Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/02c72b7c-f55a-4990-ac8a-633ee1f8e8e1/0/2CABA02127925D9988710EEE5A0A59B004C6B6B1.mft
File: 2CABA02127925D9988710EEE5A0A59B004C6B6B1.mft (raw, json)
Hash identifier: +5JrA8jR9h4XAMcxcKGMmNw7iDgnLvF4jYaiCt4rKXk=
Subject key identifier: 70:12:E4:17:6E:CB:5F:79:38:2B:B6:11:08:F3:0C:EE:DD:C0:CF:BB
Authority key identifier: 2C:AB:A0:21:27:92:5D:99:88:71:0E:EE:5A:0A:59:B0:04:C6:B6:B1
Certificate issuer: /CN=2caba02127925d9988710eee5a0a59b004c6b6b1
Certificate serial: 7EC3F2C0638FE3550868B0C2FE2776335D6FED17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LKugISeSXZmIcQ7uWgpZsATGtrE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/02c72b7c-f55a-4990-ac8a-633ee1f8e8e1/0/2CABA02127925D9988710EEE5A0A59B004C6B6B1.mft
Manifest number: 4A
Signing time: Sun 04 May 2025 13:21:06 +0000
Manifest this update: Sun 04 May 2025 13:16:06 +0000
Manifest next update: Mon 05 May 2025 13:30:06 +0000
Files and hashes: 1: 2CABA02127925D9988710EEE5A0A59B004C6B6B1.crl (hash: 64XQZ+n0f4Pc7X2XOwMlKKs92AetEg3AHan3cJwQnxQ=)
2: AS214757.asa (hash: l0Y+CPb9AOgowGXfzD29IiYtbowgVgdv2PTL+8Uiexk=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/02c72b7c-f55a-4990-ac8a-633ee1f8e8e1/0/2CABA02127925D9988710EEE5A0A59B004C6B6B1.crl
rsync://rsync.paas.rpki.ripe.net/repository/02c72b7c-f55a-4990-ac8a-633ee1f8e8e1/0/2CABA02127925D9988710EEE5A0A59B004C6B6B1.mft
rsync://rpki.ripe.net/repository/DEFAULT/LKugISeSXZmIcQ7uWgpZsATGtrE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 13:30:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:c3:f2:c0:63:8f:e3:55:08:68:b0:c2:fe:27:76:33:5d:6f:ed:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2caba02127925d9988710eee5a0a59b004c6b6b1
Validity
Not Before: May 4 13:16:06 2025 GMT
Not After : May 5 13:30:06 2025 GMT
Subject: CN=7012E4176ECB5F79382BB61108F30CEEDDC0CFBB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:90:33:97:b4:38:74:ff:11:b7:d0:b8:70:14:
d8:13:91:37:33:09:d4:10:23:02:97:dd:4f:ca:3a:
79:d5:5d:9c:35:6f:b3:a0:a9:33:92:ea:e8:31:6c:
c2:3d:20:5b:eb:ca:44:16:7c:9e:dc:dc:de:7c:29:
25:f0:4a:ba:10:39:e5:26:6a:68:63:4a:b7:d4:f6:
5a:ec:3c:cb:82:c2:3c:6b:a8:dd:68:64:5c:a1:c2:
25:7a:49:64:c1:c8:0f:b9:16:6f:e4:4d:94:fb:53:
f7:31:4a:70:61:e5:a4:28:44:c6:d3:5c:41:ee:02:
a8:d7:70:9d:19:04:6f:1c:98:ee:22:a3:47:cb:4d:
d5:07:8d:6f:84:80:1b:6f:43:89:78:ae:39:d3:bd:
e7:f1:00:30:b7:29:9a:b7:32:17:2f:e9:bb:b7:c4:
e5:5d:6a:c0:7e:b1:fb:64:e0:c8:81:5f:7e:1c:1e:
5b:5a:a3:71:db:86:cb:ce:1a:ff:e1:3b:bc:a9:20:
9b:86:0b:5e:44:92:d0:5b:a8:0a:ec:07:71:6f:ce:
04:c2:00:44:57:64:92:58:02:0f:ec:62:cd:71:58:
14:d0:20:6b:0d:6e:2b:c8:09:58:f3:97:08:a5:61:
41:01:4e:c7:77:be:45:d1:63:88:29:4c:bd:84:c0:
d2:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:12:E4:17:6E:CB:5F:79:38:2B:B6:11:08:F3:0C:EE:DD:C0:CF:BB
X509v3 Authority Key Identifier:
keyid:2C:AB:A0:21:27:92:5D:99:88:71:0E:EE:5A:0A:59:B0:04:C6:B6:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/02c72b7c-f55a-4990-ac8a-633ee1f8e8e1/0/2CABA02127925D9988710EEE5A0A59B004C6B6B1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LKugISeSXZmIcQ7uWgpZsATGtrE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/02c72b7c-f55a-4990-ac8a-633ee1f8e8e1/0/2CABA02127925D9988710EEE5A0A59B004C6B6B1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:54:b9:4c:a1:4e:6e:f2:00:c7:73:48:c6:c7:c1:63:69:d1:
ac:e9:36:92:41:96:76:b1:48:ae:20:80:1e:0b:8e:96:d0:02:
d4:01:06:3d:1d:57:77:56:c0:6f:4a:13:f9:3a:d9:fd:01:22:
18:2d:87:41:0a:92:d8:df:f2:f5:a4:fc:39:2c:dd:66:9d:51:
00:ba:f0:be:ae:47:9b:bf:71:04:7f:01:a9:70:57:b3:ff:6a:
95:f7:75:9c:88:4f:67:6f:c0:ad:68:0b:2f:c5:5b:d0:67:60:
1e:61:09:7c:f9:0b:68:78:f2:49:f7:0f:83:9a:5f:72:9a:f8:
63:d8:23:12:d7:58:d1:95:b3:a7:43:04:66:54:85:63:a5:de:
71:9a:26:27:1f:22:50:30:1b:80:47:74:ba:3c:0e:f4:26:d9:
be:2d:42:f5:e7:d1:be:2b:e3:a5:05:dd:38:f2:cd:63:6d:ba:
7f:2c:41:24:87:3e:f7:e2:9b:44:be:27:78:b0:1f:86:e4:e6:
37:09:af:cf:cd:be:b1:77:85:33:12:45:60:02:03:1b:89:53:
12:1b:cd:fd:f6:02:7a:ee:be:72:92:09:05:9e:19:3d:56:a6:
89:08:00:d4:1d:f7:3a:54:da:db:c2:ab:b6:3d:ee:c0:50:1e:
73:de:79:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 03:56:38 2025 by rpki-client