Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/A715A7C4243DFD5608AC7C5962055125B94D1763.mft
File: A715A7C4243DFD5608AC7C5962055125B94D1763.mft (raw, json)
Hash identifier: TjaYfkoX5ZKAfpDQ2cbaDFOwSJPFEJISMiknL7bj4uA=
Subject key identifier: 07:DC:D6:78:02:31:32:39:C0:B1:74:6B:6B:B0:82:33:C3:F6:53:0C
Authority key identifier: A7:15:A7:C4:24:3D:FD:56:08:AC:7C:59:62:05:51:25:B9:4D:17:63
Certificate issuer: /CN=a715a7c4243dfd5608ac7c5962055125b94d1763
Certificate serial: 52A9CFD4550920BA3A54F354143EE7CF1D99259E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pxWnxCQ9_VYIrHxZYgVRJblNF2M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/A715A7C4243DFD5608AC7C5962055125B94D1763.mft
Manifest number: 04F1
Signing time: Sun 11 May 2025 16:16:18 +0000
Manifest this update: Sun 11 May 2025 16:11:18 +0000
Manifest next update: Mon 12 May 2025 19:13:18 +0000
Files and hashes: 1: 698CBB9E641A60FE66E1B58C92ACD281637ED767.cer (hash: tNwFc0wxK30edc2dJgBKjPLV9///2mnITAEpNIZ0d8k=)
2: A715A7C4243DFD5608AC7C5962055125B94D1763.crl (hash: 96YUhkOS0QdN3IF1eUp/E9m0KUfAYpmGTyzdo2QzMGw=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/A715A7C4243DFD5608AC7C5962055125B94D1763.crl
rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/A715A7C4243DFD5608AC7C5962055125B94D1763.mft
rsync://rpki.ripe.net/repository/DEFAULT/pxWnxCQ9_VYIrHxZYgVRJblNF2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 19:13:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:a9:cf:d4:55:09:20:ba:3a:54:f3:54:14:3e:e7:cf:1d:99:25:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a715a7c4243dfd5608ac7c5962055125b94d1763
Validity
Not Before: May 11 16:11:18 2025 GMT
Not After : May 12 19:13:18 2025 GMT
Subject: CN=07DCD67802313239C0B1746B6BB08233C3F6530C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f2:86:8f:d1:27:a8:a5:f6:f5:a2:33:34:37:
6c:c4:a2:f7:e4:7b:7b:c7:68:bc:7f:c5:77:0c:c8:
83:99:73:8b:59:41:cb:2c:c7:0f:22:58:e4:6a:cf:
43:c3:3b:75:9d:4e:13:64:51:48:43:e4:1b:cb:db:
59:60:c5:e0:b9:eb:cd:c1:8e:51:8e:83:8d:f1:5f:
bf:47:9e:1f:83:ba:04:2f:b1:74:5d:e9:27:72:60:
27:c0:ab:20:b6:19:49:e8:8a:a2:92:2d:ae:91:4f:
1e:d5:f7:ab:0c:c5:79:62:74:38:63:a1:49:b0:98:
7a:d3:dd:81:87:2f:92:68:84:22:f7:00:d1:79:7c:
81:bb:9a:ab:4e:9f:6f:ff:b6:8f:e1:35:41:8a:03:
4e:2f:14:d5:28:38:4b:f5:59:a4:e7:44:4d:7f:d7:
71:56:72:22:10:b9:fc:2e:8e:6b:6f:ea:98:ee:1b:
f4:33:12:63:41:91:74:5e:db:84:cc:32:ce:9e:e6:
31:49:ee:49:ea:13:09:9b:f3:f0:39:21:75:cd:85:
dc:9f:00:3a:57:81:6f:a8:93:8e:f3:61:d9:0d:11:
9d:6b:8d:6b:b1:45:d2:47:d8:1e:b4:8f:89:7c:de:
94:2e:bd:be:ac:80:5f:d6:03:70:be:23:67:e4:75:
0f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:DC:D6:78:02:31:32:39:C0:B1:74:6B:6B:B0:82:33:C3:F6:53:0C
X509v3 Authority Key Identifier:
