Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/9/CFC26A6DEF2E2FF1EBCC10A9871478B8A8BF3908.mft
File: CFC26A6DEF2E2FF1EBCC10A9871478B8A8BF3908.mft (raw, json)
Hash identifier: fT4deUfdR2IAA0dvMKVR0TQcgA+sDTllOs87oeGQNX4=
Subject key identifier: 12:37:62:EF:A7:5B:4C:A6:54:AC:75:B9:DD:73:F2:D1:38:66:DD:FD
Authority key identifier: CF:C2:6A:6D:EF:2E:2F:F1:EB:CC:10:A9:87:14:78:B8:A8:BF:39:08
Certificate issuer: /CN=cfc26a6def2e2ff1ebcc10a9871478b8a8bf3908
Certificate serial: 021A596335CD77E31FA54B4BE39C60EE912CAF11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z8Jqbe8uL_HrzBCphxR4uKi_OQg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/9/CFC26A6DEF2E2FF1EBCC10A9871478B8A8BF3908.mft
Manifest number: 0367
Signing time: Mon 05 May 2025 22:53:13 +0000
Manifest this update: Mon 05 May 2025 22:48:13 +0000
Manifest next update: Tue 06 May 2025 23:18:13 +0000
Files and hashes: 1: CFC26A6DEF2E2FF1EBCC10A9871478B8A8BF3908.crl (hash: ajS8DNu4ruU1twCoUfreqyjhowslPoNP8Nryiy69L1E=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/9/CFC26A6DEF2E2FF1EBCC10A9871478B8A8BF3908.crl
rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/9/CFC26A6DEF2E2FF1EBCC10A9871478B8A8BF3908.mft
rsync://rpki.ripe.net/repository/DEFAULT/z8Jqbe8uL_HrzBCphxR4uKi_OQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 23:18:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:1a:59:63:35:cd:77:e3:1f:a5:4b:4b:e3:9c:60:ee:91:2c:af:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfc26a6def2e2ff1ebcc10a9871478b8a8bf3908
Validity
Not Before: May 5 22:48:13 2025 GMT
Not After : May 6 23:18:13 2025 GMT
Subject: CN=123762EFA75B4CA654AC75B9DD73F2D13866DDFD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c5:6d:ab:06:8e:e2:7a:7d:25:1a:bd:d6:c7:
6b:53:68:cb:43:fa:50:76:bc:3e:2a:61:fa:1c:c8:
38:a9:ac:0a:8e:d7:ee:28:5a:d0:9e:b0:44:71:21:
0c:8b:2a:db:16:39:a2:c2:0b:30:6f:95:1f:3d:b0:
a8:f5:0d:e4:ea:70:b6:71:35:e6:f6:82:25:2c:0d:
30:75:cd:83:95:9e:72:b3:df:06:8f:85:f0:9d:2d:
47:35:28:3d:b5:8b:14:0e:27:8f:0f:2c:43:ac:59:
5b:6c:ce:d6:cb:bb:b7:62:47:42:71:09:56:36:f8:
ec:5f:09:94:7b:77:40:eb:c4:b0:e8:8c:d7:23:ea:
bb:ea:42:64:a5:e0:5c:f9:fa:a2:a5:3d:c1:8c:ad:
da:fc:88:37:c4:7b:51:c2:6a:16:c9:28:e6:ce:cf:
f8:d1:73:ef:d4:88:f9:2c:95:34:a6:76:05:14:a1:
c5:69:b6:44:f2:67:a3:21:e3:8f:f3:1e:f7:15:75:
7d:81:74:b2:7b:21:fb:50:86:02:dc:08:4c:ae:ce:
12:04:b4:43:1a:6b:d5:f9:e2:f2:54:81:01:b5:1e:
ee:0b:0e:06:8c:79:21:c3:4b:41:6f:1a:5e:e9:a1:
2e:75:3d:4f:df:39:00:77:35:3e:31:a7:61:5a:22:
e9:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:37:62:EF:A7:5B:4C:A6:54:AC:75:B9:DD:73:F2:D1:38:66:DD:FD
X509v3 Authority Key Identifier:
keyid:CF:C2:6A:6D:EF:2E:2F:F1:EB:CC:10:A9:87:14:78:B8:A8:BF:39:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/9/CFC26A6DEF2E2FF1EBCC10A9871478B8A8BF3908.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8Jqbe8uL_HrzBCphxR4uKi_OQg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/9/CFC26A6DEF2E2FF1EBCC10A9871478B8A8BF3908.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:ab:eb:2b:1e:d1:ec:80:f1:b3:aa:b5:ea:3b:46:99:ce:97:
d2:a1:f4:5f:bc:52:1d:63:62:8e:aa:a6:10:64:31:89:f2:5b:
cc:e7:0b:38:65:4c:b1:6b:48:a0:63:b2:11:7f:1a:55:75:9f:
7e:9e:2d:ef:73:84:81:1d:3d:bd:1f:47:d1:62:ba:5c:7b:a3:
76:7b:f6:a7:64:93:0b:55:d4:07:b7:e4:d9:0f:f3:b7:d3:b6:
f7:2e:64:e9:2f:4b:2d:18:d8:21:fe:94:38:0e:cd:46:0f:99:
34:91:3b:5a:79:3b:da:4a:b3:e8:9e:5b:e4:5d:6a:63:70:11:
0e:d3:62:97:ff:e2:d7:13:bc:69:a1:39:4e:5f:57:8e:8c:4f:
d2:44:b1:32:dd:d0:19:22:2c:f1:2e:19:16:bc:fe:ad:75:7b:
3f:04:16:b7:75:05:3e:f6:4f:2a:b1:24:75:8c:b7:ea:b2:44:
9c:84:79:54:12:a6:e8:1f:f8:77:bb:d0:66:dc:3d:92:67:ad:
97:41:19:8f:aa:6c:7b:f5:a1:40:05:eb:cf:67:0b:e8:a3:0d:
79:0d:47:80:8c:91:60:6c:06:e3:43:05:6a:c0:40:94:1d:70:
fa:d7:6a:7e:4b:32:c1:72:06:a9:3d:bd:cd:5e:0d:8a:52:c0:
64:b8:50:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 09:08:03 2025 by rpki-client