Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.mft
File: 0993289B168A37D449BC0D44B1AD35E532025CF1.mft (raw, json)
Hash identifier: NpxH/q1zPwmbRuMqc+BDpUJzkLyaAJr63QdsLJqu+gg=
Subject key identifier: 0C:5B:74:8D:A6:B9:26:53:C5:94:64:E2:86:E2:99:DD:98:9E:77:52
Authority key identifier: 09:93:28:9B:16:8A:37:D4:49:BC:0D:44:B1:AD:35:E5:32:02:5C:F1
Certificate issuer: /CN=0993289b168a37d449bc0d44b1ad35e532025cf1
Certificate serial: 4A8D6E59FB5870C2EEBAFA90B42F9C0790F0D70F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZMomxaKN9RJvA1Esa015TICXPE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.mft
Manifest number: 01E5
Signing time: Sat 10 May 2025 12:20:32 +0000
Manifest this update: Sat 10 May 2025 12:15:32 +0000
Manifest next update: Sun 11 May 2025 15:52:32 +0000
Files and hashes: 1: 3139342e3135362e37362e302f32342d3234203d3e20323132323338.roa (hash: aYgIlKiSJ4ioWL0iywiOQHZgGMKhrRUwH6j6yolmnUs=)
2: 0993289B168A37D449BC0D44B1AD35E532025CF1.crl (hash: u+3QKDQ4m8D6jLihqNaazusvFEtE6YJJQVrnQiorCSE=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.crl
rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.mft
rsync://rpki.ripe.net/repository/DEFAULT/CZMomxaKN9RJvA1Esa015TICXPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:8d:6e:59:fb:58:70:c2:ee:ba:fa:90:b4:2f:9c:07:90:f0:d7:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0993289b168a37d449bc0d44b1ad35e532025cf1
Validity
Not Before: May 10 12:15:32 2025 GMT
Not After : May 11 15:52:32 2025 GMT
Subject: CN=0C5B748DA6B92653C59464E286E299DD989E7752
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:66:6e:55:05:12:9e:fe:68:f6:15:15:47:b6:
8f:35:25:68:84:45:c3:7b:49:0f:40:b0:d8:8c:89:
d3:03:f0:7a:18:73:88:38:f4:37:22:3f:3c:06:a0:
54:47:9d:15:2d:78:1f:6c:ec:b3:db:40:af:cf:70:
bf:8a:1a:cc:89:26:99:f9:ad:f0:d1:f2:53:54:cf:
c1:da:01:93:f4:c2:85:b4:75:fa:a4:c1:16:4f:69:
f0:bd:c0:88:fd:0a:4d:87:1d:66:31:f7:87:c0:32:
66:14:f1:93:83:09:c1:d1:04:ef:b4:c2:ac:28:5c:
92:bf:f5:d0:72:e6:74:28:3a:23:62:a4:38:db:b0:
29:ca:4a:c4:5c:f4:f9:78:72:58:7c:c4:c8:1d:14:
d5:fe:64:d7:dd:11:9e:f3:2d:db:fa:84:90:ae:ec:
ba:56:b2:9d:ec:ab:6a:37:40:c1:41:20:46:d3:33:
a4:a3:fd:f9:ab:d3:ba:25:81:e7:11:8c:d2:dc:82:
24:42:ae:37:d6:2d:47:0f:7c:2e:a2:80:ff:fa:02:
d4:5d:64:ad:f2:9c:f2:46:a1:55:05:14:42:c7:85:
2b:88:2c:a0:9b:b5:8c:ca:07:00:3d:e7:3a:1b:ac:
98:eb:8a:6b:54:7f:20:4d:fc:75:fd:85:11:9d:73:
ca:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:5B:74:8D:A6:B9:26:53:C5:94:64:E2:86:E2:99:DD:98:9E:77:52
X509v3 Authority Key Identifier:
keyid:09:93:28:9B:16:8A:37:D4:49:BC:0D:44:B1:AD:35:E5:32:02:5C:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZMomxaKN9RJvA1Esa015TICXPE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:a8:f1:82:59:c2:e1:00:c1:6a:c8:e8:cf:47:4d:b6:7b:d2:
21:07:87:ca:f0:ed:26:9a:fb:99:ce:13:d3:26:cc:e7:5b:4e:
79:00:e2:a4:83:6e:54:7c:d8:04:5f:47:c2:52:62:50:ef:fc:
00:99:80:ec:25:c3:86:54:53:10:15:dc:8b:63:7d:d1:45:8e:
3e:ff:0a:fd:23:a2:c5:7f:ba:d3:84:dc:63:c2:35:e5:07:d6:
f8:4c:72:8d:71:60:f5:9b:45:90:3b:a7:72:57:ac:43:a8:ee:
d6:f8:44:9c:b5:10:6c:38:62:4a:bd:eb:a7:0b:a6:06:2a:e5:
f5:4f:61:79:ea:26:27:5f:91:b8:6c:9c:ec:ad:06:6d:87:1d:
c4:d1:b8:ab:c4:2e:b3:53:ac:a0:25:c7:41:88:fc:00:5c:e2:
6a:76:c0:4e:b8:9d:50:cc:38:14:92:4a:1a:a9:61:b0:dc:ff:
5c:58:2a:fa:fe:f8:86:1c:0c:ad:9b:34:5d:aa:51:3f:e8:ca:
4b:44:9a:ce:0d:85:41:a1:b6:5d:58:4e:f6:dd:e6:be:83:b7:
16:98:f9:38:64:56:cd:bd:d4:d7:c7:b9:08:2e:46:c8:f9:fd:
b9:1e:c6:85:7a:91:70:b7:99:e4:65:eb:a8:3c:15:af:bc:c7:
9d:e3:07:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 16:59:59 2025 by rpki-client