Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/553623c4-33bd-438a-a93e-018d65c4e837/0/5EDBD6E79C689C56A84FA46CD7C9FA3151DFE0BB.mft
File: 5EDBD6E79C689C56A84FA46CD7C9FA3151DFE0BB.mft (raw, json)
Hash identifier: rgJwCmyJy7eh7LrtO1avH0MyEcHjmWS4NSviTFihp9Y=
Subject key identifier: 2B:32:52:70:AE:E9:E5:A3:4C:F9:DC:E1:9B:F6:31:1C:04:A6:A0:1C
Authority key identifier: 5E:DB:D6:E7:9C:68:9C:56:A8:4F:A4:6C:D7:C9:FA:31:51:DF:E0:BB
Certificate issuer: /CN=5edbd6e79c689c56a84fa46cd7c9fa3151dfe0bb
Certificate serial: 2717CA7FF9CFDE8982A14DC44D391CFD060ECDC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XtvW55xonFaoT6Rs18n6MVHf4Ls.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/553623c4-33bd-438a-a93e-018d65c4e837/0/5EDBD6E79C689C56A84FA46CD7C9FA3151DFE0BB.mft
Manifest number: FC
Signing time: Mon 12 May 2025 11:06:00 +0000
Manifest this update: Mon 12 May 2025 11:01:00 +0000
Manifest next update: Tue 13 May 2025 14:38:00 +0000
Files and hashes: 1: 5EDBD6E79C689C56A84FA46CD7C9FA3151DFE0BB.crl (hash: Qdn8bxf8JNbwSuofM9nc5Op6g8qzKRUDgCfSBUAJO3s=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/553623c4-33bd-438a-a93e-018d65c4e837/0/5EDBD6E79C689C56A84FA46CD7C9FA3151DFE0BB.crl
rsync://rsync.paas.rpki.ripe.net/repository/553623c4-33bd-438a-a93e-018d65c4e837/0/5EDBD6E79C689C56A84FA46CD7C9FA3151DFE0BB.mft
rsync://rpki.ripe.net/repository/DEFAULT/XtvW55xonFaoT6Rs18n6MVHf4Ls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:38:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:17:ca:7f:f9:cf:de:89:82:a1:4d:c4:4d:39:1c:fd:06:0e:cd:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5edbd6e79c689c56a84fa46cd7c9fa3151dfe0bb
Validity
Not Before: May 12 11:01:00 2025 GMT
Not After : May 13 14:38:00 2025 GMT
Subject: CN=2B325270AEE9E5A34CF9DCE19BF6311C04A6A01C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d7:98:a5:40:0b:a0:c8:d4:86:a3:43:da:00:
29:44:06:73:c6:17:ba:04:34:bb:6b:2c:1e:da:bb:
42:65:4e:21:08:8a:e8:b2:17:a0:e7:92:57:73:59:
60:62:90:30:fc:37:8e:e3:0d:1c:ad:37:b6:44:65:
e3:eb:e7:6d:f9:24:79:e6:29:88:f6:8e:af:7e:7d:
5d:7e:23:4f:93:b3:3c:38:0c:5d:2f:57:89:9a:32:
ef:26:93:56:c1:01:d5:4b:d1:0f:0a:74:db:b1:39:
98:a5:13:2f:a2:be:e4:04:f6:c5:f9:a8:1c:d3:50:
a4:c4:6b:15:4e:1b:b9:af:07:a9:8e:d4:a7:60:b5:
1f:20:94:05:c6:a3:bf:17:c7:58:48:dc:d9:49:35:
79:7b:5a:a9:99:bc:6b:ee:66:ec:c7:05:69:3d:85:
42:20:c9:55:3d:72:e4:2a:a4:c0:7d:44:32:f6:c3:
e0:a1:b3:cc:58:b7:cc:9a:b1:9f:e5:e0:db:a8:3a:
3f:79:81:d6:d7:f0:1b:d0:5d:82:7c:42:8f:80:69:
01:50:5c:b5:08:38:51:03:30:09:9f:4c:28:10:be:
8e:41:bb:ed:e8:0f:25:4e:9c:f3:41:39:fb:6e:02:
98:2f:c8:19:da:f5:8f:33:d8:b3:4e:90:41:0d:06:
4c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:32:52:70:AE:E9:E5:A3:4C:F9:DC:E1:9B:F6:31:1C:04:A6:A0:1C
X509v3 Authority Key Identifier:
