6e:b9:9a:e6:5e:31:2b:38:92:46:07:0c:
21:39:8e:eb:b7:8a:12:9f:05:20:5b:fc:e8:d4:79:
7d:f8:40:02:9f:47:3f:e7:31:bf:b7:06:94:24:58:
ae:a3:8e:bf:dd:36:d4:2b:62:8c:6b:14:94:93:79:
4f:f7:ba:67:bb:4b:60:98:87:9b:f6:bd:11:7d:8d:
2f:9e:d1:f7:e3:d9:be:6d:60:78:71:c3:4e:b1:dc:
69:8d:dc:79:e7:83:9e:c6:9d:76:f4:68:ee:37:2d:
94:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:49:EA:B0:54:4B:AB:98:59:27:AC:85:6A:36:9C:CE:0D:90:FA:03
X509v3 Authority Key Identifier:
keyid:D8:21:96:47:41:50:18:E4:FF:D3:F1:1C:27:A8:07:53:0D:7B:7C:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2CGWR0FQGOT_0_EcJ6gHUw17fPE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:d6:9d:21:fa:28:1f:e9:49:19:29:c9:cb:fd:2e:43:53:0f:
b1:e1:89:5d:25:f1:65:5c:56:10:e3:82:e7:c1:83:2b:8b:5c:
03:87:f1:85:d3:dd:e3:76:43:7f:b4:1e:c9:58:ee:3b:63:93:
1d:3e:fa:37:27:84:5f:22:e8:31:5a:c8:eb:40:cd:8a:ae:9b:
a5:9e:d5:4e:37:6d:cf:ee:9d:fb:c4:b0:67:28:5f:32:56:36:
76:a0:e0:8d:bb:73:b4:4c:03:8d:dc:5b:e1:ae:c7:04:6e:67:
14:a7:41:4b:92:fb:9c:8b:4e:1c:cd:5f:3e:67:07:70:ad:b6:
0d:54:a5:6e:db:0b:aa:bf:c0:a8:d8:8c:16:8b:15:98:e0:e5:
86:dc:96:86:1f:54:2b:75:3b:53:b7:98:69:6d:ac:d0:e3:bc:
68:ce:20:a0:f1:99:03:7c:99:24:60:09:24:86:9a:9e:b9:90:
33:3c:9d:ff:6f:92:d5:9e:22:63:c4:9d:8a:31:de:dd:58:90:
0d:90:fa:9f:44:6b:cb:33:e7:b0:08:1a:d8:ac:f5:67:5f:d3:
e3:1a:8c:b4:14:0a:10:e2:55:60:cc:15:0c:06:99:ec:cb:36:
d4:2b:29:f5:eb:fe:4d:4a:ab:01:de:2f:8d:1f:2c:c5:e9:7c:
82:4c:ab:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 14:22:09 2025 by rpki-client