Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/0/74E91965A809D1AC5AA0F0D05506ACB0DDB02AB8.mft
File: 74E91965A809D1AC5AA0F0D05506ACB0DDB02AB8.mft (raw, json)
Hash identifier: 7g0p1DTU3hDM2iBkgLmKdc//cMziF2KAQKmsI07IfFA=
Subject key identifier: A3:41:07:3F:AA:C1:A3:DE:2A:6E:34:01:67:1A:DC:E8:79:F5:00:E7
Authority key identifier: 74:E9:19:65:A8:09:D1:AC:5A:A0:F0:D0:55:06:AC:B0:DD:B0:2A:B8
Certificate issuer: /CN=74e91965a809d1ac5aa0f0d05506acb0ddb02ab8
Certificate serial: 141A9EFB53E10D20CF88C61D28F36228744B72DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dOkZZagJ0axaoPDQVQassN2wKrg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/0/74E91965A809D1AC5AA0F0D05506ACB0DDB02AB8.mft
Manifest number: 0154
Signing time: Sat 28 Jun 2025 21:57:50 +0000
Manifest this update: Sat 28 Jun 2025 21:52:50 +0000
Manifest next update: Mon 30 Jun 2025 01:05:50 +0000
Files and hashes: 1: 74E91965A809D1AC5AA0F0D05506ACB0DDB02AB8.crl (hash: P4YFvhWi6NeU17LKmqZy0JNLtIwo+Bcg6Odncq130n0=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/0/74E91965A809D1AC5AA0F0D05506ACB0DDB02AB8.crl
rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/0/74E91965A809D1AC5AA0F0D05506ACB0DDB02AB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dOkZZagJ0axaoPDQVQassN2wKrg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:1a:9e:fb:53:e1:0d:20:cf:88:c6:1d:28:f3:62:28:74:4b:72:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74e91965a809d1ac5aa0f0d05506acb0ddb02ab8
Validity
Not Before: Jun 28 21:52:50 2025 GMT
Not After : Jun 30 01:05:50 2025 GMT
Subject: CN=A341073FAAC1A3DE2A6E3401671ADCE879F500E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:74:db:61:7c:bb:63:a3:22:76:8b:a6:e6:1c:
63:1a:f8:33:52:f5:d3:dd:24:83:04:7a:b0:56:b3:
8c:f2:14:c4:6b:0d:10:23:7d:bf:38:a9:4b:72:d2:
5c:d0:a6:23:73:c2:44:4a:98:e7:77:ef:94:a8:2f:
4b:d6:c9:92:e9:9c:20:33:0a:47:da:b1:ef:99:a9:
29:43:0d:de:7b:24:f3:67:c6:38:e2:7e:ec:6d:60:
b9:6f:a4:e5:38:7c:2c:ec:fe:0a:c3:9c:83:06:a7:
bc:c6:ab:a9:b9:6d:c4:56:eb:25:d8:0f:5b:8e:5b:
85:f5:a2:ce:9a:ee:53:38:83:bc:0c:b3:50:e3:e9:
61:24:86:50:ce:c2:af:04:17:61:2e:03:37:49:d9:
d2:e0:55:03:87:38:bc:d9:29:bf:05:67:bb:d1:c8:
3a:a3:9f:a1:40:87:48:52:0b:20:63:99:9d:0d:0a:
09:71:a1:67:2a:c4:fb:68:c2:52:3e:91:7e:82:2a:
70:ae:57:7c:f1:27:15:14:73:02:69:6d:17:17:86:
08:8e:b1:81:7f:7d:c3:7c:a7:bd:40:d4:77:08:2f:
17:33:eb:39:b9:c5:78:1c:23:83:0e:dd:eb:54:ab:
a3:59:58:3e:4d:d2:5e:5f:c7:cd:bd:8f:0a:07:33:
a8:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:41:07:3F:AA:C1:A3:DE:2A:6E:34:01:67:1A:DC:E8:79:F5:00:E7
X509v3 Authority Key Identifier:
keyid:74:E9:19:65:A8:09:D1:AC:5A:A0:F0:D0:55:06:AC:B0:DD:B0:2A:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/0/74E91965A809D1AC5AA0F0D05506ACB0DDB02AB8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dOkZZagJ0axaoPDQVQassN2wKrg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/0/74E91965A809D1AC5AA0F0D05506ACB0DDB02AB8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:58:de:77:3c:39:3c:ac:be:91:49:5c:4e:07:1d:11:02:c2:
8d:d3:75:13:f9:75:9e:20:f6:5d:05:f8:02:a4:4f:99:2c:7a:
8f:6e:b0:75:44:bb:2a:1e:e3:76:b4:82:23:7b:a2:e3:db:c0:
56:e7:a8:4c:ae:b1:83:e2:6f:c3:12:11:d2:19:4c:4e:32:0b:
e5:45:63:43:73:3b:c3:68:6c:e7:88:de:27:11:0c:21:0b:ac:
a5:bf:be:71:9e:b1:4b:fd:fc:06:3f:8d:1f:9a:22:b9:15:e7:
df:4f:94:23:43:7a:8d:21:15:22:00:1d:77:f5:9e:78:7a:af:
52:f7:cc:6f:e4:36:8f:ec:a2:c3:67:eb:f8:fa:0b:af:e5:d7:
72:b9:89:8e:70:9c:6b:44:f3:a6:08:33:4a:93:4f:aa:44:af:
b0:aa:dc:3a:e6:e4:76:2a:bc:80:72:75:13:c4:fd:77:80:4b:
8a:f5:b6:a6:67:7b:90:d3:38:87:94:77:e2:d8:6e:5a:d3:b1:
d2:61:1f:57:3c:20:e5:5f:54:71:1a:52:c2:15:29:98:a1:99:
1f:f1:9c:fe:d8:d7:2f:1c:9f:3c:6e:df:70:28:04:61:26:9b:
ea:b1:25:33:a5:02:b4:4c:2a:6b:f4:d9:98:e9:d0:ef:4a:df:
e5:e7:ec:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:31:13 2025 by rpki-client