Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/3/63F7B29371E814336C52D9C43D1AF4F9FA33E855.mft
File: 63F7B29371E814336C52D9C43D1AF4F9FA33E855.mft (raw, json)
Hash identifier: W8/eVP0alBiTxrCGPTcm1w7w0YmVAiRR9+svLE4Rx8Q=
Subject key identifier: D5:C2:38:F3:8C:2E:C7:59:01:FD:17:25:20:CC:3E:F9:D5:7D:98:4E
Authority key identifier: 63:F7:B2:93:71:E8:14:33:6C:52:D9:C4:3D:1A:F4:F9:FA:33:E8:55
Certificate issuer: /CN=63f7b29371e814336c52d9c43d1af4f9fa33e855
Certificate serial: 0BDFE34CC5CE46BB2004456416A259D47EAE8C4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y_eyk3HoFDNsUtnEPRr0-foz6FU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/3/63F7B29371E814336C52D9C43D1AF4F9FA33E855.mft
Manifest number: 020B
Signing time: Sat 26 Apr 2025 20:38:57 +0000
Manifest this update: Sat 26 Apr 2025 20:33:57 +0000
Manifest next update: Sun 27 Apr 2025 22:54:57 +0000
Files and hashes: 1: 63F7B29371E814336C52D9C43D1AF4F9FA33E855.crl (hash: wunBlEgD7K4GqJCdyLfYGcRwVG24Ki/Z2RzOe+9iCTw=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/3/63F7B29371E814336C52D9C43D1AF4F9FA33E855.crl
rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/3/63F7B29371E814336C52D9C43D1AF4F9FA33E855.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y_eyk3HoFDNsUtnEPRr0-foz6FU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 22:54:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:df:e3:4c:c5:ce:46:bb:20:04:45:64:16:a2:59:d4:7e:ae:8c:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63f7b29371e814336c52d9c43d1af4f9fa33e855
Validity
Not Before: Apr 26 20:33:57 2025 GMT
Not After : Apr 27 22:54:57 2025 GMT
Subject: CN=D5C238F38C2EC75901FD172520CC3EF9D57D984E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:96:af:56:57:14:9c:43:ba:3b:a4:47:53:a1:
8b:ca:6b:d1:31:d3:07:44:38:dc:55:1f:7e:2d:31:
bf:c6:d7:51:2f:6b:66:5c:17:34:18:fa:b7:b8:fc:
93:7f:2e:c7:b5:f4:ce:3a:3f:7e:51:84:d9:2f:33:
ad:62:1c:b6:15:ff:4f:7b:f9:b5:1a:3a:ff:fb:e8:
97:57:66:39:4a:14:0e:73:b8:3e:91:85:50:fb:7d:
89:b7:0e:2b:a8:d4:b8:52:97:2f:ef:56:4d:64:a6:
35:36:b2:26:24:6e:1d:de:c8:56:75:00:85:08:9d:
a9:49:d7:14:0a:17:a1:cb:f2:cc:44:87:f1:d2:f6:
b7:f2:d6:18:a8:1b:90:f9:65:72:54:55:ff:c5:c5:
a9:61:60:81:96:82:fd:bb:b3:91:b9:c5:b8:26:26:
32:5b:9f:64:3f:90:0b:3e:ad:0f:bd:8b:6c:80:7d:
ff:a0:da:f3:3a:81:a0:f6:c4:00:0d:a0:51:69:7d:
a0:ba:db:f3:ea:7d:eb:06:a3:34:b6:5f:91:38:66:
cd:23:d5:6c:e8:8d:79:7f:42:61:3c:d0:4f:98:40:
d9:32:9f:58:50:5d:9c:42:28:93:76:87:24:f8:36:
1e:7c:9b:ee:da:75:b3:94:d1:13:a4:54:dc:82:e1:
39:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:C2:38:F3:8C:2E:C7:59:01:FD:17:25:20:CC:3E:F9:D5:7D:98:4E
X509v3 Authority Key Identifier:
keyid:63:F7:B2:93:71:E8:14:33:6C:52:D9:C4:3D:1A:F4:F9:FA:33:E8:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/3/63F7B29371E814336C52D9C43D1AF4F9FA33E855.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y_eyk3HoFDNsUtnEPRr0-foz6FU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/3/63F7B29371E814336C52D9C43D1AF4F9FA33E855.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:73:54:d2:48:50:99:5b:18:66:da:92:e6:75:89:8d:8c:80:
ea:ac:0c:8c:de:1b:b9:bd:b1:49:a8:c2:37:71:ce:ac:87:3c:
fc:0e:0b:dd:f4:d6:e1:29:a4:68:7a:79:ec:e4:0d:f3:1c:08:
4c:61:a6:e4:4a:65:8d:de:e1:d7:d7:c1:90:31:e0:36:a9:45:
1b:4c:da:ea:8a:90:6c:ba:85:3c:3f:0d:cc:12:9a:26:75:ec:
e2:72:bb:e1:ab:bb:98:77:39:39:bc:f7:97:38:9a:38:20:12:
50:73:e7:be:48:16:fd:85:d7:f3:62:52:83:96:7e:cf:7d:24:
de:2d:4e:56:c3:7b:78:c7:37:d7:73:02:fd:c4:2f:84:87:c9:
2b:b2:90:d6:3d:b2:6f:e3:f2:a5:54:93:30:50:21:41:a7:78:
8b:41:28:b3:76:50:e6:b2:99:bf:6a:07:87:04:25:2b:2d:4e:
89:72:9f:b4:b1:7d:00:70:35:ab:82:27:92:bc:e2:6a:3f:c0:
3c:24:68:b1:e0:a9:e6:9f:91:78:c6:14:1b:c7:1e:03:06:3e:
57:a6:f2:51:cc:17:20:99:47:92:66:e8:a3:f4:cb:bc:b5:3f:
05:68:0d:3a:54:2c:fe:39:3e:c2:c7:2f:d3:db:e8:1b:1c:29:
6d:bf:7e:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:15:24 2025 by rpki-client