Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/0/B5703F6700E832900122BBE6A5086441EB37BD2C.mft
File: B5703F6700E832900122BBE6A5086441EB37BD2C.mft (raw, json)
Hash identifier: kzkh1l6v1s0PWNBcdTFt8ijr6je8H7AO37Qp5pYwslY=
Subject key identifier: 08:8A:B3:4D:97:EB:21:52:E5:8B:22:8D:1B:F4:CD:3E:8E:BD:49:E6
Authority key identifier: B5:70:3F:67:00:E8:32:90:01:22:BB:E6:A5:08:64:41:EB:37:BD:2C
Certificate issuer: /CN=b5703f6700e832900122bbe6a5086441eb37bd2c
Certificate serial: 1B4DB1951C5006CBB91697AA73ACD9F61C6A4C4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tXA_ZwDoMpABIrvmpQhkQes3vSw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/0/B5703F6700E832900122BBE6A5086441EB37BD2C.mft
Manifest number: F0
Signing time: Wed 07 May 2025 12:04:21 +0000
Manifest this update: Wed 07 May 2025 11:59:21 +0000
Manifest next update: Thu 08 May 2025 14:17:21 +0000
Files and hashes: 1: B5703F6700E832900122BBE6A5086441EB37BD2C.crl (hash: BVOzZ6id2WhTvfgeA8sgJC3ws08Px082ttRJElMWelY=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/0/B5703F6700E832900122BBE6A5086441EB37BD2C.crl
rsync://rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/0/B5703F6700E832900122BBE6A5086441EB37BD2C.mft
rsync://rpki.ripe.net/repository/DEFAULT/tXA_ZwDoMpABIrvmpQhkQes3vSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 13:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:4d:b1:95:1c:50:06:cb:b9:16:97:aa:73:ac:d9:f6:1c:6a:4c:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5703f6700e832900122bbe6a5086441eb37bd2c
Validity
Not Before: May 7 11:59:21 2025 GMT
Not After : May 8 14:17:21 2025 GMT
Subject: CN=088AB34D97EB2152E58B228D1BF4CD3E8EBD49E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:f9:fd:dd:ff:4c:19:55:96:9a:86:1c:dc:a9:
13:8f:ad:f0:ec:bc:6d:d2:5e:b3:3c:41:5b:b7:5e:
ad:31:15:14:c1:5a:cf:9b:be:de:43:f0:51:6a:cb:
39:8f:5d:86:84:ff:a8:81:ad:ba:9a:0b:97:0e:51:
22:66:ed:64:d1:b9:7f:3d:bb:a8:ee:a1:05:f5:4c:
15:35:88:9c:61:74:02:23:43:4f:72:09:1f:94:97:
27:f3:7e:f6:6d:c9:17:b3:91:a6:3f:1c:31:c7:ae:
b3:77:cc:ed:06:ee:f5:2f:86:95:91:a7:c1:1a:1a:
e2:1f:b5:87:27:a4:34:9c:96:63:a8:f5:b4:d8:fb:
22:1f:b9:45:f2:6d:ef:ff:56:e1:0b:35:fd:b9:1e:
72:8b:47:4e:10:d0:80:a4:ae:da:46:6e:2b:4e:41:
58:c4:1a:3e:f2:c4:e8:5a:97:a1:fe:7c:3d:eb:e2:
78:d4:97:59:04:3c:8e:3e:f9:a3:d5:be:64:27:27:
1d:8c:cd:07:be:86:8a:25:eb:1f:55:7f:73:1c:e3:
0b:1f:1b:98:99:0f:cf:42:15:2c:85:b9:28:c6:1c:
c4:6e:7f:d4:0f:09:6c:00:f3:66:6a:03:89:1f:68:
0f:75:60:b7:2c:22:3d:e6:05:6e:d6:33:79:cb:f1:
a2:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:8A:B3:4D:97:EB:21:52:E5:8B:22:8D:1B:F4:CD:3E:8E:BD:49:E6
X509v3 Authority Key Identifier:
keyid:B5:70:3F:67:00:E8:32:90:01:22:BB:E6:A5:08:64:41:EB:37:BD:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/0/B5703F6700E832900122BBE6A5086441EB37BD2C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tXA_ZwDoMpABIrvmpQhkQes3vSw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/0/B5703F6700E832900122BBE6A5086441EB37BD2C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:12:4b:2b:90:71:93:b4:04:6f:9b:71:d7:69:a1:c4:63:4e:
17:f9:99:15:57:39:63:2a:90:77:9a:b9:2f:93:9e:8e:60:22:
9d:5f:0f:d1:82:91:3f:f9:a3:11:a4:69:03:96:40:bf:8b:4f:
7d:79:74:7e:f0:da:50:79:eb:5d:ec:64:d5:5a:38:fe:c6:90:
a2:29:39:c5:0a:2e:ee:39:7a:d6:65:6a:70:31:1c:25:05:a5:
64:4a:eb:44:f9:52:ec:d6:23:1a:51:da:4c:5f:10:0d:34:33:
91:56:db:09:24:ff:30:9b:46:0e:87:80:9b:6f:5f:38:53:bb:
2d:be:6f:c2:2b:e6:7f:49:2b:d9:c1:64:88:14:6d:c4:bf:0f:
65:cd:2b:37:2b:bc:67:aa:e3:b1:d9:19:4c:ed:10:36:96:3c:
02:69:77:20:cc:06:c7:88:d3:f3:f7:32:be:f0:14:79:cd:35:
5e:ef:86:fc:05:53:2c:de:35:bb:ad:44:36:36:8c:4f:ba:52:
a2:1a:c0:93:aa:f7:b0:6d:7d:c1:f0:34:86:2a:ab:50:b6:e9:
98:c9:8b:57:b8:45:54:1d:21:87:a9:a2:be:21:0a:83:fe:24:
3e:86:03:fc:5b:8a:34:55:94:75:eb:0d:7c:5f:a3:48:f3:e3:
98:9b:10:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 23:50:50 2025 by rpki-client