Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/0/5DBF811E504A4FA2C29D3B4F11DFB713642873D3.mft
File: 5DBF811E504A4FA2C29D3B4F11DFB713642873D3.mft (raw, json)
Hash identifier: OajGxUgybm5qTlz1RT14ZulAD/1eNiy/LRwrqcrqNdk=
Subject key identifier: 47:12:19:9C:AE:49:E6:6D:AA:B1:B0:A8:42:FF:45:B3:56:5B:94:D7
Authority key identifier: 5D:BF:81:1E:50:4A:4F:A2:C2:9D:3B:4F:11:DF:B7:13:64:28:73:D3
Certificate issuer: /CN=5dbf811e504a4fa2c29d3b4f11dfb713642873d3
Certificate serial: 20D15D2DCD3FBB6D99D1F3611A69C0126E05671F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xb-BHlBKT6LCnTtPEd-3E2Qoc9M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/0/5DBF811E504A4FA2C29D3B4F11DFB713642873D3.mft
Manifest number: 017B
Signing time: Sun 11 May 2025 21:19:55 +0000
Manifest this update: Sun 11 May 2025 21:14:55 +0000
Manifest next update: Mon 12 May 2025 23:22:55 +0000
Files and hashes: 1: 5DBF811E504A4FA2C29D3B4F11DFB713642873D3.crl (hash: Sbz/YgqRu/fZXJS1IUp9LvcmItWs12xKJqmMqzK79es=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/0/5DBF811E504A4FA2C29D3B4F11DFB713642873D3.crl
rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/0/5DBF811E504A4FA2C29D3B4F11DFB713642873D3.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xb-BHlBKT6LCnTtPEd-3E2Qoc9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 23:22:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:d1:5d:2d:cd:3f:bb:6d:99:d1:f3:61:1a:69:c0:12:6e:05:67:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dbf811e504a4fa2c29d3b4f11dfb713642873d3
Validity
Not Before: May 11 21:14:55 2025 GMT
Not After : May 12 23:22:55 2025 GMT
Subject: CN=4712199CAE49E66DAAB1B0A842FF45B3565B94D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3b:cb:cd:ad:74:e0:b9:23:32:87:bf:e0:1a:
a2:27:8c:9f:f7:0a:b0:53:ed:ba:05:79:20:b5:b3:
12:70:20:ac:28:60:56:62:26:f2:4b:f2:3b:a9:47:
e5:3c:d6:b7:8c:4c:97:94:c2:13:9d:54:3d:a7:cd:
9d:b9:a7:53:e5:d1:4e:0e:ec:63:03:bb:f5:9c:c5:
21:6c:d3:6b:35:4b:19:3e:8a:ff:d2:46:4a:dc:3a:
12:ce:06:49:af:8c:0f:21:31:86:68:de:dc:a3:3b:
ea:ae:f7:52:58:23:be:ef:04:79:24:d4:ac:99:35:
4c:df:5b:2c:29:ca:31:1c:a8:2e:7b:07:51:8b:da:
e3:ee:67:cc:40:de:0f:10:f0:f2:f6:c1:b6:0c:db:
51:04:78:dd:73:9e:63:af:b8:54:76:83:db:43:eb:
9a:3c:9a:0d:37:50:bb:3b:a6:09:de:10:00:c1:32:
42:d5:9c:96:0a:48:a8:b8:68:a0:ae:98:7b:a0:eb:
12:92:fe:e6:66:28:73:99:36:e4:34:df:f9:98:47:
e2:31:df:f8:42:6d:ae:02:af:34:77:c9:2a:ee:ac:
74:1b:94:9e:89:59:d6:a2:2c:9a:7d:61:06:5c:3a:
3a:05:21:25:0f:e7:b0:57:71:48:a4:98:68:0b:e3:
41:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:12:19:9C:AE:49:E6:6D:AA:B1:B0:A8:42:FF:45:B3:56:5B:94:D7
X509v3 Authority Key Identifier:
keyid:5D:BF:81:1E:50:4A:4F:A2:C2:9D:3B:4F:11:DF:B7:13:64:28:73:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/0/5DBF811E504A4FA2C29D3B4F11DFB713642873D3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xb-BHlBKT6LCnTtPEd-3E2Qoc9M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/0/5DBF811E504A4FA2C29D3B4F11DFB713642873D3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:5c:a7:3c:80:c0:53:55:63:1d:c8:c5:cf:8a:06:23:b0:15:
dc:70:4d:d7:39:62:a2:aa:98:eb:9e:74:2f:f2:9e:75:49:15:
e0:75:88:d3:98:30:f4:58:68:7b:36:ec:88:db:3b:d7:3c:e9:
44:49:3c:1e:f6:d1:6d:54:90:90:c2:cf:a8:6f:ac:d6:dd:b8:
29:07:2a:a5:a7:3d:ce:cd:dc:27:77:d1:80:81:57:9f:c0:7b:
95:87:1c:25:ef:3e:f5:0a:e6:53:4e:9d:22:f4:c3:0b:35:ed:
0f:73:77:15:13:8a:24:22:6a:aa:0a:61:e8:1c:b0:5c:62:f0:
63:db:95:c9:50:d7:48:bb:fb:b0:fe:c4:6e:a1:4d:68:b6:27:
12:0e:fd:8c:a9:35:e4:6c:6a:b6:d3:6e:56:34:8a:e2:2d:50:
68:56:2d:95:ee:33:dc:58:56:27:0d:39:bd:66:32:9c:c1:da:
47:00:9e:d0:d2:8e:3a:03:94:38:85:95:0b:ce:9f:02:ac:6a:
ff:77:f0:cd:c4:b1:31:82:d1:cb:27:3d:a6:71:1b:22:fd:d1:
f1:c8:6a:64:a7:d5:c8:6b:9d:0c:c2:30:06:c5:ee:e8:ba:f3:
04:a8:c3:f7:65:85:2e:1f:0c:eb:24:b2:fe:36:cf:93:e6:e3:
59:33:e5:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 12:33:13 2025 by rpki-client