Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.mft
File: 0993289B168A37D449BC0D44B1AD35E532025CF1.mft (raw, json)
Hash identifier: GRDpVX47G2uCBx+ylDZB1u4Qyid8Vi3KVG9+W9qA10k=
Subject key identifier: 78:77:43:63:03:8B:46:27:50:F3:AD:DE:9B:9C:65:45:5C:76:B1:96
Authority key identifier: 09:93:28:9B:16:8A:37:D4:49:BC:0D:44:B1:AD:35:E5:32:02:5C:F1
Certificate issuer: /CN=0993289b168a37d449bc0d44b1ad35e532025cf1
Certificate serial: 597A460102BFE3B8F34B2573FB0AD2AFC4EE9AF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZMomxaKN9RJvA1Esa015TICXPE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.mft
Manifest number: 01D3
Signing time: Sat 26 Apr 2025 18:19:59 +0000
Manifest this update: Sat 26 Apr 2025 18:14:59 +0000
Manifest next update: Sun 27 Apr 2025 21:05:59 +0000
Files and hashes: 1: 0993289B168A37D449BC0D44B1AD35E532025CF1.crl (hash: bk8fnS9R2PEUemG2n3GLImIaD5uL4BnHr5zbzJiDT8I=)
2: 3139342e3135362e37362e302f32342d3234203d3e20323132323338.roa (hash: aYgIlKiSJ4ioWL0iywiOQHZgGMKhrRUwH6j6yolmnUs=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.crl
rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.mft
rsync://rpki.ripe.net/repository/DEFAULT/CZMomxaKN9RJvA1Esa015TICXPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 21:05:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:7a:46:01:02:bf:e3:b8:f3:4b:25:73:fb:0a:d2:af:c4:ee:9a:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0993289b168a37d449bc0d44b1ad35e532025cf1
Validity
Not Before: Apr 26 18:14:59 2025 GMT
Not After : Apr 27 21:05:59 2025 GMT
Subject: CN=78774363038B462750F3ADDE9B9C65455C76B196
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3f:7f:32:7c:fc:e8:b8:a2:50:69:fe:7c:65:
a0:03:58:81:c3:c2:0b:41:4c:27:ad:7c:d1:3f:3a:
38:43:37:97:51:f2:1c:e6:5d:b8:b7:78:4e:74:3e:
07:24:2e:fc:0b:f6:33:25:87:d2:d8:9c:f2:56:e3:
69:60:be:89:dd:2f:9c:c6:91:fb:ad:a0:55:c8:eb:
60:70:10:60:bd:f2:52:5b:74:86:9b:8c:35:93:ba:
cc:6d:3d:5b:b2:ec:8d:5d:2c:89:87:11:8a:d2:a4:
bd:d5:4a:16:d7:93:31:47:bd:c1:fd:32:ea:96:31:
f8:34:a2:31:a6:5d:5c:b1:e0:2f:83:74:ab:d1:cc:
73:56:dc:37:20:94:d2:9a:8c:46:de:b5:8f:82:13:
a9:1e:f7:26:46:d9:0c:02:27:2a:42:a3:b2:20:0d:
e9:34:9e:66:6c:ed:e5:a1:52:fa:8b:ef:0d:2e:60:
ca:66:09:d7:ce:26:77:02:fa:95:f5:fb:37:f6:46:
8f:48:ac:1c:21:87:5b:69:dc:d1:df:05:d6:3f:fd:
f9:fa:03:de:65:89:9a:a4:01:b9:1c:9a:06:10:0f:
87:1e:fa:eb:32:86:e2:23:d1:6f:cb:55:58:1a:c1:
41:f0:05:70:a5:e1:72:f0:7f:33:b5:93:be:e8:0c:
b5:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:77:43:63:03:8B:46:27:50:F3:AD:DE:9B:9C:65:45:5C:76:B1:96
X509v3 Authority Key Identifier:
keyid:09:93:28:9B:16:8A:37:D4:49:BC:0D:44:B1:AD:35:E5:32:02:5C:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZMomxaKN9RJvA1Esa015TICXPE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:d7:ca:01:29:b6:11:f8:bc:c7:e7:d0:53:92:f1:bf:8e:4d:
a6:19:78:4a:13:eb:1b:4e:36:97:5c:33:0c:a5:03:c1:ce:34:
04:c8:06:05:d8:a9:e8:f6:96:57:a9:9c:bc:67:3c:4d:8a:65:
dc:ff:33:db:c6:79:34:f0:b1:cf:bc:93:62:c9:40:05:15:68:
15:a1:2b:0a:b9:84:6f:e4:f9:db:28:3c:35:31:cf:5b:9d:d7:
13:9e:9e:56:a6:83:0f:75:64:00:73:49:04:3b:9a:6d:b2:4f:
81:3d:7f:50:34:02:68:86:59:3b:5f:cb:34:dd:ae:46:fa:ea:
54:c2:bd:b1:2d:d7:e6:10:56:a1:29:0a:c8:da:81:a7:a4:9d:
9e:83:2c:48:6e:70:38:2a:5f:1c:30:54:0d:d6:9c:86:22:f9:
8e:1d:a9:44:e3:2f:9b:cf:88:ee:bb:6e:b8:53:da:17:67:3e:
62:a5:93:5f:88:77:03:7c:a2:5a:07:8a:6a:43:e6:b4:4e:f9:
9e:3a:e9:27:25:58:24:47:b0:79:09:91:23:5f:9b:61:ea:e5:
d2:77:21:2e:8d:aa:89:29:3d:90:30:35:a2:ef:15:32:0f:14:
18:9c:1f:09:09:f3:91:34:c0:a3:0c:e7:fd:e2:9e:6f:65:1c:
75:6a:01:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:08:24 2025 by rpki-client