keyid:A7:15:A7:C4:24:3D:FD:56:08:AC:7C:59:62:05:51:25:B9:4D:17:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/A715A7C4243DFD5608AC7C5962055125B94D1763.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pxWnxCQ9_VYIrHxZYgVRJblNF2M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/A715A7C4243DFD5608AC7C5962055125B94D1763.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:5b:a4:c4:38:16:1b:ee:28:9f:8c:84:6d:f0:fc:8d:21:cb:
fc:d0:98:9a:d4:51:40:64:79:9b:5f:23:71:82:90:b6:ea:73:
1c:9f:9c:3f:65:6b:8e:e0:7f:df:73:be:3e:74:0a:18:da:5d:
cb:ce:7b:59:f7:ce:31:48:bd:ce:61:42:6a:62:25:59:36:95:
a6:c7:df:5e:b5:d7:ae:f9:dc:76:a3:f7:26:83:31:59:74:77:
42:bc:8c:a6:55:17:65:97:fd:dd:38:eb:d3:7d:ca:89:18:fb:
92:d6:d5:f2:de:4c:bd:ee:92:fb:b5:9e:e0:2c:ec:51:07:ce:
c1:62:88:cf:2e:68:37:a0:6c:50:62:47:ba:79:96:2b:5b:62:
c2:73:a2:53:55:11:7f:3a:89:17:17:9b:2a:f0:04:f0:15:e4:
06:ae:13:bb:b4:ef:94:eb:f8:53:cc:16:06:18:0b:bb:61:16:
ef:d4:d2:db:92:c1:da:9b:ee:7d:e0:a7:7c:b0:55:72:44:c9:
e9:f1:70:5c:50:fb:03:ff:4d:fc:3d:c2:39:72:d7:55:a5:c3:
e4:60:74:03:86:64:f2:ec:61:27:cf:54:fe:4e:85:c0:2b:b3:
a8:c3:83:9b:74:5c:1c:fa:ef:e4:e5:aa:ef:99:53:01:37:24:
da:7a:01:a1
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUUqnP1FUJILo6VPNUFD7nzx2ZJZ4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTcxNWE3YzQyNDNkZmQ1NjA4YWM3YzU5NjIwNTUxMjVi
OTRkMTc2MzAeFw0yNTA1MTExNjExMThaFw0yNTA1MTIxOTEzMThaMDMxMTAvBgNV
BAMTKDA3RENENjc4MDIzMTMyMzlDMEIxNzQ2QjZCQjA4MjMzQzNGNjUzMEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX8oaP0Seopfb1ojM0N2zEovfk
e3vHaLx/xXcMyIOZc4tZQcssxw8iWORqz0PDO3WdThNkUUhD5BvL21lgxeC5683B
jlGOg43xX79Hnh+DugQvsXRd6SdyYCfAqyC2GUnoiqKSLa6RTx7V96sMxXlidDhj
oUmwmHrT3YGHL5JohCL3ANF5fIG7mqtOn2//to/hNUGKA04vFNUoOEv1WaTnRE1/
13FWciIQufwujmtv6pjuG/QzEmNBkXRe24TMMs6e5jFJ7knqEwmb8/A5IXXNhdyf
ADpXgW+ok47zYdkNEZ1rjWuxRdJH2B60j4l83pQuvb6sgF/WA3C+I2fkdQ/fAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUB9zWeAIxMjnAsXRra7CCM8P2UwwwHwYDVR0j
BBgwFoAUpxWnxCQ9/VYIrHxZYgVRJblNF2MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMWJmOGU5NzctNzI3OC00NmNmLWFiZDEtOTljZDFmZDJi
ZTRlLzEvQTcxNUE3QzQyNDNERkQ1NjA4QUM3QzU5NjIwNTUxMjVCOTREMTc2My5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3B4V254Q1E5X1ZZSXJIeFpZZ1ZSSmJs
TkYyTS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xYmY4ZTk3Ny03
Mjc4LTQ2Y2YtYWJkMS05OWNkMWZkMmJlNGUvMS9BNzE1QTdDNDI0M0RGRDU2MDhB
QzdDNTk2MjA1NTEyNUI5NEQxNzYzLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKlukxDgWG+4on4yEbfD8
jSHL/NCYmtRRQGR5m18jcYKQtupzHJ+cP2VrjuB/33O+PnQKGNpdy857WffOMUi9
zmFCamIlWTaVpsffXrXXrvncdqP3JoMxWXR3QryMplUXZZf93Tjr033KiRj7ktbV
8t5Mve6S+7We4CzsUQfOwWKIzy5oN6BsUGJHunmWK1tiwnOiU1URfzqJFxebKvAE
8BXkBq4Tu7TvlOv4U8wWBhgLu2EW79TS25LB2pvufeCnfLBVckTJ6fFwXFD7A/9N
/D3COXLXVaXD5GB0A4Zk8uxhJ89U/k6FwCuzqMODm3RcHPrv5OWq75lTATck2noB
oQ==
-----END CERTIFICATE-----
Generated at Mon May 12 12:49:41 2025 by rpki-client