Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/4/A6C17E7D363F18F73A2A8E34C1425D2D4656203B.mft
File: A6C17E7D363F18F73A2A8E34C1425D2D4656203B.mft (raw, json)
Hash identifier: z/AWh3mphT2/1mHU0XuFOfEGzmtU9kwDTvW4VEFvoxs=
Subject key identifier: 76:DA:3C:1D:14:93:25:44:25:DD:58:33:C0:6E:3D:C9:AE:39:A7:17
Authority key identifier: A6:C1:7E:7D:36:3F:18:F7:3A:2A:8E:34:C1:42:5D:2D:46:56:20:3B
Certificate issuer: /CN=a6c17e7d363f18f73a2a8e34c1425d2d4656203b
Certificate serial: 16D12E11512A982B4CEE18D025A006D08445A7BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/psF-fTY_GPc6Ko40wUJdLUZWIDs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/4/A6C17E7D363F18F73A2A8E34C1425D2D4656203B.mft
Manifest number: DE
Signing time: Sat 26 Apr 2025 17:53:57 +0000
Manifest this update: Sat 26 Apr 2025 17:48:57 +0000
Manifest next update: Sun 27 Apr 2025 18:01:57 +0000
Files and hashes: 1: A6C17E7D363F18F73A2A8E34C1425D2D4656203B.crl (hash: yVXUzGB0+QlNHwzZcdGFDqWAo5LiEI00DARymCRvjTk=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/4/A6C17E7D363F18F73A2A8E34C1425D2D4656203B.crl
rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/4/A6C17E7D363F18F73A2A8E34C1425D2D4656203B.mft
rsync://rpki.ripe.net/repository/DEFAULT/psF-fTY_GPc6Ko40wUJdLUZWIDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 18:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:d1:2e:11:51:2a:98:2b:4c:ee:18:d0:25:a0:06:d0:84:45:a7:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6c17e7d363f18f73a2a8e34c1425d2d4656203b
Validity
Not Before: Apr 26 17:48:57 2025 GMT
Not After : Apr 27 18:01:57 2025 GMT
Subject: CN=76DA3C1D1493254425DD5833C06E3DC9AE39A717
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:da:07:b0:88:29:b0:7f:1b:d4:41:95:5f:fb:
0b:9d:29:f0:af:4f:af:d9:60:69:a6:0f:9a:c3:a3:
d7:83:3f:42:ad:c2:76:6e:ae:6c:b9:68:89:8d:e8:
a2:ab:24:f4:18:e1:48:25:9d:8c:6c:4c:cd:c6:11:
a9:a7:58:66:2c:d9:4f:c0:0e:a4:33:15:27:34:2d:
4c:b1:43:c9:ff:db:1b:9e:98:85:ca:33:37:a2:e4:
f5:64:5a:7e:1d:c8:68:d3:1a:7f:9d:42:c8:8a:95:
c4:dc:c2:b5:1f:70:95:a7:3e:7d:fb:59:80:c0:eb:
3d:a0:8c:3d:0a:1a:89:ea:ee:a4:34:95:a6:53:7b:
f3:2d:80:71:ff:95:4e:e2:28:cd:bc:64:33:4c:e7:
44:25:59:f7:b9:e6:5e:76:50:c5:a4:19:67:dd:36:
ea:2b:62:f7:71:8a:97:9b:8d:b6:94:94:7a:0b:f6:
56:ab:c7:d5:76:d0:1f:67:3c:1d:98:c0:b4:fd:60:
f6:0a:ee:f7:af:fb:68:87:fe:d3:ff:27:93:a5:5c:
bc:3a:e7:e9:29:df:b0:5d:72:e8:3b:c8:3c:9c:24:
e8:a4:7c:72:d2:ba:04:3a:a0:4a:85:64:fa:95:ba:
1f:03:d9:d7:06:01:52:a6:c8:17:a8:20:bb:cf:d7:
c9:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:DA:3C:1D:14:93:25:44:25:DD:58:33:C0:6E:3D:C9:AE:39:A7:17
X509v3 Authority Key Identifier:
