Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ab83a38a-7a39-4397-b588-edb9fbb62817/0/E92D148583A4642D90D4C4BC47B4504E180EA0C3.mft
File: E92D148583A4642D90D4C4BC47B4504E180EA0C3.mft (raw, json)
Hash identifier: ljNekts7IAVCt13Ad8C2CfHAPFD+EXt2xn0YoUSJ99k=
Subject key identifier: 0B:73:2B:7D:39:A7:87:0C:3B:B9:AC:A9:DC:49:D6:7A:07:EA:62:76
Authority key identifier: E9:2D:14:85:83:A4:64:2D:90:D4:C4:BC:47:B4:50:4E:18:0E:A0:C3
Certificate issuer: /CN=e92d148583a4642d90d4c4bc47b4504e180ea0c3
Certificate serial: 3C3D9C6312AE218B705F08AD0AEB79F1D09418A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6S0UhYOkZC2Q1MS8R7RQThgOoMM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ab83a38a-7a39-4397-b588-edb9fbb62817/0/E92D148583A4642D90D4C4BC47B4504E180EA0C3.mft
Manifest number: 03AA
Signing time: Sun 27 Apr 2025 03:14:59 +0000
Manifest this update: Sun 27 Apr 2025 03:09:59 +0000
Manifest next update: Mon 28 Apr 2025 04:09:59 +0000
Files and hashes: 1: E92D148583A4642D90D4C4BC47B4504E180EA0C3.crl (hash: sX0rhbyYIwBMN0vIJoNGo2EGy8yu8oSAgEihtdO9F+8=)
2: 39312e3233352e3230352e302f32342d3234203d3e203136323736.roa (hash: p/F0OkbT4gUH7RMUTLSzXd9N6M9/tCs2QiOrUFAeaQQ=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ab83a38a-7a39-4397-b588-edb9fbb62817/0/E92D148583A4642D90D4C4BC47B4504E180EA0C3.crl
rsync://rsync.paas.rpki.ripe.net/repository/ab83a38a-7a39-4397-b588-edb9fbb62817/0/E92D148583A4642D90D4C4BC47B4504E180EA0C3.mft
rsync://rpki.ripe.net/repository/DEFAULT/6S0UhYOkZC2Q1MS8R7RQThgOoMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 04:09:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:3d:9c:63:12:ae:21:8b:70:5f:08:ad:0a:eb:79:f1:d0:94:18:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e92d148583a4642d90d4c4bc47b4504e180ea0c3
Validity
Not Before: Apr 27 03:09:59 2025 GMT
Not After : Apr 28 04:09:59 2025 GMT
Subject: CN=0B732B7D39A7870C3BB9ACA9DC49D67A07EA6276
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:c3:8f:b6:57:c3:97:1c:43:1b:98:94:2e:b9:
0e:92:75:63:18:f6:d1:7e:a5:bd:dc:06:31:30:89:
53:f0:2b:32:2f:dc:38:b3:3b:4b:b5:98:88:14:fc:
17:5c:a7:e3:d8:65:65:36:32:17:c5:94:6b:3e:c9:
b2:28:f9:de:c6:a4:26:cb:83:43:73:a3:5f:d3:95:
f8:d1:5c:b4:78:a0:c6:36:a2:e8:08:1e:8f:5c:3e:
ab:38:dc:06:9d:c6:c8:47:dd:1c:68:96:3b:1b:03:
e0:1a:84:ba:91:17:c2:a4:40:aa:9d:05:19:e1:41:
be:2d:dc:28:f2:48:cc:a2:9b:f3:26:2f:bc:ac:25:
a1:77:74:98:ae:99:7d:00:02:0b:25:ee:e8:85:62:
d7:56:1e:c0:3b:5e:4c:43:30:64:0a:02:4b:cc:af:
ab:82:cb:25:d9:70:50:78:ab:dc:a6:28:dd:2c:4f:
69:dd:4a:83:5a:a7:54:44:22:72:2c:56:e6:b7:21:
d2:d6:45:d5:ba:ff:81:7b:aa:54:73:f2:71:a1:d7:
0c:2b:49:98:b4:c3:4c:c9:7c:48:37:7d:a0:44:6e:
6f:29:8f:26:40:44:8a:cf:e7:69:1d:66:8a:85:1c:
ed:b4:15:3d:9f:ee:16:75:b3:27:70:ad:59:81:50:
3c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:73:2B:7D:39:A7:87:0C:3B:B9:AC:A9:DC:49:D6:7A:07:EA:62:76
X509v3 Authority Key Identifier:
keyid:E9:2D:14:85:83:A4:64:2D:90:D4:C4:BC:47:B4:50:4E:18:0E:A0:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ab83a38a-7a39-4397-b588-edb9fbb62817/0/E92D148583A4642D90D4C4BC47B4504E180EA0C3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6S0UhYOkZC2Q1MS8R7RQThgOoMM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ab83a38a-7a39-4397-b588-edb9fbb62817/0/E92D148583A4642D90D4C4BC47B4504E180EA0C3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:f3:41:ed:8b:d1:94:00:2e:98:66:64:6f:c3:32:b1:58:50:
d9:e2:cb:91:09:30:74:cc:f3:db:8f:e1:9e:db:e6:ad:52:12:
78:49:d8:f4:3c:30:d4:c0:2b:0c:63:68:21:3d:3e:13:4d:39:
15:87:6d:75:36:1e:13:72:34:03:a3:62:24:af:da:0f:fc:f2:
ae:3d:db:23:be:4b:ee:a8:f2:98:da:fc:09:0f:f5:45:c8:50:
52:f0:a5:3d:4f:1b:25:f2:d1:c5:4a:02:b8:16:ed:28:d0:ab:
de:f5:22:d9:12:22:e8:21:67:16:78:57:4b:41:83:3c:a8:2d:
f4:72:62:81:38:f1:3f:27:55:ec:f9:48:0f:7f:7b:7b:bb:7c:
91:f2:a1:b4:22:d4:89:0b:27:5d:cb:89:b6:46:af:a8:de:dc:
01:e2:8f:8f:4f:74:55:60:f2:59:75:9a:10:31:08:2f:8c:2d:
22:c6:da:95:a2:70:f3:68:70:a5:24:fe:8a:08:d9:57:31:ec:
a5:dc:4f:92:33:25:b1:5c:d3:93:ca:07:56:12:63:f9:97:d5:
91:e8:a0:07:7b:d8:a5:21:12:41:3e:af:d9:86:ff:bd:29:dd:
51:69:43:e3:1d:ed:53:de:1c:d6:c6:84:ed:8c:df:94:ae:ff:
1b:8f:42:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:59:37 2025 by rpki-client