Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/58a55716-5b96-4a04-9b71-2b9ed2ceae9b/0/F0CA1816CF27416E4393C0004120132DA5E03905.mft
File: F0CA1816CF27416E4393C0004120132DA5E03905.mft (raw, json)
Hash identifier: K2VXZZvfvUhdsCSBJTVyZCUZWeFI8MbQlh9hCZwKGME=
Subject key identifier: DB:C9:40:7B:04:93:11:2C:6C:6F:3F:DB:F4:84:FF:88:5A:AC:A9:9D
Authority key identifier: F0:CA:18:16:CF:27:41:6E:43:93:C0:00:41:20:13:2D:A5:E0:39:05
Certificate issuer: /CN=f0ca1816cf27416e4393c0004120132da5e03905
Certificate serial: 1BD5D1784628F0CFD3CC3E7BC48BD2F5900575D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8MoYFs8nQW5Dk8AAQSATLaXgOQU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/58a55716-5b96-4a04-9b71-2b9ed2ceae9b/0/F0CA1816CF27416E4393C0004120132DA5E03905.mft
Manifest number: 08
Signing time: Tue 06 May 2025 19:50:01 +0000
Manifest this update: Tue 06 May 2025 19:45:01 +0000
Manifest next update: Wed 07 May 2025 22:46:01 +0000
Files and hashes: 1: F0CA1816CF27416E4393C0004120132DA5E03905.crl (hash: CstzPxLrEeJJNrBiWt8gvXb6JboBEBYvA29+ys8+c54=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/58a55716-5b96-4a04-9b71-2b9ed2ceae9b/0/F0CA1816CF27416E4393C0004120132DA5E03905.crl
rsync://rsync.paas.rpki.ripe.net/repository/58a55716-5b96-4a04-9b71-2b9ed2ceae9b/0/F0CA1816CF27416E4393C0004120132DA5E03905.mft
rsync://rpki.ripe.net/repository/DEFAULT/8MoYFs8nQW5Dk8AAQSATLaXgOQU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 22:46:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:d5:d1:78:46:28:f0:cf:d3:cc:3e:7b:c4:8b:d2:f5:90:05:75:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0ca1816cf27416e4393c0004120132da5e03905
Validity
Not Before: May 6 19:45:01 2025 GMT
Not After : May 7 22:46:01 2025 GMT
Subject: CN=DBC9407B0493112C6C6F3FDBF484FF885AACA99D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ed:72:f4:9d:31:10:b7:f8:99:59:d0:cd:f3:
7a:93:36:e3:6e:fc:a5:5e:dc:a3:ab:cb:bc:51:2f:
33:00:12:82:34:90:d3:30:c7:09:84:fc:ee:7d:71:
1f:03:26:66:16:6b:47:df:48:31:2a:55:15:51:97:
7b:b5:88:12:91:b6:19:0a:0a:36:0e:78:8c:ba:24:
0d:cd:02:30:89:e9:2c:54:58:b8:ff:43:c0:79:93:
40:98:96:e8:a0:72:84:5e:4e:e8:b2:0b:50:f1:d1:
45:6a:1b:92:16:03:77:47:5c:a4:c1:58:3a:8e:f6:
e2:91:41:02:77:7b:89:f3:aa:e4:a4:ee:10:ed:04:
ea:79:3d:0a:3f:d4:ec:44:ef:ec:91:ef:e8:79:1e:
c7:48:c9:d8:4b:c6:58:f6:7b:73:ca:99:98:4f:2b:
6a:bc:98:70:2e:47:5e:e1:ab:33:f8:85:bd:17:b2:
18:29:a4:94:c5:7a:bc:43:2e:b0:ff:48:74:49:76:
88:a6:5e:cb:5a:cc:67:08:d9:1f:84:4c:87:79:cb:
d2:a3:a1:97:88:cb:bd:84:a9:b7:6e:4d:de:34:b6:
15:5a:a1:15:55:73:0b:d2:a2:f8:b8:03:21:7d:d3:
0b:c9:f8:d3:aa:1b:b6:5c:fc:d9:d1:8c:62:f1:a8:
d8:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:C9:40:7B:04:93:11:2C:6C:6F:3F:DB:F4:84:FF:88:5A:AC:A9:9D
X509v3 Authority Key Identifier:
keyid:F0:CA:18:16:CF:27:41:6E:43:93:C0:00:41:20:13:2D:A5:E0:39:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/58a55716-5b96-4a04-9b71-2b9ed2ceae9b/0/F0CA1816CF27416E4393C0004120132DA5E03905.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8MoYFs8nQW5Dk8AAQSATLaXgOQU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/58a55716-5b96-4a04-9b71-2b9ed2ceae9b/0/F0CA1816CF27416E4393C0004120132DA5E03905.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:59:fa:e9:71:9b:4d:81:2d:36:b0:f3:6a:9c:ae:38:30:17:
c2:8b:c9:d6:67:95:44:ab:8e:61:a1:b1:0b:73:e7:74:aa:3b:
4f:5f:f8:5d:7d:fe:34:17:f0:d4:4b:db:93:1e:48:2b:7f:d7:
fb:f8:5f:b0:bc:5b:8d:a2:25:44:b8:02:89:75:89:ff:f9:ce:
dc:aa:24:4e:bc:df:35:e4:ed:58:15:ef:6e:fd:fa:30:92:0d:
f4:32:f0:4a:4d:a4:77:08:2d:d2:2e:6c:95:b4:34:77:85:04:
13:2b:33:0e:32:88:75:15:46:99:8a:f9:c5:59:41:29:5d:ee:
dc:46:d0:0b:90:8a:5d:bf:8f:c0:56:02:d6:65:46:7a:36:d8:
4c:b8:35:e4:a0:66:5f:ed:d2:96:9e:6c:f3:33:be:ea:c3:87:
b8:cf:1d:2a:77:5e:45:93:47:85:b3:52:ac:5c:67:29:c6:a0:
bd:c6:45:1f:fb:8a:83:35:23:e6:69:14:be:55:6e:90:94:5f:
17:f3:d5:11:c8:f9:1a:0a:71:df:dd:50:87:95:bf:6f:de:10:
d8:ef:56:c3:0b:43:eb:1c:46:06:0b:bb:41:62:30:41:4b:f6:
51:6b:c0:7b:7a:f1:1c:60:ad:24:97:bb:13:14:82:8d:4e:ac:
89:89:d6:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 03:01:45 2025 by rpki-client