keyid:5E:DB:D6:E7:9C:68:9C:56:A8:4F:A4:6C:D7:C9:FA:31:51:DF:E0:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/553623c4-33bd-438a-a93e-018d65c4e837/0/5EDBD6E79C689C56A84FA46CD7C9FA3151DFE0BB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XtvW55xonFaoT6Rs18n6MVHf4Ls.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/553623c4-33bd-438a-a93e-018d65c4e837/0/5EDBD6E79C689C56A84FA46CD7C9FA3151DFE0BB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:63:a1:1e:16:c2:1d:e4:96:87:92:2a:72:0a:ee:71:5d:4c:
32:34:e4:e4:01:15:75:f8:ec:1b:82:02:1b:7d:02:1c:80:c0:
24:5a:e7:95:ca:fe:d7:d6:e2:b8:6f:7a:71:a4:c8:e0:fd:c5:
0c:57:3c:dc:41:4b:17:d0:6a:42:31:25:d4:38:48:b5:2b:de:
54:52:d7:3f:92:34:1f:74:65:fb:31:ba:2e:d9:ed:fd:34:b0:
80:e5:4e:2c:ac:3d:69:89:4f:d2:04:ad:66:b7:73:e4:a1:c6:
4e:72:75:b4:ed:9f:04:44:80:c3:0e:ff:fe:14:b7:fe:7f:07:
a2:4f:65:f5:c0:b3:4b:97:d0:f4:f4:c7:dc:43:b4:c0:08:18:
c5:75:9c:7f:75:b1:c1:2d:0f:d8:f6:b2:1b:57:42:75:ea:1c:
a8:1d:ce:fb:02:8b:c5:f0:69:f0:99:ca:26:da:ca:04:40:cf:
7e:e2:b3:84:52:95:2d:db:ea:f7:73:1d:82:a6:e0:20:64:d5:
3c:5f:a1:65:31:07:23:b5:77:74:90:03:7d:9c:05:81:46:f7:
91:37:18:5d:03:ca:12:f4:5e:f0:51:2d:61:4c:40:67:d0:1c:
53:51:c6:69:f2:54:ae:52:e7:c4:c8:b8:23:fa:a1:05:96:e6:
5f:03:61:de
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUJxfKf/nP3omCoU3ETTkc/QYOzccwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNWVkYmQ2ZTc5YzY4OWM1NmE4NGZhNDZjZDdjOWZhMzE1
MWRmZTBiYjAeFw0yNTA1MTIxMTAxMDBaFw0yNTA1MTMxNDM4MDBaMDMxMTAvBgNV
BAMTKDJCMzI1MjcwQUVFOUU1QTM0Q0Y5RENFMTlCRjYzMTFDMDRBNkEwMUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs15ilQAugyNSGo0PaAClEBnPG
F7oENLtrLB7au0JlTiEIiuiyF6DnkldzWWBikDD8N47jDRytN7ZEZePr5235JHnm
KYj2jq9+fV1+I0+Tszw4DF0vV4maMu8mk1bBAdVL0Q8KdNuxOZilEy+ivuQE9sX5
qBzTUKTEaxVOG7mvB6mO1KdgtR8glAXGo78Xx1hI3NlJNXl7WqmZvGvuZuzHBWk9
hUIgyVU9cuQqpMB9RDL2w+Chs8xYt8yasZ/l4NuoOj95gdbX8BvQXYJ8Qo+AaQFQ
XLUIOFEDMAmfTCgQvo5Bu+3oDyVOnPNBOftuApgvyBna9Y8z2LNOkEENBkxRAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUKzJScK7p5aNM+dzhm/YxHASmoBwwHwYDVR0j
BBgwFoAUXtvW55xonFaoT6Rs18n6MVHf4LswDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTUzNjIzYzQtMzNiZC00MzhhLWE5M2UtMDE4ZDY1YzRl
ODM3LzAvNUVEQkQ2RTc5QzY4OUM1NkE4NEZBNDZDRDdDOUZBMzE1MURGRTBCQi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1h0dlc1NXhvbkZhb1Q2UnMxOG42TVZI
ZjRMcy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS81NTM2MjNjNC0z
M2JkLTQzOGEtYTkzZS0wMThkNjVjNGU4MzcvMC81RURCRDZFNzlDNjg5QzU2QTg0
RkE0NkNEN0M5RkEzMTUxREZFMEJCLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXWOhHhbCHeSWh5Iqcgru
cV1MMjTk5AEVdfjsG4ICG30CHIDAJFrnlcr+19biuG96caTI4P3FDFc83EFLF9Bq
QjEl1DhItSveVFLXP5I0H3Rl+zG6Ltnt/TSwgOVOLKw9aYlP0gStZrdz5KHGTnJ1
tO2fBESAww7//hS3/n8Hok9l9cCzS5fQ9PTH3EO0wAgYxXWcf3WxwS0P2PayG1dC
deocqB3O+wKLxfBp8JnKJtrKBEDPfuKzhFKVLdvq93MdgqbgIGTVPF+hZTEHI7V3
dJADfZwFgUb3kTcYXQPKEvRe8FEtYUxAZ9AcU1HGafJUrlLnxMi4I/qhBZbmXwNh
3g==
-----END CERTIFICATE-----
Generated at Tue May 13 06:21:42 2025 by rpki-client