Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/24db6e0e-696c-4f89-8d48-274559700af5/1/A9DD9F6B65491D90C4E19E9C960252466C2C9D12.mft
File: A9DD9F6B65491D90C4E19E9C960252466C2C9D12.mft (raw, json)
Hash identifier: 2TcCLkv8YmuG+JgI9PGAVdQYvAF9ZO62tp0dUhNJz9w=
Subject key identifier: 78:AE:F2:EB:C2:25:1E:27:D9:E4:04:49:EA:B7:86:0D:07:F1:1F:A9
Authority key identifier: A9:DD:9F:6B:65:49:1D:90:C4:E1:9E:9C:96:02:52:46:6C:2C:9D:12
Certificate issuer: /CN=a9dd9f6b65491d90c4e19e9c960252466c2c9d12
Certificate serial: 7748321A5F6A3ADEE2159F35E8B1E4B9A12A298C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qd2fa2VJHZDE4Z6clgJSRmwsnRI.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/24db6e0e-696c-4f89-8d48-274559700af5/1/A9DD9F6B65491D90C4E19E9C960252466C2C9D12.mft
Manifest number: 01C3
Signing time: Fri 09 May 2025 18:25:16 +0000
Manifest this update: Fri 09 May 2025 18:20:16 +0000
Manifest next update: Sat 10 May 2025 18:30:16 +0000
Files and hashes: 1: A9DD9F6B65491D90C4E19E9C960252466C2C9D12.crl (hash: L1gE0Qr3/dZpOf1+7O5tOmRwUzV0iJV0d5iY49gSkXs=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/24db6e0e-696c-4f89-8d48-274559700af5/1/A9DD9F6B65491D90C4E19E9C960252466C2C9D12.crl
rsync://rsync.paas.rpki.ripe.net/repository/24db6e0e-696c-4f89-8d48-274559700af5/1/A9DD9F6B65491D90C4E19E9C960252466C2C9D12.mft
rsync://rpki.ripe.net/repository/DEFAULT/qd2fa2VJHZDE4Z6clgJSRmwsnRI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 17:53:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:48:32:1a:5f:6a:3a:de:e2:15:9f:35:e8:b1:e4:b9:a1:2a:29:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9dd9f6b65491d90c4e19e9c960252466c2c9d12
Validity
Not Before: May 9 18:20:16 2025 GMT
Not After : May 10 18:30:16 2025 GMT
Subject: CN=78AEF2EBC2251E27D9E40449EAB7860D07F11FA9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:cd:c0:27:3b:1c:96:73:36:c2:00:a6:ba:c0:
53:be:80:99:10:9f:c1:ac:ef:ef:a4:ab:81:80:1f:
d3:ee:74:da:30:77:57:b8:19:df:87:15:42:30:63:
82:17:a9:17:eb:c1:ae:fc:5a:dc:c9:18:cd:cd:e9:
fe:1b:6a:11:87:11:98:b4:f4:13:9d:45:0e:44:f6:
75:45:75:fe:1b:86:11:ba:0e:c7:a0:29:35:20:8f:
a1:29:de:04:f2:25:71:2b:43:d9:d5:89:9b:21:6f:
2e:e9:63:6b:67:c6:b8:fc:38:38:55:56:c0:8a:10:
f7:ce:22:13:18:c9:70:4f:c0:f4:c7:ee:4c:a3:a7:
de:31:50:86:2d:59:24:e9:47:e1:25:55:44:e7:94:
ad:81:17:21:6c:dc:20:42:cc:9b:4f:ee:fb:5f:52:
0a:3d:4e:1d:03:2c:9a:6a:fd:43:81:b1:9e:fc:a8:
50:bd:7c:bc:31:91:09:a2:68:8f:f3:4a:ed:20:59:
bd:c4:56:78:6a:39:18:6d:09:ee:e9:b8:77:af:1c:
e7:bd:1d:ee:97:af:20:9d:80:ce:a3:4d:fc:6a:64:
3b:6d:1e:a1:6b:c0:32:de:59:8b:ba:2f:59:23:d8:
e2:f2:a0:f3:27:76:2c:f5:d3:e4:57:dd:b8:57:81:
9f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:AE:F2:EB:C2:25:1E:27:D9:E4:04:49:EA:B7:86:0D:07:F1:1F:A9
X509v3 Authority Key Identifier:
keyid:A9:DD:9F:6B:65:49:1D:90:C4:E1:9E:9C:96:02:52:46:6C:2C:9D:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/24db6e0e-696c-4f89-8d48-274559700af5/1/A9DD9F6B65491D90C4E19E9C960252466C2C9D12.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qd2fa2VJHZDE4Z6clgJSRmwsnRI.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/24db6e0e-696c-4f89-8d48-274559700af5/1/A9DD9F6B65491D90C4E19E9C960252466C2C9D12.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:fa:85:62:61:78:62:fd:40:fe:99:03:81:a4:d8:e7:b0:43:
20:a7:d2:e1:10:d0:26:30:cf:ea:7d:f2:12:db:2e:fa:b2:da:
94:46:43:d4:8a:12:a8:04:30:9e:4d:1f:d5:27:ac:26:bd:d6:
54:0f:ac:aa:b2:ae:3d:3d:26:ca:99:f0:74:90:bf:17:b7:d3:
b7:b3:1d:f0:80:c4:1a:eb:89:ff:cb:f1:01:2c:3f:cc:bb:c8:
2e:25:f3:c5:33:f7:b7:24:8e:65:49:c1:e6:2b:e4:e0:1f:bd:
06:d6:53:88:f4:fd:1f:33:08:f0:06:31:ab:28:d2:01:bc:e1:
93:80:00:43:97:40:0c:32:fe:35:9a:02:a9:c0:3c:37:cd:76:
47:2f:43:f9:9d:64:ef:31:02:a3:ab:a9:ac:89:d1:42:f6:bf:
da:c0:8c:f7:cc:0b:ec:46:b2:15:e3:76:54:97:1e:6c:6d:0f:
44:8d:78:e7:2b:c8:a3:f6:48:44:86:f2:82:d4:11:c5:73:03:
2b:81:3a:11:6f:25:bd:62:b6:a3:96:37:55:23:4c:62:dd:7b:
e0:95:6a:ab:86:7c:75:c0:e0:91:0d:81:8e:ad:b4:5b:14:4d:
76:6d:7f:9a:5a:48:89:25:b0:f6:04:c4:a9:90:03:de:90:93:
ee:01:a2:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 21:48:00 2025 by rpki-client