Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/9/CFC26A6DEF2E2FF1EBCC10A9871478B8A8BF3908.mft
File: CFC26A6DEF2E2FF1EBCC10A9871478B8A8BF3908.mft (raw, json)
Hash identifier: lI4dxJvk82WdmQMUVPV77uYolCEhXT0auOkVi+t7D1A=
Subject key identifier: 9D:EA:39:25:6A:6C:AC:CB:0E:09:78:F0:32:60:92:89:26:B3:A8:7F
Authority key identifier: CF:C2:6A:6D:EF:2E:2F:F1:EB:CC:10:A9:87:14:78:B8:A8:BF:39:08
Certificate issuer: /CN=cfc26a6def2e2ff1ebcc10a9871478b8a8bf3908
Certificate serial: 6EE2B9D361DEBC42BEA07826C8B82D75C6E7B394
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z8Jqbe8uL_HrzBCphxR4uKi_OQg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/9/CFC26A6DEF2E2FF1EBCC10A9871478B8A8BF3908.mft
Manifest number: 035A
Signing time: Sat 26 Apr 2025 14:07:07 +0000
Manifest this update: Sat 26 Apr 2025 14:02:07 +0000
Manifest next update: Sun 27 Apr 2025 15:08:07 +0000
Files and hashes: 1: CFC26A6DEF2E2FF1EBCC10A9871478B8A8BF3908.crl (hash: 3kxzF28PcvPSpFsMeGMoQkpNNvVljDpz4FuL+XvbsHE=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/9/CFC26A6DEF2E2FF1EBCC10A9871478B8A8BF3908.crl
rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/9/CFC26A6DEF2E2FF1EBCC10A9871478B8A8BF3908.mft
rsync://rpki.ripe.net/repository/DEFAULT/z8Jqbe8uL_HrzBCphxR4uKi_OQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 15:08:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:e2:b9:d3:61:de:bc:42:be:a0:78:26:c8:b8:2d:75:c6:e7:b3:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfc26a6def2e2ff1ebcc10a9871478b8a8bf3908
Validity
Not Before: Apr 26 14:02:07 2025 GMT
Not After : Apr 27 15:08:07 2025 GMT
Subject: CN=9DEA39256A6CACCB0E0978F03260928926B3A87F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c6:5c:e1:5a:53:12:f1:74:8f:50:0b:ab:f5:
8a:a1:c1:40:d0:d8:79:86:09:ae:54:93:58:d5:2c:
17:fc:1a:a7:12:f5:83:85:90:36:fb:c9:02:b6:1d:
40:70:d1:19:9a:9e:8e:31:1f:78:3b:bb:c1:e7:03:
1b:0d:a1:85:86:c6:d5:17:94:58:41:9c:1b:44:91:
5d:6a:28:6a:9f:7b:4e:53:d9:02:09:f1:be:20:f2:
a5:b2:c2:31:98:39:86:34:53:6e:b8:a1:83:9e:ca:
15:a4:2e:b2:6c:49:51:75:23:4e:fa:c2:0a:9c:bb:
e6:cf:56:1c:fa:e4:c8:e2:05:dd:d3:5b:0b:7c:87:
e9:a6:50:e1:d7:d4:5c:c4:28:ed:87:4a:aa:1c:a9:
75:00:ef:80:cb:ff:be:8d:6c:04:e5:17:d0:18:b3:
e1:b9:70:e1:6d:2d:c2:5a:7e:20:99:86:e3:46:ea:
a8:52:cb:ac:6d:21:22:da:53:09:f8:23:5e:a2:37:
45:74:0f:91:45:0d:f8:d6:83:2b:34:f1:c8:78:19:
e7:a5:ae:2b:f5:62:28:bf:4f:89:9f:98:dc:42:71:
70:9b:73:09:cc:4c:aa:45:9c:f3:af:4b:b9:2f:2a:
53:b1:4d:27:fc:ef:b4:c5:07:b7:3b:21:31:03:b9:
5f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:EA:39:25:6A:6C:AC:CB:0E:09:78:F0:32:60:92:89:26:B3:A8:7F
X509v3 Authority Key Identifier:
keyid:CF:C2:6A:6D:EF:2E:2F:F1:EB:CC:10:A9:87:14:78:B8:A8:BF:39:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/9/CFC26A6DEF2E2FF1EBCC10A9871478B8A8BF3908.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8Jqbe8uL_HrzBCphxR4uKi_OQg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/9/CFC26A6DEF2E2FF1EBCC10A9871478B8A8BF3908.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:db:23:05:67:3f:eb:1d:d1:6c:6d:07:e3:fd:fd:89:59:f9:
3e:ed:6c:bb:bc:56:0f:6a:7d:52:af:cd:7f:cc:5f:c7:b7:b7:
89:9b:fc:c0:20:9a:fd:80:c1:09:58:30:c3:f2:54:5e:39:98:
0b:5f:dd:8f:c3:12:8e:c0:56:d2:31:ee:7d:93:e9:df:4b:dc:
47:ca:ec:7b:d0:3b:eb:4a:30:3b:d5:98:54:87:c5:3b:9a:65:
7b:8b:64:e9:02:c8:3f:4d:53:ca:e4:1b:6c:b3:87:fb:cc:05:
da:d3:fb:2b:e1:00:e7:8e:d4:60:a1:30:b1:ef:d0:12:d8:b1:
8e:7f:f3:11:f4:48:92:4c:9c:71:d7:82:53:7e:ff:54:a3:16:
61:6c:4d:3f:e2:d9:36:0f:43:3f:25:08:71:d3:ff:5c:73:9d:
bb:da:ba:32:1b:3e:3c:48:68:1e:98:d6:99:d9:73:12:2b:29:
41:c6:68:07:bb:77:c9:7b:1e:95:0a:37:07:88:33:5a:55:c1:
e0:b9:2d:a4:0a:56:05:ea:67:92:64:dd:99:55:8f:d2:5f:23:
f3:75:38:08:51:f3:c6:ad:1e:12:a6:04:7a:91:d8:83:22:58:
d3:69:c8:0a:2c:f6:1f:e8:22:46:ca:11:78:50:15:76:c0:39:
2e:f3:9e:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:13:28 2025 by rpki-client