Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9bc9a2e7-61e8-4e70-942d-c545cf0674c3/0/4E3434F13A572BF5E189F1B7FA148F5D107F6F57.mft
File: 4E3434F13A572BF5E189F1B7FA148F5D107F6F57.mft (raw, json)
Hash identifier: Cd9f7AQm9fvVNkgGsPQfWV0tXQWLJ1IBiTT3waH7UgY=
Subject key identifier: B2:8B:5E:F1:91:ED:A0:BF:AA:84:D4:8A:AD:D8:74:30:76:27:EE:BB
Authority key identifier: 4E:34:34:F1:3A:57:2B:F5:E1:89:F1:B7:FA:14:8F:5D:10:7F:6F:57
Certificate issuer: /CN=4e3434f13a572bf5e189f1b7fa148f5d107f6f57
Certificate serial: 52E0BC00361E0814D62F1CD8338444979F2FCDA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TjQ08TpXK_XhifG3-hSPXRB_b1c.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9bc9a2e7-61e8-4e70-942d-c545cf0674c3/0/4E3434F13A572BF5E189F1B7FA148F5D107F6F57.mft
Manifest number: 44
Signing time: Mon 05 May 2025 08:00:48 +0000
Manifest this update: Mon 05 May 2025 07:55:48 +0000
Manifest next update: Tue 06 May 2025 11:56:48 +0000
Files and hashes: 1: 4E3434F13A572BF5E189F1B7FA148F5D107F6F57.crl (hash: 2t9NPFeccJ2ybReFoh8EdWweF2cOING458TkmBr2qGY=)
2: AS215277.asa (hash: /NSm7byRzs0tpnovtHnCzzB6PpqZTxUH8EmHV77zmWY=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9bc9a2e7-61e8-4e70-942d-c545cf0674c3/0/4E3434F13A572BF5E189F1B7FA148F5D107F6F57.crl
rsync://rsync.paas.rpki.ripe.net/repository/9bc9a2e7-61e8-4e70-942d-c545cf0674c3/0/4E3434F13A572BF5E189F1B7FA148F5D107F6F57.mft
rsync://rpki.ripe.net/repository/DEFAULT/TjQ08TpXK_XhifG3-hSPXRB_b1c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 11:56:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:e0:bc:00:36:1e:08:14:d6:2f:1c:d8:33:84:44:97:9f:2f:cd:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e3434f13a572bf5e189f1b7fa148f5d107f6f57
Validity
Not Before: May 5 07:55:48 2025 GMT
Not After : May 6 11:56:48 2025 GMT
Subject: CN=B28B5EF191EDA0BFAA84D48AADD874307627EEBB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a1:3f:01:4f:7a:c9:d4:fe:05:66:f5:63:59:
05:7a:5e:58:da:af:36:3c:e0:4d:8b:6b:2e:a9:57:
39:2a:03:b0:db:f0:e8:05:9e:f7:97:07:ba:90:97:
a5:38:80:0c:ec:6e:ab:61:d9:10:a4:cd:6e:c2:05:
bd:6f:d5:2a:b7:3f:c0:8e:29:9b:eb:b6:55:71:5c:
87:7f:c2:ff:ed:3d:98:4f:a9:ed:10:6d:3e:82:70:
60:d3:7a:9a:51:4f:6e:f4:67:04:fe:b6:de:18:d6:
fb:34:ac:2f:dc:9e:04:14:b8:63:e1:b4:11:2e:95:
00:5b:8e:9a:79:31:e6:84:0f:bb:2f:fd:98:59:dd:
de:2b:3b:ea:fb:45:56:99:b9:62:78:0f:fc:dd:0c:
2e:88:39:87:7d:8e:29:c7:0f:9a:94:46:20:22:dc:
c8:ec:41:f4:f4:f9:55:06:04:9a:c4:37:99:f1:a1:
f2:12:d5:76:50:3b:2f:74:ff:ce:d8:bf:c8:93:00:
d1:95:0f:40:5c:aa:dc:26:91:91:c6:4a:c1:e1:87:
79:83:57:4b:a3:9b:08:94:1a:5f:ac:79:c1:47:ea:
24:b4:39:01:96:0a:d5:c8:b2:0c:7c:a6:78:e5:bd:
87:2f:45:58:35:84:fc:93:36:78:7f:8b:c7:9d:16:
9f:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:8B:5E:F1:91:ED:A0:BF:AA:84:D4:8A:AD:D8:74:30:76:27:EE:BB
X509v3 Authority Key Identifier:
keyid:4E:34:34:F1:3A:57:2B:F5:E1:89:F1:B7:FA:14:8F:5D:10:7F:6F:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9bc9a2e7-61e8-4e70-942d-c545cf0674c3/0/4E3434F13A572BF5E189F1B7FA148F5D107F6F57.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TjQ08TpXK_XhifG3-hSPXRB_b1c.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9bc9a2e7-61e8-4e70-942d-c545cf0674c3/0/4E3434F13A572BF5E189F1B7FA148F5D107F6F57.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:8d:6a:b8:fe:bf:23:89:32:b3:7e:04:5b:6d:6c:cf:c7:41:
4e:5b:5c:49:13:ff:a2:e4:5a:59:0e:83:05:d2:7b:1f:35:d4:
81:99:7c:92:31:60:60:45:83:72:01:a3:f4:0f:ff:ef:7f:fe:
8a:7f:d1:b3:8c:c7:5d:1e:8e:13:fc:82:9a:4d:d0:c7:f0:4d:
38:79:d4:b5:23:5f:7f:79:73:3e:11:4c:30:31:0d:53:ef:50:
46:e8:2b:8d:46:93:de:06:47:67:d9:9a:c2:a8:86:b5:2e:00:
c6:ae:29:f8:80:1f:c6:64:fa:b3:e0:c6:a8:47:53:31:e2:18:
ea:7c:6b:80:12:2d:68:4a:e4:7a:b9:c3:49:47:8c:08:23:65:
74:53:7f:f7:42:83:fa:f2:92:7c:dd:f0:42:26:09:da:88:9d:
dc:cd:7d:4f:72:dc:ca:d1:78:4f:9d:db:a7:d7:cd:94:0e:d4:
35:15:93:9c:dc:fa:7f:24:35:83:2c:ea:63:fc:4d:4e:4d:25:
e5:f2:9f:2e:d4:21:5e:40:95:4f:28:52:38:f0:14:27:ed:bb:
8a:82:a9:f3:56:f5:14:34:5c:bb:b6:77:aa:92:a2:34:7d:0d:
95:b6:2a:b8:07:6f:5a:eb:f6:ac:57:01:27:35:ca:93:23:d1:
5a:47:00:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 22:27:53 2025 by rpki-client