keyid:A6:C1:7E:7D:36:3F:18:F7:3A:2A:8E:34:C1:42:5D:2D:46:56:20:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/4/A6C17E7D363F18F73A2A8E34C1425D2D4656203B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/psF-fTY_GPc6Ko40wUJdLUZWIDs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/4/A6C17E7D363F18F73A2A8E34C1425D2D4656203B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:61:bd:32:42:e6:11:c5:e6:32:99:df:94:f3:ec:43:1f:9e:
90:b5:d5:55:e7:4c:67:f3:af:13:20:79:b8:c0:03:ce:1d:20:
67:de:e4:94:87:8a:1e:d8:28:76:45:b0:9f:56:60:bf:51:d2:
cd:0e:1f:49:e5:52:5a:76:60:12:70:73:02:28:28:8f:98:3b:
47:9f:29:ac:3f:74:fe:c5:d4:1d:05:ab:67:8a:c8:16:7a:5d:
de:0b:77:2e:ed:fc:c8:98:ca:1f:66:8c:9f:e0:06:b1:08:4b:
99:b0:70:4b:50:6b:b1:95:c5:70:9b:1c:9d:c4:e8:58:0e:b4:
69:bf:cb:cf:9c:13:3c:ba:4f:a8:d2:35:a3:12:04:bc:ba:ec:
64:23:62:f9:2b:ef:51:bd:0d:0d:4f:8a:fe:56:62:e7:df:49:
92:7b:d3:88:1a:3c:02:27:61:29:22:db:c7:86:d7:c0:0c:f3:
91:43:e3:08:90:30:11:78:d8:f7:09:33:a6:15:3b:8f:45:a8:
9d:73:a8:ce:ea:b2:d5:90:fc:12:e9:cb:5c:79:57:b6:5f:26:
41:c9:e9:f5:2e:fc:5f:61:84:5f:89:36:d2:41:cf:82:f5:d2:
b8:71:74:0f:eb:00:3f:6d:57:6a:7a:24:88:56:74:1b:13:84:
71:4a:3c:0a
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUFtEuEVEqmCtM7hjQJaAG0IRFp74wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTZjMTdlN2QzNjNmMThmNzNhMmE4ZTM0YzE0MjVkMmQ0
NjU2MjAzYjAeFw0yNTA0MjYxNzQ4NTdaFw0yNTA0MjcxODAxNTdaMDMxMTAvBgNV
BAMTKDc2REEzQzFEMTQ5MzI1NDQyNURENTgzM0MwNkUzREM5QUUzOUE3MTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN2gewiCmwfxvUQZVf+wudKfCv
T6/ZYGmmD5rDo9eDP0KtwnZurmy5aImN6KKrJPQY4UglnYxsTM3GEamnWGYs2U/A
DqQzFSc0LUyxQ8n/2xuemIXKMzei5PVkWn4dyGjTGn+dQsiKlcTcwrUfcJWnPn37
WYDA6z2gjD0KGonq7qQ0laZTe/MtgHH/lU7iKM28ZDNM50QlWfe55l52UMWkGWfd
NuorYvdxipebjbaUlHoL9larx9V20B9nPB2YwLT9YPYK7vev+2iH/tP/J5OlXLw6
5+kp37Bdcug7yDycJOikfHLSugQ6oEqFZPqVuh8D2dcGAVKmyBeoILvP18l9AgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUdto8HRSTJUQl3VgzwG49ya45pxcwHwYDVR0j
BBgwFoAUpsF+fTY/GPc6Ko40wUJdLUZWIDswDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZDA2MzMzYzYtOTQ2ZC00YjBiLTk1ZWYtZGFiYTI2MmE0
MmUxLzQvQTZDMTdFN0QzNjNGMThGNzNBMkE4RTM0QzE0MjVEMkQ0NjU2MjAzQi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3BzRi1mVFlfR1BjNktvNDB3VUpkTFVa
V0lEcy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kMDYzMzNjNi05
NDZkLTRiMGItOTVlZi1kYWJhMjYyYTQyZTEvNC9BNkMxN0U3RDM2M0YxOEY3M0Ey
QThFMzRDMTQyNUQyRDQ2NTYyMDNCLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL2G9MkLmEcXmMpnflPPs
Qx+ekLXVVedMZ/OvEyB5uMADzh0gZ97klIeKHtgodkWwn1Zgv1HSzQ4fSeVSWnZg
EnBzAigoj5g7R58prD90/sXUHQWrZ4rIFnpd3gt3Lu38yJjKH2aMn+AGsQhLmbBw
S1BrsZXFcJscncToWA60ab/Lz5wTPLpPqNI1oxIEvLrsZCNi+SvvUb0NDU+K/lZi
599JknvTiBo8AidhKSLbx4bXwAzzkUPjCJAwEXjY9wkzphU7j0WonXOozuqy1ZD8
EunLXHlXtl8mQcnp9S78X2GEX4k20kHPgvXSuHF0D+sAP21XanokiFZ0GxOEcUo8
Cg==
-----END CERTIFICATE-----
Generated at Sun Apr 27 10:01:47 2025 by rpki-client