Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d2b0a202-e1f4-4f72-a6d2-e2b297ac2b94/0/91A33711A470A1CAF41284B368F40FD2BDF16F01.mft
File: 91A33711A470A1CAF41284B368F40FD2BDF16F01.mft (raw, json)
Hash identifier: NU3qDXIGTz2mkU5l8L3cK6bZWPzgCn2dz+udF9EiaSw=
Subject key identifier: AE:C5:73:31:C7:B3:1F:60:7E:FE:9D:4F:6C:B7:07:D0:D4:D5:FB:65
Authority key identifier: 91:A3:37:11:A4:70:A1:CA:F4:12:84:B3:68:F4:0F:D2:BD:F1:6F:01
Certificate issuer: /CN=91a33711a470a1caf41284b368f40fd2bdf16f01
Certificate serial: 609F053D324CFB147E4FEAC291E98E0E016B4537
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kaM3EaRwocr0EoSzaPQP0r3xbwE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d2b0a202-e1f4-4f72-a6d2-e2b297ac2b94/0/91A33711A470A1CAF41284B368F40FD2BDF16F01.mft
Manifest number: 02C9
Signing time: Mon 28 Apr 2025 07:14:59 +0000
Manifest this update: Mon 28 Apr 2025 07:09:59 +0000
Manifest next update: Tue 29 Apr 2025 07:24:59 +0000
Files and hashes: 1: 91A33711A470A1CAF41284B368F40FD2BDF16F01.crl (hash: ZBASlwuxIMfqr9YW7uUJZdmTvARy55+eV/U/m6GPA0U=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d2b0a202-e1f4-4f72-a6d2-e2b297ac2b94/0/91A33711A470A1CAF41284B368F40FD2BDF16F01.crl
rsync://rsync.paas.rpki.ripe.net/repository/d2b0a202-e1f4-4f72-a6d2-e2b297ac2b94/0/91A33711A470A1CAF41284B368F40FD2BDF16F01.mft
rsync://rpki.ripe.net/repository/DEFAULT/kaM3EaRwocr0EoSzaPQP0r3xbwE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 07:24:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:9f:05:3d:32:4c:fb:14:7e:4f:ea:c2:91:e9:8e:0e:01:6b:45:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91a33711a470a1caf41284b368f40fd2bdf16f01
Validity
Not Before: Apr 28 07:09:59 2025 GMT
Not After : Apr 29 07:24:59 2025 GMT
Subject: CN=AEC57331C7B31F607EFE9D4F6CB707D0D4D5FB65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:8f:02:fe:b6:10:1c:15:4f:23:aa:a2:0b:43:
dc:dc:82:3f:59:cb:12:6e:6f:d9:15:1d:d7:3f:27:
3e:6e:5e:f0:0d:0b:e6:59:03:f6:c9:a0:61:f7:c4:
7a:9d:f1:8d:78:45:2b:38:76:76:4d:71:00:f6:70:
31:5c:c8:41:4e:6f:7d:51:c9:fc:60:1d:ed:c1:96:
bb:b5:20:fc:6f:74:2f:b4:25:58:27:fd:fd:4f:40:
76:f7:d9:e4:09:4f:41:27:5f:f4:51:f0:33:e7:7e:
1c:06:66:2e:cf:bc:18:da:01:fa:06:3b:7d:0f:86:
d3:ff:c1:cb:13:ea:53:98:f5:bb:ab:61:f4:7d:5d:
8d:6b:35:c8:82:f8:f2:3b:38:7b:e6:17:6d:d9:6a:
64:e3:53:4e:01:33:81:d6:b2:f1:a5:85:24:82:54:
96:34:42:c6:d4:d7:9f:7f:04:7f:0c:7e:d9:b9:ee:
9b:21:d5:29:fc:16:dd:e2:25:75:c3:1d:c2:67:18:
17:3e:87:02:d1:be:55:6b:38:1f:99:28:26:2a:45:
36:c2:3b:4a:32:a5:be:94:72:51:44:34:a2:1a:fa:
f5:69:66:d5:ee:43:ae:4d:04:ed:6e:13:9e:bb:77:
a8:3b:18:cd:87:d1:34:a5:6f:f7:11:77:2e:cf:4b:
85:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:C5:73:31:C7:B3:1F:60:7E:FE:9D:4F:6C:B7:07:D0:D4:D5:FB:65
X509v3 Authority Key Identifier:
keyid:91:A3:37:11:A4:70:A1:CA:F4:12:84:B3:68:F4:0F:D2:BD:F1:6F:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d2b0a202-e1f4-4f72-a6d2-e2b297ac2b94/0/91A33711A470A1CAF41284B368F40FD2BDF16F01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kaM3EaRwocr0EoSzaPQP0r3xbwE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d2b0a202-e1f4-4f72-a6d2-e2b297ac2b94/0/91A33711A470A1CAF41284B368F40FD2BDF16F01.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:ea:66:d3:ed:5e:a6:42:7e:7d:b8:d9:ba:8a:dc:21:de:b5:
88:5d:d0:d9:90:62:cf:d3:24:e0:41:de:4f:5a:22:0e:ae:ca:
29:b5:2c:f8:16:a0:cc:f9:91:5d:9e:85:d6:3c:01:5b:9f:b4:
f7:47:82:24:78:2b:ef:d7:91:bc:41:f9:09:9b:29:f3:8b:22:
9c:68:d3:3a:ad:86:19:d8:eb:63:20:2f:39:0b:f5:6a:90:47:
f6:2e:b9:c1:24:89:aa:a5:80:15:97:dc:f3:88:54:6b:3e:64:
2c:02:16:96:99:01:9f:78:0b:18:86:67:68:ee:b0:b7:88:58:
fb:46:78:96:dc:10:24:c9:1e:77:40:be:01:aa:83:aa:69:59:
58:c1:30:24:18:8f:f5:40:24:2a:c6:37:f9:3b:40:d6:fe:dd:
e5:6e:db:d4:ac:ba:e8:02:6f:0b:5b:4b:9d:6f:45:29:5f:a7:
0c:29:a7:01:dc:10:a3:4f:ca:b1:a2:c8:73:9f:0b:a3:45:3e:
74:f5:6b:77:2f:6b:3a:1e:95:f1:eb:31:83:52:65:e4:4c:46:
d6:24:55:a9:de:98:ae:a1:70:ad:a5:56:09:17:59:6a:b1:c1:
35:e9:46:3d:3e:29:86:7c:db:23:c5:31:60:38:5d:68:0a:52:
31:a6:2e:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:52:30 2025 by rpki-client