Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/0/B1138D02124FB2326CF3FB351AD3251A63BEC739.mft
File: B1138D02124FB2326CF3FB351AD3251A63BEC739.mft (raw, json)
Hash identifier: 7IQv3/lWl4+u/PVD6hhnqhay8iRenGliOqyG5kBrk1E=
Subject key identifier: D5:7D:70:64:68:63:D6:DA:3C:6A:C9:EF:45:04:30:4C:DD:F8:F2:06
Authority key identifier: B1:13:8D:02:12:4F:B2:32:6C:F3:FB:35:1A:D3:25:1A:63:BE:C7:39
Certificate issuer: /CN=b1138d02124fb2326cf3fb351ad3251a63bec739
Certificate serial: 54BBFBE2BF006460B440FA7862F43BBF47F97A85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sRONAhJPsjJs8_s1GtMlGmO-xzk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/0/B1138D02124FB2326CF3FB351AD3251A63BEC739.mft
Manifest number: 45
Signing time: Fri 13 Jun 2025 16:14:37 +0000
Manifest this update: Fri 13 Jun 2025 16:09:37 +0000
Manifest next update: Sat 14 Jun 2025 16:59:37 +0000
Files and hashes: 1: B1138D02124FB2326CF3FB351AD3251A63BEC739.crl (hash: QsD7owB+uYBgKolW1LJ7n6RrrDzFDLmWiFLGr80vDP0=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/0/B1138D02124FB2326CF3FB351AD3251A63BEC739.crl
rsync://rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/0/B1138D02124FB2326CF3FB351AD3251A63BEC739.mft
rsync://rpki.ripe.net/repository/DEFAULT/sRONAhJPsjJs8_s1GtMlGmO-xzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:bb:fb:e2:bf:00:64:60:b4:40:fa:78:62:f4:3b:bf:47:f9:7a:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1138d02124fb2326cf3fb351ad3251a63bec739
Validity
Not Before: Jun 13 16:09:37 2025 GMT
Not After : Jun 14 16:59:37 2025 GMT
Subject: CN=D57D70646863D6DA3C6AC9EF4504304CDDF8F206
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:86:8c:33:f2:a3:cc:ac:c7:e1:5f:33:aa:04:
ca:26:9f:9e:3e:f1:a1:f7:60:31:90:85:2a:54:28:
f8:77:63:68:1b:9d:71:76:66:11:ac:27:eb:30:69:
76:91:a4:bc:25:3a:08:ed:55:e8:96:27:ae:66:18:
08:c6:3e:31:3f:5a:9c:5a:ab:db:8b:ff:57:fc:09:
8f:5d:53:1a:95:b3:40:bc:5a:5e:67:55:b2:bf:83:
e3:a2:e7:bc:79:9f:61:71:4e:43:90:1b:7f:f4:a9:
18:f8:9e:2c:51:30:6c:05:b9:93:c4:57:33:51:1e:
c4:39:b1:6a:ff:f5:19:81:b6:83:17:24:7b:63:d9:
5b:8a:94:4c:91:5d:b0:73:3e:40:32:3e:9c:63:de:
b6:0c:12:9d:75:9b:c1:4e:64:01:78:5f:5f:54:4a:
c2:16:84:69:d1:1c:12:b7:de:63:99:f7:34:58:d8:
17:41:e4:b7:40:06:e4:e4:7d:9a:fb:a3:27:ed:23:
07:7f:e4:87:c5:c0:c4:5d:32:e6:d9:f8:1e:8a:77:
71:dd:0d:b0:0f:76:ae:50:ed:b3:f3:9e:8b:e0:08:
cf:61:f8:80:11:f8:b6:87:16:cd:d8:fe:86:6e:f2:
e4:22:55:f9:d0:80:48:cd:6a:b3:04:53:f3:4c:7d:
f2:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:7D:70:64:68:63:D6:DA:3C:6A:C9:EF:45:04:30:4C:DD:F8:F2:06
X509v3 Authority Key Identifier:
keyid:B1:13:8D:02:12:4F:B2:32:6C:F3:FB:35:1A:D3:25:1A:63:BE:C7:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/0/B1138D02124FB2326CF3FB351AD3251A63BEC739.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sRONAhJPsjJs8_s1GtMlGmO-xzk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/0/B1138D02124FB2326CF3FB351AD3251A63BEC739.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:f0:57:d2:8a:ea:87:1f:32:12:b0:84:b1:c2:d7:a9:76:11:
73:c1:db:dd:17:6b:d3:8b:7f:88:a4:51:22:56:d0:25:e2:6b:
99:b2:14:9f:f6:be:ca:e3:94:8e:f8:45:a3:6b:09:df:f6:0f:
e8:56:78:aa:7f:0c:c6:f0:34:2c:32:1d:31:c2:ca:b9:17:c2:
b9:ce:f0:3f:ce:84:d0:2d:75:72:c3:21:47:40:8b:9c:7c:b6:
ce:27:9d:0c:1d:9d:3c:47:2c:82:c2:89:57:fc:56:7e:11:9f:
61:00:1d:75:03:51:e6:34:16:9d:a0:8e:9b:89:ad:dc:bd:a2:
d2:06:fb:31:62:09:0e:8d:d6:bb:5f:cb:4d:1b:b0:eb:82:58:
86:1e:d6:61:08:24:d0:d3:b9:8e:75:23:de:ef:e4:bf:47:62:
a1:51:86:af:09:b3:5c:9c:7a:c6:63:51:ba:7b:f2:95:0d:c4:
d1:3c:fe:5a:2a:eb:42:88:94:d5:aa:4c:ae:8c:2d:1f:d9:63:
4e:f4:be:1b:ae:b7:9d:da:72:77:15:f0:85:09:27:6a:23:77:
b2:e3:82:29:10:bc:b6:7d:47:32:ab:e9:e5:86:48:9d:b5:0d:
ee:cb:77:9d:60:d4:a2:6a:ed:83:d0:f7:4b:ee:74:a4:4f:be:
57:73:72:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:12:25 2025 by rpki-client