Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.mft
File: E8BC9876174D9A7385FCE9343E2BB7D98F523B11.mft (raw, json)
Hash identifier: NCREeXoJRwoXJa6nocTDtNlaM8Dlk0c2UbV9TyL4Teo=
Subject key identifier: 41:45:CD:DD:DD:76:E0:76:26:4C:D5:50:CF:17:7A:45:98:A8:0F:CC
Authority key identifier: E8:BC:98:76:17:4D:9A:73:85:FC:E9:34:3E:2B:B7:D9:8F:52:3B:11
Certificate issuer: /CN=e8bc9876174d9a7385fce9343e2bb7d98f523b11
Certificate serial: 08C6DB2A023035350C990B62437E82B3F6CD4920
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6LyYdhdNmnOF_Ok0Piu32Y9SOxE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.mft
Manifest number: 03DD
Signing time: Sat 10 May 2025 13:43:38 +0000
Manifest this update: Sat 10 May 2025 13:38:38 +0000
Manifest next update: Sun 11 May 2025 15:12:38 +0000
Files and hashes: 1: E8BC9876174D9A7385FCE9343E2BB7D98F523B11.crl (hash: cefvUJU4wTkxe+fBClNo6Lxk9grs0SKz2I7cjar1Jck=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.crl
rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.mft
rsync://rpki.ripe.net/repository/DEFAULT/6LyYdhdNmnOF_Ok0Piu32Y9SOxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 15:12:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:c6:db:2a:02:30:35:35:0c:99:0b:62:43:7e:82:b3:f6:cd:49:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8bc9876174d9a7385fce9343e2bb7d98f523b11
Validity
Not Before: May 10 13:38:38 2025 GMT
Not After : May 11 15:12:38 2025 GMT
Subject: CN=4145CDDDDD76E076264CD550CF177A4598A80FCC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c0:b1:77:51:5e:83:1a:49:37:1c:f8:13:65:
00:0e:7c:c0:ce:8a:d3:92:08:a9:fa:4f:a0:9b:43:
ab:54:f6:e1:a9:99:b7:53:3f:f9:ae:fd:4a:54:f2:
94:fb:28:cb:3d:14:43:cc:84:4b:b9:ab:15:49:03:
b5:29:be:cb:ef:d9:c2:b4:7b:93:33:3d:33:bb:11:
b2:3e:b9:f5:de:01:87:44:b0:4d:eb:c0:b2:45:92:
f2:02:95:9b:ac:e0:71:9a:de:75:15:6c:78:42:b1:
5f:7e:fb:70:7f:59:ea:d0:24:1f:13:c6:67:1f:93:
79:29:47:9e:7d:c5:53:1c:94:ed:f1:fb:9e:3e:20:
bf:cb:d5:11:94:9a:16:7a:a0:2b:5f:f4:14:d3:c1:
7b:9a:c9:9d:59:b7:02:9e:db:dc:d1:6c:8a:5e:89:
41:c5:43:f5:a1:97:d5:c1:a4:8f:e4:8c:e9:77:0e:
6e:64:b1:97:75:d5:18:1a:5a:a6:06:39:0f:20:dd:
c2:f7:06:13:a7:5d:db:f3:a0:c0:fa:7d:7d:9f:a7:
5c:53:6f:bf:a2:df:ff:fd:8b:b3:95:8b:2c:00:14:
23:e7:15:0f:2b:df:81:3f:ca:4f:3e:4d:9e:ab:17:
05:fd:c0:16:9e:a5:fd:fd:6c:a9:f9:0d:69:2d:7e:
6d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:45:CD:DD:DD:76:E0:76:26:4C:D5:50:CF:17:7A:45:98:A8:0F:CC
X509v3 Authority Key Identifier:
keyid:E8:BC:98:76:17:4D:9A:73:85:FC:E9:34:3E:2B:B7:D9:8F:52:3B:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6LyYdhdNmnOF_Ok0Piu32Y9SOxE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:ac:60:04:02:da:e1:36:d0:bb:0a:6b:1e:08:1a:8d:90:74:
3a:93:2e:e0:32:63:99:9b:c4:d3:f5:8b:e3:c0:06:d2:d7:c9:
85:0f:c3:d9:51:6b:24:0f:32:8a:b4:11:1f:ee:a5:27:e0:59:
22:7c:23:0a:ad:5e:07:14:e5:d3:61:22:01:3f:0d:0a:c5:8c:
69:6c:88:ca:25:ae:83:b7:34:3e:d7:a2:f9:bf:ab:ad:7c:f8:
ef:43:aa:c4:89:70:c6:62:00:0a:50:5a:1f:33:3f:91:64:a8:
fc:80:95:eb:dc:a0:eb:a5:b0:d7:ce:2a:b8:16:45:d8:eb:f6:
d7:a2:f2:02:c2:49:53:6c:f9:0a:78:5d:b5:9f:6e:2a:4b:fe:
68:f7:d6:f8:e4:bc:2a:4e:1e:36:7d:ec:31:60:37:64:c1:82:
ee:7a:96:ac:ba:ea:37:04:bc:4c:9d:f0:94:02:91:d2:99:34:
e8:94:ab:2b:8c:c6:5e:ff:04:d4:09:53:35:c8:21:e8:c6:06:
dc:36:5e:e2:35:2f:26:5f:f6:e0:40:d4:30:ac:7a:0f:90:a0:
35:81:70:d4:d7:77:5d:8b:ba:a5:6d:1a:46:ec:79:b8:89:9c:
d8:ff:50:66:63:05:da:02:41:e2:45:e4:81:14:e4:de:9a:04:
f4:0b:2e:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 08:19:21 2025 by rpki-client