Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/7/4B48949512B3F7BF9A91B8BC897E7E18A4127CDD.mft
File: 4B48949512B3F7BF9A91B8BC897E7E18A4127CDD.mft (raw, json)
Hash identifier: RqCeNci1Nw5c1VEw39lE3WuCrQZK8EHq+O/zsWqyvi0=
Subject key identifier: 1D:F1:FD:8B:02:67:8C:95:3C:A3:F7:AB:81:29:C9:CE:3A:9C:57:3F
Authority key identifier: 4B:48:94:95:12:B3:F7:BF:9A:91:B8:BC:89:7E:7E:18:A4:12:7C:DD
Certificate issuer: /CN=4b48949512b3f7bf9a91b8bc897e7e18a4127cdd
Certificate serial: 76698FE8CADFC113B06944A69EADA3469C23864D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S0iUlRKz97-akbi8iX5-GKQSfN0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/7/4B48949512B3F7BF9A91B8BC897E7E18A4127CDD.mft
Manifest number: A2
Signing time: Mon 12 May 2025 06:21:44 +0000
Manifest this update: Mon 12 May 2025 06:16:44 +0000
Manifest next update: Tue 13 May 2025 08:28:44 +0000
Files and hashes: 1: 4B48949512B3F7BF9A91B8BC897E7E18A4127CDD.crl (hash: VUt4+XSz5IGtHJbO66q7dS2fjqeglhQ5DNKR+9VzFnI=)
2: AS213915.asa (hash: WNoePLBPk99sollnieSJLQGheEbE8N7gHweNXQmzvJc=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/7/4B48949512B3F7BF9A91B8BC897E7E18A4127CDD.crl
rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/7/4B48949512B3F7BF9A91B8BC897E7E18A4127CDD.mft
rsync://rpki.ripe.net/repository/DEFAULT/S0iUlRKz97-akbi8iX5-GKQSfN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 08:28:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:69:8f:e8:ca:df:c1:13:b0:69:44:a6:9e:ad:a3:46:9c:23:86:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b48949512b3f7bf9a91b8bc897e7e18a4127cdd
Validity
Not Before: May 12 06:16:44 2025 GMT
Not After : May 13 08:28:44 2025 GMT
Subject: CN=1DF1FD8B02678C953CA3F7AB8129C9CE3A9C573F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:32:79:1d:a5:7e:54:d0:aa:41:10:3a:3c:47:
42:e3:60:7d:f5:7b:74:16:ec:5e:77:37:16:c8:16:
46:b5:73:7c:70:07:5c:8c:6d:86:99:e0:bb:1f:47:
88:9f:25:c5:51:2d:c1:67:f0:6e:4d:bf:a7:3e:fb:
11:1c:44:30:11:32:98:f1:f1:54:34:5a:d2:1b:9e:
b5:9c:40:e7:ed:d7:73:13:72:73:e2:b1:09:c3:4e:
5e:cd:40:c1:21:01:74:81:27:60:20:3e:5b:08:30:
33:f2:f9:dc:c9:ef:cc:50:8a:86:73:ca:82:b0:19:
f4:69:e7:b7:cd:c5:f0:90:71:28:b1:62:1d:ce:d4:
74:3e:ae:01:cc:b1:b8:6f:87:97:d8:79:b4:6e:2b:
b6:9e:91:5b:28:c9:8d:45:29:ee:73:4d:71:4a:cf:
70:e8:94:ef:4d:76:d0:b8:f4:ac:a9:30:76:cc:0e:
a0:57:6e:21:26:79:55:e6:1e:b7:8d:1c:ba:83:68:
96:1b:7a:82:5b:00:f6:5b:8f:a1:e6:55:66:58:4a:
5c:ce:ec:33:ff:12:30:a2:11:32:91:3c:54:1b:cd:
7c:41:67:36:5a:98:4e:65:67:4c:5f:f4:f3:1f:b6:
11:26:32:fc:5e:e5:00:11:80:45:7a:5e:91:7d:87:
36:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:F1:FD:8B:02:67:8C:95:3C:A3:F7:AB:81:29:C9:CE:3A:9C:57:3F
X509v3 Authority Key Identifier:
keyid:4B:48:94:95:12:B3:F7:BF:9A:91:B8:BC:89:7E:7E:18:A4:12:7C:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/7/4B48949512B3F7BF9A91B8BC897E7E18A4127CDD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S0iUlRKz97-akbi8iX5-GKQSfN0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/7/4B48949512B3F7BF9A91B8BC897E7E18A4127CDD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:25:3d:54:80:bb:60:2b:e2:b8:23:fa:ec:f2:30:94:2a:a6:
12:4f:e6:68:2c:d6:7c:9a:43:a9:9e:64:47:bd:a0:89:a2:96:
79:69:1c:5e:49:49:36:6b:ba:df:15:6e:80:39:16:75:ef:b1:
27:18:49:55:07:19:09:61:3c:38:5d:04:e1:fc:67:ef:b1:b3:
13:6f:3d:a7:e3:fc:8d:f0:80:94:94:1c:cf:10:1f:c7:7e:36:
e3:f1:f1:b6:ff:33:a3:8a:86:78:0e:ef:43:a2:68:11:2e:cd:
a0:9c:79:99:fa:79:c0:8b:84:f1:2f:20:6e:36:12:7e:fb:b0:
64:e0:ca:20:71:32:dc:e5:50:3d:3a:63:16:18:73:b1:12:ce:
19:a4:60:75:5f:6d:a3:50:92:aa:d6:8c:db:80:37:34:99:df:
32:8a:82:66:01:ab:b7:87:0f:73:ab:21:47:4b:9a:f6:61:0e:
a1:19:3a:cd:3d:6b:13:41:5e:0e:a1:3f:78:ee:15:11:6d:b9:
6d:aa:cd:b8:c4:21:4d:85:d4:e0:4f:93:2a:2e:de:7b:df:cc:
89:3e:50:f0:05:ef:b5:84:da:11:f0:15:05:85:7c:52:f3:d6:
3e:64:15:cb:e2:fb:81:61:ea:51:a2:b9:73:19:4b:64:ff:83:
ac:ae:b6:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 17:12:23 2025 by rpki-client