Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/1/25BB542055398CAC21DB2407FD8E7D795A10F5ED.mft
File: 25BB542055398CAC21DB2407FD8E7D795A10F5ED.mft (raw, json)
Hash identifier: NBWMUCbf2P1rUqGlDT5HcB1p1UmXz25tw3bMYdvKJNc=
Subject key identifier: 22:70:67:C7:30:10:1A:61:3F:08:46:54:94:9A:89:7F:0C:09:A1:CF
Authority key identifier: 25:BB:54:20:55:39:8C:AC:21:DB:24:07:FD:8E:7D:79:5A:10:F5:ED
Certificate issuer: /CN=25bb542055398cac21db2407fd8e7d795a10f5ed
Certificate serial: 622AA99EE7CE7D46563646EC807244B1DD441BB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JbtUIFU5jKwh2yQH_Y59eVoQ9e0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/1/25BB542055398CAC21DB2407FD8E7D795A10F5ED.mft
Manifest number: 44
Signing time: Sat 10 May 2025 15:22:30 +0000
Manifest this update: Sat 10 May 2025 15:17:30 +0000
Manifest next update: Sun 11 May 2025 17:40:30 +0000
Files and hashes: 1: 25BB542055398CAC21DB2407FD8E7D795A10F5ED.crl (hash: tg49ua50ECFz5MjG5arlarGEkdiNPsGomSLVsBohHVs=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/1/25BB542055398CAC21DB2407FD8E7D795A10F5ED.crl
rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/1/25BB542055398CAC21DB2407FD8E7D795A10F5ED.mft
rsync://rpki.ripe.net/repository/DEFAULT/JbtUIFU5jKwh2yQH_Y59eVoQ9e0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:2a:a9:9e:e7:ce:7d:46:56:36:46:ec:80:72:44:b1:dd:44:1b:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25bb542055398cac21db2407fd8e7d795a10f5ed
Validity
Not Before: May 10 15:17:30 2025 GMT
Not After : May 11 17:40:30 2025 GMT
Subject: CN=227067C730101A613F084654949A897F0C09A1CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8c:13:5a:b7:95:33:fb:ae:6d:88:95:8a:bb:
2a:81:a1:bb:c5:bd:5f:24:b7:81:15:62:fa:4d:dc:
23:0e:1a:ee:b4:6c:63:57:93:bd:35:4b:35:dc:d6:
0e:43:2c:e4:db:8b:52:3a:99:bb:30:14:b4:dc:8a:
a9:d5:72:7f:ad:14:32:5a:24:de:19:0a:84:69:0b:
2d:98:a3:6d:3d:71:c6:25:1a:0e:b8:00:ef:1d:95:
24:6a:7a:d2:5c:07:bc:62:f4:67:25:41:94:3d:2e:
74:aa:16:27:d5:f2:b1:fc:cb:a2:08:a3:03:8b:0e:
4e:f4:66:8e:ae:df:ca:52:96:cf:f6:b0:97:7a:16:
c6:a3:82:82:a9:1b:08:28:7f:c4:6c:0f:6d:13:e4:
dc:57:83:3e:4c:19:85:42:68:60:ce:56:a7:07:d2:
6e:2b:4b:6c:7e:d3:9a:52:0f:7b:f8:d4:a9:32:71:
98:dd:37:e4:be:fe:b9:ab:31:af:4f:97:03:65:85:
ef:a4:83:55:f4:44:23:ae:c6:4f:7d:58:c0:2c:12:
f7:22:a7:5a:fa:0a:02:cd:73:98:4e:94:96:8e:6d:
2e:33:b1:3f:e2:12:89:d0:0b:66:57:f4:f1:19:d1:
d7:43:95:34:9c:e5:35:90:52:cf:a7:1f:52:a9:fd:
80:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:70:67:C7:30:10:1A:61:3F:08:46:54:94:9A:89:7F:0C:09:A1:CF
X509v3 Authority Key Identifier:
keyid:25:BB:54:20:55:39:8C:AC:21:DB:24:07:FD:8E:7D:79:5A:10:F5:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/1/25BB542055398CAC21DB2407FD8E7D795A10F5ED.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JbtUIFU5jKwh2yQH_Y59eVoQ9e0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/1/25BB542055398CAC21DB2407FD8E7D795A10F5ED.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:cb:7d:97:13:2f:d5:55:62:e5:ed:03:95:8d:7f:74:70:09:
fa:06:1c:cb:df:17:fa:99:c7:48:e7:d6:34:a7:d4:4a:b3:ec:
9f:3f:b8:6b:fb:61:02:b0:6a:71:d6:7b:38:7b:12:d4:1f:d2:
de:0b:ed:ef:d8:c2:a4:fc:82:86:19:88:93:9a:75:1e:05:35:
96:fd:48:5e:ae:5a:27:80:38:f0:fa:8d:59:c6:13:6e:a3:69:
59:4f:ed:45:ee:54:cc:b4:4f:89:74:11:64:b6:d9:25:9e:26:
a0:30:3d:21:d9:9d:2d:e1:bb:5d:75:ec:c8:c5:5c:90:68:4c:
03:ec:23:16:f9:16:a2:5f:83:b9:a4:6a:18:fe:88:6e:e9:9a:
dc:75:9c:b6:b6:27:ae:87:b1:fb:f4:0c:0c:d1:25:6e:95:fa:
51:06:6d:42:f6:61:ed:af:45:15:fd:ef:0c:0d:8d:b0:72:33:
2d:89:58:75:bc:13:4b:4d:5f:f3:ce:b2:dc:d3:ef:0d:cc:43:
25:60:5a:04:c0:97:66:69:e5:ca:8c:8e:38:aa:3a:46:10:05:
02:b5:d9:f3:ce:a7:94:6b:1b:31:8f:02:c3:92:99:65:28:92:
33:8f:f7:47:6a:05:9f:19:0b:c8:98:eb:e0:c2:d9:5a:f3:eb:
ca:f9:bb:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 17:24:21 2025 by rpki-client