Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/0/C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.mft
File: C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.mft (raw, json)
Hash identifier: d2K/XLMF9cqKaheDPxc2+LM0OxvgG2q5slSg7KolXV8=
Subject key identifier: D5:16:7C:34:E3:AE:22:3F:C2:79:E3:02:92:58:5B:E6:5C:E1:02:98
Authority key identifier: C4:CA:D0:EF:CB:E3:05:B4:49:4E:D2:74:7B:B4:F8:2F:43:AC:8C:81
Certificate issuer: /CN=c4cad0efcbe305b4494ed2747bb4f82f43ac8c81
Certificate serial: 14D80895240AAEF14CA36C973DA5CCDEB9AE757A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xMrQ78vjBbRJTtJ0e7T4L0OsjIE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/0/C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.mft
Manifest number: 01AA
Signing time: Sat 03 May 2025 08:09:17 +0000
Manifest this update: Sat 03 May 2025 08:04:17 +0000
Manifest next update: Sun 04 May 2025 08:26:17 +0000
Files and hashes: 1: C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.crl (hash: SF53HhfIPjFH7EiGf9739LtFV2yWkXfAEmOFx1yj+U4=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/0/C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.crl
rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/0/C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.mft
rsync://rpki.ripe.net/repository/DEFAULT/xMrQ78vjBbRJTtJ0e7T4L0OsjIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 May 2025 08:26:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:d8:08:95:24:0a:ae:f1:4c:a3:6c:97:3d:a5:cc:de:b9:ae:75:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4cad0efcbe305b4494ed2747bb4f82f43ac8c81
Validity
Not Before: May 3 08:04:17 2025 GMT
Not After : May 4 08:26:17 2025 GMT
Subject: CN=D5167C34E3AE223FC279E30292585BE65CE10298
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:02:17:19:ba:e2:0e:79:8b:bf:82:d3:a3:0f:
73:dd:ee:2e:14:34:f4:f5:03:13:25:68:bd:fc:ae:
6e:89:62:23:89:91:b1:85:c2:a8:ae:e0:72:09:36:
74:5b:4c:be:35:0c:13:26:c0:54:85:5f:3b:e6:31:
d9:9b:a3:33:81:61:43:87:b9:7c:1b:e4:46:83:7c:
2d:f3:9e:2d:2b:af:67:bb:45:b4:58:bd:b3:78:f2:
e7:f9:23:bb:47:ab:96:df:7c:7c:1a:47:ef:5c:a9:
ff:ed:ae:a7:f5:b2:91:cb:ea:60:fd:f0:48:a2:21:
2d:5d:b0:58:c9:6b:b4:7d:f6:ff:d4:cd:1c:07:5f:
df:89:df:3d:b1:10:eb:60:11:a0:44:15:d1:e0:ad:
bb:a4:79:92:9b:38:31:2e:59:e3:06:12:8b:06:71:
73:aa:89:12:ba:41:1f:7c:d5:79:d5:69:03:ea:46:
d7:aa:4e:b6:95:ef:bc:10:cb:bd:52:34:c0:31:9b:
39:66:c2:71:f3:7f:47:2e:9c:2c:29:b0:04:d2:05:
3f:38:8a:7c:87:03:48:eb:f6:e8:9a:fd:dd:2c:40:
2e:40:5c:86:c5:f1:2a:5e:12:a7:50:6d:c3:83:62:
4b:43:f8:ef:5c:b5:6e:77:ed:52:c6:74:26:1d:37:
47:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:16:7C:34:E3:AE:22:3F:C2:79:E3:02:92:58:5B:E6:5C:E1:02:98
X509v3 Authority Key Identifier:
keyid:C4:CA:D0:EF:CB:E3:05:B4:49:4E:D2:74:7B:B4:F8:2F:43:AC:8C:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/0/C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xMrQ78vjBbRJTtJ0e7T4L0OsjIE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/0/C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:10:aa:c7:7e:cd:67:52:9e:fd:e0:8e:42:09:39:10:c8:b8:
84:cb:a0:af:dd:2e:f4:65:4b:20:62:0f:b3:91:29:59:52:5e:
4e:04:43:72:73:7a:5e:a9:d0:26:d8:89:73:b3:a3:f3:73:6e:
4e:32:5f:31:f0:07:46:1a:80:58:2f:95:37:16:09:7a:9c:3f:
86:99:89:29:f7:e7:78:3a:5d:2a:96:27:b7:e3:0e:b8:2a:75:
49:16:e7:ff:a3:42:93:eb:fc:c4:9b:f6:ea:dd:7b:3a:bf:2f:
af:55:fd:11:a9:7e:9f:53:71:42:37:b0:89:db:c0:4f:34:0b:
61:29:92:a7:89:4f:c0:b6:c7:cc:f9:45:a1:79:ff:81:14:73:
ac:7e:e6:69:fe:33:f7:23:bf:71:60:bd:b2:ab:2d:29:3c:33:
8a:ae:be:eb:7c:b2:db:45:ee:35:8e:b2:a5:c5:5c:89:6c:e7:
71:b6:e2:26:83:58:25:ce:20:46:19:6d:c1:e8:63:99:5b:e0:
70:bf:c2:69:14:39:33:f9:65:56:15:6e:7f:7e:88:d3:09:3f:
bc:5e:fa:4c:67:2c:08:f1:ff:36:a1:2f:e3:17:18:22:2e:5a:
af:d1:ea:fc:02:85:48:b7:ad:cc:df:cd:59:d6:5a:8f:e1:ad:
ce:e0:98:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 00:50:12 2025 by rpki-client