Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b54fd736-bbc0-4882-84e9-44cc86795dad/0/8FBAB13DB123C5D63DBBC550D214B3E10C091998.mft
File: 8FBAB13DB123C5D63DBBC550D214B3E10C091998.mft (raw, json)
Hash identifier: tfdgJziBUXtQJtLvDIv3jhmjqPhr35i3kWIUtOrNdhQ=
Subject key identifier: 3C:D8:E3:90:DD:F2:0B:A0:58:09:D0:1E:82:E3:94:30:AF:09:F3:8C
Authority key identifier: 8F:BA:B1:3D:B1:23:C5:D6:3D:BB:C5:50:D2:14:B3:E1:0C:09:19:98
Certificate issuer: /CN=8fbab13db123c5d63dbbc550d214b3e10c091998
Certificate serial: 1F858B4EE268FD0889F96CFD4451DA8817C2F291
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j7qxPbEjxdY9u8VQ0hSz4QwJGZg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b54fd736-bbc0-4882-84e9-44cc86795dad/0/8FBAB13DB123C5D63DBBC550D214B3E10C091998.mft
Manifest number: 3D
Signing time: Wed 07 May 2025 04:44:35 +0000
Manifest this update: Wed 07 May 2025 04:39:35 +0000
Manifest next update: Thu 08 May 2025 06:03:35 +0000
Files and hashes: 1: 8FBAB13DB123C5D63DBBC550D214B3E10C091998.crl (hash: DBEGzxlQVIP5evkLmY8KKWLEMxQws5y+Nrmun5Bna78=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b54fd736-bbc0-4882-84e9-44cc86795dad/0/8FBAB13DB123C5D63DBBC550D214B3E10C091998.crl
rsync://rsync.paas.rpki.ripe.net/repository/b54fd736-bbc0-4882-84e9-44cc86795dad/0/8FBAB13DB123C5D63DBBC550D214B3E10C091998.mft
rsync://rpki.ripe.net/repository/DEFAULT/j7qxPbEjxdY9u8VQ0hSz4QwJGZg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 06:03:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:85:8b:4e:e2:68:fd:08:89:f9:6c:fd:44:51:da:88:17:c2:f2:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fbab13db123c5d63dbbc550d214b3e10c091998
Validity
Not Before: May 7 04:39:35 2025 GMT
Not After : May 8 06:03:35 2025 GMT
Subject: CN=3CD8E390DDF20BA05809D01E82E39430AF09F38C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:58:9f:fa:04:6a:18:21:56:03:26:06:f1:41:
39:90:24:ef:52:c7:17:4e:a0:cc:95:b6:32:b6:15:
ab:b7:73:e9:17:79:e3:c6:f6:9a:0f:17:19:49:ce:
c0:47:df:19:c8:2a:ef:92:cd:84:2c:6a:7e:89:94:
5f:31:5d:e1:35:63:09:50:3d:d5:96:00:60:d1:bb:
15:29:24:0b:12:5c:95:7e:c2:f6:64:7a:f2:1a:6f:
d7:37:13:65:fb:35:2c:83:5d:9f:a8:e1:a2:4f:a2:
5f:c9:94:3f:1f:9f:63:b2:9a:2c:c1:d7:5d:a9:80:
8a:57:64:03:0a:67:d5:9e:35:af:4c:ae:4d:51:14:
4a:25:23:d5:97:17:eb:ae:10:65:60:3a:5c:5e:da:
dd:d2:e1:76:d5:fe:67:25:d6:f5:1c:e1:b2:19:b9:
4f:44:33:9f:41:b6:10:06:04:2f:91:30:35:c1:da:
c0:6f:4e:8d:ad:2a:a0:4e:b1:e1:07:f8:ff:95:0b:
5b:e4:be:ab:fd:80:b2:73:ed:5b:41:b3:28:b9:b7:
bc:91:cf:1b:b7:83:92:bd:d6:f9:3c:50:f9:57:d3:
f2:2a:dc:aa:31:64:74:80:64:7a:dc:dc:db:97:b9:
2c:80:c8:e9:a3:b5:65:af:03:0f:98:be:fa:cc:84:
40:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:D8:E3:90:DD:F2:0B:A0:58:09:D0:1E:82:E3:94:30:AF:09:F3:8C
X509v3 Authority Key Identifier:
keyid:8F:BA:B1:3D:B1:23:C5:D6:3D:BB:C5:50:D2:14:B3:E1:0C:09:19:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b54fd736-bbc0-4882-84e9-44cc86795dad/0/8FBAB13DB123C5D63DBBC550D214B3E10C091998.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j7qxPbEjxdY9u8VQ0hSz4QwJGZg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b54fd736-bbc0-4882-84e9-44cc86795dad/0/8FBAB13DB123C5D63DBBC550D214B3E10C091998.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:ce:fa:9d:0b:97:c4:90:f3:d6:7f:52:31:aa:25:75:fd:17:
e1:6e:98:b7:bf:5e:99:d3:72:44:92:6d:b5:9d:fa:3a:ef:08:
87:bb:90:3c:7f:b1:0a:cd:02:85:b7:48:7a:c7:81:48:46:fa:
04:be:0f:0e:6d:fe:1f:89:5e:f8:74:1d:bb:f1:8f:06:f3:fb:
9d:dc:71:cb:1c:51:d4:53:de:55:c6:71:bf:4a:a8:a2:df:1e:
b9:e4:81:5e:16:5b:29:1f:53:16:9d:9f:19:ff:28:f7:19:c5:
e3:1a:6f:ac:f3:38:20:35:6b:cc:52:36:23:b8:e4:9b:46:de:
17:88:fe:78:0e:b7:29:55:0f:a5:0d:27:dc:77:7c:7d:72:bb:
79:e6:2a:be:bb:15:a8:70:c7:9e:8b:4e:16:23:56:de:28:a9:
ad:a7:fc:1a:4c:ce:c8:67:f2:0d:c3:08:b7:6b:aa:fe:33:c9:
d6:a2:02:1e:0c:86:2d:26:c6:7c:ad:1e:65:8d:4c:6f:b5:21:
6a:43:6f:45:70:96:12:c6:40:63:dd:28:a9:45:e7:29:28:61:
d0:32:d5:83:d0:1c:45:98:27:ac:40:43:ad:17:36:22:9a:a7:
4c:53:16:c4:a4:63:d2:a2:bc:43:89:dd:ec:4f:26:17:dc:b8:
56:70:cf:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 10:26:09 2025 by rpki-client