Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/7/4B48949512B3F7BF9A91B8BC897E7E18A4127CDD.mft
File: 4B48949512B3F7BF9A91B8BC897E7E18A4127CDD.mft (raw, json)
Hash identifier: alqx8EiuHTQ3fhUY+kOemgfR/zLCaLetA5Km6FKhc2Q=
Subject key identifier: 14:8C:06:2D:AA:82:C4:44:4E:94:A2:BE:52:28:86:A0:EF:C4:CF:0E
Authority key identifier: 4B:48:94:95:12:B3:F7:BF:9A:91:B8:BC:89:7E:7E:18:A4:12:7C:DD
Certificate issuer: /CN=4b48949512b3f7bf9a91b8bc897e7e18a4127cdd
Certificate serial: 3583FAA566C80EA990B75025BC590F515A965BE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S0iUlRKz97-akbi8iX5-GKQSfN0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/7/4B48949512B3F7BF9A91B8BC897E7E18A4127CDD.mft
Manifest number: 8E
Signing time: Sun 27 Apr 2025 11:28:31 +0000
Manifest this update: Sun 27 Apr 2025 11:23:31 +0000
Manifest next update: Mon 28 Apr 2025 12:14:31 +0000
Files and hashes: 1: 4B48949512B3F7BF9A91B8BC897E7E18A4127CDD.crl (hash: uJKxcIlTWrRprhGixmQ8ENe7ovQ1qucipJUSVB5K6qE=)
2: AS213915.asa (hash: WNoePLBPk99sollnieSJLQGheEbE8N7gHweNXQmzvJc=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/7/4B48949512B3F7BF9A91B8BC897E7E18A4127CDD.crl
rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/7/4B48949512B3F7BF9A91B8BC897E7E18A4127CDD.mft
rsync://rpki.ripe.net/repository/DEFAULT/S0iUlRKz97-akbi8iX5-GKQSfN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 12:14:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:83:fa:a5:66:c8:0e:a9:90:b7:50:25:bc:59:0f:51:5a:96:5b:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b48949512b3f7bf9a91b8bc897e7e18a4127cdd
Validity
Not Before: Apr 27 11:23:31 2025 GMT
Not After : Apr 28 12:14:31 2025 GMT
Subject: CN=148C062DAA82C4444E94A2BE522886A0EFC4CF0E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:0e:c2:14:c9:ee:4c:5f:9d:c4:f6:72:25:3c:
d5:d6:b9:cf:2d:f7:24:7e:17:26:a5:d8:4a:55:3c:
29:6b:62:28:4c:53:cd:8c:86:bf:2c:1a:76:58:80:
1e:e2:08:2a:08:a2:06:da:3f:df:81:f5:48:ec:b8:
78:03:1d:f3:cd:f4:49:f3:ee:26:66:10:6a:1c:3e:
f3:ff:06:80:0e:30:d2:db:4b:d3:26:87:86:63:1d:
8b:3e:a0:bb:91:48:4f:06:9f:6b:2c:45:5d:4a:89:
bf:2a:e1:33:75:0e:1f:1c:c2:fb:e7:50:89:15:8a:
d9:6b:7d:83:04:bd:41:c8:92:f5:18:9c:5f:47:19:
87:75:47:a2:99:09:6b:d2:92:7a:c8:4e:e4:82:0b:
69:66:a1:68:3f:c2:d4:a5:3a:98:29:a2:6e:7d:20:
f8:f3:93:32:c1:5a:54:d9:0b:a6:60:05:13:36:48:
88:82:58:c0:6f:be:60:19:8f:5d:fd:a4:3d:43:33:
02:cc:7a:82:cc:c8:6a:91:f6:3e:0c:3f:25:e4:04:
89:30:23:0d:e6:38:bf:03:e9:0a:08:a7:d4:a1:b0:
09:8c:1b:1e:46:67:c7:16:1c:bd:98:a5:60:00:da:
ec:cb:fc:d2:f0:b5:4b:13:11:ab:60:6a:7a:52:e1:
b9:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:8C:06:2D:AA:82:C4:44:4E:94:A2:BE:52:28:86:A0:EF:C4:CF:0E
X509v3 Authority Key Identifier:
keyid:4B:48:94:95:12:B3:F7:BF:9A:91:B8:BC:89:7E:7E:18:A4:12:7C:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/7/4B48949512B3F7BF9A91B8BC897E7E18A4127CDD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S0iUlRKz97-akbi8iX5-GKQSfN0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/7/4B48949512B3F7BF9A91B8BC897E7E18A4127CDD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:0d:3d:99:e6:32:a4:de:58:37:07:15:b4:3c:99:02:bf:bb:
a9:3a:ce:ca:dd:8f:91:57:65:ba:0c:39:3d:89:f2:94:13:08:
47:39:16:32:ac:d1:66:be:0a:55:aa:0f:66:67:2c:b5:44:83:
5f:f7:0b:10:33:ca:4e:c5:c8:ee:ea:44:8f:20:52:de:8d:b6:
58:13:03:3a:38:84:07:e9:8f:98:80:21:d6:1a:7e:86:b8:46:
34:82:c6:4c:8d:66:d3:58:c8:09:a0:05:a8:c9:bb:90:48:bf:
fd:0a:53:34:d8:18:af:99:d0:d9:6e:82:c6:d4:b8:35:84:fc:
b4:5c:34:cd:61:18:67:d0:ba:e1:7d:3f:34:90:ce:d6:76:79:
00:cc:89:34:91:01:9e:d8:68:18:11:96:16:59:5f:92:36:08:
40:21:e5:b6:f7:04:64:02:e4:0f:32:04:e7:73:3a:30:a2:5d:
85:1d:da:a4:09:5b:34:9d:5c:34:1c:21:3a:e5:47:9f:39:2f:
51:d6:fb:10:5d:fb:51:8e:06:22:52:ab:18:d4:9c:29:2f:97:
9f:28:c9:32:89:c9:02:f7:01:82:8e:af:e6:85:9f:96:56:28:
47:98:28:3e:55:90:38:35:47:39:a0:94:b9:2f:0e:3f:73:ee:
1f:7b:70:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 02:05:28 2025 by rpki-client