Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/0/CE45A61BA72EBDB5F6C70F59C73086C8BF46EA26.mft
File: CE45A61BA72EBDB5F6C70F59C73086C8BF46EA26.mft (raw, json)
Hash identifier: 8W/mzJ9LG19Xh4MGpO2TqIRgLV18QY/pHQTLsYCCyYk=
Subject key identifier: 28:3E:30:79:F2:55:12:A9:97:BC:67:4A:58:9C:63:6E:77:96:2A:F8
Authority key identifier: CE:45:A6:1B:A7:2E:BD:B5:F6:C7:0F:59:C7:30:86:C8:BF:46:EA:26
Certificate issuer: /CN=ce45a61ba72ebdb5f6c70f59c73086c8bf46ea26
Certificate serial: 4903735E110E91068FBE976B3229F2779818C666
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zkWmG6cuvbX2xw9ZxzCGyL9G6iY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/0/CE45A61BA72EBDB5F6C70F59C73086C8BF46EA26.mft
Manifest number: 010C
Signing time: Fri 09 May 2025 20:35:23 +0000
Manifest this update: Fri 09 May 2025 20:30:23 +0000
Manifest next update: Sat 10 May 2025 23:12:23 +0000
Files and hashes: 1: CE45A61BA72EBDB5F6C70F59C73086C8BF46EA26.crl (hash: EDwJ+28wLwQO3+KIRbhTpMGRStIpTfVL3e1lb3VIBfs=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/0/CE45A61BA72EBDB5F6C70F59C73086C8BF46EA26.crl
rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/0/CE45A61BA72EBDB5F6C70F59C73086C8BF46EA26.mft
rsync://rpki.ripe.net/repository/DEFAULT/zkWmG6cuvbX2xw9ZxzCGyL9G6iY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:03:73:5e:11:0e:91:06:8f:be:97:6b:32:29:f2:77:98:18:c6:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce45a61ba72ebdb5f6c70f59c73086c8bf46ea26
Validity
Not Before: May 9 20:30:23 2025 GMT
Not After : May 10 23:12:23 2025 GMT
Subject: CN=283E3079F25512A997BC674A589C636E77962AF8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b6:3e:35:cf:07:91:cb:13:61:51:0f:3e:c1:
d8:d9:d8:fc:46:29:4c:ee:30:65:46:09:5e:cc:01:
66:3d:67:e1:40:69:9e:82:aa:2b:f9:d3:68:13:79:
77:f2:5b:3d:19:69:7e:41:bf:16:fe:de:f4:93:bd:
e8:56:03:11:6e:7c:1f:eb:34:73:ea:f2:4f:7e:6b:
74:bd:8e:06:50:93:98:07:9b:e4:44:71:a8:1c:48:
24:24:bb:72:e8:4f:db:aa:cf:da:49:80:4b:8d:2b:
2a:7f:0a:bb:fd:33:65:23:1d:6a:b7:65:37:42:5f:
75:41:d1:39:a6:c5:a2:8d:7b:fc:a3:17:d4:bb:e5:
4a:12:b9:4b:76:4c:fe:38:6b:bb:ee:ed:df:3b:74:
b3:5b:6a:35:0e:e7:3a:94:ff:a0:a4:4a:ec:6d:96:
e2:3e:02:c1:6d:71:d8:15:24:ae:f9:07:9c:0f:ac:
d5:d1:5c:6d:81:9c:f3:b8:29:2d:c1:96:23:31:12:
7d:fb:1f:1a:cb:de:86:e6:61:05:60:4f:fc:4f:e6:
ff:3c:75:31:b2:52:e7:a9:ab:7b:a7:3b:f9:e1:9c:
f9:1f:46:bb:b0:a4:07:05:36:4d:9a:ff:96:1a:59:
e0:a5:96:d4:03:29:86:72:3f:a8:86:f2:e2:d1:3f:
fb:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:3E:30:79:F2:55:12:A9:97:BC:67:4A:58:9C:63:6E:77:96:2A:F8
X509v3 Authority Key Identifier:
keyid:CE:45:A6:1B:A7:2E:BD:B5:F6:C7:0F:59:C7:30:86:C8:BF:46:EA:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/0/CE45A61BA72EBDB5F6C70F59C73086C8BF46EA26.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zkWmG6cuvbX2xw9ZxzCGyL9G6iY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/0/CE45A61BA72EBDB5F6C70F59C73086C8BF46EA26.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:b1:71:c0:0c:ea:97:2f:04:0a:e5:46:48:de:6a:6b:e8:80:
b0:1a:30:92:f1:33:66:f7:5a:c7:8a:b1:91:5c:a0:67:a2:0d:
33:f7:5e:ee:52:4d:b0:de:6c:59:2b:b7:b8:d3:3c:00:e0:ab:
7c:cc:b2:ce:eb:4b:8b:72:6f:91:fa:59:cb:63:ba:76:ec:e0:
43:7b:ec:3b:7d:ce:98:9b:c7:10:58:e2:e1:52:6c:b1:5b:6a:
4d:34:1d:8b:33:06:0a:0d:d9:d3:71:97:29:38:7f:6c:44:02:
ee:a5:5d:95:81:28:6e:37:71:02:73:bd:be:ee:38:1d:b8:1c:
51:ce:60:89:43:29:75:94:ba:cb:56:9b:1b:d5:1b:e9:96:5d:
ea:91:da:33:77:f0:4b:3b:50:c1:b3:52:fa:3f:52:cd:52:20:
c2:46:28:2b:b9:e8:0f:ec:0b:30:b1:3c:d1:a6:bb:8b:a1:be:
11:22:cc:27:28:73:fb:37:20:25:5b:d0:80:d7:a8:51:64:45:
6d:bf:02:9f:ac:d6:0f:f1:1a:c8:3a:dd:8a:80:e4:93:ea:bd:
7c:47:e8:46:62:28:8e:bc:24:70:66:91:b7:d6:e1:d7:fd:e0:
cc:72:f9:aa:85:2e:65:57:5a:46:1b:91:7b:00:2d:4d:69:57:
99:1e:79:c2
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUSQNzXhEOkQaPvpdrMinyd5gYxmYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoY2U0NWE2MWJhNzJlYmRiNWY2YzcwZjU5YzczMDg2Yzhi
ZjQ2ZWEyNjAeFw0yNTA1MDkyMDMwMjNaFw0yNTA1MTAyMzEyMjNaMDMxMTAvBgNV
BAMTKDI4M0UzMDc5RjI1NTEyQTk5N0JDNjc0QTU4OUM2MzZFNzc5NjJBRjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8tj41zweRyxNhUQ8+wdjZ2PxG
KUzuMGVGCV7MAWY9Z+FAaZ6Cqiv502gTeXfyWz0ZaX5Bvxb+3vSTvehWAxFufB/r
NHPq8k9+a3S9jgZQk5gHm+REcagcSCQku3LoT9uqz9pJgEuNKyp/Crv9M2UjHWq3
ZTdCX3VB0TmmxaKNe/yjF9S75UoSuUt2TP44a7vu7d87dLNbajUO5zqU/6CkSuxt
luI+AsFtcdgVJK75B5wPrNXRXG2BnPO4KS3BliMxEn37HxrL3obmYQVgT/xP5v88
dTGyUuepq3unO/nhnPkfRruwpAcFNk2a/5YaWeClltQDKYZyP6iG8uLRP/vXAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUKD4wefJVEqmXvGdKWJxjbneWKvgwHwYDVR0j
BBgwFoAUzkWmG6cuvbX2xw9ZxzCGyL9G6iYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTMxZTk3MjAtMGI2Mi00M2E4LThlMWYtMjMwNjg0ZWFm
OWFmLzAvQ0U0NUE2MUJBNzJFQkRCNUY2QzcwRjU5QzczMDg2QzhCRjQ2RUEyNi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3prV21HNmN1dmJYMnh3OVp4ekNHeUw5
RzZpWS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS81MzFlOTcyMC0w
YjYyLTQzYTgtOGUxZi0yMzA2ODRlYWY5YWYvMC9DRTQ1QTYxQkE3MkVCREI1RjZD
NzBGNTlDNzMwODZDOEJGNDZFQTI2Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH7FxwAzqly8ECuVGSN5q
a+iAsBowkvEzZvdax4qxkVygZ6INM/de7lJNsN5sWSu3uNM8AOCrfMyyzutLi3Jv
kfpZy2O6duzgQ3vsO33OmJvHEFji4VJssVtqTTQdizMGCg3Z03GXKTh/bEQC7qVd
lYEobjdxAnO9vu44HbgcUc5giUMpdZS6y1abG9Ub6ZZd6pHaM3fwSztQwbNS+j9S
zVIgwkYoK7noD+wLMLE80aa7i6G+ESLMJyhz+zcgJVvQgNeoUWRFbb8Cn6zWD/Ea
yDrdioDkk+q9fEfoRmIojrwkcGaRt9bh1/3gzHL5qoUuZVdaRhuRewAtTWlXmR55
wg==
-----END CERTIFICATE-----
Generated at Sat May 10 05:21:42 2025 by rpki-client